last executing test programs: 5.012376142s ago: executing program 2 (id=4489): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@restrict={0xa, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x61, 0x5f, 0x2e, 0x30, 0x95f9a02ef20a9ea2, 0x30, 0x41]}}, &(0x7f0000000180)=""/239, 0x2d, 0xef, 0x1, 0x0, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fbdb0b27749c936ff72a5edf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d3000004829cc6a6a7ed8f7fc7d3143bd49e7687a66"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) socket(0x2b, 0x80801, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x4) r7 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r7, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) r8 = socket$kcm(0x29, 0x5, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=@RTM_DELMDB={0x58, 0x54, 0x93d, 0x0, 0x0, {0x7, r11}, [@MDBA_SET_ENTRY={0x20, 0x2, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@empty}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x0, 0x3, 0x0, {@ip4=@broadcast, 0x86dd}}}]}, 0x58}}, 0x0) ioctl$sock_SIOCDELRT(r8, 0x890c, &(0x7f00000004c0)={0x0, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1}, @xdp={0x2c, 0x1c, r11, 0x4007}, @phonet={0x23, 0xef, 0x2, 0x5}, 0xffff, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000480)='veth0_virt_wifi\x00', 0x100000001, 0x1000, 0xbc7}) sendto$inet(r7, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) sendmmsg$inet6(r7, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001700)='y', 0x1}], 0x1}}], 0x1, 0x0) 4.858129869s ago: executing program 4 (id=4490): socket(0x11, 0x800000003, 0x0) syz_emit_ethernet(0xe, &(0x7f00000002c0)={@broadcast, @remote, @void, {@generic={0x86dd}}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000002c0)="ed079e39dbecfe1c7aaddacb42b3097bb27df48ae669945dbcad884601c79955425f203e7b00e1ba977d30e63744fb146a29fb2d84fd572c7f9737e9dba6b9ff622e0e8aa7d9f19e6f7363c6fbd7f0ce13b9f6c009ff851a21d814a62a5891c57845077453fcac7937b20cc027b2682e591dcbad57f4de868548e369300356c115c136f21b24b34d3d2d9ec206400c0fc5c0798cabd0db320d284023a185d3bb75e44c79efa145d6ddb9f85416b07c45ac11d0954d122f5ebb17248cfc0396683642492c6e2f1fd79c801830ceb082bd47a39e2ec957b7189a9028a6e5cc", 0xde}], 0x1) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x8, r5, 0x1000000}, 0x10) recvmmsg(r3, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) r7 = getuid() ioctl$SIOCAX25GETUID(r6, 0x89e0, &(0x7f0000000100)={0x3, @bcast, r7}) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r8, 0x3, 0x610c0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010100}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[], 0x80}, 0x1, 0xba01}, 0x8044) 4.744486208s ago: executing program 0 (id=4493): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x4c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0x38, 0x4, 0x0, 0x1, [@nested={0x32, 0x12, 0x0, 0x1, [@generic="a437fa54a0cc5d1124ab2b2806e7f423b6e257262cccca9a82234d912f8d4196192c1ddd5dcb13d7f0921142632c"]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 4.645623726s ago: executing program 2 (id=4495): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r3, 0x105, 0xffffffff, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac01, 0x7]}]]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x200, 0x70bd2d, 0x2, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wg1\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffeb}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}}, 0x4008805) 4.644388689s ago: executing program 3 (id=4496): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_emit_ethernet(0x86, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60ff690b00482f00fc0200000000ff000000000000000000ff0200000200"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x20, r1, 0x5, 0x0, 0xfffffffd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x8004800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x24005094}, 0x8801) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1, 0xfffff000}, 0x0) 4.573012044s ago: executing program 4 (id=4497): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0xffffffffffffffb5, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, &(0x7f0000000000)={0x1d, r7}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r10 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r10, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@sndinfo={0x20, 0x84, 0x2, {0xd, 0x10000}}, @authinfo={0x18, 0x84, 0x6, {0x8}}], 0x38, 0x40040}, 0x4004000) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x30, r1, 0x1, 0x0, 0x80008000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) 4.518354724s ago: executing program 0 (id=4498): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001800)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000001680)=""/121, 0x79, 0x0, 0x0}}, 0x10) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000100), 0x0, 0xffe0) getpeername(r0, &(0x7f0000000000)=@alg, &(0x7f0000000080)=0x80) 4.43382037s ago: executing program 1 (id=4499): r0 = socket(0x28, 0xa, 0x5) r1 = accept4$llc(r0, 0x0, &(0x7f0000000000), 0x1800) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x9, 0x1, 0xf036, 0x9}, 0x10) (async) r2 = socket$phonet(0x23, 0x2, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) bind$packet(r0, &(0x7f0000000140)={0x11, 0x2, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000002680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002640)={&(0x7f0000000240)={0x23e4, r3, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TESTDATA={0xb0, 0x45, "37c9f784b8014e1808cad2b3682a7a3a7202c7ad0e03982d55825e42d33de319ac648a641bcdc7a5e9d58d549f526c5368389137db913606614adac931111fdc1fca5acc9420e96938bbb6c5543812cb3d54c4efa8f467b828f3c800567e8c172c3073c3df6ffe336964c7548316706fa562e7c51179db1ae48ec198f410b177e573e80a72deb33fe758d8f1cddc93b9493c1532a6f2e2e5b70e859900464446b78d435a2e89707ae7b29300"}, @NL80211_ATTR_TESTDATA={0x6b, 0x45, "cf6b0435fb4135db873cd9b8f0b164b6a6c97c5eacaeaede802ba7e2b40e97436aba57726ffe5c90744a7583f3774050f62e8455fde53f9d806796ace4cadaf1c1b86f18edcc7d4272b31caeb1c137169ab9c014ab7549058294e51659d4531ccd78bc3c89137a"}, @NL80211_ATTR_TESTDATA={0x5d, 0x45, "970ee1bf1648d6f7b1927c1bc3afc2615e8dd4b807288f02faa8812a202fcd0f4cc42f3192946092ff2a4f47343c9323182d43da8b71ffe847a72dd26425b0a6069ce98afecde2447cab54689df490dcc1f6d0a2d467fa80ec"}, @NL80211_ATTR_TESTDATA={0xec, 0x45, "917cdb4235f1c24b90746ab4412590110b1caeedeffa2017a66c732e61b249ea4c50d9fbe34985074fe2add09c1d30ed3d0cf089c3a68b70c4ec3ebe619a7b70516cba714e3f08f067086e1181c445b61ccb195d21b0625a05be8ca7d8ad3c6b98404d74ae6139c4a9e4367af53e3e917846f9866c76c0543987a66578f783b45cec3c68bbb15782a55a1ce0454dc11aad6314eb3310f5f7058e26c282bc59a654fd4d76456e552a13be68436d8481f8c8cfd1aaabb7a62de8d80d74658ecdef3c3fecb189be0f7accb101012c68a6b863b7825979061cea137ae68b6fbb2d03405ae124c8928cbf"}, @NL80211_ATTR_TESTDATA={0x3e, 0x45, "8ea0eb190863979801650f99fe0a963cdbd7a988258135bda12ea06ac250fbfb70463cf9b56d7a1183f851f1bf447e7336afee2ae608b9841b09"}, @NL80211_ATTR_TESTDATA={0xb9, 0x45, "ea5cb589a49dea8b3decbf77d575d1f39bbc05693d634da21689a32d500512e5b1ebdff7cfa23760b9e40b4c972fa975d5f62d023e0268938e169aec176499a589d024e17d63a754531ca960f2bc13f58482d72fd33de09aff31ce203a3a6675c4026f4b530cd4c0e652c4db35a41c1e05b1cb121abbb4af6ea2a6b46da7ed299f0db5ec40b8309ce1c428704fdd8de3087470091fc7d8300da41327768ddcfb3ab1ba1731ae69f9d6fd4749f474b5491757799bcd"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x5b, 0x45, "75d56811ae21df3db649d3d8b0e4b59db42c64e85d83352c7339385b14bb34c0441ba0e1f37cc46fe1d4eaa9c82716373dea198211d3254311569ac7b35b7fcb5143b999997c5995a1213ada0a31c5fa9754ae2516b44e"}]}, 0x23e4}, 0x1, 0x0, 0x0, 0x840}, 0x1) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000026c0)={0x0, r1}, 0x8) (async) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f00000027c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x40, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x101, 0x68}}}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x4000, 0x1, 0x0, 0x0, {0xd3, 0x5, 0x0, 0x6, 0x0, 0x1, 0x0, 0x3}, 0x8, 0x400, 0x9}}]}, 0x40}}, 0x20000840) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000002980)={'erspan0\x00', &(0x7f0000002840)={'syztnl2\x00', 0x0, 0x7, 0x10, 0x7fffffff, 0x56, {{0x43, 0x4, 0x1, 0x3c, 0x10c, 0x67, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @empty, {[@cipso={0x86, 0x79, 0x2, [{0x0, 0xb, "4a4165d8aa3ec1860d"}, {0x1, 0x5, "0b0f40"}, {0x2, 0xe, "489222ca20140052f896ebc5"}, {0x0, 0x11, "e54aaee4f451b13add3e0dd80a6350"}, {0x3, 0xb, "b161130b767c14874a"}, {0x6, 0x4, "59d0"}, {0x7, 0xf, "fa6c1d5d5739273ee56daea78c"}, {0x0, 0x7, "d4d19beef9"}, {0x5, 0xd, "edf9b8db3f421da2d60e5b"}, {0x7, 0x12, "ee6c316c5ed82b7a3b27bf0591982064"}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x8b, [@private=0xa010100, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x48, 0xffffffffffffffff, [{0x7, 0x9, "bb5d898c824c4d"}, {0x5, 0xe, "08a7beef3b8d0798a8b6070b"}, {0x1, 0x11, "90223ac5ca30a926104e4ee9f05bab"}, {0x6, 0x9, "24d88acc809a99"}, {0x1, 0x11, "b399161732cdf835b7b76849830eff"}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x17, 0x82, [@broadcast, @local, @rand_addr=0x64010102, @rand_addr=0x64010100, @loopback]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route(r5, &(0x7f0000002a40)={&(0x7f0000002800), 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)=@RTM_NEWMDB={0x38, 0x54, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x2, 0x4, {@in6_addr=@private0, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000002a80)={0x3, 'vlan0\x00', {0x3}, 0x5}) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000002ac0)={0x2, {{0x2, 0x4e23, @broadcast}}, 0x0, 0x1, [{{0x2, 0x4e23, @empty}}]}, 0x110) pipe(&(0x7f0000002c00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f0000002c40)=r6) (async) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002cc0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000002d80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x38, r10, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) (async) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000002e80)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x38, 0x7, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x48000) (async) socket$packet(0x11, 0x2, 0x300) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x34, r3, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x26}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x44801) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002fc0)={'wpan0\x00'}) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000003040), r9) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f00000031c0)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003180)={&(0x7f0000003080)={0xe0, r11, 0x400, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x8d0) (async) r12 = openat$cgroup_ro(r2, &(0x7f0000003200)='freezer.parent_freezing\x00', 0x0, 0x0) setsockopt$llc_int(r12, 0x10c, 0x3, &(0x7f0000003240)=0x80, 0x4) (async) getsockopt(r12, 0xfffffffd, 0x6, &(0x7f0000003280)=""/207, &(0x7f0000003380)=0xcf) 4.4319612s ago: executing program 2 (id=4500): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {0x0, 0x0, 0x0, @random}, {}]}) (async) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000000c0), 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9d9}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008000) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x1, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048010}, 0x4000004) (async) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, 0x4, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x190, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x78d5}, {0x6, 0x11, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0x544}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffd}, {0x6, 0x11, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xefc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffe}, {0x6, 0x11, 0xe45}}]}, 0x190}, 0x1, 0x0, 0x0, 0x20000081}, 0x20000810) (async) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000740), &(0x7f0000000780)=0x4) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000007c0)=@req={0xffff0000, 0x7fffffff, 0x5, 0x861}, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x2e, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0x4b}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0xa, 0x5, 0x1, 0x50, 0x4}, @call={0x85, 0x0, 0x0, 0x9d}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x6}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x6}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7aa7552a}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000009c0)='GPL\x00', 0x800, 0x61, &(0x7f0000000a00)=""/97, 0x82000, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000ac0)={0x1, 0x0, 0xffff7d49}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b00)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000b40)=[{0x2, 0x5, 0xe, 0x7}, {0x1, 0x1, 0xf, 0x9}, {0x3, 0x2, 0x7, 