last executing test programs: 3.119291812s ago: executing program 4 (id=1719): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a3200000000e4040000060a010400000000000000000500000008000b40000000000900010073797a300000000008000940000000020c0005800800014000000000c4000740ab487b1b512f33a8dbd67a8b35f2405127f309901ea13e31d5810f85eae8f528c938c24abb1b1abbda2e7fa6e0758629bb09ed64a8ba5b2ef3c3591fd06d7e10d93c0857ecac854ac51ad69639d98adb2c1464e444cc1a6a2e7ee244622433b51f58606b063f4938101a7e764c957eba2e913b2ac10435471fa769740a1275cb467e5264b71bc8727fc12e9aba46e4a8abf3dda91e0da608d6a0a35573d5524fb25451cc23051887de4df85c8e771260c4943e78905aa1e7493027366ed1bea0d80304804800"], 0x558}}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x48, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) 2.894144078s ago: executing program 4 (id=1724): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) r2 = socket(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0xa, 0xffff}, {}, {0xfff3, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x6}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d38}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x200008c2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x20, 0x9, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x880}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xb4, r1, 0x400, 0x9, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x400}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x34}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000004000000140001800d0001007564703a7379b390b3"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40004) 2.611802136s ago: executing program 2 (id=1726): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x43}, 0x94) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x800, 0xc, 0x6, 0xa40, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5, 0xd}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r2, &(0x7f0000000180)="95b1882b997ec24851eb0fd79396c98b04c05369fcc97435d166f0d4995390803e44baa3d64d28475775fe027c50ef2138e067b7d6e0b8af2c6a65b2212735494a530892bf3214e6be02777a9a590ab49a8e65c89898cc55d4b11a5273ea3d5acb0757b844ba10161a14a432976f900cc0f2fadf0252ac7d0f6582d08c22fd44303f5c96619b9536ad522aabd950bc785d1dc2a0204a57edc6b359937f4e86ec6c6f965b9bba67d444e4a5b633eae8f6c8c08082872a8d0e707688a0", &(0x7f00000000c0)=""/52, 0x4}, 0x20) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000006c80), &(0x7f0000006cc0)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.41536644s ago: executing program 2 (id=1728): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x7, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100020e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000000)={{0x2, @local, 0x4e24, 0x0, 'nq\x00', 0x4, 0x7, 0x46}, {@rand_addr=0x64010102, 0x4e21, 0x10000, 0x80000001, 0x5, 0xfff}}, 0x44) (async, rerun: 32) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (rerun: 32) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x8010, r2, 0x80008000) 2.167956777s ago: executing program 4 (id=1730): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x10, 0x400, 0x4, @rand_addr=' \x01\x00', @loopback, 0x64e91e306b4fab98, 0x700, 0xd, 0x10000}}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @local, 0x7}], 0x1c) sendto$inet6(r2, &(0x7f0000000140)='l', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000180)=0x4) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x5e) 1.823885947s ago: executing program 3 (id=1733): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0xffffff7f}, 0x0) 1.712641357s ago: executing program 0 (id=1735): r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r0, &(0x7f0000005680)="ef3fc39f51e39b614b152504152728b4f07dd85924e52373dc5bcb9bb19373125f29bec3748549716f0ad0dd4a4ad5f5488b0f530884147165a69772217644c1f734537235cec49d2d17419bb774a5583bd4107092b9ead60f0e9f04a9841c6909e5b432ad222ab8f35006015970dfbd12f79bd70116dc8b820d58476384cee25b0c2498c497944142c96390db3599bceb7d05680ab1fcfa454b4670aff4d2c2c3edf4ff5b114ce0b1c0998ea039d70aebd1a5d2ddc072c3790d3ce6cf9248badef92c4d8e448e58ad", 0xc9, 0x48844, &(0x7f0000005780)={0x2, 0x4e23, @loopback}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfc4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x28, 0x1, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) getsockname$packet(r7, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000005e40)=@newtaction={0x3c70, 0x30, 0x2, 0x70bd2c, 0x25dfdbff, {}, [{0x1930, 0x1, [@m_vlan={0xf0, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x431}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x0, 0x7, 0x3, 0x1}, 0x1}}]}, {0x9d, 0x6, "02f6e775f2f269ee84ab6ab8fcbda7754fd505bb37261f1697f153f56779f58ea5059c6f89525d914e5723066085fa480a47d9e5869a473d317e8fd16869f20a988ce0acc422d403cec1981e12244ed4d33becaba49a3c3cd7c58241a25412e82bb903460e8bea803df99629cac4ba67bfdbfde8f39a7e1f84d2abe2bfe8c63459a7a538fa1ee79819877accddfb7542b791cee9c2d198e758"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x124, 0xc, 0x0, 0x0, {{0x7}, {0x98, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_TARG={0x7a, 0x6, {0x800, 'mangle\x00', 0xaf, 0x6, "08504f2d099037cca2dd08d203b12ff2dbbfb407aab4bd23349d7e0edd8cbf6d41e336dc204b07a0d42ecb4aba718517c0488b4c23d5b9abd319c814eaaab798770ac7b6aa156c856c0052b0a430acd5"}}]}, {0x65, 0x6, "27dbcbb96cf69805fbf71717bc5fd592886734fb53c771072dcc11cbbfeceaa22735bad45fee2b2cc0a655a67297eaeaccf9b46b6fa9ac9f5f5f719b4c536213dab044ea0a1eebef8e16caaa768bbaf4594a41776549cca29830a5ee86e2710a51"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x165c, 0x9, 0x0, 0x0, {{0xb}, {0x15f0, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x7, 0x7, 0x2, 0x7ff, {0xb7, 0x2, 0xfffb, 0x90fe, 0x1be4, 0x78}, {0xb4, 0x1, 0x101, 0xffff, 0x6, 0x4}, 0xa, 0x8, 0x1f8}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8, 0x3, 0xb99a, 0x8080, 0x7, 0x9, 0x5, 0x8, 0x5, 0x4, 0xfffffffa, 0x6, 0x5, 0x10001, 0x5, 0x4c, 0x6, 0x4, 0x10, 0x0, 0x5, 0x4, 0x6, 0x1, 0x3, 0xa, 0x80000000, 0x0, 0xbc, 0x8, 0x2, 0x7fffffff, 0x9, 0x10000, 0x2, 0x9, 0x3, 0x3, 0xbd7, 0x9bc, 0x0, 0x9, 0x2, 0x7, 0xfffffffd, 0x8, 0x8, 0x401, 0x9, 0x6, 0x8, 0x3, 0x0, 0x7, 0x0, 0x48, 0x8, 0x100, 0x4, 0x6, 0x1, 0x4, 0xff800000, 0xf, 0x2832, 0xf, 0xfffffff9, 0xeee8, 0xff, 0x8f1, 0x6, 0x101, 0x9, 0x5, 0x3ff, 0xfffffff7, 0x7fff, 0x52a28832, 0x3, 0x5, 0x2, 0x2, 0x6, 0xfffffff8, 0x9, 0x9, 0x7a457060, 0x8, 0xfffffff8, 0x6, 0x3, 0x5, 0x4, 0x10001, 0x3, 0x8, 0x18b2, 0x401, 0x7, 0x0, 0x1ff, 0x7ff, 0x9, 0x6, 0x9, 0xa, 0x40000000, 0x0, 0x1, 0x20ac, 0x4, 0x6, 0x5, 0x0, 0x80000001, 0xc, 0xfffffffd, 0x5, 0x9, 0xfffff45f, 0x8, 0x10, 0x4, 0x5, 0x6, 0x800, 0x1d9533c4, 0x38ef, 0x4, 0x1000, 0xb, 0x0, 0x9, 0xd5f, 0x40, 0x3, 0xf, 0x3, 0x4, 0xef9a, 0x5, 0x80, 0x8, 0x9, 0x7, 0x941, 0xbbb, 0x9e, 0x7, 0x400, 0xffff, 0x2, 0x704, 0x3, 0x0, 0x0, 0x4, 0x10, 0xa52, 0x4, 0x7ff, 0x7, 0xa, 0x8, 0x6, 0x3, 0x8, 0xe01, 0x4, 0x2, 0xe, 0x8, 0x2, 0x2, 0xffff, 0x4, 0x5, 0x0, 0x0, 0x981f, 0x1, 0x0, 0x5, 0x2, 0x7, 0xde03, 0x1ff, 0xa18, 0x4, 0x8, 0x5, 0x2, 0x2, 0x9, 0x4, 0x7b, 0xffffffff, 0x8, 0x7, 0x8, 0x1, 0x7fff, 0x4, 0x7, 0x0, 0x8, 0x3db7, 0x0, 0x7fff, 0x6, 0x2, 0x3, 0x1, 0x0, 0x80800000, 0x6, 0x31f5, 0xffffffa8, 0x0, 0x4, 0x7, 0x2, 0x7, 0x1, 0x0, 0x8, 0x1, 0x7, 0x4, 0x3, 0x0, 0x4, 0xc, 0x6, 0xd, 0x7, 0x7, 0x0, 0x9, 0x0, 0x3f7, 0xac22, 0x800, 0x10001, 0x3ff, 0x6, 0x4, 0x7, 0xf04, 0x8, 0x80, 0xa, 0x40, 0x401, 0xf]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x11b6, 0x3, 0x8, 0x9, 0x587859f, {0x3, 0x1, 0x4, 0x2, 0x8003, 0x8322}, {0x5, 0x3, 0x1000, 0x1, 0x7ff, 0x3}, 0x5, 0x6370, 0x1}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x2, 0x0, 0x4, 0x8, 0x7, 0x5, 0x6, 0x5, 0x5, 0x4, 0x9, 0x7, 0x7, 0x2, 0xba, 0x8, 0x3, 0x6, 0x3, 0x9, 0x6, 0x1, 0x7, 0x1, 0x0, 0xc, 0x3, 0x1e2b6fc4, 0x80000001, 0x1, 0x4, 0xc3, 0x3532, 0x1, 0x7, 0x7fffffff, 0x0, 0x8, 0x0, 0x1, 0x66e, 0x2, 0x3, 0x1800, 0x8, 0xfff, 0x65, 0x10, 0x5, 0x8, 0x2e76, 0x9, 0x2, 0x0, 0xaf, 0x3, 0x101, 0x2, 0x5, 0x30d8, 0x1000, 0xfffffffc, 0x2400000, 0x0, 0x61, 0xfff, 0x7f, 0x3, 0xfffffffc, 0x5, 0x5, 0x2, 0x800, 0x200, 0x7, 0xac1, 0x10001, 0x6, 0xfff, 0x7f, 0x3, 0x8, 0x40, 0x864b, 0x7, 0x11, 0xe70, 0x8, 0x5, 0x7fffffff, 0x4, 0x80000001, 0x0, 0x7, 0xffff0000, 0x7, 0x2, 0xe, 0x40, 0x8, 0x80000001, 0x8000, 0xff, 0x1, 0x3, 0x5, 0x223f, 0xfffffff7, 0x4, 0x7, 0x9, 0x0, 0x655, 0x7, 0xfffffffb, 0x2, 0x6, 0x40, 0x5, 0x8, 0x7ff, 0x7, 0x11, 0xc, 0x8, 0x2, 0x6, 0x2, 0xc0000000, 0x3, 0x3, 0x800, 0x7, 0x2, 0x3, 0x0, 0xfffffff7, 0x4, 0x40, 0x81, 0x8, 0x2, 0x16, 0xf, 0x81, 0x4, 0x6, 0x6, 0x5d, 0x8, 0x42cf, 0x5, 0xb42, 0x6, 0x6, 0x10000, 0x3, 0x1, 0xf, 0xfffffffd, 0x2, 0x20e, 0xe, 0x5, 0x9, 0x7, 0x8e2, 0x9, 0x4f, 0x401, 0x1, 0x3, 0x85, 0x2, 0x2, 0x1, 0xd0, 0x5, 0xffffffff, 0x7, 0x5, 0x4, 0x7, 0xfff, 0xa, 0xff, 0x200, 0x1ff, 0x7, 0xb65b, 0xa73, 0x3, 0x9, 0x4, 0x5, 0x5, 0x7, 0x0, 0x25, 0x0, 0x1, 0x9, 0x6, 0x0, 0x1c0, 0x3, 0x6, 0x8, 0x10005, 0xfffff4c1, 0x1ff, 0x1, 0xd3, 0x9, 0x0, 0x762, 0xa21, 0x10, 0x9, 0xea13, 0x800, 0x3, 0x1ff, 0x1000, 0x3, 0x6, 0x101, 0x3, 0x6, 0x2, 0x6, 0x1, 0xff, 0x1000, 0x6, 0xe, 0x8, 0xf0f, 0x7fff, 0x6, 0x12c2, 0x7, 0x401, 0x2, 0x2, 0xc, 0x7, 0x8, 0x2, 0x800, 0x80000000, 0x4, 0x7ff, 0x8, 0xfff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0xf, 0x105caf45, 0x8, {0x0, 0x2, 0x0, 0x4, 0x3, 0x8}, {0x0, 0x2, 0x3, 0x3, 0x33a, 0x5}, 0xa, 0x0, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa}], [@TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x7b617b55, 0x3, 0x2, 0x6, 0x3, 0x4, 0x9, 0x2, 0xd, 0x6, 0x0, 0x8, 0x8, 0xf, 0x7fff, 0x2, 0xa, 0x6, 0x7, 0xffffffc0, 0xdd0b, 0x7, 0x1, 0x7, 0x1c8, 0x9, 0xffff, 0xc, 0x9c92, 0xfffffff8, 0x2, 0x10001, 0xfffffff7, 0x5, 0xffffff9a, 0x3, 0x80000001, 0x8, 0x8f3, 0xbb5, 0x1268db40, 0x9, 0x800, 0x480, 0x1, 0x1000, 0x80000001, 0x3, 0x63, 0x4, 0x1, 0x9, 0x0, 0x765a, 0x37e, 0x7cb, 0x26, 0x0, 0x3, 0x1, 0x4, 0x5, 0xffff, 0x0, 0x18, 0x5, 0x3, 0xce, 0x9, 0x81, 0x1, 0x5, 0xec, 0x200000, 0x7, 0x7ff, 0x0, 0x400, 0x9, 0x4, 0xfffffffb, 0x9, 0x5, 0x80000001, 0x80000001, 0x2, 0x4, 0x3ff, 0x7f, 0x1a, 0x0, 0x858e, 0x6, 0x6, 0x2, 0x7f, 0xffffffff, 0x9, 0x3, 0x5, 0x7c10, 0x3, 0x24, 0x79, 0x2, 0x90a4, 0xf, 0x3ab, 0x4, 0x8, 0x8, 0x7f, 0x4, 0x2, 0x1, 0x9, 0x8, 0xf7, 0x0, 0xb6, 0x7ba4, 0x1000, 0x3ff, 0x5e, 0x6, 0x6b7, 0xd167, 0x9, 0x6, 0x6, 0x8, 0x9, 0x0, 0x3, 0xfffffff7, 0x5, 0x7ff, 0xffffffff, 0x8, 0x4, 0x3, 0x7, 0x7, 0x9, 0x0, 0xa3, 0x4, 0x7ff, 0x7, 0x35a, 0x1, 0x9, 0x80000000, 0x7, 0x7312, 0xffff0000, 0x4, 0x18, 0x2, 0x7fffffff, 0x9, 0x6, 0x8, 0x2a4e961d, 0x6, 0x800, 0x4, 0x4, 0x9, 0x577, 0x5, 0xd, 0x7fffffff, 0x1, 0x4, 0xa, 0x5, 0xf, 0x6, 0x69, 0x5, 0x9, 0x5, 0x80, 0x400, 0x0, 0xffffffff, 0x9, 0x9, 0xfffffffc, 0x3, 0x7, 0x8, 0xf0, 0xfff, 0x3, 0x7, 0x79c, 0x0, 0x1d, 0x2c1, 0x8, 0x9, 0x0, 0x7, 0x5, 0x400, 0x1, 0x80, 0x9, 0x8, 0x5, 0x3b1e, 0xc4c, 0x10001, 0x9, 0x800, 0x0, 0x4, 0x9, 0x1ff, 0x3, 0xa, 0x8, 0x6, 0x8, 0xa098, 0xc, 0x4, 0x2, 0x10, 0x7, 0x2, 0x80000000, 0x2a, 0x80000000, 0x3, 0xffff, 0x2, 0xe, 0x0, 0xf73, 0x3, 0x2, 0x1, 0x8, 0x5, 0x5, 0x6, 0x6, 0xffffff81, 0x9, 0x22, 0x2, 0x7f, 0xfffffffe]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x41d252b0}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x38000000000000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x39b2}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xb}, @TCA_POLICE_RATE64={0xc, 0x8, 0xf}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x10000, 0x1ff, 0x3, 0xd, 0x2d4, 0x5, 0x4, 0x7, 0x6, 0x80000000, 0xbe34, 0xe2e, 0x1, 0x401, 0x104e, 0x1401, 0x0, 0xffff, 0x4, 0x7, 0x2, 0x5, 0x51b, 0x6, 0x8000, 0xe, 0x80000001, 0x9, 0x3a, 0x29ac, 0x5, 0x3, 0x0, 0x4, 0xf, 0x2, 0x0, 0x9e, 0x2, 0x1, 0x5, 0x6, 0x1ff, 0x10000, 0x2, 0x7, 0x7, 0xfc, 0x8, 0x3, 0x5, 0x0, 0xa, 0x1, 0xdb3, 0x2, 0x3, 0xf299, 0x97, 0xffff2782, 0x2, 0x7, 0x6, 0x2, 0x0, 0x5, 0x9, 0x6, 0x6, 0x80800, 0x3, 0x6cd, 0x6, 0xfff, 0x7, 0x6, 0x0, 0x9, 0x1, 0x7, 0xfffff7ac, 0x0, 0x10001, 0x8, 0x6, 0x6, 0x8, 0x6, 0x80000001, 0x6, 0x9, 0x3, 0x7, 0x3, 0xe44e, 0x710f, 0xff, 0x1, 0xb97c, 0x3, 0x5, 0x8, 0x9, 0x80000001, 0x5, 0x700, 0x9, 0x8, 0x0, 0x3, 0x3, 0x2, 0x6, 0x8, 0xfffffffc, 0x5, 0x9, 0x1, 0x1, 0x5, 0x2, 0x1, 0x5, 0x0, 0x4, 0x6615, 0x0, 0x0, 0xf01, 0xfff, 0x9, 0x6, 0x1, 0x6de, 0xffffffff, 0x9, 0x7f, 0x54d, 0x5, 0x0, 0x7ff, 0x1c00, 0x4, 0x8, 0x44d0, 0x1ff, 0x4b, 0x4, 0x9, 0xb, 0x4, 0x22b6, 0x8, 0x8000, 0x7, 0x2, 0x8, 0x0, 0x5, 0x6, 0x8, 0x28, 0x6, 0xa, 0x3f, 0x818, 0x2, 0x6, 0x8, 0x1, 0x45c, 0x5, 0x3f, 0x7, 0x7f, 0x4, 0xc0, 0x5, 0x5, 0x3, 0x0, 0x5f222aa6, 0x5, 0x6, 0x6, 0x653afb50, 0x6, 0x10, 0x5, 0xa, 0x400, 0x80000000, 0x979, 0x1, 0x2, 0x0, 0x15, 0x83e0, 0x23832830, 0x5, 0x6, 0x14, 0x0, 0x2, 0x4, 0x5, 0x0, 0x1, 0x3, 0x10000, 0xf, 0x9, 0x6, 0xfffffffb, 0x4, 0x3, 0x4056a896, 0x80000000, 0x9, 0x9, 0x6, 0x5, 0xa, 0x4, 0x1, 0x635f, 0x3, 0x6, 0x4, 0x4, 0x4, 0x1f, 0xfffffdbb, 0x4, 0x4, 0x9, 0x9, 0x0, 0x3, 0x5, 0x1, 0x6, 0xff, 0x6, 0x7, 0x6, 0x8, 0x9, 0x2, 0x6, 0x5, 0x7, 0x400, 0x1, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x8, 0x5, 0xffff, 0x5, 0x0, 0x7, 0x6, 0x5d3e, 0x8, 0xc, 0x2, 0x1, 0x10, 0x8, 0x10000, 0x8, 0x7, 0x4c, 0x1, 0x4, 0x0, 0xfffffff9, 0x101, 0x80000001, 0x674d, 0x2, 0x0, 0x1, 0x5, 0x6, 0x9, 0x0, 0x0, 0x2, 0x9, 0x4, 0x562, 0x5, 0x1, 0xa3f, 0x6, 0x32, 0x80000000, 0x7fffffff, 0x3, 0x6, 0x2d2a49f3, 0xfff, 0xfff, 0x3ff, 0x1ff, 0x9, 0x4, 0x0, 0x6, 0x0, 0xc53a, 0x10001, 0x2, 0x7fff, 0xf66, 0x4, 0x7ff, 0x81, 0xfffffffc, 0x8, 0x1, 0x8001, 0x0, 0x0, 0x7ff, 0x0, 0xe05, 0x7000, 0x10, 0x9, 0x7, 0x80000001, 0xea5f, 0x7, 0x7, 0x4, 0x0, 0x1, 0xcdcb, 0xfffffe01, 0x7fff, 0x4, 0x8000, 0x0, 0x0, 0x8000, 0x6, 0x0, 0x5, 0x1, 0xffff, 0x7, 0x1, 0x10000, 0x9, 0x0, 0x4, 0x43, 0x2, 0x4, 0x10001, 0x8, 0xfffffe01, 0x8, 0x20000000, 0xf3, 0xffffffff, 0x4, 0x4, 0x99ef, 0x2, 0x100, 0x0, 0x8, 0x6, 0x2, 0x3, 0x0, 0xfffffffd, 0xa2, 0xeed, 0x3ff, 0x1, 0x9, 0x7, 0x20000, 0x8, 0x58000000, 0x7b2, 0x101, 0xe6, 0xfd87, 0x2, 0x6, 0x2, 0xdff, 0xb, 0x7, 0x1, 0x1, 0xc, 0x3, 0x6, 0x4, 0x5, 0x5, 0x8, 0x5, 0x7, 0x0, 0x378, 0xfffffff7, 0x0, 0x200, 0x154, 0x1, 0x4, 0x9cf, 0x3, 0x4, 0x9, 0x1ff, 0x394f370b, 0xc, 0x800, 0x40, 0x4, 0x101, 0x8ca, 0x0, 0xaf, 0xfffffff8, 0x0, 0x10001, 0x9, 0x9, 0x3, 0x9, 0x7, 0x80000000, 0x7, 0x8, 0xd, 0x3, 0x2, 0xec, 0x800, 0x7, 0xfffffffd, 0x80000000, 0x9, 0x6, 0x80000000, 0x345a, 0xffff5ed0, 0x7, 0x252d, 0x1, 0x1, 0xfffffffa, 0x1, 0x9, 0x4, 0x35, 0xff, 0x6, 0x8, 0x4, 0x2728, 0x9, 0x5, 0x79e, 0x80000000, 0x5, 0x1000000, 0x5, 0x1, 0xffffffff, 0x9, 0x1, 0x754, 0x10, 0xeae, 0x0, 0xe, 0x2f, 0xffffffff, 0x8, 0xfff, 0x6, 0xd, 0x7fff, 0x0, 0x10000, 0xffffa5b0, 0x9, 0x5, 0x2e, 0x7fff, 0x81, 0x400, 0xaa07, 0x8001, 0x74fc, 0x4, 0x2, 0x0, 0x2, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x40, 0x10000000, 0x5, 0xe, 0x7, {0x0, 0x1, 0x3, 0x9, 0x800, 0x8}, {0x2, 0x1, 0xffff, 0xc, 0x5, 0x3}, 0x7, 0x4, 0x400}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}]]}, {0x41, 0x6, "466d1a955f237bd7967f1a62761ea53e7d82d8674961e1fa8acb65d326ead3bcb8deffd7a143520229aa1dd572f82de8f90109a024a0807e4303672e70"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_gact={0xbc, 0x17, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x9, 0x20000000, 0x100, 0x2}}]}, {0x75, 0x6, "d4040ebb49140e1062f78e9d5fb56dfec4a7021691228784ce0c29d61e0a3f8f3e4b366232f13567ad109e7666b28f5a617807e7ad2a1c4bab4cbd6280afdfe8c24ec2b117e40c504fd9b3735e2bab1eb80b84ede5bc269aba1e91238a1842b9c641ae3edaed6081ae2517fca92e904651"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x128c, 0x1, [@m_nat={0xc8, 0x1c, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x98c, 0x100, 0x0, 0x6, 0x5}, @local, @dev={0xac, 0x14, 0x14, 0x19}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xc, 0x6, 0xffffffffffffffff, 0x8, 0x3ff}, @loopback, @local, 0x0, 0x1}}]}, {0x50, 0x6, "9ea240325b5347f314b3d2441262fe2a26133ce4062f9c8228284724315dc029adf6af1004189a438028c78893e15d4c7cf0cd345f47819e389ecd276addc8ad9d7afd1e353e60107fa4a28c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x6}}}}, @m_xt={0x1110, 0xe, 0x0, 0x0, {{0x7}, {0xe8, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0xae, 0x6, {0x2, 'security\x00', 0x5, 0x7, "e78b77e56497e4b71696eced66c1ddf09fc126a98cf6a234982aee8aecb1e0fae7cf98bb8f25b1e0f14bef1fa70d185b4029f6334d381fc48f2c24f91feba248ff6326a94672c888db7a95853757ccafedb534899ad2dd783b38dc994c770f97af28efa4ff6905bdc76a45ec5785974d40b6da4316072604d3e7fcb9925605b6625a383a"}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0xb0, 0x1d, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1e31, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x21e7, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0xfffffffe, 0x20000007, 0x5, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xe52, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x2, 0x0, 0x7, 0xfffffffb}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x220f, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7157, 0x8, 0x4, 0x3, 0x8}}]}, {0xc, 0x6, "2b57e930108830b0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0x10a0, 0x1, [@m_pedit={0x109c, 0x1, 0x0, 0x0, {{0xa}, {0xfd8, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x84, 0x5, 0x0, 0x1, [{0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS={0xe98, 0x2, {{{0x8001, 0x8, 0x6, 0x3, 0x1c}, 0x5, 0x0, [{0xffff, 0x4, 0x4c, 0x8001, 0x309, 0x8}, {0x8f63, 0x80000001, 0xfff, 0x9, 0x40, 0xfff}, {0x1, 0x101, 0x7, 0xffffffff, 0x8, 0xfffffffa}, {0x7fff, 0x1, 0x2, 0x80000000, 0x4, 0x1}, {0xffffffff, 0x7, 0x0, 0xa, 0x6, 0x4}]}, [{0x6, 0x8, 0x5, 0x5, 0x7, 0x9}, {0x0, 0x4, 0xd, 0x3, 0x0, 0x7}, {0x0, 0x6, 0x0, 0x3, 0x7, 0x3}, {0xfffffeff, 0x87, 0x7f, 0x10, 0x7, 0x2}, {0xe, 0xc5, 0x0, 0xd, 0x8, 0x5}, {0x43a2fd04, 0x4, 0x3, 0x6, 0x7}, {0x4, 0x5, 0x10000, 0x2, 0x1000, 0x1}, {0x282cfd7, 0xff, 0x8001, 0x0, 0x3d59, 0xff}, {0x1, 0x80000, 0x60c, 0x2, 0x5}, {0x40, 0xfff, 0x6, 0xb, 0x10000, 0x9}, {0x4, 0x6, 0x10, 0xfff, 0x6, 0x7fffffff}, {0x1, 0xc9, 0x0, 0x3, 0x8, 0x6}, {0x40, 0x1, 0x9, 0x15, 0x5, 0x5}, {0xfffffff2, 0x5, 0x7, 0x5, 0x80000001, 0x80000000}, {0x800, 0x40, 0x6, 0xa4a, 0x8}, {0xd7f7, 0x4, 0x2, 0x2, 0x5, 0x4}, {0xff, 0x9, 0x1, 0x9, 0x10, 0xfffffe01}, {0x9, 0x8, 0x491, 0xb, 0x5, 0x3}, {0x81, 0x7, 0x1ff, 0x2, 0x3, 0xffff}, {0x26788fac, 0x4, 0x5, 0x1ff, 0x3, 0x8bab384}, {0xe66, 0x3, 0x1, 0x6, 0x6, 0x3385}, {0xf, 0x100, 0x81, 0x2, 0xffff60cc, 0x4}, {0xe, 0x7, 0x6afb, 0x12000000, 0xf9e3, 0x2}, {0x2, 0x200, 0x101, 0x10000, 0xfffffe01, 0x5}, {0x3, 0x2, 0x3, 0x5, 0x3, 0x6}, {0x5, 0x1, 0x6, 0x5, 0x1, 0x401}, {0x7, 0x240, 0x9, 0x3ff, 0x23d, 0x3}, {0x29, 0xd, 0x1cbf, 0x5, 0x8, 0x7}, {0xffffff00, 0x3, 0x9, 0x5, 0xfffffff8, 0x2}, {0x4, 0x6033, 0x3, 0x80000004, 0xa88, 0x7}, {0xfffffff9, 0x9, 0x0, 0xd, 0x7, 0xd}, {0x6, 0x101, 0x8, 0x4, 0x4, 0x1000}, {0xff, 0x2, 0x80000001, 0x7ff, 0x200, 0x7f}, {0x9, 0x2, 0xfff, 0x7, 0xcd2, 0x401}, {0x2, 0x8, 0xffff, 0x5, 0x0, 0x3}, {0x543, 0x7, 0x9, 0x1ff, 0x4, 0x7fffffff}, {0x39, 0x52, 0x6, 0x8, 0x2}, {0x1, 0x2, 0x9, 0x2, 0xff, 0x7fffffff}, {0x2, 0xee7, 0xaad7, 0x2, 0x101, 0x20000}, {0xa000000, 0x7, 0xff, 0x4, 0x2}, {0x2, 0x4, 0x3, 0x5, 0x2, 0x5}, {0x1000, 0x2, 0x5, 0x40000, 0x0, 0xa0}, {0x6abe8618, 0x6, 0x5, 0xfff, 0x64, 0x200}, {0x4388, 0x4, 0x8, 0xfffffff7, 0x9, 0x3}, {0x2, 0x3, 0x3, 0x400, 0xc, 0x100}, {0xc, 0x4, 0x3, 0x0, 0xdd}, {0x7, 0x6, 0x3, 0x8ab, 0x8f7, 0x2}, {0xfffffff8, 0x7, 0x4, 0x8, 0x4, 0x7fffffff}, {0xb, 0x5, 0x2, 0x0, 0x9, 0xffffffa7}, {0x6, 0x0, 0x3, 0xe440, 0x9, 0x3}, {0x7, 0x0, 0x3, 0x8, 0x2d04, 0x8000}, {0x6, 0x0, 0x7, 0x400, 0x1, 0x8000}, {0x9, 0x9, 0xb88, 0x7, 0x7b05, 0x8}, {0x800, 0x8, 0x6, 0x6, 0x7fff, 0x1}, {0x7, 0x2, 0x4, 0x8, 0x4dce, 0x8}, {0x22d36f5c, 0xd, 0x80000000, 0x3e00a7a6, 0x5}, {0xc7, 0xe, 0x1, 0x0, 0x4, 0x9}, {0x6, 0xe90, 0x4, 0x8001, 0x2, 0x10000}, {0x7, 0x5, 0x0, 0x394, 0x9, 0x7}, {0x100, 0xb1, 0xffffffff, 0xfffffffb, 0xfffffffe, 0x5}, {0x7, 0xffffffff, 0x9, 0x9, 0x0, 0xda}, {0x80000000, 0x5, 0x0, 0x4, 0x2, 0x8}, {0x4, 0xa4000, 0x2, 0x3800000, 0x5, 0x3}, {0xfffffffd, 0x81, 0xffffff63, 0x7, 0x7, 0xfc000000}, {0x18cf, 0x3, 0x0, 0xfffffff2, 0x6, 0x5}, {0x7, 0x40, 0x5, 0x8, 0x1ff, 0x1}, {0x1, 0x5, 0x80000001, 0x7, 0x9, 0x7fff}, {0x8, 0x0, 0x4, 0x4, 0x8, 0xff}, {0xbf1c, 0x3ff, 0x8, 0x80000000, 0x3, 0x8}, {0x8000, 0xe, 0x5, 0x0, 0x0, 0x9}, {0xfffffffa, 0x7fffffff, 0x4, 0x7b8cb2e8, 0x0, 0x9}, {0x3, 0x5, 0xc4, 0x9, 0xaf43, 0xfffffffc}, {0x61, 0x7, 0x0, 0x8, 0xc5, 0xff}, {0x22d0, 0xb39, 0xfffffff9, 0x800, 0x7fff, 0x4}, {0x1, 0x8, 0x8, 0x4, 0x3, 0xd}, {0x6b, 0x4, 0x4, 0xfff, 0x8, 0x5}, {0x3ff, 0x4, 0xb, 0x80000000, 0x3, 0x10000}, {0x80, 0xf, 0xffff, 0x1, 0x5, 0x6}, {0x1, 0x8, 0xc, 0x2, 0x4, 0xfff}, {0x9, 0x0, 0x240, 0x6, 0x8001, 0x80}, {0x950, 0x8, 0x2, 0x400, 0x2, 0x3}, {0x9, 0x7, 0x2, 0x0, 0xca39, 0xe}, {0x7, 0x8, 0x81, 0x5b, 0x9, 0x5}, {0x1, 0x4, 0x7fff, 0xfff, 0x1000, 0xfffffffb}, {0xd38, 0x5, 0xb437, 0x4, 0x100, 0x3ff}, {0x2ecd, 0x8000, 0x4, 0x7fffffff, 0x40, 0x53}, {0xfffffffc, 0x5, 0x80, 0x9, 0xe, 0x3ff}, {0x10, 0x9, 0x0, 0x6, 0x87d, 0x1}, {0x1, 0x53, 0x80000000, 0xf, 0x0, 0x9}, {0xf, 0x4, 0x6, 0x3, 0x5, 0x7}, {0x1, 0x8, 0x1, 0x100, 0x4, 0x5}, {0x5877, 0x1, 0x200, 0x6, 0x0, 0x8}, {0x7, 0x3a, 0x101, 0x0, 0x8, 0x3}, {0xfffffe00, 0x7, 0x4, 0x3, 0x9, 0x25}, {0x6, 0x2, 0x100, 0x9, 0x57}, {0x2, 0x4, 0x9, 0xc, 0x8, 0x7af818a4}, {0x8, 0x7, 0xa90e, 0x6, 0xa9ae, 0x12251f83}, {0x1000, 0x6692, 0xffffffff, 0x5, 0x3, 0x9}, {0xffffedae, 0x4, 0x3, 0x3, 0x9, 0x9}, {0x5, 0x1, 0xe, 0x0, 0x1, 0x4}, {0x4a86, 0x9, 0x6, 0x9, 0x5b2b, 0x8}, {0x80000001, 0x9, 0x4, 0x8, 0x3, 0x101}, {0xffffffff, 0x8, 0x2, 0x101, 0xfffff795, 0x2}, {0x80000000, 0x0, 0xffff219b, 0xffff, 0x7, 0x10001}, {0x51cd, 0x4, 0xb6, 0x9, 0x2}, {0x2, 0x2, 0x80, 0x1, 0x7}, {0xa495, 0x6, 0x9, 0x537, 0xd, 0x9}, {0x1, 0x8, 0x0, 0xf, 0x8, 0x3}, {0x1, 0x7030, 0x3, 0x7, 0x100, 0x83}, {0x76b6, 0xffffffff, 0xfffffffb, 0x2, 0x800df5, 0xa}, {0x0, 0xff, 0xffffffff, 0x36, 0x706, 0x6}, {0x0, 0x6, 0x1, 0xfffffffd, 0xc, 0x5}, {0x0, 0xf9bd, 0x2, 0x5, 0x5, 0x6000000}, {0x7f, 0xc68, 0xe, 0x8, 0xef7, 0x4}, {0xe, 0x5, 0x8001, 0x5, 0x7fff, 0x1}, {0x2, 0x3, 0x1000, 0xffff, 0x1ff, 0xb826}, {0x5, 0x88, 0x1, 0x2, 0x7, 0x6}, {0x1, 0x2, 0xc, 0x4, 0xf, 0x8001}, {0x4, 0x1, 0x7, 0x2, 0x8b0, 0x7ff}, {0x4d, 0x6, 0x100, 0x4, 0x8, 0x7}, {0x8001, 0x8, 0x2, 0x7, 0x4, 0x5}, {0xab, 0x8, 0xffff4013, 0x5, 0x3, 0x2}, {0x9, 0xfffffffe, 0xfffffff8, 0x800, 0x8, 0x2}, {0x5, 0x83c, 0x400, 0x0, 0x6, 0xda}, {0x1, 0x4, 0x3, 0x990, 0x8000, 0x80}, {0xd0, 0xce0, 0x40, 0x8, 0x8, 0x4}, {0x3, 0x7ff, 0x7f, 0x4, 0x7d93}, {0x9, 0x7, 0x6, 0xdc, 0x9, 0xdb}], [{0x6}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x5eeb1c8b9bc85b73}, {}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x4}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x1}, {}, {0x5}, {0x3}, {}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x3}, {0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x5}, {0x1}, {}, {0x5, 0x1}, {}, {0x5}, {0x2}, {0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x3}, {0x6}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0xc}, {0x2}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x4, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4c, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0x6c, 0x5, 0x0, 0x1, [{0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}]}, {0x9b, 0x6, "78a09a7e55023cf8a7567e8ba91be9b5d439e6bd26552c9f7275317c0a6553097cee8c47019c3f7ba0596958112682b03c32ba6dbda94f163dca716a42731407d14429e586fc32d03f9e8898697e1fe853f8fcac9ae0a88da55a9dba42aef2bcc5f19ce271a6b6a65978b16f69a12d7201a9b180baf4c664e3d27cc008201a9f651be3c32e4388fd97b923642b343a8d46e1e68bf4720d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x3c70}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0xffffffffffffff02) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, &(0x7f00000057c0)=0xa7ba, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800006, 0x810, r9, 0x0) recvmmsg(r5, &(0x7f0000005540)=[{{&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000300)=""/169, 0xa9}, {&(0x7f0000000180)=""/48, 0x30}, {&(0x7f0000000240)=""/107, 0x6b}, {&(0x7f0000000480)=""/252, 0xfc}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x5, &(0x7f0000001600)=""/156, 0x9c}, 0x1}, {{&(0x7f00000016c0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001740)=""/184, 0xb8}, {&(0x7f0000001800)=""/248, 0xf8}, {&(0x7f0000001900)=""/85, 0x55}, {&(0x7f0000001980)=""/204, 0xcc}, {&(0x7f0000001a80)=""/80, 0x50}], 0x5, &(0x7f0000001b80)=""/4096, 0x1000}, 0x80}, {{&(0x7f0000002b80)=@ieee802154, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/3, 0x3}, {&(0x7f0000003c40)=""/54, 0x36}, {&(0x7f0000003c80)=""/94, 0x5e}, {&(0x7f0000003d00)=""/227, 0xe3}, {&(0x7f0000003e00)=""/20, 0x14}, {&(0x7f0000003e40)=""/177, 0xb1}, {&(0x7f0000003f00)=""/157, 0x9d}], 0x8, &(0x7f0000004040)=""/51, 0x33}, 0x4}, {{&(0x7f0000004080)=@nfc, 0x80, &(0x7f0000005440)=[{&(0x7f0000004100)=""/4096, 0x1000}, {&(0x7f0000005100)=""/105, 0x69}, {&(0x7f0000005180)=""/76, 0x4c}, {&(0x7f0000005200)=""/179, 0xb3}, {&(0x7f00000052c0)=""/103, 0x67}, {&(0x7f0000005800)=""/186, 0xba}, {&(0x7f0000005400)=""/47, 0x2f}], 0x7, &(0x7f00000054c0)=""/102, 0x66}, 0x9}], 0x4, 0x40010160, &(0x7f0000005640)={0x77359400}) write$cgroup_freezer_state(r9, &(0x7f0000000000)='FREEZING\x00', 0x9) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2d, &(0x7f0000000080)=0x3, 0xfffffffffffffc7f) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800dede10bb52c4a50b0000300000000600000004000000000000070000000004000000000000080000000000000000010000850000000000000000020000000000000000000000da00"], 0x0, 0x4e}, 0x20) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000100)={0x1f, 0x4, 0x4}, 0x6) 1.599952626s ago: executing program 1 (id=1736): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xc4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x94, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xc}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}]}]}]}}]}, 0xc4}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000002c0)={0xb, {{0x2, 0x4e24, @broadcast}}}, 0x88) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x200040d4}, 0xee3f4816c90fe9a3) 1.599234706s ago: executing program 3 (id=1737): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000190001090000000000000000021800000002bd010000000008000100ac1414"], 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x90, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8}, @CTA_MARK_MASK={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x90}}, 0x0) socket$kcm(0x21, 0x2, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000070000000000000000000000000abc010000000a05000000000000000000010000000900010073797a3000000000d30006003407ae8929b5d5805c2cb15c6832bdf04f6f732bf6c75790a071b67033b0bb7e81aac8c9ccb093263d99fcafa58fe6c7126fc1d2ccbc1888abd4a61e1818723b358b147b8836997950921d849981687e7eb599e28bd439758eefcbda6f7906db339e68d3869e4011ddfb254a2dda9b523f928b3626f8faa75357d4f9cb925df5cde675f9e8bb05e4f8cc9a0610fb2945b1b755b94883afb3697a7535ea5f9db3ce21c1f0cc3fb343e830c6a947f512c56b1a706b86e76bc58a075f7cb0322f7fa6fb5df1718361423df5cbd47608ca000900010073797a310000000008000240000000030c000440000000000000000499000600db2b252f3c9b3b419bda841c524cb69270214a733fee6d8e10561ce9d682ad271b8a317d699b2f000178b2aca7c7058e0df489887ebdcf11c4ddf03bc9b1284f5fb568bac9b64b06c9d8c2acf08c892fb2abeb7c72bc9c8fa0c7425b5aa3df8074d8412d67fad836b6cc1c0be2fff19dbd1830e29ae4bc6aaa4f42c244e40238dc8e2a247b1792a177693b55dc155f631634db5af90000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b40000000005c000480580001800b000100746172676574000048000280300003005fad843dc5c1efe84ced18d4422d5b0b86e8441958d3d2ea41149f1e55359af069a2a5e039ccf56f068a5a0b09000100534e41540000000008000240000000020900010073797a30"], 0x2a8}, 0x1, 0x0, 0x0, 0x84}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x81, 0x5e77}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8100036}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)={0x64, r5, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x20044890}, 0x64044054) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x13, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r2, 0x2e, 0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r2, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@map=r8, r6, 0x719cef3fdb141d81, 0x4, r6, @void, @value=r6, @void, @void, r7}, 0x20) 1.443057791s ago: executing program 1 (id=1738): epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xfffffff9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000040)={0xcb0b, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}) 1.399032724s ago: executing program 2 (id=1739): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711091ff0000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) (async) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r3, 0x0) (async) write$tun(r2, &(0x7f00000003c0)=ANY=[], 0xfce) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x30, r5, 0x1, 0x70bd2f, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe1}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0x80000001}, {0x6, 0x40}]}, 0x10) (async) sendto(r6, 0x0, 0x0, 0x2, 0x0, 0x0) (async) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000061100400000000009500000000000000db2b9d7f0bc61191d326d0f71d61177308b0b05147563cf5e64fe141c744529d576cac9085c3cd34e6bc694d09a5b3c12aee7f4c0230128866f4d671e304ba024cfab70e409b1623d173075174cda3ef9f6827297da5b4fda2f046653526bcfe4889333da1ec334d33d83d0011c4c6218175bda6bd44a98a3d56dc18d5a95a6db83040563bd1e920824ffc7a82d0dab63f62804767f8dcd3efc8b3be2ca7a80a7a6bf752f98e0cf9de875f255c031f"], &(0x7f0000000100)='GPL\x00', 0x2, 0xfffffffffffffeb1, 0x0, 0x0, 0x5}, 0x94) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000300)=@ethtool_rxfh_indir={0x39, 0x5, [0x3, 0x4, 0x9, 0x9, 0x8]}}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800faffff170002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000400", @ANYRES16=r8], 0x48}}, 0x0) 1.307856757s ago: executing program 1 (id=1740): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000fcff000604c52439bc63"], 0x0, 0x26, 0x0, 0x1}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r4}, 0x10) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000280)={0x0, 0x9003}, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbff, 0x10000}, 0xc) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r3, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff2, 0x1, 0x0}, &(0x7f00000002c0)=0x40) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="880000001050e3226509798e657fd4c25b98aac6", @ANYRES32=r2, @ANYBLOB="0204000000000000300012800c0001006d6163766c616e0020000280080001001000000006000200010000000a000400aaaaaaaaaabb0000380019801400050013b8d0eb160a1945f791ed0b8f2f8b0f05000600060000000d0002006d6163766c616e300000000008000200262e2100"], 0x88}}, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000364000/0x4000)=nil, 0x4000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r7, 0x6, 0x18, 0x0, &(0x7f0000000800)) sendto$packet(r6, &(0x7f0000001180)="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", 0x1000, 0x10, &(0x7f0000000100)={0x11, 0x1b, r2, 0x1, 0x2}, 0x14) 1.304083499s ago: executing program 0 (id=1741): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x1b}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={r1, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x7, @loopback, 0x4}]}, &(0x7f0000000100)=0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa0}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8801}, 0x44000) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @loopback}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={r1, 0x5}, 0x8) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r5, 0x11, 0x2, &(0x7f0000000340)=""/159, &(0x7f0000000400)=0x9f) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040890}, 0x1) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x98, r7, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7fffffff}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x10000}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x24048001) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000700)={r2, 0x80000001, 0x51, 0x6d}, &(0x7f0000000740)=0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xec, 0x0, 0x10, 0x70bd27, 0xa319, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "4088ae1e0e05c099ccabcdc76491a8667c0267ea507e35968d264bacbbbba096d3e5"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ID={0x37, 0x3, "6499858a4e966b296eed589c20124b70c4bf189753d50f0dcc3e593cc83406fb79d19a605ac947b3574d4cb85dd5cef5ffb833"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4008810) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000940)={0x2, [0x0, 0x0]}, &(0x7f0000000980)=0xc) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$sock_SIOCSIFBR(r10, 0x8941, &(0x7f0000000a00)=@generic={0x3, 0xfffffffffffff001, 0x7}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r3) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xd8, r11, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_STA_WME={0x54, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x81}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xe}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xe}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x66, 0xbe, "8c9e36e431de7dc47b52aad1829d737f01939ebfbabcd09b33c4a6e9619307c2f60e1ec54b661b0fb61e153f792da170ac653e5656dea78cc97e26f9366d1c2a398d822efb79c5bf26381630adf864ecf2382ef83957761287147913741ff1f90cc8"}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000c40)={'ah\x00'}, &(0x7f0000000c80)=0x1e) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r12, 0x89e0, &(0x7f0000000d00)={0x4, 0x1}) bind$bt_sco(r5, &(0x7f0000000d80)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000dc0)={r9, 0x3}, &(0x7f0000000e00)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000e40)={r13, 0x8}, 0x8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000f00)={'sit0\x00', &(0x7f0000000ec0)={@private0, @broadcast, 0x12}}) 1.218392021s ago: executing program 4 (id=1742): r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000100811207000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000480)=0xe8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c000200070000f1ffffffff0b000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x28, r8, 0x1, 0x400000, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}}, 0x2000c050) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r9) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000fcdbdf250f00000008000300", @ANYRES32=r12], 0x1c}, 0x1, 0x0, 0x0, 0x40008c0}, 0x24008080) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x88, r8, 0x800, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) accept$alg(r6, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2314e23f4e6332a4, {0x87, 0x0, 0x4, 0x0, 0x10, 0x48, 0xf5a2}}}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_OIF={0x8, 0x5, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000}, 0x40040d0) 1.123863791s ago: executing program 0 (id=1743): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000180)=0x7, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0) 841.386979ms ago: executing program 0 (id=1744): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b0b, &(0x7f0000000200)={'virt_wifi0\x00', @random="955375c9b013"}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ca463295257ced0923deae853e344e71a3a6ad5ae2c6898cc7e03a080b1baf4ad0652fd916ad2dfebdb5db", @ANYRES16=r1, @ANYBLOB="00012cbd7000fddbdf25060000004c000680040002004200040067636d28616573290000000000000000000000000000000000000000000000001a00000018d3ff3ec8eb5b16c667f52cc2502cdb8b7e4df7860bd44950360000100007800c0004000000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000200001"], 0xb8}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007002e3a2f2f140002"], 0x44}, 0x1, 0x1000000, 0x0, 0xc4}, 0x0) 792.943464ms ago: executing program 2 (id=1745): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FIONCLEX(r0, 0x5450) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x24, 0x22, 0x601, 0x70bd2a, 0xfffffffc, "", [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x24}], 0x1, 0x0, 0x0, 0x1}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 675.318426ms ago: executing program 1 (id=1746): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000580)={0x2, &(0x7f0000000540)=[{0x8, 0x8, 0xeb, 0x7}, {0x2, 0x1, 0x5, 0xb8}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x14, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4000014) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x2}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}]}}]}, 0x50}}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "4cb4fc4ba7906e8f58c2052fade1bc2c62cdeb7521cf85ee"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}}, 0x0) 672.039567ms ago: executing program 3 (id=1747): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0xffffffc3}, 0x0) 608.061868ms ago: executing program 2 (id=1748): r0 = socket(0x26, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x4, 0xf, 0x5c, 0x4, 0x30, @private0, @local, 0x1, 0x700, 0x8, 0x2}}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x4, 0x1, 0x0, r2, 0x1}, 0xc) 547.824705ms ago: executing program 4 (id=1749): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) r7 = socket$inet6(0xa, 0x3, 0x3c) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0x25d, 0x2c, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}, [@hopopts={0x4fb560df2bad385d, 0x2, '\x00', [@generic={0x7, 0xf, "55b5d747d5ce5853e308cdbcf10ddd"}]}, @dstopts={0x16, 0x3d, '\x00', [@jumbo, @enc_lim, @jumbo={0xc2, 0x4, 0x40}, @generic={0x2, 0x1d8, "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"}]}], "d53354e0f167b1d8f8ed2a0790c6f7186919d562eb"}}}}}}, 0x293) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r7, @ANYRESOCT=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x20004011}, 0x80) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4000, 0x10, @mcast1, 0x5}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000100)=',', 0x1}, {&(0x7f0000000040)}, {&(0x7f0000000680)="eb8b609184a39bc622167d98b5b1f4c2680dd0ec7a712f5c69b0c49be4b18c7563ed64fcabfc5de3c5179663616fd9f981c42ad842aa3f8e97a70ad30709e93ec48d63027926c60800daaa1cc1be3c93c4064afa90cfe620c7faafa8d539932415cb047d66b123c3b4bfa56ded7d20804d94e138acaf8ef645125d3b3510333ab5d1bb1bd5c6eed94feb07fe958577f2db0e3dddaff0c2bee47d838a66b1702e1036edb21829d02b000000000000", 0xae}], 0x3) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000100)="ad73364256", 0x5) r9 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)={0x88, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x58d2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048000) recvmsg$qrtr(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/31, 0x1f}, {&(0x7f0000000500)=""/101, 0x65}], 0x2, 0x0, 0x0, 0x42}, 0x1c, 0x12080) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@setlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0xf, @broadcast}]}}}]}, 0x3c}, 0x1, 0xff7f}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 547.456062ms ago: executing program 0 (id=1750): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x2200, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000800)={'veth0_to_bridge\x00'}) close(0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000091108c000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000002a40)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f00000000c0)="ebe3a0e90000000000000080e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e03b2052579c5084df41f536aca338f025335caf900b1a5c68714bcc41f55c", 0x43}], 0x2, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x40}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/91, 0x5b}], 0x1}, 0x10101) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d80000001c0081044e81f782db44b9040a1d080216000000020003a118000c080300000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee40200000018a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000fdbccf137789dd5e3df5fc6047a353000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4ef00000000", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x400d0) writev(r1, &(0x7f0000000680)=[{&(0x7f00000000c0)="d40bfb981fb1e4c0d6af5ff7083d2c6f283ed0c5881005175c60419a7de0f4bc62279d266a1561865fc2e609d6f94d9da6989429df2476533d05aa57ed71baf76398eb450a6578be36bbe828ff0d3053cf302ecefc35744a7be5f5d8d8035c98c070308b01b88a2c352f97ffc7bf6cc1e50d30ca00cc010d43930c55ece9d3110644f47e5e843d215359e5a5fd0329638ffddeadacb30b5828998c8067b915bc9347dc97db8d2598ad992d13927851255e3b814a892e59a10ca224b055b8033c2af8151f11a930292c48ae6410cf41846f3e68aac495536ab6cad96f5f7dedae5aa868dfe2394c6edc9e748a492a2f55a1", 0xf1}, {&(0x7f00000001c0)="175e119de6", 0x5}, {&(0x7f0000000200)="c0bf68ba5689a554e441aa1456d6c188ca62b3c35299c40b7aeb3c1934a05addcace596663ccc45daed7dc7744db7b9d3175fe110d26b8d7ff0b867817", 0x3d}, {&(0x7f0000000240)="19fe00a3abbd86501417bc6d0673626ce0aabaff834738397f15619e90984cdc6a41d2f2f0a5586ebb569167e795451f1412f7fc35afb5b9158ae78f58dd1285b88d84d5ae50fb1a7503cf14dac2c105de360883b90468470e86ddaf1816d89df4abe1bdc668fab19c1959e44dbf4ccde4a2dba511255e4ce1b1fd8b5091f76c5c70c3510f5ceb660b974fd17923e26323df18d2deaeed2a7a3af99c1396b76e23b067b2e6488a43c79cbddf143816695cfaa977d5c602089317a1c8bfaad7c55915a9d6a652b052d73370f95a7d0f3b11aa38e4a175452e1f38", 0xda}, {&(0x7f0000000340)="b9c5070799adb89d2d93ea46d9fe4ea54869f065071d117be5ee8dc60a965abbdb2a7144cc4038d15ac872c45ac64aecce2dac09b776d19ca635eebab778e7cb0354c2576f9c8e0b7ee057ea64d537", 0x4f}, {&(0x7f00000003c0)="551997b0fb30c06be07fc16deec72830c20008ce5923d3d51fcf761046523fe7e87e052b2b6d4279da3eeb560c1a841aae77982d6c1ca54a73ad8644146b013ed7aa24feb1edf536f6e61163d5c9439724d1413b9b1642b160056bde33bae891be2bc832a85e4027ec320da492648679cf4cf6f01f17d32c4caeb85c4cf6f93bb4714c13f7b0c5f537f7d3f5e679a1", 0x8f}, {&(0x7f0000000480)="71b63dbeb25dde95b9af4e62ecbd6a3dab3a0811279d398031d57d9c7f2e65f415e762", 0x23}, {&(0x7f00000004c0)="56d75061ac98fd1dd6d6491d1df705d7577f9944b4187eb7c86d53b577bae4c4d0c6137873f83066739c7422e104615fe0d1d5f8adadb40bee6c7171cc5a42fb1a2f64cbcfbe8c8b1f250b32ef28cf895a42277d0ad8a9ce5a2373fe13c7f41e19b85b39b1ca43c66137ff1adc80dcabd52b55ee287a9a1900e67ea9d7e9f3928df1fb585d807df1fa593198b0b454deca880e24", 0x94}, {&(0x7f0000000580)="dda9187d16ee564664f24c78784b6a0f62ab37c83d714bcbfbc6eaecfb3710cc6d494cb09de1f9595a9cef02227e55268b57055579aa237f1b3ad28c687562ce96305f5309da5faa76925050b742a5c56e9d21ff17c8621dff3f8f924400e059581adb00fc4964fd8ea9d1cf024ea17ee251440ce7c611cbe10e91d0ec75424f6c40863dfc046581499ff43c7958ed2fe814c316ca8b3dbcec58e767db381ed0f5bf89464ac934b5b3371342cf532bbdf01d98a4551342", 0xb7}, {&(0x7f0000000640)="53afb41b88849393b8d3c4cf1cbcb9d03341762353419934614084", 0x1b}], 0xa) r6 = socket(0x14, 0x2, 0x4) ioctl$SIOCX25GDTEFACILITIES(r6, 0x618f, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0xe) 475.494754ms