0x4}]}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c40)={&(0x7f0000000800)='kvm_set_spte_hva\x00', r6, 0x0, 0xffffffff}, 0x18) (async) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='cpu.stat\x00', 0x0, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r5) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10200110}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x7c, r8, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x40, 0x8}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000e40)=0x2) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e80)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x1, '\x00', 0x0, r7, 0x0, 0x1, 0x1}, 0x50) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x30, r9, 0x7489b000) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000f00), &(0x7f0000000f40)=0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r10, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x28, r8, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x61ef}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000001}, 0x801) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x58, 0x5, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040881) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000011c0), 0x311001, 0x0) ioctl$TUNSETVNETBE(r11, 0x400454de, &(0x7f0000001200)=0x1) listen(r10, 0x9) 4.428999355s ago: executing program 3 (id=4501): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x1, 0x0, &(0x7f00000001c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYRES64=r0], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r2 = socket(0x848000000015, 0x805, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x10}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) 4.370309393s ago: executing program 0 (id=4502): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket(0x1d, 0x2, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x6a, 0x10, 0x0, &(0x7f0000000080)) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r1, 0x32b, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 4.339188243s ago: executing program 2 (id=4503): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r3 = socket$rxrpc(0x21, 0x2, 0x2) recvfrom$rxrpc(r3, &(0x7f0000001180)=""/4096, 0x1000, 0x40012082, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0xb, @private2, 0x1}}, 0x24) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x40) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r5, &(0x7f0000000900)={@val={0x0, 0x800}, @val={0x1, 0x5, 0x6, 0x3, 0x80, 0x6}, @mpls={[], @ipv6=@icmpv6={0x2, 0x6, "a88a5c", 0x60, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x26}, {[], @dest_unreach={0x1, 0x5, 0x0, 0x6, '\x00', {0x4, 0x6, "31ef2d", 0x2, 0x0, 0x1, @private0, @mcast1, [@hopopts={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0xd1e2}, @enc_lim={0x4, 0x1, 0x2}, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x9}]}, @dstopts={0x67, 0x0, '\x00', [@ra={0x5, 0x2, 0x7}]}]}}}}}}, 0x96) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x2}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x48}}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 4.305155653s ago: executing program 1 (id=4504): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x79, "9d4625107f756ac4f28f3b65ca2a123101464bd790a231ee31b0947ecc67ef0450b8eae8011289a0e1d5fa7871e00c4d5a3d895136a9e6a492dec1d9f765880a197b833d2fc13ca5d64e42253f9ba8eb497a112c0efeffc1cd87e8e39ec2c9f2074d58d6e55a1a6474d713162991c1946946cd44281bc0f0f0"}, &(0x7f0000000180)=0x81) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000000)) 4.253970835s ago: executing program 3 (id=4505): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) accept4(r1, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x40090, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001d000137440000000000487007"], 0x14}}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) ppoll(&(0x7f0000000000)=[{r2, 0x8150}, {r0, 0x14a0}, {r2, 0x4008}, {r0, 0x400}, {r4, 0x440}, {r2, 0x8000}, {r0, 0x110}, {r2, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x7ff]}, 0x8) recvmmsg(r2, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) getsockopt(r0, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) 4.253611267s ago: executing program 4 (id=4506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @my=0x0}, 0x10, 0x80000) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000400)={0x0, 0x8001, 0x100}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000800)='br_fdb_add\x00', r3, 0x0, 0x8ca}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xd9, &(0x7f0000000300)={@multicast, @broadcast, @void, {@llc_tr={0x11, {@llc={0xdc, 0xf4, "b8", "e883948d0124e836c0321552007e38c5190179fba2ea44816e6e5ca53b66d9dcbfeedad83481122a7cd3e251a79a4eca8335ee78c139b522f5a26c85161bfd65609d291fc9404947b73282ab682f5afdb6b423525e723876b1fcc61a1fab040c1b4c6c52734db1cc7958aec80557dd1ecfcda8fb9fa11fee45e7db4b45037d7ebeeaf41bbcb67948db7a524afcebba99fc980ed1d66e30f5e4b9769855a7b37320959066cda9b3ce5127050d776b751d4ae16ea8ad1f81cb68c76797051a24e103473684fe48e88a"}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r10, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r9) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x20, 0x5a, 0x113, 0x0, 0x0, {}, [@nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601010000000000000000000000000c000780050015000900000005991f860b2d7078da06fe0001000600000800000500031b001e05000400000000000900020073797a3000000000100003006861"], 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x224e, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 4.112271638s ago: executing program 1 (id=4507): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8794}, {{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000240)}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000000080)=""/222, 0xde}, {&(0x7f0000001a00)=""/4106, 0x100a}, {&(0x7f0000003e00)=""/4097, 0x1001}, {&(0x7f0000000480)=""/87, 0x57}, {&(0x7f0000000800)=""/147, 0x93}], 0x6}, 0xb1}, {{0x0, 0x0, 0x0}, 0x4a}], 0x8, 0x40000000, 0x0) 4.047964856s ago: executing program 0 (id=4508): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0x84, 0x5}], 0x10}}], 0x2, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0xea60}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 3.721940053s ago: executing program 0 (id=4509): sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc8, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'netpci0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @empty, 0x400}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @private0}}}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8004}, 0x4004) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0xfffffffa}]}, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) (async) write$nci(r5, &(0x7f0000000280)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x1, 0x2, 0x4, 0x4, {0x2, 0x7, 0xf, 0x3}}, 0x7) write$tun(r4, &(0x7f0000000240)=ANY=[], 0xfdef) (async) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) (async) r10 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r10, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x10) (async) bind$tipc(r10, &(0x7f0000000000)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x43}}}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000000)={0x6, 'wg1\x00', {0x4}, 0x1}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRESDEC=r11, @ANYBLOB="400d0000000000002800128008000100687372001c00028008000200", @ANYRES32=r11, @ANYRES64=r9, @ANYRES32=r9], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) 3.719709309s ago: executing program 1 (id=4510): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000940)=@generic={&(0x7f0000000780)='./file0\x00', 0x0, 0x8}, 0x18) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x1000000c}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x13, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000400)='syzkaller\x00', 0x8001, 0x5d, &(0x7f0000000680)=""/93, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, r3, 0x8, &(0x7f0000000700)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0xa, 0xc2e4, 0x10001}, 0x10, 0x0, r4, 0xa, &(0x7f0000000980)=[r5], &(0x7f00000009c0)=[{0x2, 0x1, 0xc, 0x9}, {0x3, 0x4, 0x0, 0xb}, {0x1, 0x4, 0x9, 0xb}, {0x4, 0x1, 0x8, 0x9}, {0x5, 0x2, 0x0, 0xa}, {0x5, 0x2, 0x3, 0xa}, {0x1, 0x1, 0x2, 0x3}, {0x80003, 0x4, 0x5, 0x2}, {0x0, 0x5, 0x0, 0xb}, {0x1, 0x5, 0xa}], 0x10, 0x5c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000001c0)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x2c, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x91, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x90) ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000100)=0x2000004) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200", 0x5e, 0x0, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000b80)=0x100000) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x800, 0x0, 0x7}, 0x20) pwritev(r9, &(0x7f0000000540)=[{&(0x7f0000000580)='\x00!', 0x2}], 0x1, 0x7, 0xffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r12, 0x6, 0xd, &(0x7f0000000000)="b86b", 0x2) setsockopt$inet6_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0x304}, "e9b172ecf2655b52", "7712b91180acb093fb6b48dce5ba7c41", "0711e4b2", "e9190a5ace69e884"}, 0x28) setsockopt$inet6_tcp_int(r12, 0x6, 0x22, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f0000000240)=""/240, 0xf0, 0x0, &(0x7f00000000c0)}}, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r8, 0xc0389423, &(0x7f0000000080)={0x3, 0x20, [0xf94c, 0x0, 0x5, 0x2], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]}) 3.391276178s ago: executing program 3 (id=4511): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x40, &(0x7f0000000200)=""/64, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x24b40, r0}, 0x90) 3.243223203s ago: executing program 3 (id=4512): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000071116200000000008510000002000000a50000000500000095000000000000009500a5050000000078432dd442f68ba7fe2d282dc5bd6363a98aecd4b0deda447fc21574f82c7ff3eac5b814f85708ac7765aba5cb99845d8d1de7b9aefaa8b749ef36251fbe292c7e339c9d436dbdd3bcfa4c0b42413a1b5693c9ab00b0973b57cbf344499e932f11ea0126896b99df066fc1"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00'], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x6}, 0x8) write$nbd(r6, &(0x7f0000000400)=ANY=[], 0xb4) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000009200)=@delchain={0x3c74, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c44, 0x2, [@TCA_BASIC_ACT={0x934, 0x3, [@m_skbmod={0x1a0, 0x12, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0x800, 0x2, 0x7, 0x341}, 0xe}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x103, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0xac, 0x1f, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}]}, {0x76, 0x6, "8beb4aa2dc4431c32dbfe18c31f027acb4c268045089b4156386691393dda471ff6684f4e6723e3fdceda664e16d82c83c7f623b8e39035b4d103e1b460cd980026d3686a23818d2123432309e2a897bd65b9cd8642511561ad3ed177d176b4ac88e13aac344c30b6bd5c7a46bd7a99b988b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_vlan={0xc4, 0x1e, 0x0, 0x0, {{0x9}, {0x5c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8000, 0x4, 0x3, 0x1000, 0x2}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x773}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xd, 0x3, 0x4, 0x6, 0xfff}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa52}]}, {0x3f, 0x6, "9bbbe5d443c156f7073c35be6d1fb78fc16dc8a4d1c96329c86b30af44059e381b39ea71d90e96117ac3d113771d787350844f4bffbbe053626a32"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0x2d8, 0x6, 0x0, 0x0, {{0x7}, {0x214, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xc3, 0x6, {0x0, 'raw\x00', 0x1e, 0xfb3b, "c6f8be083260f89b7f194c33d3e706d8131e2087a0f50590a2d2d80a7e450985ffe02c9ff02dea87c8760f0190f993a543efcda632396fa4a5412c3b465af694e3dc997a2530350496c99da5ee40355afceeb7209e34e64f97a7a2d0fee0ba5fe1c4af41deba2e27361e4433721d2bc53ce14705bde4916674875d31f7287cc8f9cbda60190073599f74b3921370cf8da61972c563c1eff478"}}, @TCA_IPT_INDEX={0x8, 0x3, 0xa0000000}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0xea, 0x6, {0x80, 'nat\x00', 0x5, 0xf, "53e7ec41992559b80b6d9a5b96f240a4bcc329a5159726ff5d9033a8372dab01caca2d4557424b02e0ff7958b1831c933c71be9d85211e1a9658a623b71e51e9057d7808170c863d31d068a3caec4cfab05628720f3f66a94251849104863844a951bcab2e1e1ac265f9bb9c15e9d23258347ce9a14cebbfda917ad50d032939bc392793fdf1b981e8d47b94ff50cf32c7ac7d580412dd4e4c29312497f2060aa1a3678faafcc4074f65ed7017b9763833b7044bff747ee6f7e807707365063e"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7f}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x9d, 0x6, "d55953973ec013e8141192cd7f1c3504d328d8cc42610582270d7bd6a626c2b1b42bf3f0efae565768e8811fc3ec15fea7dc5b51256d276f6bfc88a55a6051b51b26d4126b24f91c080fed736daab4d0413847010cb6ce3f26c59bdda562d0b59c86304a781392d67ffe6f1bfb409203be58d129b704838bc597083bb0bb6c368655c42adb80331ad520fa1eaf59f356ea026a8644077faec9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0xdc, 0x2, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xe, 