ago: executing program 3 (id=1751): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) unshare(0x6020400) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, 0x0, 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc89000000000000b5090100000000009500000000000000b509000002000000639af0ff000000008709000000000000c39af0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000000000000b70000050000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790030000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80) 451.890938ms ago: executing program 2 (id=1752): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x6, 0x20, 0x4, 0x40}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r1, 0xa9b, 0x7}, &(0x7f00000000c0)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071121f000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 367.819669ms ago: executing program 1 (id=1753): r0 = socket(0xa, 0x3, 0x9) getsockopt$nfc_llcp(r0, 0x3a, 0x0, 0x0, 0x2000005d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x400000}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000001600010000000000fcffffff0a000000", @ANYRES32=0x0, @ANYBLOB="140007"], 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@getqdisc={0x3c, 0x26, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff3, 0x10}, {0xffff, 0xa}, {0x1, 0xb}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESOCT], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r6, 0x0, 0x14, 0x0, &(0x7f0000000940)="18d26a3d9673399025aae4121e420e3eef774116", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) close(0x4) accept$phonet_pipe(r5, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x4, &(0x7f0000000100)=0x3, 0x4) 245.548767ms ago: executing program 4 (id=1754): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="bfbba27a100003040000007a58c8351a3df08700065bfc800abddd2459f1c9c9ccc6b5ff8fc422a4338ddf25f590196a0a2e1e03186d4bbc6e11", @ANYRES32=r4, @ANYBLOB="0003000002800000140012800b000100697036767469000004000280"], 0x34}}, 0x0) (async) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f00)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) socketpair(0x9, 0x5, 0x40, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r10, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r9, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x1}}]}, 0x4c}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async, rerun: 32) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001005d790000000000000500000a60000000060a0b0400000000000000000200000234000480300001800b00010074617267657400002000028008000240000000010800030002b511120c0001004e465155455545000900010073797a30000000000900020073797a32"], 0x88}}, 0x0) (async, rerun: 32) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @multicast1}}}, 0x88) (async) writev(r8, &(0x7f0000000380)=[{&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000000440)="ac11782ce702e273772d749d8d4a0acceb805658d920568008c7cbcb8961995ed9393d484eef253b7e14960b2d144be886404e8b67e36132bb16854dbf9cbade82f0c5d89723279ecdaf04b207d0da3f934b39b706bb931eb8837ef4b370291d096810", 0x63}], 0x2) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="800110564bd0eba77c673b553bed8ee200005fb1414a74c34fb9b51cc9954fe3c221c3982511ff71bd10bf93b5891f7e6399126a1bfb11491688656f7b45c87adce8eac58f3ff705b59165f0fce8c99256f61d5e9dad8db2788425be9a11e1f5d2032bd4cd0b00b488006079386a76e8a9d494fc34d4067f295f312f93fd5e6b", @ANYRES16=r13, @ANYBLOB="0100000000000000000014000000040001800400098074000780080002000000000096000200000000000c0003000000000000000000080001000000000008000200000000000c000300000000000000000008000100000000000c00030000000000000000000800020000000000080001000000000008000100000000000c0004000000000000000000300005802c00028008000100000000000800020000000000080004000000000008000100000000000800030000000000700001803400028008000400000000000800030000000000080002000000000008000100000000000800040000000000080004000000000008000300000000000d0001007564703a73797a30000000001700010069623a76657468305f766972745f77696669000008000300000000000400048044000280080001000000000008000100000000000400040008000100000000000800010000000000080002000000000004000400040004000800020000000000040004000800058004000280"], 0x180}}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f00000002c0), r14) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 171.020254ms ago: executing program 3 (id=1755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x9}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x9}}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) 79.85773ms ago: executing program 1 (id=1756): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x88c1) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x3, 0xa, 0xe8b) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x53}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 37.575377ms ago: executing program 0 (id=1757): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x44, r1, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xffd}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x8b5}]}, 0x44}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r3, @ANYBLOB="01000000000000047fc9010000000400048008000200010000000800010000000000d00008802c00078008000600c500000008000500aee6633708000600d9000000080005002d7c9172080005006d67491d0c0007800800050024da98751c00078008000500878f000008000600df0000de"], 0x10c}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004805}, 0x20000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0xdc, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0xc8, 0x1, [@m_sample={0xc4, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x0, 0x1ff}}]}, {0x6f, 0x6, "1ba2b308dea2e11639924c5ec715cdb849fe960077a26916267347800aded6c6c378daacb9c3d29659abb6aa02eaa76f82446723a4a9d653f0260169192c540bb6af3176cc74d8c152e451f381e8325762ad9324064c43f00159ce7a1af303479f008d42992000dc605826"}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0xdc}}, 0x20048000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r7 = socket$inet(0x2, 0xa, 0x38a7) sendto$l2tp(r7, &(0x7f00000001c0)="0e5ff92f84718fd3a997983653d46291b6d1eeeeae39e35ab488bdd83f1610f8c3b33a8b67d879040bec26ea58e6b602df90ab393b9f2439390dd21028937103073f0c48de23ee5fa8aa09de9c7b5f8147a73b858af1dda1fa1e2d88c4b034c91d3b03f4760ad2facaa861e47835726deed93342fab09ad81b8e82f278ac769485ce4199eb9d5ea5dfd369296d9d73e4f4635a2f0cf07c55ed1c31e7805fa4db6b7c33d927e3ba0d3613c87fc810d733f0a527744c56ec2d5002262ca4414210579e25d2245952ba41276f1e058419a8bd4fb83ea63b24edd3c98fc9dfda1683236921777207c660439343", 0xeb, 0x40005, &(0x7f0000000040)={0x2, 0x0, @broadcast, 0x1}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r8], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 0s ago: executing program 3 (id=1758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a3000c109004c000000060a010400000000000000000100000024000480200001800700010072740000140002800800014000000009080002400000000308000b40000000000900010073797a300000000014000000110001"], 0xd4}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f27f5101007f51010049f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getroute={0x14, 0x1a, 0x8, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.212' (ED25519) to the list of known hosts. [ 78.841532][ T5855] cgroup: Unknown subsys name 'net' [ 78.998938][ T5855] cgroup: Unknown subsys name 'cpuset' [ 79.008395][ T5855] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.688655][ T5855] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.231424][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.245008][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.262029][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.287758][ T5874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.296791][ T5874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.306591][ T5874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.324556][ T5187] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.366541][ T5187] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.392988][ T5879] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.394863][ T5874] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.401715][ T5879] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.416131][ T5187] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.416942][ T5879] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.430357][ T5187] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.433222][ T5879] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.439907][ T5187] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.445897][ T5878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.453774][ T5187] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.468654][ T5879] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.476203][ T5878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.483572][ T5879] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.495979][ T5879] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.503473][ T5879] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.516329][ T5869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.526526][ T5187] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.980384][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 84.293606][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 84.360815][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.369814][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.378789][ T5865] bridge_slave_0: entered allmulticast mode [ 84.387474][ T5865] bridge_slave_0: entered promiscuous mode [ 84.416050][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 84.446554][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.453711][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.461052][ T5865] bridge_slave_1: entered allmulticast mode [ 84.468624][ T5865] bridge_slave_1: entered promiscuous mode [ 84.542289][ T5876] chnl_net:caif_netlink_parms(): no params data found [ 84.630939][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.643854][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.669311][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 84.680929][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.688312][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.696258][ T5880] bridge_slave_0: entered allmulticast mode [ 84.703547][ T5880] bridge_slave_0: entered promiscuous mode [ 84.758385][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.766432][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.773869][ T5880] bridge_slave_1: entered allmulticast mode [ 84.782349][ T5880] bridge_slave_1: entered promiscuous mode [ 84.839882][ T5865] team0: Port device team_slave_0 added [ 84.894313][ T5865] team0: Port device team_slave_1 added [ 84.937400][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.951160][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.975995][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.983166][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.991154][ T5870] bridge_slave_0: entered allmulticast mode [ 84.998563][ T5870] bridge_slave_0: entered promiscuous mode [ 85.060554][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.067644][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.094526][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.107712][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.114910][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.123808][ T5870] bridge_slave_1: entered allmulticast mode [ 85.132730][ T5870] bridge_slave_1: entered promiscuous mode [ 85.147909][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.155054][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.162649][ T5876] bridge_slave_0: entered allmulticast mode [ 85.171152][ T5876] bridge_slave_0: entered promiscuous mode [ 85.194137][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.201918][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.228186][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.276456][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.283725][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.291323][ T5876] bridge_slave_1: entered allmulticast mode [ 85.300285][ T5876] bridge_slave_1: entered promiscuous mode [ 85.309556][ T5880] team0: Port device team_slave_0 added [ 85.319529][ T5880] team0: Port device team_slave_1 added [ 85.357784][ T5187] Bluetooth: hci0: command tx timeout [ 85.449218][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.459112][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.466804][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.474141][ T5871] bridge_slave_0: entered allmulticast mode [ 85.482399][ T5871] bridge_slave_0: entered promiscuous mode [ 85.493527][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.507392][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.517529][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.524486][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.551189][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.570250][ T5865] hsr_slave_0: entered promiscuous mode [ 85.576764][ T5865] hsr_slave_1: entered promiscuous mode [ 85.586102][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.595543][ T5187] Bluetooth: hci4: command tx timeout [ 85.598224][ T5869] Bluetooth: hci1: command tx timeout [ 85.606769][ T5874] Bluetooth: hci2: command tx timeout [ 85.607052][ T5187] Bluetooth: hci3: command tx timeout [ 85.644126][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.651678][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.659280][ T5871] bridge_slave_1: entered allmulticast mode [ 85.667637][ T5871] bridge_slave_1: entered promiscuous mode [ 85.687656][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.694736][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.720995][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.742200][ T5870] team0: Port device team_slave_0 added [ 85.814477][ T5870] team0: Port device team_slave_1 added [ 85.837387][ T5876] team0: Port device team_slave_0 added [ 85.881577][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.892775][ T5876] team0: Port device team_slave_1 added [ 85.933065][ T5880] hsr_slave_0: entered promiscuous mode [ 85.940605][ T5880] hsr_slave_1: entered promiscuous mode [ 85.947082][ T5880] debugfs: 'hsr0' already exists in 'hsr' [ 85.952880][ T5880] Cannot create hsr debugfs directory [ 85.976951][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.040631][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.047660][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.075503][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.089328][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.096770][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.123401][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.148138][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.155715][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.181895][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.223879][ T5871] team0: Port device team_slave_0 added [ 86.233576][ T5871] team0: Port device team_slave_1 added [ 86.241012][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.248563][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.275425][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.355697][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.362773][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.389084][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.431455][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.438692][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.465324][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.577207][ T5876] hsr_slave_0: entered promiscuous mode [ 86.584469][ T5876] hsr_slave_1: entered promiscuous mode [ 86.591185][ T5876] debugfs: 'hsr0' already exists in 'hsr' [ 86.597015][ T5876] Cannot create hsr debugfs directory [ 86.619425][ T5870] hsr_slave_0: entered promiscuous mode [ 86.626263][ T5870] hsr_slave_1: entered promiscuous mode [ 86.632724][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 86.639180][ T5870] Cannot create hsr debugfs directory [ 86.862400][ T5871] hsr_slave_0: entered promiscuous mode [ 86.869776][ T5871] hsr_slave_1: entered promiscuous mode [ 86.876929][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 86.882781][ T5871] Cannot create hsr debugfs directory [ 87.204977][ T5865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.242147][ T5865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.294358][ T5865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.339948][ T5865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.429959][ T5880] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.435466][ T5187] Bluetooth: hci0: command tx timeout [ 87.453616][ T5880] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.519519][ T5880] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.560014][ T5880] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.621794][ T5876] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.634808][ T5876] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.662735][ T5876] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.674152][ T5876] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.675965][ T5187] Bluetooth: hci3: command tx timeout [ 87.681278][ T5869] Bluetooth: hci2: command tx timeout [ 87.686674][ T5874] Bluetooth: hci4: command tx timeout [ 87.692089][ T5869] Bluetooth: hci1: command tx timeout [ 87.832057][ T5870] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.848477][ T5870] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.861278][ T5870] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.872492][ T5870] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.993587][ T5871] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.011333][ T5871] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.039063][ T5871] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.064484][ T5871] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.100886][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.141706][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.187425][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.216258][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.252572][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.260007][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.273044][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.280252][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.310411][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.317635][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.337022][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.361975][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.369217][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.460426][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.480974][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.520273][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.539836][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.547030][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.578542][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.585876][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.613908][ T5865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.634202][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.641432][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.653079][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.660192][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.720327][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.874895][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.948039][ T1037] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.955516][ T1037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.043611][ T3471] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.051026][ T3471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.181530][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.264448][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.494998][ T5880] veth0_vlan: entered promiscuous mode [ 89.526397][ T5869] Bluetooth: hci0: command tx timeout [ 89.590502][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.618178][ T5880] veth1_vlan: entered promiscuous mode [ 89.642687][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.675022][ T5865] veth0_vlan: entered promiscuous mode [ 89.756462][ T5869] Bluetooth: hci3: command tx timeout [ 89.762033][ T5869] Bluetooth: hci1: command tx timeout [ 89.769845][ T5187] Bluetooth: hci4: command tx timeout [ 89.775369][ T5874] Bluetooth: hci2: command tx timeout [ 89.843460][ T5865] veth1_vlan: entered promiscuous mode [ 89.862965][ T5880] veth0_macvtap: entered promiscuous mode [ 89.927588][ T5880] veth1_macvtap: entered promiscuous mode [ 89.971843][ T5870] veth0_vlan: entered promiscuous mode [ 89.993336][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.073129][ T5865] veth0_macvtap: entered promiscuous mode [ 90.087069][ T5870] veth1_vlan: entered promiscuous mode [ 90.120125][ T5865] veth1_macvtap: entered promiscuous mode [ 90.139234][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.163924][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.238530][ T1037] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.248239][ T1037] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.273802][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.286450][ T1037] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.296762][ T1037] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.329899][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.351596][ T5870] veth0_macvtap: entered promiscuous mode [ 90.366211][ T5870] veth1_macvtap: entered promiscuous mode [ 90.380958][ T5871] veth0_vlan: entered promiscuous mode [ 90.407504][ T3471] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.440326][ T3471] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.451878][ T3471] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.482151][ T3471] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.533488][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.557606][ T5871] veth1_vlan: entered promiscuous mode [ 90.584182][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.657225][ T5876] veth0_vlan: entered promiscuous mode [ 90.670105][ T3455] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.679802][ T3455] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.708464][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.709808][ T3455] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.725404][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.737984][ T3455] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.780148][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.788501][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.813060][ T5876] veth1_vlan: entered promiscuous mode [ 90.881152][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.897976][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.944761][ T5871] veth0_macvtap: entered promiscuous mode [ 90.967734][ T1037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.988488][ T3455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.000928][ T1037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.004781][ T5871] veth1_macvtap: entered promiscuous mode [ 91.014698][ T3455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.036738][ T5876] veth0_macvtap: entered promiscuous mode [ 91.054898][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.084750][ T5876] veth1_macvtap: entered promiscuous mode [ 91.171995][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.191025][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.230423][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.239163][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.252640][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.291979][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.360143][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.390050][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.416994][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.511260][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.553217][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.572674][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.597190][ T5187] Bluetooth: hci0: command tx timeout [ 91.606345][ T6000] openvswitch: netlink: EtherType 50a is less than min 600 [ 91.669492][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.709745][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.753987][ T6005] nbd: must specify a size in bytes for the device [ 91.836200][ T5187] Bluetooth: hci4: command tx timeout [ 91.842074][ T5869] Bluetooth: hci1: command tx timeout [ 91.847624][ T5875] Bluetooth: hci2: command tx timeout [ 91.853120][ T5875] Bluetooth: hci3: command tx timeout [ 91.927745][ T6008] sctp: failed to load transform for md5: -2 [ 92.098702][ T1037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.162568][ T1037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.165012][ T9] cfg80211: failed to load regulatory.db [ 92.239211][ T3471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.252256][ T3471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.471228][ T6027] syz.1.14 uses obsolete (PF_INET,SOCK_PACKET) [ 92.471882][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.488696][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.503358][ T6029] IPv6: sit1: Disabled Multicast RS [ 92.512563][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.527104][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.551194][ T6029] sit1: entered allmulticast mode [ 92.668472][ T6031] pim6reg1: entered promiscuous mode [ 92.681442][ T6031] pim6reg1: entered allmulticast mode [ 93.160452][ T6057] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20'. [ 93.474710][ T6069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.715860][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'. [ 94.065455][ T6080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.139950][ T6086] gtp0: entered promiscuous mode [ 94.145931][ T6086] gtp0: entered allmulticast mode [ 94.545704][ T6098] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.725651][ T6101] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 94.812645][ T6104] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 94.833061][ T6108] Zero length message leads to an empty skb [ 94.920725][ T6114] netlink: 'syz.2.36': attribute type 83 has an invalid length. [ 95.856322][ T6128] netlink: 'syz.3.42': attribute type 1 has an invalid length. [ 95.857565][ T6126] tipc: Started in network mode [ 95.874018][ T6128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.42'. [ 95.896725][ T6126] tipc: Node identity 1ac882bf7a36, cluster identity 4711 [ 95.904364][ T6126] tipc: Enabled bearer , priority 0 [ 95.956061][ T6126] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.975805][ T6133] netlink: 'syz.0.43': attribute type 1 has an invalid length. [ 95.984459][ T6133] netlink: 'syz.0.43': attribute type 1 has an invalid length. [ 95.985814][ T6126] syzkaller0: entered allmulticast mode [ 96.024227][ T6133] netlink: 'syz.0.43': attribute type 1 has an invalid length. [ 96.064595][ T6133] netlink: 'syz.0.43': attribute type 2 has an invalid length. [ 96.116818][ T6133] netlink: 76 bytes leftover after parsing attributes in process `syz.0.43'. [ 96.139980][ T6123] tipc: Disabling bearer [ 96.512799][ T6149] netlink: 'syz.1.47': attribute type 30 has an invalid length. [ 96.531835][ T6149] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 96.587769][ T6159] netlink: 20 bytes leftover after parsing attributes in process `syz.4.51'. [ 96.599090][ T6149] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 96.742372][ T6159] vlan2: entered promiscuous mode [ 96.768780][ T6159] gretap0: entered promiscuous mode [ 96.777130][ T6172] netlink: 'syz.3.50': attribute type 1 has an invalid length. [ 96.785304][ T6172] netlink: 224 bytes leftover after parsing attributes in process `syz.3.50'. [ 96.810242][ T6172] block nbd1: not configured, cannot reconfigure [ 97.474680][ T6192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'. [ 97.543394][ T6192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'. [ 97.551837][ T6196] netlink: 56 bytes leftover after parsing attributes in process `syz.0.55'. [ 97.592691][ T6192] netlink: 36 bytes leftover after parsing attributes in process `syz.0.55'. [ 97.797621][ T6200] syzkaller0: entered promiscuous mode [ 97.803378][ T6200] syzkaller0: entered allmulticast mode [ 97.859445][ T6195] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 97.990409][ T6213] netlink: 'syz.4.60': attribute type 1 has an invalid length. [ 98.119426][ T6214] netlink: 'syz.2.61': attribute type 29 has an invalid length. [ 98.198561][ T6212] team0: Port device dummy0 added [ 98.734309][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.71'. [ 98.761192][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.71'. [ 98.844810][ T6249] veth0_to_team: entered promiscuous mode [ 98.852191][ T6249] veth0_to_team: entered allmulticast mode [ 99.349725][ T6271] ve: renamed from ipvlan1 [ 99.372561][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.77'. [ 99.390711][ T6266] tipc: Enabling of bearer rejected, failed to enable media [ 99.418443][ T6274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.78'. [ 99.699624][ T6287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.710130][ T6283] Driver unsupported XDP return value 0 on prog (id 28) dev N/A, expect packet loss! [ 99.932492][ T6293] warning: `syz.4.85' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.958700][ T6302] netlink: 24 bytes leftover after parsing attributes in process `syz.1.87'. [ 100.201269][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.89'. [ 100.211516][ T6313] netlink: 36 bytes leftover after parsing attributes in process `syz.4.89'. [ 100.456746][ T6319] tipc: Enabled bearer , priority 0 [ 100.473529][ T6319] raw_sendmsg: syz.4.91 forgot to set AF_INET. Fix it! [ 100.536865][ T6318] tipc: Disabling bearer [ 101.332751][ T6359] bridge_slave_0: invalid flags given to default FDB implementation [ 101.769219][ T6376] delete_channel: no stack [ 101.774161][ T6359] syzkaller0: entered promiscuous mode [ 101.780792][ T6359] syzkaller0: entered allmulticast mode [ 101.837926][ T6376] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.107'. [ 101.897872][ T6375] delete_channel: no stack [ 101.975638][ T6381] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 102.060637][ T6381] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.108'. [ 102.116467][ T6381] netlink: 104 bytes leftover after parsing attributes in process `syz.4.108'. [ 102.362259][ T6391] validate_nla: 5 callbacks suppressed [ 102.362283][ T6391] netlink: 'syz.1.111': attribute type 1 has an invalid length. [ 103.976721][ T6413] __nla_validate_parse: 1 callbacks suppressed [ 103.976739][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.113'. [ 104.036918][ T6418] syz_tun: entered allmulticast mode [ 104.085478][ T6413] netlink: 176 bytes leftover after parsing attributes in process `syz.4.113'. [ 104.122099][ T6413] netlink: 'syz.4.113': attribute type 5 has an invalid length. [ 104.138383][ T6417] syz_tun: left allmulticast mode [ 104.244703][ T6416] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 104.298324][ T6416] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 104.320638][ T6416] gretap1: entered promiscuous mode [ 104.333992][ T6416] gretap1: entered allmulticast mode [ 104.529273][ T6440] netlink: 104 bytes leftover after parsing attributes in process `syz.0.122'. [ 104.637795][ T6440] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.646499][ T6440] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.111227][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.128'. [ 105.121644][ T6473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.128'. [ 105.689985][ T6485] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.772132][ T6492] bond_slave_0: entered promiscuous mode [ 105.778481][ T6492] bond_slave_1: entered promiscuous mode [ 105.785610][ T6499] netlink: 244 bytes leftover after parsing attributes in process `syz.4.133'. [ 105.816387][ T6492] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 105.856983][ T6492] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 105.877713][ T6496] bond0: option ad_select: unable to set because the bond device is up [ 106.123998][ T6513] netlink: 'syz.0.138': attribute type 1 has an invalid length. [ 106.241454][ T5928] IPVS: starting estimator thread 0... [ 106.353542][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.139'. [ 106.415748][ T6521] IPVS: using max 25 ests per chain, 60000 per kthread [ 106.431289][ T6513] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.501995][ T6532] netlink: 24 bytes leftover after parsing attributes in process `syz.1.143'. [ 106.788272][ T6545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.929242][ T6547] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.080004][ T6551] bond_slave_0: entered promiscuous mode [ 107.085786][ T6551] bond_slave_1: entered promiscuous mode [ 107.121624][ T6551] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 107.134837][ T6551] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 107.149859][ T6554] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.365503][ T6563] tipc: Started in network mode [ 107.380097][ T6563] tipc: Node identity e2b4d9b45418, cluster identity 4711 [ 107.423675][ T6563] tipc: Enabled bearer , priority 0 [ 107.472975][ T6565] syzkaller0: entered promiscuous mode [ 107.483317][ T6565] syzkaller0: entered allmulticast mode [ 107.532456][ T6569] tipc: Resetting bearer [ 107.582875][ T6579] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 107.618503][ T6579] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 107.751214][ T6562] tipc: Resetting bearer [ 107.783251][ T6562] tipc: Disabling bearer [ 107.907507][ T6589] netlink: 'syz.0.157': attribute type 1 has an invalid length. [ 108.183506][ T6606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.160'. [ 108.223730][ T6612] netlink: 'syz.4.162': attribute type 2 has an invalid length. [ 108.233947][ T6612] netlink: 'syz.4.162': attribute type 1 has an invalid length. [ 108.340686][ T6612] bond1: entered promiscuous mode [ 108.346440][ T6612] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.518451][ T6616] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.542495][ T6616] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 108.554350][ T6616] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 108.590051][ T6616] bond1: (slave wireguard0): making interface the new active one [ 108.604746][ T6616] wireguard0: entered promiscuous mode [ 108.613232][ T6616] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 108.633770][ T6630] netlink: 'syz.0.165': attribute type 1 has an invalid length. [ 108.887541][ T6638] netlink: 16 bytes leftover after parsing attributes in process `syz.1.169'. [ 109.216331][ T6655] tipc: Enabling of bearer rejected, failed to enable media [ 109.334004][ T6660] netlink: 2 bytes leftover after parsing attributes in process `syz.1.173'. [ 109.350425][ T6658] netlink: 'syz.3.175': attribute type 2 has an invalid length. [ 109.353489][ T6660] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.173'. [ 109.365499][ T6658] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.175'. [ 109.402560][ T6658] nbd: must specify a device to reconfigure [ 109.591873][ T6670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.178'. [ 109.641621][ T6671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.178'. [ 109.687804][ T6673] netlink: 72 bytes leftover after parsing attributes in process `syz.3.179'. [ 109.717713][ T6670] 8021q: adding VLAN 0 to HW filter on device bond2 [ 109.737710][ T6671] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 110.423395][ T6708] netlink: 2 bytes leftover after parsing attributes in process `syz.0.188'. [ 110.499321][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.190'. [ 110.613082][ T6712] netlink: 'syz.4.190': attribute type 1 has an invalid length. [ 110.641070][ T6712] netlink: 'syz.4.190': attribute type 2 has an invalid length. [ 110.876573][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.194'. [ 110.932531][ T6734] netlink: 'syz.1.197': attribute type 3 has an invalid length. [ 110.990660][ T6734] netlink: 'syz.1.197': attribute type 1 has an invalid length. [ 111.077645][ T6738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.198'. [ 111.338322][ T6750] netlink: 'syz.2.203': attribute type 1 has an invalid length. [ 111.390342][ T6755] ip6tnl1: entered promiscuous mode [ 111.399325][ T6755] ip6tnl1: entered allmulticast mode [ 111.497420][ T6750] bond2 (unregistering): Released all slaves [ 111.519404][ T6765] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 111.873555][ T6775] sctp: [Deprecated]: syz.3.208 (pid 6775) Use of struct sctp_assoc_value in delayed_ack socket option. [ 111.873555][ T6775] Use struct sctp_sack_info instead [ 112.155370][ T5187] Bluetooth: hci4: command tx timeout [ 112.349633][ T6796] openvswitch: netlink: Missing key (keys=40, expected=100) [ 112.430160][ T6778] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.528797][ T6779] bond2: (slave veth3): Enslaving as an active interface with a down link [ 112.927308][ T6818] validate_nla: 8 callbacks suppressed [ 112.927329][ T6818] netlink: 'syz.2.219': attribute type 2 has an invalid length. [ 113.007600][ T6813] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 113.021184][ T6830] netlink: 'syz.1.222': attribute type 1 has an invalid length. [ 113.182092][ T6836] netlink: 'syz.2.223': attribute type 10 has an invalid length. [ 113.238509][ T6831] 8021q: adding VLAN 0 to HW filter on device bond4 [ 113.252814][ T6831] bond3: (slave bond4): making interface the new active one [ 113.264686][ T6831] bond3: (slave bond4): Enslaving as an active interface with an up link [ 113.290092][ T6836] veth1_macvtap: left promiscuous mode [ 113.545942][ T6852] TCP: TCP_TX_DELAY enabled [ 114.094059][ T6882] netlink: 'syz.1.236': attribute type 1 has an invalid length. [ 114.175532][ T6881] sctp: [Deprecated]: syz.3.235 (pid 6881) Use of int in max_burst socket option deprecated. [ 114.175532][ T6881] Use struct sctp_assoc_value instead [ 114.188916][ T6882] 8021q: adding VLAN 0 to HW filter on device bond5 [ 114.232666][ T6886] vlan2: entered promiscuous mode [ 114.264329][ T6886] bond5: entered promiscuous mode [ 114.326703][ T6886] vlan2: entered allmulticast mode [ 114.357785][ T6894] netlink: 'syz.2.238': attribute type 1 has an invalid length. [ 114.381963][ T6886] bond5: entered allmulticast mode [ 114.557238][ T6897] __nla_validate_parse: 13 callbacks suppressed [ 114.557259][ T6897] netlink: 24 bytes leftover after parsing attributes in process `syz.3.241'. [ 114.578856][ T6899] netlink: 104 bytes leftover after parsing attributes in process `syz.4.242'. [ 114.703122][ T6904] 8021q: adding VLAN 0 to HW filter on device bond2 [ 114.713286][ T6897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'. [ 114.827680][ T6918] netlink: 'syz.2.247': attribute type 2 has an invalid length. [ 114.835317][ T6909] bond_slave_0: entered promiscuous mode [ 114.841272][ T6909] bond_slave_1: entered promiscuous mode [ 114.854889][ T6909] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 114.899833][ T6909] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 115.165551][ T6926] netlink: 'syz.0.251': attribute type 10 has an invalid length. [ 115.173354][ T6926] netlink: 40 bytes leftover after parsing attributes in process `syz.0.251'. [ 115.309975][ T6926] team0: Port device geneve0 added [ 115.470298][ T6943] netlink: 'syz.4.256': attribute type 1 has an invalid length. [ 115.522971][ T6943] netlink: 220 bytes leftover after parsing attributes in process `syz.4.256'. [ 115.565643][ T6943] netlink: 'syz.4.256': attribute type 1 has an invalid length. [ 115.673944][ T6952] netlink: 40 bytes leftover after parsing attributes in process `syz.1.259'. [ 115.795018][ T6959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.261'. [ 115.846068][ T6957] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 115.874777][ T6960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.261'. [ 116.312753][ T6977] dvmrp0: entered allmulticast mode [ 116.354977][ T6987] dvmrp0: left allmulticast mode [ 116.747982][ T7007] tunl0: entered promiscuous mode [ 116.758639][ T7007] netlink: 'syz.1.275': attribute type 3 has an invalid length. [ 116.774827][ T7007] netlink: 9 bytes leftover after parsing attributes in process `syz.1.275'. [ 116.867686][ T7016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.276'. [ 117.131324][ T6013] IPVS: starting estimator thread 0... [ 117.201705][ T7011] syzkaller1: entered promiscuous mode [ 117.226977][ T7011] syzkaller1: entered allmulticast mode [ 117.269984][ T7028] IPVS: using max 32 ests per chain, 76800 per kthread [ 117.329769][ T7035] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 118.128374][ T7074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.136455][ T7074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.170567][ T7074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.186065][ T7074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.258415][ T7085] validate_nla: 1 callbacks suppressed [ 118.258435][ T7085] netlink: 'syz.2.292': attribute type 83 has an invalid length. [ 119.947279][ T7162] unsupported nlmsg_type 40 [ 120.296388][ T7183] __nla_validate_parse: 5 callbacks suppressed [ 120.296408][ T7183] netlink: 20 bytes leftover after parsing attributes in process `syz.3.312'. [ 120.545001][ T7197] netlink: 'syz.2.315': attribute type 21 has an invalid length. [ 120.633556][ T7197] netlink: 156 bytes leftover after parsing attributes in process `syz.2.315'. [ 121.187763][ T7228] netlink: 'syz.0.321': attribute type 33 has an invalid length. [ 121.244505][ T7220] netlink: 36 bytes leftover after parsing attributes in process `syz.2.318'. [ 121.278424][ T7220] netlink: 36 bytes leftover after parsing attributes in process `syz.2.318'. [ 121.398151][ T7220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.318'. [ 121.511948][ T7241] netlink: 'syz.3.323': attribute type 3 has an invalid length. [ 121.544158][ T7220] bridge3: entered promiscuous mode [ 121.584569][ T7220] bridge3: entered allmulticast mode [ 122.410448][ T7269] syz.3.329 (7269) used greatest stack depth: 17864 bytes left [ 123.014343][ T7303] netlink: 48 bytes leftover after parsing attributes in process `syz.0.335'. [ 123.432569][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.339'. [ 123.618248][ T7326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.342'. [ 124.280449][ T7341] tipc: Enabled bearer , priority 0 [ 124.302348][ T7342] syzkaller0: entered promiscuous mode [ 124.312574][ T7342] syzkaller0: entered allmulticast mode [ 124.402293][ T7336] tipc: Resetting bearer [ 124.486195][ T7333] tipc: Resetting bearer [ 124.594238][ T7333] tipc: Disabling bearer [ 124.628826][ T7355] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.670215][ T7354] bond_slave_0: entered promiscuous mode [ 124.676182][ T7354] bond_slave_1: entered promiscuous mode [ 124.697664][ T7354] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 124.711878][ T7354] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 125.124485][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.352'. [ 125.178995][ T7396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.237597][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.352'. [ 125.273124][ T7396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.365408][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.352'. [ 125.398356][ T7396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.440645][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.352'. [ 125.491418][ T7396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.517601][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.352'. [ 125.527400][ T7396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.658340][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.352'. [ 125.702014][ T7396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.781240][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.352'. [ 125.833346][ T7396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.131950][ T7436] bond1: option mode: unable to set because the bond device has slaves [ 126.215879][ T7436] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 126.632013][ T7461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.372'. [ 126.731281][ T7469] netlink: 96 bytes leftover after parsing attributes in process `syz.3.374'. [ 126.812623][ T7469] vlan2: entered allmulticast mode [ 126.823390][ T7469] gretap0: entered allmulticast mode [ 127.384663][ T7500] bond1: option mode: unable to set because the bond device has slaves [ 127.474145][ T7500] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 127.503619][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.383'. [ 127.926458][ T7523] netlink: 56 bytes leftover after parsing attributes in process `syz.1.390'. [ 127.946161][ T7523] netlink: 56 bytes leftover after parsing attributes in process `syz.1.390'. [ 128.559266][ T5187] Bluetooth: hci4: link tx timeout [ 128.565953][ T5187] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.731953][ T5869] Bluetooth: hci4: link tx timeout [ 128.743952][ T5869] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.755585][ T5869] Bluetooth: hci4: link tx timeout [ 128.762150][ T5869] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.879669][ T7564] syzkaller1: entered promiscuous mode [ 128.885334][ T7564] syzkaller1: entered allmulticast mode [ 128.921212][ T7564] tipc: Started in network mode [ 128.931037][ T7564] tipc: Node identity 36570120df75, cluster identity 4711 [ 128.967271][ T7564] tipc: Enabled bearer , priority 0 [ 129.178246][ T7563] tipc: Disabling bearer [ 129.595354][ T5869] Bluetooth: hci4: command tx timeout [ 129.613957][ T7596] veth1_to_bond: entered allmulticast mode [ 129.649938][ T7592] veth1_to_bond: left allmulticast mode [ 129.731039][ T7600] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20001 [ 130.060385][ T7622] sctp: [Deprecated]: syz.4.422 (pid 7622) Use of struct sctp_assoc_value in delayed_ack socket option. [ 130.060385][ T7622] Use struct sctp_sack_info instead [ 130.130031][ T7625] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 131.233278][ T7675] netlink: 'syz.4.433': attribute type 1 has an invalid length. [ 131.349410][ T7683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.468961][ T7689] netlink: 'syz.1.438': attribute type 1 has an invalid length. [ 131.497566][ T7689] netlink: 'syz.1.438': attribute type 1 has an invalid length. [ 131.528217][ T7694] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 131.675319][ T5187] Bluetooth: hci4: command 0x0406 tx timeout [ 131.744121][ T7706] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.872713][ T7709] netlink: 'syz.3.445': attribute type 11 has an invalid length. [ 132.210035][ T7728] bond1: option mode: unable to set because the bond device has slaves [ 132.270944][ T7728] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 132.311435][ T7731] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 133.123880][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.131200][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.144480][ T1303] aoe: packet could not be sent on ve. consider increasing tx_queue_len [ 133.308834][ T7775] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 133.598535][ T7795] netlink: 'syz.3.470': attribute type 6 has an invalid length. [ 133.609208][ T7795] netlink: 'syz.3.470': attribute type 6 has an invalid length. [ 134.707871][ T7824] netlink: 'syz.2.476': attribute type 2 has an invalid length. [ 134.768850][ T7829] __nla_validate_parse: 10 callbacks suppressed [ 134.768874][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.478'. [ 134.787517][ T7829] netlink: 184 bytes leftover after parsing attributes in process `syz.4.478'. [ 135.021145][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.483'. [ 135.181206][ T7848] netlink: 44 bytes leftover after parsing attributes in process `syz.3.483'. [ 135.264513][ T7857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.486'. [ 135.754334][ T7878] netlink: 'syz.2.493': attribute type 29 has an invalid length. [ 136.309128][ T7914] netlink: 204 bytes leftover after parsing attributes in process `syz.3.500'. [ 136.339258][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.505'. [ 136.521091][ T7922] tipc: Can't bind to reserved service type 0 [ 136.554964][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.505'. [ 136.883511][ T5928] IPVS: starting estimator thread 0... [ 136.923176][ T7936] netlink: 156 bytes leftover after parsing attributes in process `syz.0.509'. [ 136.997315][ T7935] IPVS: using max 26 ests per chain, 62400 per kthread [ 137.010153][ T7940] netlink: 'syz.4.508': attribute type 21 has an invalid length. [ 137.029436][ T7940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.508'. [ 137.716182][ T7979] syzkaller0: entered promiscuous mode [ 137.721856][ T7979] syzkaller0: entered allmulticast mode [ 138.982365][ T8046] netlink: 'syz.4.535': attribute type 29 has an invalid length. [ 140.443467][ T8098] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 140.635625][ T44] IPVS: starting estimator thread 0... [ 140.682863][ T8102] netlink: 'syz.2.548': attribute type 39 has an invalid length. [ 140.736915][ T8105] IPVS: using max 23 ests per chain, 55200 per kthread [ 140.858952][ T8112] Bluetooth: MGMT ver 1.23 [ 140.950044][ T8120] netlink: 'syz.3.554': attribute type 1 has an invalid length. [ 140.964678][ T8119] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 141.019302][ T8125] __nla_validate_parse: 3 callbacks suppressed [ 141.019322][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.551'. [ 141.268957][ T8120] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.371253][ T8124] bond2: (slave wlan0): Enslaving as an active interface with a down link [ 141.410806][ T8126] vlan3: entered allmulticast mode [ 141.420990][ T8126] veth1: entered allmulticast mode [ 141.432008][ T8126] veth1: entered promiscuous mode [ 141.444956][ T8126] veth1: left promiscuous mode [ 141.460443][ T8126] bond2: (slave vlan3): making interface the new active one [ 141.469053][ T8126] bond2: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 141.487842][ T8126] veth1: entered promiscuous mode [ 141.495807][ T8126] vlan3: entered promiscuous mode [ 141.502731][ T8126] bond2: (slave vlan3): Enslaving as an active interface with an up link [ 142.194247][ T8179] delete_channel: no stack [ 142.243953][ T8181] netlink: 96 bytes leftover after parsing attributes in process `syz.3.571'. [ 142.274996][ T8181] netlink: 'syz.3.571': attribute type 32 has an invalid length. [ 142.285818][ T8181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 142.341051][ T8181] (unnamed net_device) (uninitialized): option coupled_control: invalid value (144) [ 142.779645][ T8175] netlink: 'syz.4.569': attribute type 83 has an invalid length. [ 143.003738][ T8203] netlink: 'syz.2.579': attribute type 10 has an invalid length. [ 143.026630][ T8203] netlink: 40 bytes leftover after parsing attributes in process `syz.2.579'. [ 143.034546][ T8200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'. [ 143.090081][ T8203] team0: Port device geneve0 added [ 143.278716][ T8210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.581'. [ 143.660666][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.585'. [ 143.983894][ T8239] : entered promiscuous mode [ 144.766223][ T8274] sctp: [Deprecated]: syz.1.595 (pid 8274) Use of struct sctp_assoc_value in delayed_ack socket option. [ 144.766223][ T8274] Use struct sctp_sack_info instead [ 144.874966][ T8273] netlink: 40 bytes leftover after parsing attributes in process `syz.1.595'. [ 144.899295][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.597'. [ 145.167519][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.601'. [ 145.293217][ T8300] tipc: Enabling of bearer rejected, failed to enable media [ 145.350838][ T8299] netlink: 'syz.1.602': attribute type 22 has an invalid length. [ 145.460254][ T8317] netlink: 'syz.4.608': attribute type 6 has an invalid length. [ 145.476211][ T8299] netlink: 'syz.1.602': attribute type 22 has an invalid length. [ 145.560583][ T3471] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.611205][ T8314] macvlan3: entered promiscuous mode [ 145.644658][ T8314] macvlan3: entered allmulticast mode [ 145.668902][ T8314] bond3: entered promiscuous mode [ 145.697119][ T8314] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 145.759177][ T8314] bond3: left promiscuous mode [ 145.840293][ T5968] IPVS: starting estimator thread 0... [ 145.851207][ T8334] IPVS: set_ctl: invalid protocol: 0 172.30.1.1:20004 [ 145.906042][ T3471] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.940505][ T3471] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.976913][ T8333] IPVS: using max 27 ests per chain, 64800 per kthread [ 146.042221][ T3471] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.072462][ T8342] __nla_validate_parse: 3 callbacks suppressed [ 146.072482][ T8342] netlink: 16 bytes leftover after parsing attributes in process `syz.2.614'. [ 146.171882][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.210431][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.223853][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.252506][ T8351] netlink: 84 bytes leftover after parsing attributes in process `syz.1.617'. [ 146.339362][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.478754][ T8366] netlink: 'syz.3.621': attribute type 10 has an invalid length. [ 146.518653][ T8368] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 146.579301][ T8372] netlink: 56 bytes leftover after parsing attributes in process `syz.1.623'. [ 146.692031][ T8372] syzkaller1: entered promiscuous mode [ 146.720053][ T8372] syzkaller1: entered allmulticast mode [ 146.783931][ T8380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.626'. [ 146.833090][ T8384] netlink: 24 bytes leftover after parsing attributes in process `syz.4.627'. [ 147.097679][ T8390] netlink: 'syz.4.627': attribute type 2 has an invalid length. [ 147.706772][ T8420] netlink: 'syz.2.638': attribute type 1 has an invalid length. [ 147.714477][ T8420] netlink: 184 bytes leftover after parsing attributes in process `syz.2.638'. [ 147.760245][ T8420] netlink: 'syz.2.638': attribute type 1 has an invalid length. [ 148.443474][ T8455] netlink: 40 bytes leftover after parsing attributes in process `syz.2.647'. [ 148.503456][ T8455] netlink: 40 bytes leftover after parsing attributes in process `syz.2.647'. [ 148.528628][ T8458] netlink: 40 bytes leftover after parsing attributes in process `syz.2.647'. [ 148.588662][ T8458] netlink: 40 bytes leftover after parsing attributes in process `syz.2.647'. [ 148.886756][ T8477] syzkaller0: entered promiscuous mode [ 148.902754][ T8477] syzkaller0: entered allmulticast mode [ 149.711077][ T8508] netlink: 'syz.4.662': attribute type 1 has an invalid length. [ 149.997172][ T8524] netlink: 'syz.3.665': attribute type 2 has an invalid length. [ 151.191943][ T8568] __nla_validate_parse: 7 callbacks suppressed [ 151.191972][ T8568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.680'. [ 151.247678][ T8568] netlink: 50 bytes leftover after parsing attributes in process `syz.2.680'. [ 151.259856][ T8568] netlink: 50 bytes leftover after parsing attributes in process `syz.2.680'. [ 151.319942][ T8579] netlink: 'syz.3.685': attribute type 1 has an invalid length. [ 151.676646][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.710501][ T8582] pim6reg1: entered promiscuous mode [ 151.724453][ T8582] pim6reg1: entered allmulticast mode [ 151.883440][ T8602] netlink: 'syz.3.692': attribute type 21 has an invalid length. [ 151.923311][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.692'. [ 151.934596][ T8609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.693'. [ 152.194097][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.697'. [ 152.591650][ T8637] netlink: 'syz.0.700': attribute type 2 has an invalid length. [ 152.666439][ T8637] netlink: 244 bytes leftover after parsing attributes in process `syz.0.700'. [ 152.696256][ T8624] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.738510][ T8628] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 152.829103][ T8645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.702'. [ 152.960205][ T1111] vlan3: left promiscuous mode [ 153.086542][ T8650] netlink: 252 bytes leftover after parsing attributes in process `syz.2.704'. [ 153.189549][ T8652] netlink: 'syz.4.705': attribute type 10 has an invalid length. [ 153.442601][ T8665] netlink: 28 bytes leftover after parsing attributes in process `syz.2.710'. [ 153.732755][ T8685] bridge4: entered promiscuous mode [ 153.747444][ T8685] bridge4: entered allmulticast mode [ 154.768842][ T8703] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 155.100478][ T8749] sctp: [Deprecated]: syz.2.726 (pid 8749) Use of int in max_burst socket option. [ 155.100478][ T8749] Use struct sctp_assoc_value instead [ 155.447829][ T8766] pimreg: entered allmulticast mode [ 155.504619][ T8770] ip6gre1: entered allmulticast mode [ 155.723360][ T8788] netlink: 'syz.3.737': attribute type 2 has an invalid length. [ 155.756593][ T8786] netlink: 'syz.2.736': attribute type 6 has an invalid length. [ 156.264138][ T8818] __nla_validate_parse: 9 callbacks suppressed [ 156.264158][ T8818] netlink: 76 bytes leftover after parsing attributes in process `syz.1.745'. [ 156.383842][ T8826] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.748'. [ 156.436343][ T8826] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 156.445846][ T8826] openvswitch: netlink: Message has 6332 unknown bytes. [ 156.859844][ T8843] syzkaller0: entered promiscuous mode [ 156.881394][ T8843] syzkaller0: entered allmulticast mode [ 157.121934][ T8858] sit0: entered promiscuous mode [ 157.159744][ T8858] netlink: 'syz.2.755': attribute type 1 has an invalid length. [ 157.180311][ T8858] netlink: 1 bytes leftover after parsing attributes in process `syz.2.755'. [ 157.340647][ T8870] gre0: entered promiscuous mode [ 157.723016][ T8884] netlink: 'syz.2.763': attribute type 4 has an invalid length. [ 157.856559][ T8887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.764'. [ 157.886313][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.764'. [ 157.906181][ T8890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.766'. [ 157.922035][ T8887] netlink: 'syz.4.764': attribute type 8 has an invalid length. [ 157.936943][ T8891] netlink: 'syz.4.764': attribute type 8 has an invalid length. [ 157.958349][ T8893] netlink: 2016 bytes leftover after parsing attributes in process `syz.2.767'. [ 157.976470][ T8893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.021011][ T8893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.037795][ T8893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.047236][ T8893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.553808][ T8918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.774'. [ 158.604264][ T8917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.775'. [ 158.689676][ T8922] tipc: Started in network mode [ 158.717306][ T8922] tipc: Node identity f6943626a4a5, cluster identity 4711 [ 158.727244][ T8922] tipc: Enabled bearer , priority 0 [ 158.796784][ T8922] syzkaller0: entered promiscuous mode [ 158.824523][ T8922] syzkaller0: entered allmulticast mode [ 158.872095][ T8922] tipc: Resetting bearer [ 159.013208][ T8921] tipc: Resetting bearer [ 159.035047][ T8933] netlink: 'syz.1.780': attribute type 10 has an invalid length. [ 159.057603][ T8921] tipc: Disabling bearer [ 159.066581][ T8930] netlink: 20 bytes leftover after parsing attributes in process `syz.2.779'. [ 159.100327][ T8934] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.161302][ T8933] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 159.186024][ T8933] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 159.207707][ T8938] bond_slave_0: entered promiscuous mode [ 159.213668][ T8938] bond_slave_1: entered promiscuous mode [ 159.220696][ T8938] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 159.232042][ T8938] bond3: (slave macvlan2): Enslaving as a backup interface with an up link [ 159.310969][ T8941] netlink: 'syz.0.782': attribute type 29 has an invalid length. [ 159.322979][ T8937] netlink: 'syz.0.782': attribute type 29 has an invalid length. [ 159.343394][ T8946] netlink: 'syz.3.783': attribute type 11 has an invalid length. [ 159.509536][ T8960] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.849192][ T8983] bridge_slave_1: left allmulticast mode [ 159.868405][ T8983] bridge_slave_1: left promiscuous mode [ 159.883389][ T8983] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.901643][ T8988] netlink: 'syz.0.796': attribute type 1 has an invalid length. [ 159.911694][ T8983] bridge_slave_0: left allmulticast mode [ 159.918983][ T8983] bridge_slave_0: left promiscuous mode [ 159.925646][ T8983] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.811795][ T9039] vlan4: entered promiscuous mode [ 160.828519][ T9039] bridge0: entered promiscuous mode [ 161.723900][ T9065] __nla_validate_parse: 7 callbacks suppressed [ 161.723923][ T9065] netlink: 32 bytes leftover after parsing attributes in process `syz.3.819'. [ 162.297636][ T9077] netlink: 32 bytes leftover after parsing attributes in process `syz.3.820'. [ 162.310757][ T9077] netlink: 'syz.3.820': attribute type 2 has an invalid length. [ 162.366408][ T9081] bond0: Device is already in use. [ 162.385369][ T9079] netlink: 'syz.1.824': attribute type 1 has an invalid length. [ 162.550915][ T9091] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.826'. [ 162.622719][ T9093] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 162.748688][ T9100] bond1: option mode: unable to set because the bond device has slaves [ 162.802638][ T9100] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 163.037349][ T9108] netlink: 'syz.2.831': attribute type 1 has an invalid length. [ 163.156998][ T9120] netlink: 80 bytes leftover after parsing attributes in process `syz.2.831'. [ 163.189060][ T9120] netlink: 80 bytes leftover after parsing attributes in process `syz.2.831'. [ 163.223725][ T9108] 8021q: adding VLAN 0 to HW filter on device bond4 [ 163.258275][ T9112] macsec1: entered promiscuous mode [ 163.263862][ T9112] macsec1: entered allmulticast mode [ 163.334194][ T9122] tipc: Started in network mode [ 163.349225][ T9122] tipc: Node identity e0000002, cluster identity 4711 [ 163.367578][ T9122] tipc: Enabling of bearer rejected, failed to enable media [ 163.450762][ T9130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.837'. [ 163.471408][ T9130] netlink: 'syz.3.837': attribute type 3 has an invalid length. [ 163.514432][ T9134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.837'. [ 163.529138][ T9133] netlink: 100 bytes leftover after parsing attributes in process `syz.0.838'. [ 163.546763][ T9134] netlink: 'syz.3.837': attribute type 3 has an invalid length. [ 163.558036][ T9133] team0: Device ip6gre1 is of different type [ 164.152305][ T9161] 8021q: adding VLAN 0 to HW filter on device bond4 [ 164.213937][ T9161] bond3: (slave bond4): making interface the new active one [ 164.249595][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.848'. [ 164.259997][ T9161] bond3: (slave