0xfffffffffffffff5, 0x80, 0x8}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3c}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x9, 0x5, 0x5, 0xffff}, @local, @multicast2, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x4, 0x20000000, 0x3ff, 0xf793}, @private=0xa010102, @broadcast, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x3, 0x1, 0x0, 0x8}, @private=0xa010100, @rand_addr=0x64010101, 0xffffff00, 0x1}}]}, {0x14, 0x6, "0240ee2a9b87653964fe8f9c3b25ec39"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ife={0xcc, 0x1c, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa}]}, {0x96, 0x6, "7d34c34ec05925c2ecf339be6dbdfa5a44cdee3f5a29b1be9d89bd2b1a4c341e713baafd82652f71dace40e7c26f58708cee6851d2f67b04a2233b885379ce3eb822d6b462ec983bf5abb11e060cbfbabc4ef6c3c35121252bf8e7432d84c019a3b026ed4efcd23f4a0603543614a9bb6256e18d16024ecf21dba1919f60fb8ae0a33dbdf48ed48c60eb229fd4406852deaa"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0x13c, 0x9, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x349}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x0, 0x6, 0x2f, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x1, 0x2, 0x2, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x0, 0x7, 0x40, 0x7fff}}]}, {0xba, 0x6, "54858b366ec1d409a4a06f6c9320bf87939744823b46d0bf6204104e604705a9438c23e3e7a86ce2f888951e5bd34b50ca13f0500891d3e46651c7dd2c3db6d16689c6ba8f3ff5a25497af3442e1201333fea4a3f06d70667a74d31f584d8776cb48def9b2e884f3d0046907981d5abe384dd9b55e2c18160b58fda0c5bc1234339f7914d893debd0244900925951c8bba9e84dde691b6237f24d256c86a6934534aaa8944ff94d7519cf0f09190e25319ce6d51d5dc"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0x64, 0x7, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xd832}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x10}]}, {0x28, 0x6, "086469307e88bb644a932a1e912e9c4fd19a535ba72b697619a39d2ef3a796bd5e0742a5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BASIC_EMATCHES={0x125c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x94, 0x2, 0x0, 0x1, [@TCF_EM_META={0x90, 0x2, 0x0, 0x0, {{0x1ff, 0x4, 0xff81}, [@TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="535fcb5c6e7c", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x7, 0x2}, {0x7, 0x56, 0x3}}}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_VAR="e02dcc39", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="71ee1572"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x40, 0x18}, {0x7, 0x9, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x81, 0x4}, {0x0, 0x2, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0xea}, {0x0, 0x22, 0x1}}}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="4f0181", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="c6c7765c53ef", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x9, 0x1}, {0x3, 0x98, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x8, 0x2}, {0xfff8, 0xc0}}}]}}]}, @TCA_EMATCH_TREE_LIST={0x1150, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x18, 0x1, 0x0, 0x0, {{0x4, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x1, 0x0, 0x2}}}, @TCF_EM_U32={0x1c, 0x9, 0x0, 0x0, {{0x9, 0x3, 0x1ff}, {0x9, 0x8, 0x800, 0xd6d2}}}, @TCF_EM_CONTAINER={0x7c, 0x1, 0x0, 0x0, {{0x3ff}, "6617ae561af95277e4e64877ce1e9e57a3b520c9c85672fc33f02fd441ea604b3117213a60c2885a6d92afbc2706649f5720c00ad65b5fdb06616c2a16793c8411eb055172f5e3e5eb334e55287d8a1d189305cfae2b3345309eecd72b21c708633113baa12d83317031d573eeb7"}}, @TCF_EM_META={0x80, 0x1, 0x0, 0x0, {{0x622, 0x4, 0x73}, [@TCA_EM_META_RVALUE={0x2b, 0x3, [@TCF_META_TYPE_VAR="a0bd2b", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="efb99e54", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="7dc9341ae39dbcbf", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_VAR="2e0f3c", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="3e39a3b8ee78e70ef8", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="b23a8bee9a", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="5acd7681"]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_VAR="91a7b568e64640ff"]}]}}, @TCF_EM_CONTAINER={0x100c, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x5}, "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"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8001}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x3, 0x7ff}, {0x4, 0x2, 0x401, 0x1000}}}]}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_META={0x40, 0x2, 0x0, 0x0, {{0x2, 0x4, 0x3}, [@TCA_EM_META_RVALUE={0x23, 0x3, [@TCF_META_TYPE_VAR="88fb9634f2e3c475aaf0", @TCF_META_TYPE_VAR="0bec7fbe5a63ce", @TCF_META_TYPE_VAR="c1", @TCF_META_TYPE_VAR="1d", @TCF_META_TYPE_VAR="ee415fce", @TCF_META_TYPE_VAR="007e7df4d4677b58"]}, @TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_VAR=',D', @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="bd", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_BASIC_ACT={0x1460, 0x3, [@m_skbedit={0xcc, 0xd, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe, 0x10}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x101, 0xffffffff, 0x7, 0x1, 0x1}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}]}, {0x70, 0x6, "d1cdb7e56195df55a573f1531191e2ca466a8daad79f264cd8d25f57042d29e9f645edae2b895be8f6643e924f520cfe064fecf4ce5d5e36bcdf447dca4a274318f2b784913ba319153aea536e0eb21b165b0f5f867b031d8f20663bebbd7e9cfae351ecb613393deb644ecf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0xf4, 0xa, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x9}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x26}}]}, {0xbc, 0x6, "b12c522b68422aec678d7c702e7e5b4af350abb501a702a0ab0213061fc0ddacf16f4673680de832d5db7213176e11399e2bfd014c67c0e0ef5d22e98b18279a355c556c86408ecdbf165f0b1e5cf402c4c2c77087fb6039c92f6030dd7182721993d9e948a04d9e84523394a4a763e61964741c8cf1a9cafdab7322b971e3bead940532c06c9f51715f6b7245450415e379d0eabddb43258244496e3f1b9dde2c71d89a55b70d56b513326125757f5a4fb8ab465e784e19"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_xt={0x7c, 0x4, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x8, 'raw\x00', 0x6, 0x1}}, @TCA_IPT_HOOK={0x8}]}, {0x1d, 0x6, "7296d27527ad8593cd84245c1f05fdfa935881ab9fb4c72269"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_csum={0x168, 0xa, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x80000001, 0x8, 0x0, 0x6}, 0x5d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x1, 0x5, 0x4}, 0x40}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffd, 0xfffffd43, 0xe, 0x8d6, 0x1}, 0x4f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb, 0x1, 0x5, 0x4, 0x8b}, 0x60}}]}, {0xcc, 0x6, "14fefa03627412b5e7131878a4d83f601e81b908e18832829f6cad2e51f568dded78ed1f557401d63f119c03a599f4a286a78d035353d96d52a6fad70f2c24967b922ef67db1008c54714bae3b7ab50eb8b4b29bcc610efd96784277ced9f38341a0da304be4e343638f93cb45156382379003d464d7a7f30ae9d891d08758228775ee89a7465219a8a12c882cf71009b1fba311428d0a1fd544afdcec5386e0eb0e2355cbe4173715892e55f0b2049ef4305016f769d60d6e3c85957e08488c21824a35adc8dce9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_pedit={0xf54, 0x13, 0x0, 0x0, {{0xa}, {0xe6c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x7f, 0x5, 0x20000000, 0x6}, 0xb5, 0x7, [{0x3, 0x9, 0x1, 0x1, 0x2, 0x1000}, {0x2d4, 0x6, 0xb535, 0xfff, 0xb}, {0x0, 0x9, 0x4, 0x101, 0x460, 0x2}]}, [{0xd5d, 0xcc92, 0x0, 0x9, 0x8, 0x7}, {0x4, 0x8, 0x9, 0x3, 0x0, 0x9}, {0x2, 0x3, 0x4, 0x5, 0x2, 0x10000}, {0x7, 0x0, 0x0, 0x0, 0x80000000, 0x4f7}, {0x1, 0x7ff, 0x40, 0x4, 0x3, 0x9}, {0xfffffffc, 0x4, 0x80000001, 0x16c9, 0x4, 0x6}, {0x2, 0x3, 0xf, 0x8, 0xb6f, 0x1ff}, {0x800, 0x5, 0x2, 0x4, 0x80000000, 0x3}, {0x4, 0x1, 0x2, 0x1, 0x0, 0x6}, {0x3, 0xc, 0x60, 0x4, 0x4, 0x8}, {0x8, 0x7, 0x6, 0x40, 0x6970, 0x4}, {0xe994, 0x7, 0x80000001, 0xfffffbff, 0x5, 0x3ff}, {0x2, 0x1fb0, 0x6, 0x1, 0x101, 0xe2}, {0x10, 0x7, 0x10001, 0x1, 0x5, 0x9}, {0x1, 0x800, 0x7fff, 0x8, 0x4, 0x8}, {0x800, 0x200, 0x6, 0x5, 0x0, 0xffffffff}, {0x3, 0x1, 0x1, 0xc4f, 0x8001, 0x6}, {0x200, 0xffffa0ca, 0x2, 0x6, 0x40, 0x1cd1}, {0x4, 0x9, 0x430, 0x5, 0x3}, {0x9, 0x0, 0x9, 0xfffffff8, 0x8001, 0xffff}, {0x7, 0x101, 0xe9d6, 0xffff, 0x6, 0x7fff}, {0x9, 0x4, 0x1, 0x3ff, 0xa6, 0x6}, {0x9, 0xc81b, 0x3ff, 0x5, 0xffff, 0x7ff}, {0x1, 0xa1, 0x7fffffff, 0x96, 0x625, 0xd8}, {0x101, 0x46b7, 0x6, 0x0, 0x6, 0x8}, {0xb2, 0x1, 0xed0, 0x4, 0x5, 0x80}, {0x4, 0x9, 0x177, 0x7, 0x5, 0x9d}, {0x0, 0x6, 0x3, 0x6, 0x7, 0x2}, {0x3, 0x0, 0x7, 0xc, 0x0, 0x6}, {0xffffa085, 0x9, 0xc, 0xfbaa, 0xfffffff6, 0x1ff}, {0x0, 0xfffffff9, 0x3, 0x4, 0x3, 0x6}, {0xf53, 0x3, 0x4a2, 0x1, 0x8000, 0x7}, {0x4, 0x3, 0x90, 0xccf1, 0x7, 0xfffffffe}, {0x3, 0x1ff, 0x8, 0x4, 0x49f4, 0x2}, {0x2, 0x1, 0x1, 0xffffff9c, 0x7f, 0xffffff81}, {0x9, 0x8, 0x5, 0xcff1, 0xffffffff}, {0x7, 0x5, 0x2, 0x7, 0x3, 0x3}, {0xc96, 0x9, 0x86b, 0xfffff66d, 0x10001, 0x100}, {0x6, 0x7, 0x1ff, 0x8001, 0xf139}, {0x4, 0x80, 0x0, 0x10, 0x3, 0x3ff}, {0x7f, 0x10000, 0x3, 0x9, 0xef2, 0x5}, {0x7, 0x9, 0x6, 0x5, 0xfffff800, 0x100}, {0x6, 0x7, 0x7fff, 0x6, 0x7, 0xb3fd}, {0x2, 0x8f66, 0xc8, 0x10000, 0x5, 0xfffffffb}, {0xffffffff, 0x1, 0x7, 0x7, 0x7, 0x4}, {0x2, 0xd161, 0xffff7062, 0x3, 0x30da, 0xff}, {0x20000, 0x8, 0x10001, 0x1, 0x6, 0x9}, {0xffff, 0x78451bec, 0x4, 0x653, 0x200, 0x401}, {0x200, 0x6, 0xfffffffc, 0x1, 0x2, 0x4}, {0x9, 0x5dda, 0x6, 0x1, 0xfffffffe, 0x5}, {0xce, 0x0, 0x4, 0x3, 0x9, 0x5}, {0x1, 0x4, 0xffff, 0x9, 0x6, 0x40}, {0x3, 0x2, 0xfff, 0xfffffff7, 0xa, 0x2}, {0xfffffffe, 0x6, 0x8, 0x60, 0x7, 0x1000}, {0x1, 0x2, 0x8, 0x9000}, {0x1000000, 0x0, 0x1, 0x677, 0x4, 0x7}, {0xff, 0x200, 0x0, 0x2, 0x0, 0x2}, {0x7, 0x7, 0x7000000, 0x4, 0x6, 0xb}, {0xc, 0x0, 0x8, 0x10, 0x3, 0x5}, {0xfffffff0, 0xba8, 0x6, 0x8, 0xffffff7f, 0x4}, {0xfffffff6, 0x2, 0x4, 0x8, 0x80, 0x8}, {0x100, 0x9, 0xa901, 0x5, 0xfffffe01, 0x4}, {0x8, 0xfc1, 0x6, 0xa8, 0x6, 0x2}, {0x1, 0xde10, 0x64, 0xfffffe01, 0x979, 0xfffffff9}, {0x0, 0xca3, 0x214, 0x8, 0x3, 0x2c9}, {0x8, 0x134a, 0x8, 0x5, 0x3, 0x6}, {0xf17f, 0x1, 0x8, 0x8000, 0x5, 0x8000}, {0x6d, 0x401, 0xd8e, 0x3, 0x0, 0x8}, {0x4003, 0x9, 0x200, 0x8, 0x0, 0x2}, {0x3ff, 0xd2, 0x8b7e, 0x5f03, 0x7ff, 0x7}, {0x4, 0x5, 0x0, 0x10, 0x1, 0x3}, {0x8, 0x1, 0x3, 0x1000, 0x7f, 0x9}, {0x64, 0x4, 0x4, 0x3, 0x5, 0x5}, {0x800, 0x80000001, 0x5, 0x6, 0x2400, 0x3}, {0x3, 0x0, 0x3, 0x4, 0xb6ab, 0x7fffffff}, {0x80000000, 0xfffffa02, 0xd7, 0x3ff, 0x9, 0x401}, {0xe0, 0x80000000, 0x3, 0x0, 0x89, 0x34c}, {0x80, 0x6, 0x3, 0x7, 0x200, 0x4b7}, {0x4d01, 0x5, 0x7, 0x79, 0x0, 0x1}, {0x3, 0x7c337b74, 0x6, 0x8, 0xc, 0x3}, {0x6, 0x80, 0x8, 0xfffffffa, 0x18a61bc1, 0xe}, {0xffffff7f, 0xd, 0x35, 0x7, 0x7fffffff, 0xfffffffa}, {0x0, 0xb, 0x7679eca8, 0x6, 0x6, 0x78}, {0x3, 0x2f, 0x3, 0x8, 0x8000, 0x80000000}, {0x4, 0x9, 0x81, 0x7, 0x830, 0xa0000000}, {0xbf8d, 0x7f, 0x3, 0xe, 0x0, 0xe}, {0x6, 0x7fff, 0xf8, 0x3, 0x443d, 0x2}, {0xe96, 0x4, 0x429, 0x8, 0x6, 0xa}, {0x3, 0x468fc2d7, 0x9, 0x8, 0x100, 0x5}, {0x7ff, 0x8, 0x800, 0x8, 0x9, 0xaada}, {0xb36, 0x0, 0x0, 0x9, 0x1000, 0x7}, {0x2, 0x4, 0xbe72, 0xbf1d, 0x1, 0x1ff}, {0x8, 0x80000000, 0x6ae49b71, 0x49, 0x4, 0x9}, {0x3, 0x100, 0x3ff, 0xfffffff8, 0x8001, 0x400}, {0x3, 0x80000000, 0x9, 0xdb9, 0x3}, {0x3, 0xc1, 0x2, 0x8, 0x71e, 0x7}, {0x2, 0x3, 0x5, 0x4, 0x8, 0x25}, {0xdd51, 0x10001, 0x1782, 0x3, 0x7, 0x2}, {0x0, 0x7, 0x7, 0x2, 0x2, 0x6}, {0x5, 0x0, 0xaa, 0xa236, 0x101, 0x2}, {0x1, 0x2, 0x5, 0x5, 0x7299, 0x80}, {0x401, 0x3, 0x3, 0x6, 0x3e77, 0x80}, {0x20000000, 0x3, 0x9, 0xffffff95, 0xa9a, 0x80000000}, {0x400, 0x5, 0x2, 0x7, 0x10000, 0xb}, {0x9, 0x442d, 0x7, 0x401}, {0x80000001, 0x7fff, 0x4, 0x4, 0x4, 0x2}, {0x4, 0x0, 0x5, 0x8, 0x7fff, 0x7}, {0x6, 0x7f, 0x3, 0x2, 0xe, 0x9}, {0x7, 0x9, 0x288, 0x80000001, 0x8000, 0xfffffff4}, {0x7, 0x8, 0x8, 0xffffffcc, 0xd9, 0x4}, {0x9, 0x4, 0x8, 0x2, 0x0, 0x6}, {0x1, 0x8, 0x3, 0x3, 0x2633, 0x4}, {0x5, 0x4, 0x2, 0x7, 0x6, 0x8a6}, {0x5, 0x3, 0x6, 0x3, 0x4, 0x7fffffff}, {0xfffff23b, 0x2, 0x2, 0x45, 0x5, 0x6}, {0x5, 0xa, 0x7f, 0x5, 0x401, 0x2}, {0x4f, 0xffff, 0x1, 0xffff, 0x7, 0x4}, {0x5, 0x4, 0x4, 0xa, 0xb, 0x85ece30}, {0x101, 0x80, 0x80000000, 0x3, 0x0, 0x4}, {0xfffffffd, 0x88, 0x2, 0x3, 0x8000, 0x10}, {0x4, 0x7fff, 0x3, 0x6, 0x3, 0x1}, {0x2, 0x1, 0x40, 0x3, 0x1ff, 0x2}, {0x3ff, 0xfffffffb, 0x81, 0x1, 0x8}, {0x0, 0x2, 0x101, 0x3, 0x8, 0x80000001}, {0x6, 0x8, 0xa, 0xfc98, 0x9}, {0xffffffff, 0x0, 0x4, 0x560, 0x95f, 0x3}, {0x400, 0x7ff, 0x367d, 0x9, 0xfffffffd, 0xffff}, {0xe5, 0x69, 0xfffffffb, 0x1, 0x101, 0xffffffff}], [{0x4, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x97cf6de154c880bb}, {0x2}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {}, {0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x1}, {0x3}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x3}, {0x5}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x6}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x1, 0x2}, {0x5, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x2}, {0x1}, {0x2}, {}, {}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x1, 0x2}, {0x1}, {0x4, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x2}, {}, {0x5}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x4}, {0x2}, {0x5}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x4}, {0x3, 0x1}]}}]}, {0xbe, 0x6, "2aa751ebc6eb4635055954419155d5f368b44d6aa55c4199e9b0d5082ebe4394d67763b5ada663a4fed202ad8b16c5b45cfe365eb2790cacf9b7e37ae0b8a895e21681cd5b879813122b5b6319fd76913ff51501c45d44381098ead4d41d78ffbaf8a0e3cf4522f3bd7f381cd0879adc2be876a7d337af938159333ec4154616803310af1ca406e86d6024cd9e90231e1c0e3941df6c7e836f164659efa8402737f679180a874ef73ee8c07f5f47795e0af46ca5e67371e5b692"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_csum={0x164, 0x2, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x6ca, 0x0, 0x4, 0x4}, 0x66}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0xff, 0x20000000, 0x3, 0x6}, 0x4a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x0, 0x8, 0xac8, 0x80000000}, 0x31}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x7f, 0x2, 0x9, 0x9}, 0x78}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xfab, 0x3, 0x8, 0x1}, 0x74}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x8001, 0x8, 0x3, 0x9}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x359a43ad, 0x20000000, 0x1, 0x85fc}, 0x5}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x0, 0xa25f4423aee71cc4, 0x4, 0x2}, 0x3f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xffffffff, 0xffffffffffffffff, 0x4, 0x9}, 0x19}}]}, {0x3b, 0x6, "211543d41b916769a58ce5b48bcd20e1be615e0930fc508686dce7a6b57108233310212607b906d63784a4db2ba86231010db920a95fae"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5}}}}]}, @TCA_BASIC_POLICE={0x82c, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0xff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffe00, 0x3, 0x5, 0x8000, 0x4, 0x2268, 0x0, 0x0, 0x6, 0x401, 0xf, 0x10001, 0x9, 0x4, 0x1, 0xf, 0x6, 0x1, 0xfff, 0x7, 0x8000, 0x3, 0x3, 0x1, 0x0, 0xe, 0x4, 0x7, 0x9, 0x0, 0xcd7, 0x2, 0x1, 0x8, 0x3, 0x7, 0x3, 0x97bc, 0x8, 0x1, 0x9, 0x6, 0xa1, 0x7fff, 0x1c788611, 0xffffffff, 0x9, 0x9, 0x2, 0x9, 0x1, 0x3f0, 0x0, 0x4, 0x9, 0x28000, 0x7, 0x7f, 0x9, 0x9, 0xb, 0x0, 0x100, 0x55, 0x0, 0xd3e, 0xa, 0x401, 0x5, 0xffffffff, 0x2, 0xd, 0xfffff04e, 0x7, 0x8, 0x3, 0x79a8, 0x43e4453e, 0x4, 0x80000000, 0x8, 0x0, 0x5, 0x5, 0x96, 0xfff, 0x400, 0x5, 0xe, 0x5, 0x5, 0x2, 0x400, 0xa0d6, 0x1, 0x2f, 0x8, 0x0, 0x3, 0x3b, 0x6, 0x800, 0xcad, 0x5, 0x44cc882c, 0x7c7c, 0x3, 0x8da, 0x6, 0x8, 0x68d4, 0x1, 0x0, 0x0, 0x1, 0x8, 0x5, 0x9, 0x0, 0x5, 0x2, 0x8, 0x9, 0x0, 0x6, 0x7ff, 0x6, 0x1, 0x4, 0x2, 0x5, 0x4, 0x4, 0x3, 0x4, 0x6, 0x8, 0x6, 0x8, 0x80, 0x6, 0x9, 0x4, 0x6, 0x401, 0x1, 0x2, 0x8f1, 0x3, 0x7fffffff, 0x1, 0x2, 0x40, 0xe, 0x7, 0x9ec, 0x1, 0x9, 0x1, 0x9e, 0x80000000, 0x2, 0x4, 0x5, 0x6, 0xfffffff9, 0xa3e, 0x0, 0x8, 0x8, 0x9, 0x3, 0x33, 0x9, 0x401, 0x7ff, 0x5, 0xe76, 0xb, 0xb, 0xfffffff8, 0xffffffff, 0x1, 0x5, 0x2dd0, 0xfffffffe, 0x5, 0xfffffff8, 0x3, 0x8, 0x4, 0x1, 0x564efa37, 0xf54, 0x6, 0x8, 0xfffffff0, 0x7d, 0x9, 0x3, 0x5, 0xd, 0x80000000, 0x2, 0x8, 0x8, 0x7, 0x3, 0x0, 0x5, 0x4, 0x100, 0x101, 0x6, 0x2, 0x4, 0x5, 0x1, 0xaa92, 0x60000, 0x8, 0x2, 0xfffffff8, 0x7a9e, 0x4, 0x8ef0, 0x400, 0x400, 0x6, 0x8001, 0x0, 0x3, 0xa, 0xfffffffb, 0x2, 0x8, 0x1, 0x660, 0x9, 0xc, 0x2, 0x6, 0x1, 0x2, 0x4, 0x2, 0x434, 0x80000000, 0xec, 0x9, 0xc49, 0x6, 0x7bd1, 0x5, 0xbb3, 0xffff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x6, 0xfffffff7, 0xe, 0x4, 0x80000001, 0x100000, 0x6, 0x9, 0xd, 0x4, 0x10001, 0x0, 0x100, 0x7, 0xf, 0x400, 0x1, 0x6, 0x2, 0xffff, 0xfffffffa, 0x475, 0x9, 0x2, 0xdc6, 0xfffffff9, 0x0, 0xfffffffa, 0x685, 0xe, 0x7fff, 0x6, 0x5, 0x10000, 0x7, 0x0, 0x89, 0x7, 0x5, 0x6787, 0x2, 0x400, 0xb, 0xd87, 0xe, 0xfffffffa, 0x64, 0xb, 0x3, 0x9, 0x7e3a, 0x6, 0x7, 0x6, 0x1, 0xd, 0x59, 0x0, 0x1, 0x101, 0x3, 0x3, 0x2, 0x0, 0x0, 0x6, 0x7, 0x1, 0x4, 0x81, 0x4e, 0x6, 0x7, 0x5, 0x0, 0xffffffff, 0x10, 0xaa, 0xb69b, 0x71b0, 0x0, 0x7f2f478a, 0x1, 0xfc, 0x6, 0x7, 0x7ff, 0x0, 0x6, 0x8, 0x800, 0x2, 0x400, 0x7ff, 0x3, 0x3, 0x3, 0x2, 0x2, 0x6, 0x9, 0xffffff57, 0x100, 0x100, 0x2, 0x84, 0xff, 0xfffffffa, 0x9, 0x2, 0xfff, 0x8, 0x5, 0x2, 0x4, 0x100, 0x2, 0x9, 0x9, 0x10, 0x1, 0x8, 0x7, 0x2202, 0x7ff, 0x2, 0x1, 0x7, 0x1, 0xd5f, 0x1, 0x6, 0xffff291e, 0x57e, 0x0, 0x0, 0x9, 0x253, 0xfffffffd, 0x1, 0x7, 0x6, 0x7fff, 0x1, 0xa0a, 0x9, 0x10000, 0x7, 0xdb1, 0x0, 0x800, 0x6, 0x1, 0x9, 0x4dd9, 0x8000, 0xffff8001, 0xffffffff, 0x307f, 0x5, 0x0, 0xfff, 0x7, 0x6fe, 0x1, 0x4, 0x197, 0x8, 0x7ff, 0x5, 0x1, 0x6, 0x3, 0x7, 0x49c, 0x6, 0xc, 0x6252a919, 0xffff, 0x10000, 0x7fff, 0x400, 0xf, 0xcb3, 0x2, 0x7, 0x3123, 0x0, 0x1, 0x4, 0x8323, 0xc03, 0x0, 0xf, 0x0, 0x2, 0xb0, 0x9, 0x7ff, 0x89af5ec, 0x2, 0x0, 0x5, 0xc84, 0x80000001, 0x3, 0x1, 0x8, 0x712b, 0xb546, 0x6, 0x400, 0x4, 0xa, 0x10000000, 0x3, 0xffffffff, 0x1ff, 0x6, 0x82b, 0x3, 0xfff, 0x7, 0x2, 0x4, 0x5, 0xfd000000, 0x1, 0x40, 0x8, 0x9, 0x8001, 0x4, 0x1, 0x6, 0x42, 0xd, 0x1, 0x3, 0x2, 0xffffff7f, 0x2, 0x1, 0x800, 0x0, 0xa, 0x9, 0x0, 0x1, 0x6, 0x5, 0x400, 0x1, 0x703, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0xfff3}}, @TCA_BASIC_POLICE={0x41c, 0x4, [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0xe, 0x1, 0xff, 0x8b871e6, 0x2, 0x84a, 0xc, 0x3, 0x77, 0x5b06, 0x2, 0x7, 0x272, 0x4, 0x3, 0x7, 0xfb8, 0x100, 0x8, 0x2, 0x7, 0x8f, 0x7, 0x7, 0x9, 0x3, 0x1d05, 0x5, 0x7, 0x80, 0xa4, 0x2, 0x7, 0x6, 0x7ff, 0x4, 0x0, 0x3, 0x4, 0x0, 0x3, 0x9, 0x3, 0x9, 0xb37, 0x9, 0x80000000, 0x6, 0x18, 0x0, 0x7f, 0x0, 0x5, 0x6b2a1b17, 0x7, 0x5, 0x200, 0x0, 0x1ff, 0x8286, 0x9, 0xfffff1b6, 0x7fff, 0x0, 0x7, 0x9a1, 0x10000, 0x6, 0x2, 0x9, 0x7, 0x8, 0x9, 0x9, 0x6, 0x131, 0x5, 0x0, 0x1d2, 0x6, 0x0, 0x6c, 0xc510, 0x4, 0xa91e, 0x5, 0xef7c, 0x2, 0x9d, 0x2, 0x70, 0x8, 0x6, 0x3b3, 0x5, 0x0, 0x9, 0x8, 0x6, 0x0, 0x7fff, 0xff, 0x2, 0xffff, 0x0, 0xd3, 0x8, 0x2, 0x7fffffff, 0x80, 0x7, 0xd6, 0x9, 0x400, 0x1, 0x800, 0x9, 0x4, 0xd2c, 0x2, 0x3, 0x2, 0x4, 0x26, 0x8, 0xe030, 0x0, 0x3, 0x3, 0x61, 0x1d0280, 0x9, 0x2, 0x4, 0x0, 0x1, 0x3, 0x81, 0xff, 0x3, 0xff, 0x7, 0x8, 0x2, 0x800, 0x8, 0x1, 0x7fff, 0x1191, 0x7, 0x1000, 0xfffffff4, 0xdcc, 0x3, 0x4, 0x2, 0xfffffff9, 0xba, 0x4, 0x6, 0xcd3f, 0x3, 0x5, 0x8, 0x3b, 0xfffffff7, 0x0, 0x79, 0x0, 0x5e1, 0x5, 0x10000, 0x709, 0x2, 0xb, 0x7, 0x7, 0x1, 0x40ac6, 0x10001, 0xfff, 0x4, 0x118, 0x8, 0x7c7, 0x4, 0x9, 0x8, 0x9, 0x10001, 0x8, 0x4, 0x41, 0x8, 0xd, 0x10000, 0x6, 0x0, 0x6, 0x9, 0x8, 0x3, 0x8, 0x1ff, 0x8, 0x2, 0x2, 0x2, 0x0, 0x0, 0x7, 0x75, 0x1, 0x200, 0x91, 0x9, 0x1200000, 0x3, 0x7, 0xb8, 0x3, 0x4, 0x40, 0x1, 0xec097496, 0xb0f, 0x4, 0x5209, 0x9831, 0x2, 0x7, 0x7, 0x4, 0xe, 0x1, 0xffff, 0xfd6, 0x200000, 0xfffffff0, 0x7, 0x9fde, 0x7c6, 0xfffff000, 0x2, 0x4, 0xa, 0xba0, 0x6, 0x8, 0x6, 0x2, 0x9, 0x8, 0x9, 0x8, 0xf9d5]}, @TCA_POLICE_PEAKRATE64={0xc}]}]}}]}, 0x3c74}}, 0x4040004) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r10, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000}]}) close(0x3) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000040801030400000000000000000000000600024000000000050003000000000000000240600800000000000000797a3000000000"], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0) recvmmsg(r8, &(0x7f0000004440)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x21, 0x0) close(0x3) 2.6539481s ago: executing program 4 (id=4513): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x842}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x4c}}, 0x4044080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) (async) sendto$inet6(r0, &(0x7f0000000a80)="87", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) (async) shutdown(r0, 0x1) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x2, 0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0xe67}, 0x8) (async) unshare(0x6a040000) (async) unshare(0x10000580) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="6eee55d3f20d4aeb8c8304c8e809df3fe1a2", 0x12}, {&(0x7f0000000280)="af04975300f42429176df41e21549c5d67686718cc19ad6447d6c0505523d8bf1ba2be4d9125d654770c30ac12afee52d48ef86cf73022396118501030be7d4448df524796661b2ccda853542a841c721f2485d3843b3a7f9ae77d0db6055e0669cabdf3a887c582f3a29f6ebb44be1a8b701b8eb185c9d8cf057a1db401746a85e254f3831c63bf5937c399dfa4a5d718eb1bb06798901ddefe40be0965b933504dd93d1d85120101cd16d110e224439b56ffd3ced14ccc3133d013f05bef005bd9338fb0ad3b886a4dacc54a7c8081bc8801b0681dd4d2b5f1cbb6f2f582f956ca2eedee3c913d432942", 0xeb}, {&(0x7f00000000c0)="33c6a7014e73cdff5fa4710eeebc52b80ad5b5ac6bc528590a3916f8", 0x1c}, {&(0x7f0000000100)="4fdccfb7f2294fefeb9ab63bc522a50d26e8bcdc41acf7de8a58428b4b", 0x1d}, {&(0x7f0000000ac0)="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", 0x1000}], 0x5, 0x0, 0x0, 0x5865}, 0x40) (async) unshare(0x10000400) (async) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 1.030004293s ago: executing program 4 (id=4514): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10) (async) r1 = accept(r0, 0x0, 0x0) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) (rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f00000001c0), &(0x7f00000002c0)=@tcp6=r1, 0x2}, 0x20) (async, rerun: 64) r3 = socket$rxrpc(0x21, 0x2, 0xa) (rerun: 64) accept4(r3, 0x0, 0x0, 0x800) 1.008025344s ago: executing program 2 (id=4515): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x30, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1f}]}, @nested={0x10, 0x4, 0x0, 0x1, [@nested={0xc, 0x65, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 898.052157ms ago: executing program 0 (id=4516): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x49, &(0x7f0000000040), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0xff3c}], 0x1}, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x44}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f0000000000)="10293d134065d9e2d10869839284a79dccfb68b72f3829066af9fd33d8787b7667", &(0x7f0000000080)=""/126, &(0x7f0000000180)="0e940b596528cf9caf543aa511fb07cf5cbba8b0637e36bf3b7905ec59c2d2390a8ec29b452904b878a302f8ebe8ee7a0d808be1c09cfa7b6bac564b64fc396338a4042427ac61e4c8dd30205df726602ef2a6609506024fc5bbdc4c2c6316e5bdc4cfe9abf7366fa72083bb3dad18daba26f290831a004223f6abb41c275cb18f6de589ed670082210a78220b06", &(0x7f00000002c0)="4a96dd2f54984c8e82210484ccd023bb69f2070489908001e464c5282f899ac6d7bca73f0ba4a467d35c142cc25033cb13b51d348bb53d73aacd595dfe25ba826df174f81680de09309474a5be0819a0092cc7df9ab12551405a35d6a3a928b44ada3015e3454a9c5acbc11a6091559efa63d105093cbe47a7d81cbf267aecf16808de1160da9173f1504e5ea6cb51232806250ea7987c1dedc387cd3d3c41c6fbf8a6a0da5b425726406981edfac55d48e0976a75fbb2ad075bc82d3e3f971eb850b30fe23f3f86", 0x80000001}, 0x38) 896.671265ms ago: executing program 1 (id=4517): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20040091}, 0x8000) accept4(r1, 0x0, 0x0, 0x0) (async) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x10448) (async) r3 = socket$inet(0xa, 0x801, 0x84) (async, rerun: 32) r4 = socket(0x15, 0x5, 0x0) (rerun: 32) getsockopt(r4, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0xffffff15) (async, rerun: 32) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (rerun: 32) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x13, 0x0, 0xfffffffd}}) (async) listen(r3, 0x8) 25.556828ms ago: executing program 2 (id=4518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$inet6(0xa, 0x1, 0x100) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) (async, rerun: 32) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x24) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) close(r3) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x88b5}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x65, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @empty}}}}}}, 0x26) 23.38932ms ago: executing program 3 (id=4519): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000640)={'ip_vti0\x00', 0x0, 0x1, 0x7800, 0x22b, 0x8, {{0x36, 0x4, 0x3, 0x5, 0xd8, 0x68, 0x0, 0x7, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x89, 0x9, "95129908d52cc3"}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0xe, "f21d2640a18c32777c6887b4"}, {0x0, 0xd, "7da66b145b0d1614b1be7b"}, {0x7, 0xc, "082aebd4591e26f35192"}, {0x6, 0x11, "44a100bac39a113910a39e704f1ae7"}]}, @end, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0xab, [@multicast2, @broadcast]}, @cipso={0x86, 0x33, 0x3, [{0x7, 0x10, "95433d4733bebdb09945faec1b12"}, {0x5, 0xa, "b35e49e2ef14ca7d"}, {0x0, 0x11, "632cde1fa02395d84dc78cec705b9b"}, {0x7, 0x2}]}, @timestamp={0x44, 0x1c, 0x81, 0x0, 0x2, [0x198, 0x3, 0x9, 0xfffffffd, 0x9, 0x5]}, @timestamp={0x44, 0x8, 0x85, 0x0, 0xa, [0x7fffffff]}, @timestamp_addr={0x44, 0x4, 0xaf, 0x1, 0x9}, @lsrr={0x83, 0xf, 0x9f, [@local, @multicast2, @multicast2]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newqdisc={0x140, 0x24, 0x20, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x1, 0x15}, {0x1, 0x91ee24f9e0e7cb2f}, {0x3, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x48c, 0x8, 0x3, 0x46, 0x4}, 0x0, 0x1, 0xfffffffb, 0x5, 0x8, 0x18, 0x1, 0x17, 0x4, 0x4fe90666, {0x7, 0xff, 0xfffffeff, 0x7, 0x5, 0xcfb}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x2}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_STAB={0x8c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xe, 0x1, 0x40000000, 0x1, 0x7ff, 0x6, 0x5}}, {0xe, 0x2, [0x55, 0x4, 0xdb06, 0x0, 0x80]}}, {{0x1c, 0x1, {0x1, 0xe, 0xff, 0x2d2, 0x2, 0x1, 0x3, 0x3}}, {0xa, 0x2, [0x5, 0x1ff, 0x8000]}}, {{0x1c, 0x1, {0x6, 0x7, 0x7, 0x4, 0x2, 