bond4): Enslaving as an active interface with an up link [ 164.471326][ T9185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.850'. [ 164.553459][ T9185] macvtap1: entered promiscuous mode [ 164.559185][ T9185] vlan0: entered promiscuous mode [ 164.576909][ T9185] macvtap1: entered allmulticast mode [ 164.582457][ T9185] vlan0: entered allmulticast mode [ 164.589635][ T9185] veth0_vlan: entered allmulticast mode [ 164.631232][ T9198] tipc: Enabled bearer , priority 0 [ 165.091381][ T9227] Dead loop on virtual device ip6_vti0, fix it urgently! [ 165.141214][ T9227] Dead loop on virtual device ip6_vti0, fix it urgently! [ 165.166975][ T9230] !: renamed from dummy0 (while UP) [ 165.186811][ T9227] Dead loop on virtual device ip6_vti0, fix it urgently! [ 165.221982][ T9227] Dead loop on virtual device ip6_vti0, fix it urgently! [ 165.235725][ T9235] validate_nla: 1 callbacks suppressed [ 165.235745][ T9235] netlink: 'syz.4.861': attribute type 1 has an invalid length. [ 165.263277][ T9227] Dead loop on virtual device ip6_vti0, fix it urgently! [ 165.300987][ T9232] can: request_module (can-proto-3) failed. [ 165.309410][ T9227] Dead loop on virtual device ip6_vti0, fix it urgently! [ 165.342998][ T9227] Dead loop on virtual device ip6_vti0, fix it urgently! [ 165.757717][ T44] tipc: Node number set to 3911319840 [ 167.051769][ T9311] __nla_validate_parse: 6 callbacks suppressed [ 167.051789][ T9311] netlink: 44 bytes leftover after parsing attributes in process `syz.0.881'. [ 167.142951][ T9318] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 167.175885][ T9318] netlink: 48 bytes leftover after parsing attributes in process `syz.1.882'. [ 167.197313][ T9318] netlink: 60 bytes leftover after parsing attributes in process `syz.1.882'. [ 167.351230][ T9335] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 167.491306][ T9341] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 167.622850][ T9347] sctp: [Deprecated]: syz.0.889 (pid 9347) Use of struct sctp_assoc_value in delayed_ack socket option. [ 167.622850][ T9347] Use struct sctp_sack_info instead [ 167.739249][ T9352] sctp: [Deprecated]: syz.1.890 (pid 9352) Use of int in maxseg socket option. [ 167.739249][ T9352] Use struct sctp_assoc_value instead [ 168.440915][ T9376] netlink: 204 bytes leftover after parsing attributes in process `syz.1.895'. [ 168.769516][ T9398] netlink: 76 bytes leftover after parsing attributes in process `syz.1.901'. [ 168.839195][ T9402] syz_tun: entered allmulticast mode [ 169.415030][ T9412] syz_tun: left allmulticast mode [ 170.397806][ T9441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.909'. [ 170.442584][ T9442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.909'. [ 171.245701][ T9462] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 171.447489][ T9441] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 171.449221][ T9442] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 171.819009][ T9484] netlink: 52 bytes leftover after parsing attributes in process `syz.1.917'. [ 172.062319][ T9495] netlink: 248 bytes leftover after parsing attributes in process `syz.1.920'. [ 172.096623][ T9495] netlink: 52 bytes leftover after parsing attributes in process `syz.1.920'. [ 172.121923][ T9497] tipc: Enabled bearer , priority 0 [ 172.144018][ T9497] syzkaller0: entered promiscuous mode [ 172.152429][ T9497] syzkaller0: entered allmulticast mode [ 172.181291][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880301e5000: rx timeout, send abort [ 172.191893][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b43d000: rx timeout, send abort [ 172.205768][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880301e5000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 172.221214][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805b43d000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 172.430731][ T9513] netlink: 176 bytes leftover after parsing attributes in process `syz.0.923'. [ 173.061303][ T9493] tipc: Resetting bearer [ 173.168287][ T9493] tipc: Disabling bearer [ 189.136859][ T5187] Bluetooth: hci4: link tx timeout [ 189.142031][ T5187] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 191.197095][ T5187] Bluetooth: hci4: command 0x0406 tx timeout [ 194.561171][ T1303] aoe: packet could not be sent on ve. consider increasing tx_queue_len [ 196.982128][ T9693] vlan3: entered promiscuous mode [ 196.996774][ T9693] bridge0: entered promiscuous mode [ 197.131372][ T9702] netlink: 165 bytes leftover after parsing attributes in process `syz.4.937'. [ 197.204786][ T9704] netlink: 'syz.1.938': attribute type 1 has an invalid length. [ 197.394924][ T9713] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 197.434132][ T9713] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 197.450396][ T9719] netlink: 40 bytes leftover after parsing attributes in process `syz.0.941'. [ 197.522448][ T9704] gretap2: entered promiscuous mode [ 197.540369][ T9704] bond6: (slave gretap2): making interface the new active one [ 197.549877][ T9704] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 197.617152][ T9722] macvlan0: entered promiscuous mode [ 197.622817][ T9722] macvlan0: entered allmulticast mode [ 197.659852][ T9722] bond6: entered promiscuous mode [ 197.660593][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.942'. [ 197.673714][ T9722] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 197.748787][ T9722] bond6: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 197.792041][ T9722] bond6: left promiscuous mode [ 197.910945][ T9740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.946'. [ 198.189501][ T9753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.948'. [ 198.547362][ T9763] netlink: 332 bytes leftover after parsing attributes in process `syz.4.952'. [ 198.727834][ T9771] netlink: 'syz.4.954': attribute type 29 has an invalid length. [ 198.736123][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.954'. [ 198.810334][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.955'. [ 198.823145][ T9777] netlink: 'syz.4.955': attribute type 15 has an invalid length. [ 198.831354][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.955'. [ 198.849024][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 198.849191][ T9777] netlink: 'syz.4.955': attribute type 15 has an invalid length. [ 198.860759][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 198.866951][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.955'. [ 198.876544][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 198.953918][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 199.127378][ T9783] netlink: 'syz.1.957': attribute type 32 has an invalid length. [ 199.208863][ T9787] bond1: option mode: unable to set because the bond device has slaves [ 199.521544][ T9803] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 199.584306][ T9803] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 199.909718][ T9820] dvmrp0: entered allmulticast mode [ 199.925820][ T9827] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 200.085291][ T9830] bond1: option mode: unable to set because the bond device has slaves [ 200.330091][ T9845] netlink: 'syz.1.979': attribute type 1 has an invalid length. [ 200.792418][ T9870] tunl0: entered promiscuous mode [ 200.824371][ T9870] netlink: 'syz.3.986': attribute type 3 has an invalid length. [ 201.076627][ T9869] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.086010][ T9869] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.127742][ T9869] bond_slave_0: left promiscuous mode [ 201.133598][ T9869] bond_slave_1: left promiscuous mode [ 201.140022][ T9869] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 201.272647][ T9869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.297998][ T9869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.614857][ T1111] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.645462][ T1111] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.678322][ T9901] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 201.739532][ T9903] batadv_slave_0: entered promiscuous mode [ 201.786185][ T1111] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.830544][ T1111] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.864230][ T9902] batadv_slave_0: left promiscuous mode [ 201.912493][ T9908] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 201.942772][ T1111] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.960787][ T1111] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.986346][ T1111] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.017689][ T1111] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.136311][ T9930] __nla_validate_parse: 9 callbacks suppressed [ 202.136332][ T9930] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1000'. [ 202.238029][ T9932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.278872][ T9928] syzkaller1: entered promiscuous mode [ 202.312068][ T9928] syzkaller1: entered allmulticast mode [ 202.332913][ T9928] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1001'. [ 202.613727][ T9957] netlink: 'syz.4.1010': attribute type 1 has an invalid length. [ 202.622358][ T9952] netlink: 'syz.3.1008': attribute type 9 has an invalid length. [ 202.643475][ T9957] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1010'. [ 202.680183][ T9960] bond2: option mode: unable to set because the bond device has slaves [ 202.690032][ T9955] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1010'. [ 202.743736][ T9965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1013'. [ 203.212820][ T9988] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1020'. [ 203.275975][ T9982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1020'. [ 203.801466][T10013] bond1: option mode: unable to set because the bond device has slaves [ 203.810359][T10014] ve: renamed from ipvlan1 [ 204.028531][T10021] tipc: Enabled bearer , priority 0 [ 204.231579][T10021] syzkaller0: entered promiscuous mode [ 204.256367][T10021] syzkaller0: entered allmulticast mode [ 204.268428][T10021] tipc: Resetting bearer [ 204.302648][T10018] tipc: Resetting bearer [ 204.316563][T10040] netlink: 'syz.3.1033': attribute type 21 has an invalid length. [ 204.578422][T10055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.045587][ T9889] tipc: Node number set to 3064781236 [ 205.963016][T10018] tipc: Disabling bearer [ 205.983941][T10053] bridge_slave_0: left allmulticast mode [ 205.990292][T10053] bridge_slave_0: left promiscuous mode [ 205.997061][T10053] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.013463][T10053] bridge_slave_1: left allmulticast mode [ 206.025781][T10053] bridge_slave_1: left promiscuous mode [ 206.031671][T10053] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.058349][T10053] bond0: (slave bond_slave_0): Releasing backup interface [ 206.069021][T10053] bond_slave_0: left promiscuous mode [ 206.082413][T10053] bond0: (slave bond_slave_1): Releasing backup interface [ 206.094872][T10053] bond_slave_1: left promiscuous mode [ 206.113368][T10053] team0: Port device team_slave_0 removed [ 206.128749][T10053] team0: Port device team_slave_1 removed [ 206.136652][T10053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.144167][T10053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.154413][T10053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.162143][T10053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.182584][T10053] bond1: (slave wireguard0): Releasing backup interface [ 206.190272][T10053] wireguard0: left promiscuous mode [ 206.207632][T10053] bond3: (slave macvlan2): Removing an active aggregator [ 206.216513][T10053] bond3: (slave macvlan2): Releasing backup interface [ 206.278192][T10073] bond1: option mode: unable to set because the bond device has slaves [ 206.452178][T10077] smc: net device erspan0 applied user defined pnetid SYZ0 [ 206.472515][T10082] netlink: 'syz.2.1043': attribute type 3 has an invalid length. [ 206.673805][T10090] tipc: New replicast peer: 255.126.26.206 [ 206.704818][T10090] tipc: Enabled bearer , priority 10 [ 206.750019][T10098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1049'. [ 206.770040][T10090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1045'. [ 206.878769][ T5878] Bluetooth: hci2: command 0x0406 tx timeout [ 206.886343][ T5879] Bluetooth: hci3: command 0x0406 tx timeout [ 206.893374][ T5879] Bluetooth: hci0: command 0x0406 tx timeout [ 206.895497][ T5881] Bluetooth: hci1: command 0x0406 tx timeout [ 207.183527][T10116] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 207.219294][T10116] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 207.230798][T10119] bond1: option mode: unable to set because the bond device has slaves [ 207.314958][T10126] netlink: 'syz.0.1057': attribute type 10 has an invalid length. [ 207.357182][T10126] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.403145][T10126] team_slave_0: entered promiscuous mode [ 207.409147][T10126] team_slave_1: entered promiscuous mode [ 207.414884][T10126] geneve0: entered promiscuous mode [ 207.431537][T10126] bond0: (slave team0): Enslaving as an active interface with an up link [ 207.467638][T10134] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1059'. [ 207.478150][T10134] netem: invalid attributes len -24 [ 207.483629][T10134] netem: change failed [ 207.504794][T10136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1060'. [ 207.581459][T10141] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 207.815773][ T958] tipc: Node number set to 1378956838 [ 207.819206][T10156] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1065'. [ 207.840450][T10161] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1067'. [ 207.982790][T10171] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 207.990471][T10171] IPv6: NLM_F_CREATE should be set when creating new route [ 207.990700][T10166] netlink: 'syz.3.1068': attribute type 10 has an invalid length. [ 208.092508][T10166] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 208.142389][T10166] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 208.322037][T10181] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 208.344969][T10183] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1074'. [ 208.386266][T10183] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1074'. [ 208.445056][T10189] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1076'. [ 208.588830][T10192] bond7: entered allmulticast mode [ 208.594617][T10192] 8021q: adding VLAN 0 to HW filter on device bond7 [ 208.602820][T10192] bridge0: port 3(bond7) entered blocking state [ 208.615735][T10192] bridge0: port 3(bond7) entered disabled state [ 208.625711][T10192] bond7: entered promiscuous mode [ 208.633730][T10192] bridge0: port 3(bond7) entered blocking state [ 208.640190][T10192] bridge0: port 3(bond7) entered forwarding state [ 208.783676][T10204] netlink: 'syz.3.1081': attribute type 10 has an invalid length. [ 208.839004][T10204] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1081'. [ 208.921570][T10204] team0: Port device geneve0 added [ 209.044322][T10222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1086'. [ 209.378097][ T12] bridge0: port 3(bond7) entered disabled state [ 209.404373][T10238] tipc: Enabled bearer , priority 0 [ 209.437275][T10238] syzkaller0: entered promiscuous mode [ 209.463235][T10238] syzkaller0: entered allmulticast mode [ 209.526562][T10238] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 209.589800][T10243] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 209.598548][T10238] tipc: Resetting bearer [ 209.627530][T10236] tipc: Resetting bearer [ 209.715978][T10236] tipc: Disabling bearer [ 209.720891][T10254] netlink: 'syz.2.1095': attribute type 9 has an invalid length. [ 209.736553][T10254] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.1095'. [ 209.771737][T10258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.863650][T10258] gtp0: left allmulticast mode [ 209.883113][T10258] macsec1: left allmulticast mode [ 210.592635][T10294] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 211.108743][T10317] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 211.322615][T10327] xfrm1: entered promiscuous mode [ 211.345843][T10327] xfrm1: entered allmulticast mode [ 212.438287][T10377] netlink: 'syz.2.1123': attribute type 3 has an invalid length. [ 213.133823][T10414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.209315][T10414] trusted_key: syz.2.1133 sent an empty control message without MSG_MORE. [ 213.637990][T10445] macvtap1: entered allmulticast mode [ 213.643429][T10445] bridge0: entered allmulticast mode [ 213.667993][T10445] bridge0: port 3(macvtap1) entered blocking state [ 213.674821][T10445] bridge0: port 3(macvtap1) entered disabled state [ 213.698590][T10445] bridge0: left allmulticast mode [ 214.053950][T10467] netlink: 'syz.3.1145': attribute type 1 has an invalid length. [ 214.131834][T10472] __nla_validate_parse: 7 callbacks suppressed [ 214.131856][T10472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1146'. [ 214.188356][T10477] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1144'. [ 214.568809][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1150'. [ 214.611315][T10498] wg1 speed is unknown, defaulting to 1000 [ 214.619159][T10498] wg1 speed is unknown, defaulting to 1000 [ 214.628261][T10498] wg1 speed is unknown, defaulting to 1000 [ 214.661842][T10498] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 214.741421][T10498] wg1 speed is unknown, defaulting to 1000 [ 214.751086][T10498] wg1 speed is unknown, defaulting to 1000 [ 214.763171][T10498] wg1 speed is unknown, defaulting to 1000 [ 214.778482][T10498] wg1 speed is unknown, defaulting to 1000 [ 214.821633][T10498] wg1 speed is unknown, defaulting to 1000 [ 214.857526][T10509] wg1 speed is unknown, defaulting to 1000 [ 215.069254][T10520] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1157'. [ 215.116575][T10524] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1158'. [ 215.409353][T10530] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1157'. [ 215.438715][T10542] ip6erspan0: entered promiscuous mode [ 215.455441][T10542] ip6erspan0: entered allmulticast mode [ 215.794090][T10570] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1168'. [ 215.832009][T10578] openvswitch: netlink: EtherType 50a is less than min 600 [ 215.994595][T10587] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 216.126557][T10595] sctp: [Deprecated]: syz.0.1175 (pid 10595) Use of int in maxseg socket option. [ 216.126557][T10595] Use struct sctp_assoc_value instead [ 216.803930][T10626] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1185'. [ 216.941361][T10635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1188'. [ 216.980975][T10635] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1188'. [ 217.454862][T10657] syzkaller1: entered promiscuous mode [ 217.462316][T10657] syzkaller1: entered allmulticast mode [ 217.480241][T10657] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 217.578324][T10662] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 217.585992][T10662] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 217.701289][T10665] : entered promiscuous mode [ 217.706867][T10668] tipc: Enabling of bearer rejected, already enabled [ 217.746740][T10662] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 217.800332][T10662] tipc: Resetting bearer [ 217.856135][T10669] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 218.081409][T10689] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 218.710547][ T1037] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.739732][ T1037] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.752109][ T1037] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.761725][ T1037] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.050136][T10755] netlink: 'syz.3.1222': attribute type 1 has an invalid length. [ 219.199349][T10755] __nla_validate_parse: 7 callbacks suppressed [ 219.199367][T10755] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1222'. [ 219.292977][T10759] 8021q: adding VLAN 0 to HW filter on device bond6 [ 219.302523][T10759] bond5: (slave bond6): making interface the new active one [ 219.311846][T10759] bond5: (slave bond6): Enslaving as an active interface with an up link [ 219.320879][T10763] netlink: 'syz.0.1224': attribute type 3 has an invalid length. [ 219.329448][T10763] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1224'. [ 219.760922][T10786] syz.4.1228: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 219.777104][T10786] CPU: 1 UID: 0 PID: 10786 Comm: syz.4.1228 Not tainted syzkaller #0 PREEMPT(full) [ 219.777134][T10786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 219.777145][T10786] Call Trace: [ 219.777153][T10786] [ 219.777162][T10786] dump_stack_lvl+0x189/0x250 [ 219.777197][T10786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.777221][T10786] ? __pfx__printk+0x10/0x10 [ 219.777249][T10786] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 219.777273][T10786] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 219.777299][T10786] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 219.777326][T10786] warn_alloc+0x214/0x310 [ 219.777357][T10786] ? stack_depot_save_flags+0x40/0x860 [ 219.777396][T10786] ? __pfx_warn_alloc+0x10/0x10 [ 219.777428][T10786] ? kasan_save_track+0x4f/0x80 [ 219.777452][T10786] ? xskq_create+0x56/0x170 [ 219.777475][T10786] ? xsk_init_queue+0xb0/0x110 [ 219.777499][T10786] ? xsk_setsockopt+0x4dc/0x8d0 [ 219.777520][T10786] ? do_sock_setsockopt+0x179/0x1b0 [ 219.777537][T10786] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 219.777556][T10786] ? do_syscall_64+0xfa/0x3b0 [ 219.777572][T10786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.777600][T10786] __vmalloc_node_range_noprof+0x125/0x12f0 [ 219.777661][T10786] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 219.777689][T10786] ? xskq_create+0x56/0x170 [ 219.777718][T10786] ? __kasan_kmalloc+0x93/0xb0 [ 219.777746][T10786] vmalloc_user_noprof+0xad/0xf0 [ 219.777772][T10786] ? xskq_create+0xbf/0x170 [ 219.777797][T10786] xskq_create+0xbf/0x170 [ 219.777825][T10786] xsk_init_queue+0xb0/0x110 [ 219.777853][T10786] xsk_setsockopt+0x4dc/0x8d0 [ 219.777880][T10786] ? __pfx_xsk_setsockopt+0x10/0x10 [ 219.777901][T10786] ? __pfx_aa_sk_perm+0x10/0x10 [ 219.777932][T10786] ? aa_sock_opt_perm+0xff/0x1b0 [ 219.777955][T10786] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 219.777975][T10786] ? __pfx_xsk_setsockopt+0x10/0x10 [ 219.778003][T10786] do_sock_setsockopt+0x179/0x1b0 [ 219.778028][T10786] __x64_sys_setsockopt+0x13f/0x1b0 [ 219.778055][T10786] do_syscall_64+0xfa/0x3b0 [ 219.778071][T10786] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.778099][T10786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.778117][T10786] ? clear_bhb_loop+0x60/0xb0 [ 219.778140][T10786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.778157][T10786] RIP: 0033:0x7fcaf5d8eba9 [ 219.778176][T10786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.778192][T10786] RSP: 002b:00007fcaf3ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 219.778214][T10786] RAX: ffffffffffffffda RBX: 00007fcaf5fd5fa0 RCX: 00007fcaf5d8eba9 [ 219.778228][T10786] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 219.778240][T10786] RBP: 00007fcaf5e11e19 R08: 0000000000000004 R09: 0000000000000000 [ 219.778251][T10786] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.778263][T10786] R13: 00007fcaf5fd6038 R14: 00007fcaf5fd5fa0 R15: 00007ffccfd41518 [ 219.778297][T10786] [ 219.778305][T10786] Mem-Info: [ 219.957255][T10794] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1227'. [ 219.963857][T10786] active_anon:4759 inactive_anon:0 isolated_anon:0 [ 219.963857][T10786] active_file:3017 inactive_file:39907 isolated_file:0 [ 219.963857][T10786] unevictable:768 dirty:73 writeback:0 [ 219.963857][T10786] slab_reclaimable:11447 slab_unreclaimable:99978 [ 219.963857][T10786] mapped:29051 shmem:1378 pagetables:1135 [ 219.963857][T10786] sec_pagetables:0 bounce:0 [ 219.963857][T10786] kernel_misc_reclaimable:0 [ 219.963857][T10786] free:1326387 free_pcp:14604 free_cma:0 [ 220.189836][T10786] Node 0 active_anon:18952kB inactive_anon:0kB active_file:12068kB inactive_file:159428kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115800kB dirty:292kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13260kB pagetables:4412kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 220.289342][T10805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1233'. [ 220.309447][T10786] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 220.346635][T10786] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 220.379411][T10786] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 220.387082][T10786] Node 0 DMA32 free:1405728kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19204kB inactive_anon:0kB active_file:12068kB inactive_file:157840kB unevictable:1536kB writepending:292kB present:3129332kB managed:2557428kB mlocked:0kB bounce:0kB free_pcp:36648kB local_pcp:21496kB free_cma:0kB [ 220.444729][T10786] lowmem_reserve[]: 0 0 1 1 1 [ 220.451261][T10786] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1588kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 220.488240][T10786] lowmem_reserve[]: 0 0 0 0 0 [ 220.493334][T10786] Node 1 Normal free:3885288kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20880kB local_pcp:8432kB free_cma:0kB [ 220.544252][T10786] lowmem_reserve[]: 0 0 0 0 0 [ 220.554613][T10786] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 220.572722][T10786] Node 0 DMA32: 1684*4kB (UME) 878*8kB (UM) 230*16kB (UM) 512*32kB (UME) 109*64kB (UM) 38*128kB (UM) 15*256kB (ME) 9*512kB (UME) 2*1024kB (UM) 5*2048kB (ME) 327*4096kB (UM) = 1405792kB [ 220.604409][T10786] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 220.635735][T10786] Node 1 Normal: 216*4kB (UE) 63*8kB (UME) 49*16kB (UME) 74*32kB (UME) 25*64kB (UME) 8*128kB (UME) 5*256kB (UM) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3885288kB [ 220.667031][T10786] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 220.677701][T10786] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 220.680007][T10825] tipc: Trying to set illegal importance in message [ 220.694377][T10786] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 220.701117][T10828] tipc: Trying to set illegal importance in message [ 220.704469][T10826] netlink: 'syz.0.1238': attribute type 12 has an invalid length. [ 220.730886][T10786] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 220.742060][T10786] 44285 total pagecache pages [ 220.784428][T10786] 0 pages in swap cache [ 220.802491][T10786] Free swap = 124996kB [ 220.808606][T10786] Total swap = 124996kB [ 220.816052][T10786] 2097051 pages RAM [ 220.823010][T10786] 0 pages HighMem/MovableOnly [ 220.830802][T10786] 425668 pages reserved [ 220.835510][T10786] 0 pages cma reserved [ 221.062444][T10846] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 221.169747][T10850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1246'. [ 221.201371][T10850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1246'. [ 221.246017][T10850] bridge0: port 1(vlan4) entered blocking state [ 221.269424][T10850] bridge0: port 1(vlan4) entered disabled state [ 221.291222][T10850] vlan4: entered allmulticast mode [ 221.297211][T10850] bridge0: entered allmulticast mode [ 221.304854][T10856] netlink: zone id is out of range [ 221.313171][T10856] netlink: zone id is out of range [ 221.321529][T10850] vlan4: left allmulticast mode [ 221.326803][T10856] netlink: zone id is out of range [ 221.333099][T10850] bridge0: left allmulticast mode [ 221.339910][T10856] netlink: zone id is out of range [ 221.346511][T10856] netlink: zone id is out of range [ 221.360014][T10856] netlink: zone id is out of range [ 221.399029][T10856] netlink: zone id is out of range [ 221.411815][T10856] netlink: zone id is out of range [ 221.433512][T10856] netlink: zone id is out of range [ 221.459968][T10856] netlink: zone id is out of range [ 221.698637][T10878] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1255'. [ 221.745466][T10881] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1255'. [ 221.950586][T10893] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1260'. [ 222.008071][T10899] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1261'. [ 222.645555][T10937] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 222.655581][T10938] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 223.765952][T10995] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 224.599449][T11045] tipc: Enabled bearer , priority 0 [ 224.649683][T11045] syzkaller0: entered promiscuous mode [ 224.669920][T11045] syzkaller0: entered allmulticast mode [ 224.682047][T11038] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 224.697131][T11038] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 224.758442][T11042] tipc: Resetting bearer [ 224.787331][T11039] tipc: Resetting bearer [ 224.839965][T11039] tipc: Disabling bearer [ 225.234795][T11087] __nla_validate_parse: 40 callbacks suppressed [ 225.234813][T11087] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1314'. [ 225.690441][T11112] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1318'. [ 225.891583][T11118] netlink: 360 bytes leftover after parsing attributes in process `syz.1.1321'. [ 226.002059][T11123] netlink: 'syz.0.1324': attribute type 1 has an invalid length. [ 226.061510][T11123] bond5 (unregistering): Released all slaves [ 226.322082][T11146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1328'. [ 226.385624][T11154] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 226.444171][T11154] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 226.561335][T11160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1331'. [ 226.574339][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1331'. [ 226.632943][T11163] netlink: 'syz.2.1332': attribute type 1 has an invalid length. [ 226.646200][T11163] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1332'. [ 226.667801][T11163] nbd: couldn't find device at index 1048576 [ 226.803159][T11175] ip6gre1: entered allmulticast mode [ 226.979381][T11185] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 227.031028][T11185] bond8: entered promiscuous mode [ 227.036567][T11185] bond8: entered allmulticast mode [ 227.043972][T11185] 8021q: adding VLAN 0 to HW filter on device bond8 [ 227.115053][T11196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1342'. [ 227.418707][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1351'. [ 227.471322][T11223] netlink: 'syz.1.1352': attribute type 1 has an invalid length. [ 227.598692][T11233] tipc: Enabled bearer , priority 0 [ 227.629334][T11233] syzkaller0: entered promiscuous mode [ 227.646074][T11233] syzkaller0: entered allmulticast mode [ 227.689579][T11233] tipc: Resetting bearer [ 227.699063][T11239] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.1356'. [ 227.813616][T11230] tipc: Resetting bearer [ 227.914181][T11230] tipc: Disabling bearer [ 227.961706][T11246] netlink: 'syz.0.1358': attribute type 1 has an invalid length. [ 228.014559][T11246] netlink: 'syz.0.1358': attribute type 2 has an invalid length. [ 228.417200][T11269] netlink: 'syz.1.1365': attribute type 3 has an invalid length. [ 228.506523][T11274] netlink: 'syz.1.1365': attribute type 1 has an invalid length. [ 228.652265][T11274] bond9: entered promiscuous mode [ 228.672288][T11274] 8021q: adding VLAN 0 to HW filter on device bond9 [ 228.725399][T11279] 8021q: adding VLAN 0 to HW filter on device bond10 [ 228.735335][T11279] bond9: (slave bond10): making interface the new active one [ 228.742778][T11279] bond10: entered promiscuous mode [ 228.751603][T11279] bond9: (slave bond10): Enslaving as an active interface with an up link [ 228.912327][T11299] net_ratelimit: 41 callbacks suppressed [ 228.912348][T11299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.407787][T11331] netlink: 'syz.1.1383': attribute type 1 has an invalid length. [ 229.758077][T11352] netlink: 'syz.3.1390': attribute type 23 has an invalid length. [ 229.840635][T11356] 8021q: VLANs not supported on vxcan1 [ 229.859621][T11355] 8021q: VLANs not supported on vxcan1 [ 229.949455][T11362] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 230.093638][T11371] netlink: 'syz.2.1396': attribute type 21 has an invalid length. [ 230.248207][T11378] __nla_validate_parse: 7 callbacks suppressed [ 230.248228][T11378] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1399'. [ 230.382257][T11396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1404'. [ 230.503215][T11397] syzkaller1: entered promiscuous mode [ 230.511649][T11397] syzkaller1: entered allmulticast mode [ 230.528543][T11405] IPv6: NLM_F_CREATE should be specified when creating new route [ 230.558610][T11406] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 230.608243][T11396] veth7: entered promiscuous mode [ 230.801567][T11419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1411'. [ 230.950480][T11425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1414'. [ 231.101716][T11438] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 231.142998][T11438] vlan0: entered promiscuous mode [ 231.165286][T11438] bridge0: entered promiscuous mode [ 231.216271][T11441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.397662][T11450] syzkaller1: entered allmulticast mode [ 231.422885][T11455] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1422'. [ 231.431654][T11459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1424'. [ 231.453300][T11455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1422'. [ 231.492757][T11460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1423'. [ 231.914564][T11485] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1431'. [ 231.979210][T11487] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1431'. [ 232.290436][T11505] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 232.375054][T11505] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 232.390194][T11505] gretap3: entered promiscuous mode [ 232.420065][T11505] gretap3: entered allmulticast mode [ 232.757349][T11548] team0: Port device dummy0 removed [ 234.099527][T11614] sctp: [Deprecated]: syz.4.1469 (pid 11614) Use of int in max_burst socket option. [ 234.099527][T11614] Use struct sctp_assoc_value instead [ 234.151401][T11625] x_tables: ip_tables: udp match: only valid for protocol 17 [ 234.168070][T11626] validate_nla: 4 callbacks suppressed [ 234.168091][T11626] netlink: 'syz.3.1472': attribute type 2 has an invalid length. [ 234.227954][T11628] netlink: 'syz.0.1474': attribute type 1 has an invalid length. [ 234.668011][T11655] netlink: 'syz.0.1485': attribute type 12 has an invalid length. [ 235.264492][T11692] __nla_validate_parse: 12 callbacks suppressed [ 235.264513][T11692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1492'. [ 235.383302][T11697] bond1: option mode: unable to set because the bond device has slaves [ 235.597185][T11705] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1498'. [ 235.867919][T11723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1501'. [ 236.044161][T11715] geneve2: entered promiscuous mode [ 236.049529][T11715] geneve2: entered allmulticast mode [ 236.102609][T11723] dvmrp0: entered allmulticast mode [ 236.116002][T11718] netlink: 'syz.0.1503': attribute type 1 has an invalid length. [ 236.532055][T11761] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1513'. [ 236.909419][T11774] netlink: 'syz.0.1517': attribute type 21 has an invalid length. [ 236.918427][T11779] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1519'. [ 236.952839][T11774] netlink: 'syz.0.1517': attribute type 1 has an invalid length. [ 237.685348][T11833] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1529'. [ 238.486812][T11870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1538'. [ 238.489492][T11872] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1539'. [ 238.531308][T11872] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1539'. [ 239.233046][T11912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.438897][T11916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1551'. [ 239.516832][T11926] veth1_to_bond: entered allmulticast mode [ 239.530723][T11928] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 239.542910][T11926] veth1_to_bond: left allmulticast mode [ 239.546738][T11928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.851663][T11947] IPVS: set_ctl: invalid protocol: 1 172.30.1.1:20004 [ 240.133870][T11954] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 240.373752][T11978] Bluetooth: MGMT ver 1.23 [ 240.499905][T11984] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 240.512017][T11984] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 240.645043][T11991] bond3: option mode: unable to set because the bond device is up [ 240.689997][T11993] tipc: Enabling of bearer rejected, failed to enable media [ 240.860657][T12005] __nla_validate_parse: 4 callbacks suppressed [ 240.860675][T12005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1580'. [ 240.862525][T12011] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1582'. [ 240.910902][T12005] netlink: 'syz.4.1580': attribute type 10 has an invalid length. [ 240.922390][T12007] syzkaller1: entered promiscuous mode [ 240.939856][T12007] syzkaller1: entered allmulticast mode [ 240.948615][T12008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1581'. [ 241.002955][T12005] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 241.207860][T12030] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1588'. [ 241.420878][T12047] IPVS: set_ctl: invalid protocol: 33 172.20.20.42:20002 [ 241.490597][T12048] tipc: Enabled bearer , priority 0 [ 241.518266][T12048] syzkaller0: entered promiscuous mode [ 241.535271][T12048] syzkaller0: entered allmulticast mode [ 241.543342][T12053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1595'. [ 241.611861][T12058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1597'. [ 241.628766][T12058] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 241.636896][T12058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.649307][T12051] tipc: Resetting bearer [ 241.659526][T12043] tipc: Resetting bearer [ 241.680643][T12061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1598'. [ 241.723843][T12043] tipc: Disabling bearer [ 241.743720][T12061] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 241.910624][T12080] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 241.913489][T12079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1603'. [ 241.917940][T12080] IPv6: NLM_F_CREATE should be set when creating new route [ 242.361316][T12103] netlink: 'syz.1.1611': attribute type 1 has an invalid length. [ 242.395502][T12103] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1611'. [ 242.474994][T12111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.953657][T12134] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1620'. [ 243.182970][T12152] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 243.271286][T12157] tipc: Enabled bearer , priority 0 [ 243.329076][T12159] syzkaller0: entered promiscuous mode [ 243.363548][T12159] syzkaller0: entered allmulticast mode [ 243.480828][T12159] tipc: Resetting bearer [ 243.533680][T12159] tipc: Disabling bearer [ 243.861595][T12183] bridge0: port 1(vlan4) entered blocking state [ 243.871447][T12183] bridge0: port 1(vlan4) entered disabled state [ 243.905573][T12183] vlan4: entered allmulticast mode [ 243.910759][T12183] bridge0: entered allmulticast mode [ 243.913562][T12188] netlink: 'syz.1.1635': attribute type 1 has an invalid length. [ 243.923965][T12188] netlink: 'syz.1.1635': attribute type 4 has an invalid length. [ 243.991698][T12183] vlan4: left allmulticast mode [ 244.043597][T12183] bridge0: left allmulticast mode [ 244.099716][T12200] block nbd3: not configured, cannot reconfigure [ 244.812759][T12252] netlink: 'syz.2.1653': attribute type 10 has an invalid length. [ 244.855925][T12252] bridge0: port 4(team0) entered blocking state [ 244.862416][T12252] bridge0: port 4(team0) entered disabled state [ 244.889239][T12252] team0: entered allmulticast mode [ 244.908508][T12252] team_slave_0: entered allmulticast mode [ 244.933745][T12252] team_slave_1: entered allmulticast mode [ 244.958594][T12252] geneve0: entered allmulticast mode [ 244.987290][T12252] team0: entered promiscuous mode [ 245.002696][T12252] team_slave_0: entered promiscuous mode [ 245.017859][T12252] team_slave_1: entered promiscuous mode [ 245.034151][T12252] geneve0: entered promiscuous mode [ 245.051261][T12252] bridge0: port 4(team0) entered blocking state [ 245.057783][T12252] bridge0: port 4(team0) entered forwarding state [ 245.228190][T12271] netlink: 'syz.2.1657': attribute type 7 has an invalid length. [ 245.262119][T12271] netlink: 'syz.2.1657': attribute type 8 has an invalid length. [ 245.976790][T12303] __nla_validate_parse: 14 callbacks suppressed [ 245.976809][T12303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1667'. [ 246.042902][T12305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1668'. [ 246.244404][T12318] netlink: 'syz.2.1671': attribute type 29 has an invalid length. [ 246.315011][T12323] sctp: [Deprecated]: syz.3.1673 (pid 12323) Use of struct sctp_assoc_value in delayed_ack socket option. [ 246.315011][T12323] Use struct sctp_sack_info instead [ 246.798761][T12344] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1680'. [ 247.171846][T12368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1683'. [ 247.207862][T12368] netlink: 'syz.0.1683': attribute type 5 has an invalid length. [ 247.212298][T12372] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1688'. [ 247.239332][T12368] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1683'. [ 247.407442][T12383] netlink: 'syz.4.1690': attribute type 1 has an invalid length. [ 247.423006][T12385] netlink: 'syz.3.1691': attribute type 1 has an invalid length. [ 247.434399][T12385] netlink: 'syz.3.1691': attribute type 2 has an invalid length. [ 247.530908][T12340] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 247.537072][T12340] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 247.638989][T12340] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 247.647031][T12383] 8021q: adding VLAN 0 to HW filter on device bond6 [ 247.673404][T12340] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 247.757309][T12340] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 