0x5, 0xce, 0xa}}, {0x18, 0x2, [0x6, 0xae, 0x6, 0xe, 0x7fff, 0x990f, 0x8000, 0x9, 0x0, 0xdfa]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x401}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xb05}]}, 0x140}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/15], &(0x7f0000000280)='GPL\x00'}, 0x90) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000000)={@private1, 0x0}, &(0x7f0000000040)=0x14) pipe(&(0x7f0000000600)) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getqdisc={0x40, 0x26, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x3}, {0xfff2, 0xd}, {0x7}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) 21.789639ms ago: executing program 1 (id=4520): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004e00ff13"], 0x14}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004e00ff13"], 0x14}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 0s ago: executing program 4 (id=4521): r0 = socket(0xa, 0x3, 0x4) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendto$x25(r1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r2}) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x1ec, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffff6d6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff0}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xfffffff7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7500}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @remote, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa41e}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fc3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xad}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x30000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xee}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4009}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffff80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xaffe}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x57b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x94ec}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='ipvlan1\x00') kernel console output (not intermixed with test programs): net header or EtherType is required. [ 330.981937][T16427] netlink: 'syz.0.2839': attribute type 1 has an invalid length. [ 330.990433][T16427] netlink: 'syz.0.2839': attribute type 1 has an invalid length. [ 331.045878][T16437] netlink: 'syz.3.2842': attribute type 1 has an invalid length. [ 331.309296][T16453] tipc: Enabling of bearer rejected, already enabled [ 331.324332][T16453] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 331.623870][T16471] tipc: Enabled bearer , priority 0 [ 331.845038][T16471] tipc: Disabling bearer [ 331.863921][T16486] tipc: Enabling of bearer rejected, failed to enable media [ 332.035374][ T49] nci: nci_rx_work: unknown MT 0x1 [ 332.842977][T16516] vlan3: entered promiscuous mode [ 332.928080][T16521] pim6reg1: entered promiscuous mode [ 332.964829][T16521] pim6reg1: entered allmulticast mode [ 333.262470][T16554] netlink: 'syz.4.2874': attribute type 12 has an invalid length. [ 333.698826][T16592] __nla_validate_parse: 8 callbacks suppressed [ 333.698846][T16592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2883'. [ 333.771724][T16592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2883'. [ 333.801467][T16592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2883'. [ 333.884162][T16602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2887'. [ 333.929689][T16605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2887'. [ 334.137895][T16621] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2892'. [ 334.185483][T16621] netlink: 'syz.2.2892': attribute type 1 has an invalid length. [ 334.199564][T16625] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2893'. [ 334.208741][T16621] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2892'. [ 334.231008][T16621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2892'. [ 334.251636][T16625] gretap0: entered promiscuous mode [ 334.313489][T16634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2894'. [ 334.412739][T16641] tipc: Enabling of bearer rejected, already enabled [ 334.433652][T16641] tipc: Resetting bearer [ 334.751806][T16671] netlink: 'syz.2.2905': attribute type 1 has an invalid length. [ 335.293179][T16700] sctp: [Deprecated]: syz.0.2912 (pid 16700) Use of struct sctp_assoc_value in delayed_ack socket option. [ 335.293179][T16700] Use struct sctp_sack_info instead [ 335.450323][T16683] netlink: 'syz.3.2908': attribute type 1 has an invalid length. [ 335.834614][T16721] tipc: Enabled bearer , priority 0 [ 335.846542][T16716] syzkaller0: entered promiscuous mode [ 335.853340][T16716] syzkaller0: entered allmulticast mode [ 335.868692][T16724] netlink: 'syz.2.2920': attribute type 11 has an invalid length. [ 335.936262][T16719] tipc: Resetting bearer [ 336.001526][T16719] tipc: Disabling bearer [ 336.341644][T16748] tipc: Enabling of bearer rejected, already enabled [ 336.361191][T16749] tipc: Resetting bearer [ 336.537281][T16764] vlan2: entered allmulticast mode [ 336.545942][T16764] bridge_slave_0: entered allmulticast mode [ 336.642353][T16770] netlink: 'syz.4.2928': attribute type 11 has an invalid length. [ 336.668006][T16758] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 336.882375][T16777] sch_fq: defrate 0 ignored. [ 336.961182][T16787] C: renamed from lo [ 337.255095][T16812] netlink: 'syz.4.2942': attribute type 1 has an invalid length. [ 337.517001][T16834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.619684][T16849] netlink: 'syz.3.2952': attribute type 1 has an invalid length. [ 338.360450][T16892] netlink: 'syz.4.2963': attribute type 1 has an invalid length. [ 338.420541][T16894] netlink: 'syz.4.2963': attribute type 1 has an invalid length. [ 338.507303][T16897] hsr0 speed is unknown, defaulting to 1000 [ 338.592585][T16907] openvswitch: netlink: Message has 16 unknown bytes. [ 338.628970][T16907] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 338.670927][T16907] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 338.686019][T16907] gretap3: entered promiscuous mode [ 338.693672][T16907] gretap3: entered allmulticast mode [ 338.885361][T16921] __nla_validate_parse: 13 callbacks suppressed [ 338.885381][T16921] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2971'. [ 338.921328][T16921] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2971'. [ 339.589421][T16947] syz.3.2980 uses old SIOCAX25GETINFO [ 339.866423][T16897] lo speed is unknown, defaulting to 1000 [ 340.044851][T16966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2985'. [ 340.141683][T10998] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 340.153509][T10998] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 340.162190][T10998] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 340.172493][T16972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2985'. [ 340.183756][T10998] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 340.192153][T10998] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 340.347463][T16966] hsr_slave_0 (unregistering): left promiscuous mode [ 340.538474][T16968] hsr0 speed is unknown, defaulting to 1000 [ 341.105391][T16987] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2988'. [ 341.130838][T16986] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2988'. [ 341.262616][T16990] gre1: entered promiscuous mode [ 341.702867][T16994] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2991'. [ 341.812525][T16968] lo speed is unknown, defaulting to 1000 [ 341.967690][T16999] hsr0 speed is unknown, defaulting to 1000 [ 342.030075][T17001] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2993'. [ 342.253922][T10998] Bluetooth: hci5: command tx timeout [ 342.918873][T16999] lo speed is unknown, defaulting to 1000 [ 343.202493][T17028] tipc: Enabling of bearer rejected, already enabled [ 343.224375][T17029] tipc: Enabling of bearer rejected, already enabled [ 343.300181][T17037] Unsupported ieee802154 address type: 0 [ 343.322042][T16968] chnl_net:caif_netlink_parms(): no params data found [ 343.555103][T17051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3001'. [ 343.665586][T17048] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.696831][T17048] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.887441][T17048] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.897838][T17048] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.925975][T16968] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.940721][T16968] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.948036][T16968] bridge_slave_0: entered allmulticast mode [ 343.984613][T16968] bridge_slave_0: entered promiscuous mode [ 344.005217][T16968] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.016046][T16968] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.026493][T16968] bridge_slave_1: entered allmulticast mode [ 344.034456][T16968] bridge_slave_1: entered promiscuous mode [ 344.113688][T17048] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.124569][T17048] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.140789][T17072] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.254612][T17048] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.272926][T17048] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.320421][T10998] Bluetooth: hci5: command tx timeout [ 344.363751][T17084] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3012'. [ 344.383507][T17086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3013'. [ 344.384824][T16968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.410696][T16968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.442432][T17088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3013'. [ 344.457162][T17090] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3013'. [ 344.507962][T17088] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 344.527943][T17086] netlink: 'syz.2.3013': attribute type 1 has an invalid length. [ 344.537181][T17086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3013'. [ 344.551454][T16968] team0: Port device team_slave_0 added [ 344.604573][T16968] team0: Port device team_slave_1 added [ 344.630545][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.645248][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.727527][T17101] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3017'. [ 344.737128][T17101] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3017'. [ 344.747345][T17101] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3017'. [ 344.784186][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.813284][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.814203][T17107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3018'. [ 344.833125][T16968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.833145][T16968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.833172][T16968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.835198][T16968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.899669][T16968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.928036][T16968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.951103][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.959393][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.993146][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.053426][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.228697][T16968] hsr_slave_0: entered promiscuous mode [ 345.238287][T16968] hsr_slave_1: entered promiscuous mode [ 345.251214][T17126] netlink: 'syz.4.3020': attribute type 1 has an invalid length. [ 345.349504][T17130] netlink: 340 bytes leftover after parsing attributes in process `syz.2.3022'. [ 345.378546][T17128] bond11: (slave gretap2): making interface the new active one [ 345.389685][T17128] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 345.640765][T17149] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 345.726929][T16968] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.772534][T16968] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.951078][T16968] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.979498][T16968] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.124316][T16968] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.142837][T16968] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.237481][T16968] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.278714][T16968] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.411023][T10998] Bluetooth: hci5: command tx timeout [ 346.557336][T16968] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 346.586554][T16968] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 346.626801][T16968] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 346.633997][T17213] netlink: 'syz.4.3048': attribute type 20 has an invalid length. [ 346.664193][T16968] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 346.968591][T17238] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 347.223309][T16968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.272535][T17257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.328850][ T5928] lo speed is unknown, defaulting to 1000 [ 347.335209][T16968] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.350113][ T5928] syz2: Port: 1 Link ACTIVE [ 347.395124][ T7918] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.403416][ T7918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.447664][T17268] tipc: Enabled bearer , priority 0 [ 347.477550][ T7918] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.484771][ T7918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.543257][T17268] syzkaller0: entered promiscuous mode [ 347.563589][T17268] syzkaller0: entered allmulticast mode [ 347.620710][T17268] tipc: Resetting bearer [ 347.657914][T17279] netlink: 'syz.4.3063': attribute type 9 has an invalid length. [ 347.745470][T17276] tipc: Resetting bearer [ 347.783267][T17276] tipc: Disabling bearer [ 347.807176][T17290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.155863][T16968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.242485][T17312] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 348.430909][T16968] veth0_vlan: entered promiscuous mode [ 348.483695][T10998] Bluetooth: hci5: command tx timeout [ 348.507969][T16968] veth1_vlan: entered promiscuous mode [ 348.629351][T16968] veth0_macvtap: entered promiscuous mode [ 348.657067][T16968] veth1_macvtap: entered promiscuous mode [ 348.703066][T16968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.726509][T16968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.785232][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.816720][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.843393][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.858986][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.897689][T17350] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 349.057856][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.082899][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.129439][T17356] netlink: 'syz.2.3083': attribute type 4 has an invalid length. [ 349.139127][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.147904][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.531953][T17371] __nla_validate_parse: 12 callbacks suppressed [ 349.531974][T17371] netlink: 404 bytes leftover after parsing attributes in process `syz.4.3087'. [ 349.572614][T17371] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3087'. [ 349.596179][T17371] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3087'. [ 349.640529][T17371] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3087'. [ 349.771186][T17382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3089'. [ 349.822832][T17384] netlink: 4380 bytes leftover after parsing attributes in process `syz.2.3090'. [ 350.352734][ T5868] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 350.367278][ T5868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 350.378346][ T5868] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 350.387854][ T5868] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 350.396916][ T5868] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 350.444026][T17420] hsr0 speed is unknown, defaulting to 1000 [ 350.650826][T17434] tipc: Enabling of bearer rejected, failed to enable media [ 350.963315][T17447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.967049][T17453] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3105'. [ 350.991034][T17448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.011461][T17449] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 351.129317][T17420] lo speed is unknown, defaulting to 1000 [ 351.525077][T17420] chnl_net:caif_netlink_parms(): no params data found [ 351.591985][T17483] dvmrp0: entered allmulticast mode [ 351.617883][T17483] dvmrp0: left allmulticast mode [ 351.729685][T17492] sock: sock_set_timeout: `syz.0.3115' (pid 17492) tries to set negative timeout [ 351.784030][T17420] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.808771][T17497] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 351.810459][T17420] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.845722][T17420] bridge_slave_0: entered allmulticast mode [ 351.857797][T17420] bridge_slave_0: entered promiscuous mode [ 351.872492][T17420] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.879838][T17420] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.901498][T17420] bridge_slave_1: entered allmulticast mode [ 351.909321][T17420] bridge_slave_1: entered promiscuous mode [ 351.936973][T17500] netlink: 'syz.0.3117': attribute type 1 has an invalid length. [ 352.149372][T17508] bond2: entered promiscuous mode [ 352.154651][T17508] bond2: entered allmulticast mode [ 352.160499][T17508] 8021q: adding VLAN 0 to HW filter on device bond2 [ 352.172518][T17420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.175946][T17514] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3121'. [ 352.185503][T17420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.285546][T17420] team0: Port device team_slave_0 added [ 352.309393][T17420] team0: Port device team_slave_1 added [ 352.423980][T17420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.433436][T17420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.462776][T17420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.475601][T17420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.484204][T17420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.486976][T10998] Bluetooth: hci3: command tx timeout [ 352.516653][T17420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.634576][T17420] hsr_slave_0: entered promiscuous mode [ 352.642371][T17420] hsr_slave_1: entered promiscuous mode [ 352.648803][T17420] debugfs: 'hsr0' already exists in 'hsr' [ 352.655474][T17420] Cannot create hsr debugfs directory [ 352.755458][T17524] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3118'. [ 352.789435][T17546] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3125'. [ 353.167254][T17558] netlink: 'syz.3.3128': attribute type 142 has an invalid length. [ 353.278128][T17420] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.289656][T17420] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.341618][T17541] pim6reg1: entered promiscuous mode [ 353.348416][T17541] pim6reg1: entered allmulticast mode [ 353.425616][T17420] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.448422][T17420] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.571614][T17420] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.583095][T17420] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.649837][T17420] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.663939][T17420] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.006790][T17420] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 354.028300][T17420] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 354.081377][T17420] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 354.126573][T17420] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 354.198383][T17604] netlink: 'syz.3.3139': attribute type 10 has an invalid length. [ 354.354523][T17420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.405971][T17420] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.424408][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.431640][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.464901][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.472142][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.534776][T17623] netlink: 'syz.2.3144': attribute type 1 has an invalid length. [ 354.556173][T17622] netlink: 'syz.2.3144': attribute type 1 has an invalid length. [ 354.561010][T10998] Bluetooth: hci3: command tx timeout [ 354.592122][T17622] __nla_validate_parse: 3 callbacks suppressed [ 354.592141][T17622] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3144'. [ 354.945646][T17420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.061170][T17420] veth0_vlan: entered promiscuous mode [ 355.087568][T17655] netlink: 'syz.3.3152': attribute type 4 has an invalid length. [ 355.093362][T17420] veth1_vlan: entered promiscuous mode [ 355.126530][T17420] veth0_macvtap: entered promiscuous mode [ 355.155791][T17420] veth1_macvtap: entered promiscuous mode [ 355.208095][ T43] lo speed is unknown, defaulting to 1000 [ 355.224664][ T43] syz2: Port: 1 Link DOWN [ 355.225301][T17659] pim6reg: entered allmulticast mode [ 355.265300][T17662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3154'. [ 355.293490][T17420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.319802][T17420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.425848][T17664] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 355.443076][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.466802][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.493391][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.514593][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.742200][T17679] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3159'. [ 355.748940][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.780892][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.869703][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.900918][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.421524][T17712] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3165'. [ 356.642269][T10998] Bluetooth: hci3: command tx timeout [ 357.146503][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 357.155973][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 357.165511][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 357.179419][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 357.187561][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 357.366212][T17748] hsr0 speed is unknown, defaulting to 1000 [ 357.988663][T17748] lo speed is unknown, defaulting to 1000 [ 357.988716][T17774] hsr0 speed is unknown, defaulting to 1000 [ 358.109007][T17790] openvswitch: netlink: Duplicate or invalid key (type 0). [ 358.126613][T17790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.156770][T17790] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3192'. [ 358.499220][T17774] lo speed is unknown, defaulting to 1000 [ 358.646319][T17748] chnl_net:caif_netlink_parms(): no params data found [ 358.720625][ T5868] Bluetooth: hci3: command tx timeout [ 358.877985][T17748] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.887353][T17748] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.894949][T17748] bridge_slave_0: entered allmulticast mode [ 358.902986][T17748] bridge_slave_0: entered promiscuous mode [ 358.911617][T17748] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.918978][T17748] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.926558][T17748] bridge_slave_1: entered allmulticast mode [ 358.933999][T17748] bridge_slave_1: entered promiscuous mode [ 358.979398][T17748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.993247][T17748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.032298][T17748] team0: Port device team_slave_0 added [ 359.043042][T17748] team0: Port device team_slave_1 added [ 359.090961][T17748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.098449][T17748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.125828][T17748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.138582][T17748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.146356][T17748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.172947][T17748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.257425][T17748] hsr_slave_0: entered promiscuous mode [ 359.264989][T17748] hsr_slave_1: entered promiscuous mode [ 359.271586][T17748] debugfs: 'hsr0' already exists in 'hsr' [ 359.277817][T17748] Cannot create hsr debugfs directory [ 359.283515][ T5868] Bluetooth: hci0: command tx timeout [ 359.395737][T17833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3202'. [ 359.438483][T17840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3201'. [ 359.454928][T17841] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 359.485461][T17833] netlink: 'syz.1.3202': attribute type 1 has an invalid length. [ 359.499805][T17833] netlink: 'syz.1.3202': attribute type 2 has an invalid length. [ 359.558757][T17844] netlink: 'syz.4.3204': attribute type 1 has an invalid length. [ 359.582289][T17844] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 359.974140][T17869] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3211'. [ 360.013853][T17869] tipc: Invalid UDP bearer configuration [ 360.013920][T17869] tipc: Enabling of bearer rejected, failed to enable media [ 360.114099][T17876] Unknown options in mask b7f2 [ 360.163847][T17876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3213'. [ 360.178654][T17876] delete_channel: no stack [ 360.182436][T17748] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.204306][T17748] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.284760][T17748] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.296121][T17748] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.318034][T17882] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3215'. [ 