247.763287][T12340] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 247.841410][T12340] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 247.864742][T12340] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 247.912663][T12410] netlink: 'syz.2.1694': attribute type 10 has an invalid length. [ 247.964548][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1694'. [ 247.995007][T12415] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1696'. [ 248.010477][T12410] bridge0: port 4(team0) entered disabled state [ 248.017148][T12410] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.025152][T12410] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.205845][T12410] bridge0: port 4(team0) entered blocking state [ 248.212342][T12410] bridge0: port 4(team0) entered forwarding state [ 248.219350][T12410] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.226611][T12410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.234177][T12410] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.241478][T12410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.362081][T12410] bridge0: entered promiscuous mode [ 248.404733][T12410] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 248.454341][T12414] team0: left allmulticast mode [ 248.462683][T12414] team_slave_0: left allmulticast mode [ 248.471586][T12414] team_slave_1: left allmulticast mode [ 248.497483][T12414] geneve0: left allmulticast mode [ 248.502812][T12414] team0: left promiscuous mode [ 248.522151][T12414] team_slave_0: left promiscuous mode [ 248.531033][T12414] team_slave_1: left promiscuous mode [ 248.536762][T12414] geneve0: left promiscuous mode [ 248.542108][T12414] bridge0: port 4(team0) entered disabled state [ 248.551874][T12414] bond7: left promiscuous mode [ 248.557658][T12414] bridge0: port 3(bond7) entered disabled state [ 248.566993][T12414] bridge_slave_1: left allmulticast mode [ 248.572651][T12414] bridge_slave_1: left promiscuous mode [ 248.578723][T12414] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.589435][T12414] bridge_slave_0: left allmulticast mode [ 248.596387][T12414] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.622239][T12414] bond0: (slave bridge0): Releasing backup interface [ 248.712782][T12438] 8021q: adding VLAN 0 to HW filter on device bond7 [ 248.817890][T12340] tipc: Resetting bearer [ 249.040345][T12448] bond3: option mode: unable to set because the bond device is up [ 249.190568][T12465] netlink: 'syz.2.1706': attribute type 1 has an invalid length. [ 249.295287][T12471] netlink: 'syz.4.1708': attribute type 30 has an invalid length. [ 249.329691][T12471] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 249.365361][T12471] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 249.516774][T12485] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1711'. [ 249.623203][T12491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1714'. [ 249.636081][T12496] netlink: 'syz.4.1713': attribute type 12 has an invalid length. [ 249.704648][T12498] pim6reg: entered allmulticast mode [ 249.814339][T12505] bond1: option mode: unable to set because the bond device has slaves [ 249.815366][T12504] nbd: must specify a size in bytes for the device [ 249.983990][T12513] netlink: 'syz.3.1721': attribute type 1 has an invalid length. [ 250.211674][T12522] bond7: (slave bridge5): making interface the new active one [ 250.222035][T12522] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 250.544563][T12547] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 250.565729][T12547] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 250.585805][T12547] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 250.618148][T12547] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 250.645795][T12547] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 250.663812][T12547] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 250.691582][T12547] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 250.693890][T12553] bond0: (slave wlan1): Releasing backup interface [ 250.716853][T12547] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 250.747147][T12547] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 250.784470][T12547] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 250.812199][T12547] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 250.836075][T12547] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 250.855928][T12547] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 250.905309][T12547] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 250.943024][T12547] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 250.972333][T12547] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 250.999931][T12547] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 251.025320][T12547] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 251.059332][T12547] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 251.106510][T12547] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 251.113638][T12547] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 251.134146][T12576] bond1: option mode: unable to set because the bond device has slaves [ 251.146066][T12547] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 251.163400][T12547] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 251.212013][T12547] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 251.255393][T12547] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 251.262615][T12547] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 251.280561][T12547] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 251.287838][T12547] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 251.295027][T12547] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 251.298910][T12582] syzkaller1: entered promiscuous mode [ 251.316087][T12547] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 251.323209][T12547] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 251.329338][T12582] syzkaller1: entered allmulticast mode [ 251.347066][T12585] __nla_validate_parse: 5 callbacks suppressed [ 251.347085][T12585] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1737'. [ 251.349648][T12582] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1735'. [ 251.362519][T12547] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 251.452197][T12585] netlink: 'syz.3.1737': attribute type 3 has an invalid length. [ 251.827584][T12612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1743'. [ 251.838770][T12611] openvswitch: netlink: Message has -1 unknown bytes. [ 251.928872][T12612] vlan3: entered allmulticast mode [ 251.944621][T12612] bridge0: entered allmulticast mode [ 251.990884][T12615] netlink: 'syz.4.1742': attribute type 1 has an invalid length. [ 252.189552][T12622] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1744'. [ 252.295728][T12628] bond1: option mode: unable to set because the bond device has slaves [ 252.316049][T12626] tipc: Enabling of bearer rejected, already enabled [ 252.424575][T12633] netlink: 'syz.4.1749': attribute type 15 has an invalid length. [ 252.869373][T12662] netlink: 'syz.1.1756': attribute type 14 has an invalid length. [ 252.894174][T12662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1756'. [ 252.950751][T12662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1756'. [ 252.961331][T12662] netlink: 'syz.1.1756': attribute type 14 has an invalid length. [ 253.010170][ C1] ================================================================== [ 253.018447][ C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0 [ 253.026621][ C1] Write of size 8 at addr ffff88805b5b9570 by task syz-executor/5855 [ 253.034687][ C1] [ 253.037012][ C1] CPU: 1 UID: 0 PID: 5855 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 253.037031][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 253.037040][ C1] Call Trace: [ 253.037047][ C1] [ 253.037054][ C1] dump_stack_lvl+0x189/0x250 [ 253.037072][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 253.037090][ C1] ? rcu_is_watching+0x15/0xb0 [ 253.037103][ C1] ? __kasan_check_byte+0x12/0x40 [ 253.037123][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.037138][ C1] ? rcu_is_watching+0x15/0xb0 [ 253.037151][ C1] ? lock_release+0x4b/0x3e0 [ 253.037172][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 253.037188][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 253.037205][ C1] print_report+0xca/0x240 [ 253.037220][ C1] ? __xfrm_state_delete+0x696/0xca0 [ 253.037233][ C1] kasan_report+0x118/0x150 [ 253.037251][ C1] ? __xfrm_state_delete+0x696/0xca0 [ 253.037269][ C1] __xfrm_state_delete+0x696/0xca0 [ 253.037287][ C1] xfrm_timer_handler+0x18f/0xa00 [ 253.037303][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 253.037316][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 253.037335][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 253.037356][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 253.037374][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 253.037394][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 253.037407][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 253.037419][ C1] __hrtimer_run_queues+0x529/0xc60 [ 253.037440][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 253.037453][ C1] ? read_tsc+0x9/0x20 [ 253.037472][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 253.037489][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 253.037505][ C1] handle_softirqs+0x283/0x870 [ 253.037526][ C1] ? do_softirq+0xec/0x180 [ 253.037540][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 253.037555][ C1] ? rcu_is_watching+0x15/0xb0 [ 253.037568][ C1] ? tcp_sendmsg+0x21/0x50 [ 253.037590][ C1] do_softirq+0xec/0x180 [ 253.037603][ C1] [ 253.037608][ C1] [ 253.037614][ C1] ? __pfx_do_softirq+0x10/0x10 [ 253.037630][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 253.037649][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 253.037662][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 253.037678][ C1] ? tcp_sendmsg+0x21/0x50 [ 253.037695][ C1] tcp_sendmsg+0x21/0x50 [ 253.037712][ C1] __sock_sendmsg+0x19c/0x270 [ 253.037732][ C1] sock_write_iter+0x258/0x330 [ 253.037750][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 253.037770][ C1] ? bpf_lsm_file_permission+0x9/0x20 [ 253.037787][ C1] ? security_file_permission+0x75/0x290 [ 253.037808][ C1] vfs_write+0x5c6/0xb30 [ 253.037827][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 253.037844][ C1] ? __pfx_vfs_write+0x10/0x10 [ 253.037864][ C1] ? __rseq_handle_notify_resume+0x37e/0x11f0 [ 253.037885][ C1] ksys_write+0x145/0x250 [ 253.037903][ C1] ? __pfx_ksys_write+0x10/0x10 [ 253.037919][ C1] ? rcu_is_watching+0x15/0xb0 [ 253.037933][ C1] ? do_syscall_64+0xbe/0x3b0 [ 253.037948][ C1] do_syscall_64+0xfa/0x3b0 [ 253.037961][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.037974][ C1] ? asm_common_interrupt+0x26/0x40 [ 253.037987][ C1] ? clear_bhb_loop+0x60/0xb0 [ 253.038002][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.038016][ C1] RIP: 0033:0x7f5c92d8d620 [ 253.038031][ C1] Code: 40 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 80 3d 41 af 21 00 00 74 17 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 58 c3 0f 1f 80 00 00 00 00 48 83 ec 28 48 89 [ 253.038044][ C1] RSP: 002b:00007ffc80c7c928 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 253.038061][ C1] RAX: ffffffffffffffda RBX: 00000000169714c0 RCX: 00007f5c92d8d620 [ 253.038072][ C1] RDX: 0000000000000158 RSI: 00007f5c8b23fea8 RDI: 0000000000000003 [ 253.038082][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 000000000003fde8 [ 253.038091][ C1] R10: b517789ff6c36ad6 R11: 0000000000000202 R12: 0000000000000158 [ 253.038101][ C1] R13: 00005555779a5c90 R14: 00007ffc80c7cdf0 R15: 00007f5c8b23fea8 [ 253.038117][ C1] [ 253.038122][ C1] [ 253.440201][ C1] Allocated by task 10880: [ 253.444618][ C1] kasan_save_track+0x3e/0x80 [ 253.449323][ C1] __kasan_slab_alloc+0x6c/0x80 [ 253.454173][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 253.459634][ C1] xfrm_state_alloc+0x24/0x2f0 [ 253.464393][ C1] __find_acq_core+0x8a7/0x1c00 [ 253.469264][ C1] xfrm_find_acq+0x78/0xa0 [ 253.473683][ C1] xfrm_alloc_userspi+0x6b3/0xc90 [ 253.478713][ C1] xfrm_user_rcv_msg+0x7a0/0xab0 [ 253.484085][ C1] netlink_rcv_skb+0x208/0x470 [ 253.488849][ C1] xfrm_netlink_rcv+0x79/0x90 [ 253.493529][ C1] netlink_unicast+0x82c/0x9e0 [ 253.498294][ C1] netlink_sendmsg+0x805/0xb30 [ 253.503057][ C1] __sock_sendmsg+0x219/0x270 [ 253.507843][ C1] ____sys_sendmsg+0x505/0x830 [ 253.512696][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 253.517407][ C1] __x64_sys_sendmsg+0x19b/0x260 [ 253.522423][ C1] do_syscall_64+0xfa/0x3b0 [ 253.527038][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.532950][ C1] [ 253.535283][ C1] Freed by task 9889: [ 253.539366][ C1] kasan_save_track+0x3e/0x80 [ 253.544069][ C1] kasan_save_free_info+0x46/0x50 [ 253.549543][ C1] __kasan_slab_free+0x5b/0x80 [ 253.554317][ C1] kmem_cache_free+0x18f/0x400 [ 253.559117][ C1] xfrm_state_gc_task+0x52d/0x6b0 [ 253.564233][ C1] process_scheduled_works+0xae1/0x17b0 [ 253.569820][ C1] worker_thread+0x8a0/0xda0 [ 253.574431][ C1] kthread+0x70e/0x8a0 [ 253.579036][ C1] ret_from_fork+0x3fc/0x770 [ 253.583637][ C1] ret_from_fork_asm+0x1a/0x30 [ 253.588430][ C1] [ 253.590785][ C1] The buggy address belongs to the object at ffff88805b5b9540 [ 253.590785][ C1] which belongs to the cache xfrm_state of size 928 [ 253.604751][ C1] The buggy address is located 48 bytes inside of [ 253.604751][ C1] freed 928-byte region [ffff88805b5b9540, ffff88805b5b98e0) [ 253.618463][ C1] [ 253.620793][ C1] The buggy address belongs to the physical page: [ 253.627240][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805b5b9dc0 pfn:0x5b5b8 [ 253.637510][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 253.646078][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 253.653971][ C1] page_type: f5(slab) [ 253.657950][ C1] raw: 00fff00000000040 ffff88801ab108c0 dead000000000122 0000000000000000 [ 253.666547][ C1] raw: ffff88805b5b9dc0 00000000800f000c 00000000f5000000 0000000000000000 [ 253.675237][ C1] head: 00fff00000000040 ffff88801ab108c0 dead000000000122 0000000000000000 [ 253.683945][ C1] head: ffff88805b5b9dc0 00000000800f000c 00000000f5000000 0000000000000000 [ 253.692619][ C1] head: 00fff00000000002 ffffea00016d6e01 00000000ffffffff 00000000ffffffff [ 253.701285][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 253.709945][ C1] page dumped because: kasan: bad access detected [ 253.716355][ C1] page_owner tracks the page as allocated [ 253.722061][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6473, tgid 6470 (syz.0.128), ts 105135895657, free_ts 105109988495 [ 253.741252][ C1] post_alloc_hook+0x240/0x2a0 [ 253.746023][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 253.751570][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 253.757370][ C1] alloc_pages_mpol+0x232/0x4a0 [ 253.762319][ C1] allocate_slab+0x8a/0x370 [ 253.766840][ C1] ___slab_alloc+0xbeb/0x1420 [ 253.771533][ C1] kmem_cache_alloc_noprof+0x283/0x3c0 [ 253.777007][ C1] xfrm_state_alloc+0x24/0x2f0 [ 253.781787][ C1] xfrm_add_acquire+0xf7/0xb20 [ 253.786552][ C1] xfrm_user_rcv_msg+0x7a0/0xab0 [ 253.791491][ C1] netlink_rcv_skb+0x208/0x470 [ 253.796433][ C1] xfrm_netlink_rcv+0x79/0x90 [ 253.801110][ C1] netlink_unicast+0x82c/0x9e0 [ 253.805965][ C1] netlink_sendmsg+0x805/0xb30 [ 253.810724][ C1] __sock_sendmsg+0x219/0x270 [ 253.815452][ C1] ____sys_sendmsg+0x505/0x830 [ 253.820232][ C1] page last free pid 6473 tgid 6470 stack trace: [ 253.826552][ C1] __free_frozen_pages+0xbc4/0xd30 [ 253.831666][ C1] __slab_free+0x303/0x3c0 [ 253.836076][ C1] qlist_free_all+0x97/0x140 [ 253.840668][ C1] kasan_quarantine_reduce+0x148/0x160 [ 253.846132][ C1] __kasan_slab_alloc+0x22/0x80 [ 253.851344][ C1] kmem_cache_alloc_lru_noprof+0x1c6/0x3d0 [ 253.857160][ C1] sock_alloc_inode+0x28/0xc0 [ 253.861942][ C1] alloc_inode+0x67/0x1b0 [ 253.866304][ C1] __sock_create+0x12d/0x9f0 [ 253.870914][ C1] __sys_socket+0xd7/0x1b0 [ 253.875343][ C1] __x64_sys_socket+0x7a/0x90 [ 253.880050][ C1] do_syscall_64+0xfa/0x3b0 [ 253.884560][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.890451][ C1] [ 253.892782][ C1] Memory state around the buggy address: [ 253.898472][ C1] ffff88805b5b9400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.906622][ C1] ffff88805b5b9480: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 253.914768][ C1] >ffff88805b5b9500: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 253.922830][ C1] ^ [ 253.930646][ C1] ffff88805b5b9580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.938712][ C1] ffff88805b5b9600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.946856][ C1] ================================================================== [ 253.955131][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 253.962430][ C1] CPU: 1 UID: 0 PID: 5855 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 253.971931][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 253.982033][ C1] Call Trace: [ 253.985352][ C1] [ 253.988231][ C1] dump_stack_lvl+0x99/0x250 [ 253.992858][ C1] ? __asan_memcpy+0x40/0x70 [ 253.997485][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.002738][ C1] ? __pfx__printk+0x10/0x10 [ 254.007457][ C1] vpanic+0x281/0x750 [ 254.011479][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 254.016759][ C1] ? __pfx_vpanic+0x10/0x10 [ 254.021393][ C1] ? irqentry_exit+0x74/0x90 [ 254.026203][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.031444][ C1] panic+0xb9/0xc0 [ 254.035199][ C1] ? __pfx_panic+0x10/0x10 [ 254.039661][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 254.045592][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 254.051953][ C1] ? __xfrm_state_delete+0x696/0xca0 [ 254.057268][ C1] check_panic_on_warn+0x89/0xb0 [ 254.062240][ C1] ? __xfrm_state_delete+0x696/0xca0 [ 254.067558][ C1] end_report+0x78/0x160 [ 254.071838][ C1] kasan_report+0x129/0x150 [ 254.076374][ C1] ? __xfrm_state_delete+0x696/0xca0 [ 254.081789][ C1] __xfrm_state_delete+0x696/0xca0 [ 254.086943][ C1] xfrm_timer_handler+0x18f/0xa00 [ 254.092015][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 254.097788][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 254.103823][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.109169][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 254.115293][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 254.121653][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 254.127285][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 254.133010][ C1] __hrtimer_run_queues+0x529/0xc60 [ 254.138225][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 254.143954][ C1] ? read_tsc+0x9/0x20 [ 254.148028][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 254.153839][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 254.158959][ C1] handle_softirqs+0x283/0x870 [ 254.163726][ C1] ? do_softirq+0xec/0x180 [ 254.168234][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 254.173524][ C1] ? rcu_is_watching+0x15/0xb0 [ 254.178394][ C1] ? tcp_sendmsg+0x21/0x50 [ 254.182819][ C1] do_softirq+0xec/0x180 [ 254.187152][ C1] [ 254.190267][ C1] [ 254.193207][ C1] ? __pfx_do_softirq+0x10/0x10 [ 254.198070][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 254.203424][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 254.208629][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 254.214554][ C1] ? tcp_sendmsg+0x21/0x50 [ 254.218994][ C1] tcp_sendmsg+0x21/0x50 [ 254.223256][ C1] __sock_sendmsg+0x19c/0x270 [ 254.227954][ C1] sock_write_iter+0x258/0x330 [ 254.232742][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 254.238036][ C1] ? bpf_lsm_file_permission+0x9/0x20 [ 254.243410][ C1] ? security_file_permission+0x75/0x290 [ 254.249053][ C1] vfs_write+0x5c6/0xb30 [ 254.253306][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 254.258673][ C1] ? __pfx_vfs_write+0x10/0x10 [ 254.263459][ C1] ? __rseq_handle_notify_resume+0x37e/0x11f0 [ 254.269730][ C1] ksys_write+0x145/0x250 [ 254.274153][ C1] ? __pfx_ksys_write+0x10/0x10 [ 254.279106][ C1] ? rcu_is_watching+0x15/0xb0 [ 254.283871][ C1] ? do_syscall_64+0xbe/0x3b0 [ 254.288549][ C1] do_syscall_64+0xfa/0x3b0 [ 254.293135][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.299199][ C1] ? asm_common_interrupt+0x26/0x40 [ 254.304395][ C1] ? clear_bhb_loop+0x60/0xb0 [ 254.309074][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.315054][ C1] RIP: 0033:0x7f5c92d8d620 [ 254.319480][ C1] Code: 40 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 80 3d 41 af 21 00 00 74 17 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 58 c3 0f 1f 80 00 00 00 00 48 83 ec 28 48 89 [ 254.339101][ C1] RSP: 002b:00007ffc80c7c928 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 254.347533][ C1] RAX: ffffffffffffffda RBX: 00000000169714c0 RCX: 00007f5c92d8d620 [ 254.355511][ C1] RDX: 0000000000000158 RSI: 00007f5c8b23fea8 RDI: 0000000000000003 [ 254.363508][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 000000000003fde8 [ 254.371514][ C1] R10: b517789ff6c36ad6 R11: 0000000000000202 R12: 0000000000000158 [ 254.379590][ C1] R13: 00005555779a5c90 R14: 00007ffc80c7cdf0 R15: 00007f5c8b23fea8 [ 254.387663][ C1] [ 254.390833][ C1] Kernel Offset: disabled [ 254.395159][ C1] Rebooting in 86400 seconds..