360.343297][T17882] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3215'. [ 360.385069][T17748] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.401545][T17748] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.503286][T17748] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.519437][T17748] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.582021][T17896] netlink: 'syz.1.3220': attribute type 8 has an invalid length. [ 360.596860][T17897] tipc: Resetting bearer [ 360.723282][T17891] netlink: 'syz.0.3219': attribute type 1 has an invalid length. [ 360.763664][T17891] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.3219'. [ 360.817297][T17748] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 360.838826][T17748] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 360.909674][T17748] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 360.949257][T17748] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 360.955398][T17906] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3222'. [ 360.975976][T17911] netlink: 'syz.4.3222': attribute type 1 has an invalid length. [ 360.985641][T17906] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3222'. [ 360.996139][T17903] tipc: Started in network mode [ 361.001612][T17903] tipc: Node identity 46b51d2195ba, cluster identity 4711 [ 361.009184][T17903] tipc: Enabled bearer , priority 0 [ 361.020676][T17904] syzkaller0: entered promiscuous mode [ 361.027274][T17904] syzkaller0: entered allmulticast mode [ 361.057001][T17906] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3222'. [ 361.085762][T17903] tipc: Resetting bearer [ 361.103965][T17918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3225'. [ 361.137085][T17906] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3222'. [ 361.147113][T17902] tipc: Resetting bearer [ 361.177349][T17902] tipc: Disabling bearer [ 361.248486][T17921] 8021q: adding VLAN 0 to HW filter on device bond1 [ 361.347423][T17931] batman_adv: batadv0: Adding interface: dummy0 [ 361.353925][T17931] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.380498][ T5868] Bluetooth: hci0: command tx timeout [ 361.407050][T17931] batman_adv: batadv0: Interface activated: dummy0 [ 361.438336][T17748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.458965][T17932] batadv0: mtu less than device minimum [ 361.470778][T17932] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 361.483155][T17932] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 361.495068][T17932] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 361.506997][T17932] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 361.514787][T17940] tipc: Can't bind to reserved service type 1 [ 361.518842][T17932] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 361.535388][T17932] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 361.616867][T17748] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.635162][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.642430][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.815551][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.822766][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.932314][T17748] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 362.309906][ T7904] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 362.442135][T17748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.819679][T18036] netlink: 'syz.1.3246': attribute type 10 has an invalid length. [ 362.838666][T17748] veth0_vlan: entered promiscuous mode [ 362.873786][T18036] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 362.915003][T17748] veth1_vlan: entered promiscuous mode [ 363.063136][T17748] veth0_macvtap: entered promiscuous mode [ 363.111859][T17748] veth1_macvtap: entered promiscuous mode [ 363.216425][T17748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.247165][T17748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.376489][ T7923] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.399687][ T7923] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.409644][ T7923] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.450248][ T5868] Bluetooth: hci0: command tx timeout [ 363.473130][ T7923] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.638507][T18087] netlink: 'syz.3.3260': attribute type 1 has an invalid length. [ 363.638595][ T30] audit: type=1804 audit(1757837244.631:5): pid=18086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3260" name="/newroot/667/cgroup.controllers" dev="tmpfs" ino=3423 res=1 errno=0 [ 363.649612][T18089] net_ratelimit: 13 callbacks suppressed [ 363.649630][T18089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.699557][ T30] audit: type=1800 audit(1757837244.651:6): pid=18086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3260" name="cgroup.controllers" dev="tmpfs" ino=3423 res=0 errno=0 [ 363.949787][T17972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.977202][T17972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.023561][ T7904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.043295][ T7904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.566812][T18128] tipc: Started in network mode [ 364.571980][T18128] tipc: Node identity 5ab5c03e48e1, cluster identity 4711 [ 364.579317][T18128] tipc: Enabled bearer , priority 0 [ 364.643103][T18128] syzkaller0: entered promiscuous mode [ 364.650575][T18128] syzkaller0: entered allmulticast mode [ 364.694561][T18128] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 364.772272][T18128] tipc: Resetting bearer [ 364.799090][T18137] netlink: 'syz.1.3278': attribute type 1 has an invalid length. [ 364.830052][T18137] netlink: 'syz.1.3278': attribute type 2 has an invalid length. [ 364.849048][T18127] tipc: Resetting bearer [ 364.912136][T18127] tipc: Disabling bearer [ 365.097068][T18152] __nla_validate_parse: 82 callbacks suppressed [ 365.097089][T18152] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3282'. [ 365.208597][T10998] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 365.216794][T18160] netlink: 'syz.1.3283': attribute type 1 has an invalid length. [ 365.229300][T10998] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 365.241492][T10998] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 365.252430][T10998] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 365.264698][T10998] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 365.328552][T18160] bond1: entered promiscuous mode [ 365.336651][T18160] 8021q: adding VLAN 0 to HW filter on device bond1 [ 365.424931][T18164] 8021q: adding VLAN 0 to HW filter on device bond2 [ 365.436493][T18164] bond1: (slave bond2): making interface the new active one [ 365.448260][T18164] bond2: entered promiscuous mode [ 365.470303][T18164] bond1: (slave bond2): Enslaving as an active interface with an up link [ 365.519237][T18157] hsr0 speed is unknown, defaulting to 1000 [ 365.531175][T10998] Bluetooth: hci0: command tx timeout [ 365.655489][T18175] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3287'. [ 365.984249][T18157] lo speed is unknown, defaulting to 1000 [ 366.074222][T18201] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3294'. [ 366.121556][T18198] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3295'. [ 366.262453][T18209] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3298'. [ 366.426451][T18217] netlink: 6052 bytes leftover after parsing attributes in process `syz.1.3302'. [ 366.535464][T18157] chnl_net:caif_netlink_parms(): no params data found [ 366.569007][T18229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.764018][T18242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3306'. [ 366.908332][T18157] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.926287][T18157] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.945831][T18157] bridge_slave_0: entered allmulticast mode [ 366.963227][T18157] bridge_slave_0: entered promiscuous mode [ 366.988797][T18157] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.007118][T18157] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.027487][T18157] bridge_slave_1: entered allmulticast mode [ 367.038039][T18157] bridge_slave_1: entered promiscuous mode [ 367.204985][T18262] pimreg3: entered allmulticast mode [ 367.233700][T18157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.274359][T18157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.360515][T10998] Bluetooth: hci1: command tx timeout [ 367.406430][T18157] team0: Port device team_slave_0 added [ 367.442746][T18157] team0: Port device team_slave_1 added [ 367.574485][T18157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.581701][T18157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.615816][T18157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.632705][T18157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.646236][T18157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.672767][T18157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.944288][T18157] hsr_slave_0: entered promiscuous mode [ 367.971447][T18157] hsr_slave_1: entered promiscuous mode [ 367.988484][T18157] debugfs: 'hsr0' already exists in 'hsr' [ 368.001704][T18157] Cannot create hsr debugfs directory [ 368.392698][T18325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3332'. [ 368.414668][T18329] team0: Device vti0 is of different type [ 368.466863][T17979] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.466931][T18325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3332'. [ 368.522289][T17979] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.568345][T17979] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.595725][T17979] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.638776][T18341] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3335'. [ 368.714147][T18157] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.728294][T18157] netdevsim netdevsim4 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 368.739494][T18157] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.812081][T18157] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.826061][T18157] netdevsim netdevsim4 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 368.836455][T18157] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.885850][T18157] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.896869][T18157] netdevsim netdevsim4 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 368.906692][T18157] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.967486][T18157] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.977513][T18157] netdevsim netdevsim4 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 368.988197][T18157] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.244613][T18366] netlink: 'syz.1.3343': attribute type 29 has an invalid length. [ 369.346194][T18373] netlink: 'syz.2.3346': attribute type 39 has an invalid length. [ 369.433330][T18157] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 369.442529][T10998] Bluetooth: hci1: command tx timeout [ 369.596041][T18157] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 369.673921][T18157] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 369.730699][T18157] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 370.311032][T18430] __nla_validate_parse: 6 callbacks suppressed [ 370.311052][T18430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3362'. [ 370.385559][T18157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.469488][T18157] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.522880][ T7914] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.530130][ T7914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.583444][ T7914] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.590638][ T7914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.758894][T18455] tipc: Enabled bearer , priority 0 [ 370.773702][T18455] syzkaller0: entered promiscuous mode [ 370.789483][T18455] syzkaller0: entered allmulticast mode [ 370.811791][T18455] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 370.881071][T18455] tipc: Resetting bearer [ 370.941241][T18454] tipc: Resetting bearer [ 371.026344][T18454] tipc: Disabling bearer [ 371.058271][T18472] tipc: Enabled bearer , priority 0 [ 371.092490][T18468] syzkaller0: entered promiscuous mode [ 371.098007][T18468] syzkaller0: entered allmulticast mode [ 371.153095][T18468] tipc: Resetting bearer [ 371.288921][T18157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.310593][T18489] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3378'. [ 371.523654][T10998] Bluetooth: hci1: command tx timeout [ 371.532452][T18500] Unknown options in mask b7f2 [ 371.567994][T18500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3380'. [ 371.624690][T18506] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 371.724728][T18467] tipc: Resetting bearer [ 371.824605][T18467] tipc: Disabling bearer [ 371.907129][T18520] netlink: 'syz.0.3385': attribute type 1 has an invalid length. [ 371.961883][T18522] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3386'. [ 372.007457][T18520] bridge_slave_0: left allmulticast mode [ 372.018707][T18520] bridge_slave_0: left promiscuous mode [ 372.034456][T18520] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.061723][T18520] bridge_slave_1: left allmulticast mode [ 372.067574][T18520] bridge_slave_1: left promiscuous mode [ 372.077310][T18520] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.095879][T18520] bond0: (slave bond_slave_0): Releasing backup interface [ 372.127380][T18520] bond0: (slave bond_slave_1): Releasing backup interface [ 372.171542][T18520] team0: Port device team_slave_0 removed [ 372.178747][T18524] netlink: 'syz.3.3387': attribute type 2 has an invalid length. [ 372.187453][T18524] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3387'. [ 372.192515][T18520] team0: Port device team_slave_1 removed [ 372.211391][T18520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.219345][T18520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.249508][T18520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.262242][T18520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.288012][T18522] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3386'. [ 372.300180][T18522] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3386'. [ 372.309311][T18522] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3386'. [ 372.498378][T18537] bridge1: entered promiscuous mode [ 372.507189][T18537] bridge1: entered allmulticast mode [ 372.521216][T18538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3389'. [ 372.597677][T18547] netlink: 'syz.1.3391': attribute type 1 has an invalid length. [ 372.605919][T18547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3391'. [ 372.618608][T18157] veth0_vlan: entered promiscuous mode [ 372.719595][T18157] veth1_vlan: entered promiscuous mode [ 372.869859][T18157] veth0_macvtap: entered promiscuous mode [ 372.923289][T18157] veth1_macvtap: entered promiscuous mode [ 373.037974][T18157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.064680][T18157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.087830][ T7914] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.107414][ T7914] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.137915][ T7914] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.157783][ T7914] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.173348][T18577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.184107][T18577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.197101][T18577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.219575][T18577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.231360][T18577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.259011][T18577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.271301][T18577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.287398][T18577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.303818][T18577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.345705][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.362599][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.432129][T18583] GUP no longer grows the stack in syz.2.3401 (18583): 200000003000-20000000a000 (200000001000) [ 373.460314][T18583] CPU: 0 UID: 0 PID: 18583 Comm: syz.2.3401 Not tainted syzkaller #0 PREEMPT(full) [ 373.460347][T18583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 373.460365][T18583] Call Trace: [ 373.460376][T18583] [ 373.460385][T18583] dump_stack_lvl+0x189/0x250 [ 373.460419][T18583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.460452][T18583] ? __pfx__printk+0x10/0x10 [ 373.460473][T18583] ? find_vma+0xe7/0x160 [ 373.460510][T18583] ? __lock_acquire+0xab9/0xd20 [ 373.460551][T18583] __get_user_pages+0x24d0/0x2ce0 [ 373.460578][T18583] ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190 [ 373.460610][T18583] ? preempt_schedule_notrace+0xd1/0x110 [ 373.460646][T18583] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 373.460669][T18583] ? rcu_is_watching+0x15/0xb0 [ 373.460697][T18583] __gup_longterm_locked+0xde9/0x1660 [ 373.460733][T18583] ? sanity_check_pinned_pages+0x123a/0x1300 [ 373.460766][T18583] gup_fast_fallback+0x1e6a/0x2010 [ 373.460823][T18583] ? __pfx_gup_fast_fallback+0x10/0x10 [ 373.460846][T18583] ? stack_trace_save+0x9c/0xe0 [ 373.460868][T18583] ? __pfx_stack_trace_save+0x10/0x10 [ 373.460903][T18583] ? pin_user_pages_fast+0x4d/0xb0 [ 373.460931][T18583] iov_iter_extract_pages+0x35a/0x5e0 [ 373.460970][T18583] extract_iter_to_sg+0xe46/0x24e0 [ 373.461013][T18583] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 373.461064][T18583] ? __asan_memset+0x22/0x50 [ 373.461091][T18583] af_alg_get_rsgl+0x436/0x810 [ 373.461133][T18583] aead_recvmsg+0x4cc/0x13f0 [ 373.461169][T18583] ? __pfx_aead_recvmsg+0x10/0x10 [ 373.461187][T18583] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 373.461208][T18583] ? __pfx_aead_recvmsg+0x10/0x10 [ 373.461224][T18583] sock_recvmsg_nosec+0x183/0x1c0 [ 373.461255][T18583] ____sys_recvmsg+0x3aa/0x460 [ 373.461287][T18583] ? __pfx_____sys_recvmsg+0x10/0x10 [ 373.461330][T18583] ? import_iovec+0x74/0xa0 [ 373.461359][T18583] ___sys_recvmsg+0x1b5/0x510 [ 373.461391][T18583] ? __pfx____sys_recvmsg+0x10/0x10 [ 373.461447][T18583] ? __might_fault+0xb0/0x130 [ 373.461478][T18583] do_recvmmsg+0x307/0x770 [ 373.461511][T18583] ? __pfx_do_recvmmsg+0x10/0x10 [ 373.461533][T18583] ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0 [ 373.461576][T18583] ? __pfx_do_futex+0x10/0x10 [ 373.461626][T18583] __x64_sys_recvmmsg+0x190/0x240 [ 373.461656][T18583] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 373.461685][T18583] ? rcu_is_watching+0x15/0xb0 [ 373.461710][T18583] ? do_syscall_64+0xbe/0x3b0 [ 373.461739][T18583] do_syscall_64+0xfa/0x3b0 [ 373.461758][T18583] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.461778][T18583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.461797][T18583] ? clear_bhb_loop+0x60/0xb0 [ 373.461824][T18583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.461850][T18583] RIP: 0033:0x7f46ed78eba9 [ 373.461873][T18583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.461895][T18583] RSP: 002b:00007f46ee6b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 373.461920][T18583] RAX: ffffffffffffffda RBX: 00007f46ed9d5fa0 RCX: 00007f46ed78eba9 [ 373.461935][T18583] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000b [ 373.461947][T18583] RBP: 00007f46ed811e19 R08: 0000000000000000 R09: 0000000000000000 [ 373.461963][T18583] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000 [ 373.461975][T18583] R13: 00007f46ed9d6038 R14: 00007f46ed9d5fa0 R15: 00007ffda04350a8 [ 373.462009][T18583] [ 373.462507][T17977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.614958][T10998] Bluetooth: hci1: command tx timeout [ 373.619301][T17977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.152092][T18611] netlink: 'syz.2.3407': attribute type 83 has an invalid length. [ 374.409435][T18624] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 374.944958][ T5868] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 374.955824][ T5868] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 374.965018][ T5868] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 374.975446][ T5868] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 374.990200][ T5868] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 375.165738][T18643] hsr0 speed is unknown, defaulting to 1000 [ 375.557340][T18677] __nla_validate_parse: 4 callbacks suppressed [ 375.557357][T18677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3424'. [ 375.716679][T18681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3426'. [ 375.758293][T18681] netlink: 'syz.2.3426': attribute type 1 has an invalid length. [ 375.782408][T18689] netlink: 'syz.1.3429': attribute type 4 has an invalid length. [ 375.794782][T18689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3429'. [ 375.805357][T18681] netlink: 'syz.2.3426': attribute type 1 has an invalid length. [ 375.824852][T18643] lo speed is unknown, defaulting to 1000 [ 375.835416][T18681] netlink: 'syz.2.3426': attribute type 2 has an invalid length. [ 375.864726][T18681] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3426'. [ 376.227469][T18709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3435'. [ 376.318651][T18716] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3440'. [ 376.387026][T18721] bond2: entered promiscuous mode [ 376.396706][T18721] bond2: entered allmulticast mode [ 376.407630][T18721] 8021q: adding VLAN 0 to HW filter on device bond2 [ 376.547091][T18643] chnl_net:caif_netlink_parms(): no params data found [ 376.681987][T18741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3445'. [ 376.787694][T18737] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3445'. [ 376.990675][T18755] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3450'. [ 376.992135][T18757] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3452'. [ 377.027896][T18643] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.040691][T10998] Bluetooth: hci2: command tx timeout [ 377.056685][T18643] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.081536][T18643] bridge_slave_0: entered allmulticast mode [ 377.095401][T18643] bridge_slave_0: entered promiscuous mode [ 377.105817][T18643] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.114284][T18643] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.123322][T18643] bridge_slave_1: entered allmulticast mode [ 377.133282][T18643] bridge_slave_1: entered promiscuous mode [ 377.247512][T18643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.262258][T18643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.386169][T18770] netlink: 'syz.0.3456': attribute type 4 has an invalid length. [ 377.387545][T18643] team0: Port device team_slave_0 added [ 377.419810][T18643] team0: Port device team_slave_1 added [ 377.475368][T18770] veth0: entered promiscuous mode [ 377.484283][T18770] netlink: 'syz.0.3456': attribute type 1 has an invalid length. [ 377.492254][T18770] netlink: 'syz.0.3456': attribute type 2 has an invalid length. [ 377.509359][T18781] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 377.509509][T18769] veth0: left promiscuous mode [ 377.562074][T18643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.577953][T18643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.610910][T18643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.626579][T18643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.636344][T18643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.664325][T18643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.716681][T18785] syzkaller0: entered promiscuous mode [ 377.732543][T18785] syzkaller0: entered allmulticast mode [ 377.774483][T18789] net_ratelimit: 26 callbacks suppressed [ 377.774502][T18789] openvswitch: netlink: Missing key (keys=40, expected=80) [ 377.789593][T18789] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 377.876670][T18791] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 377.904101][T18792] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 377.932980][T18643] hsr_slave_0: entered promiscuous mode [ 377.943428][T18643] hsr_slave_1: entered promiscuous mode [ 377.952730][T18643] debugfs: 'hsr0' already exists in 'hsr' [ 377.958604][T18643] Cannot create hsr debugfs directory [ 378.726358][ T1306] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 379.013569][T18855] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 379.120270][T10998] Bluetooth: hci2: command tx timeout [ 379.270243][T18643] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 379.304128][T18643] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 379.324880][T18643] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 379.343898][T18643] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 379.659731][T18889] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 379.853964][T18643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.053812][T18643] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.085434][ T7923] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.092686][ T7923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.148842][ T7923] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.156085][ T7923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.349602][T18643] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 380.451984][T18936] siw: device registration error -23 [ 380.605097][T18941] tipc: Enabling not permitted [ 380.611120][T18941] tipc: Enabling of bearer rejected, failed to enable media [ 380.701783][T18949] __nla_validate_parse: 11 callbacks suppressed [ 380.701802][T18949] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3502'. [ 380.914050][T18958] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3505'. [ 380.946604][T18958] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3505'. [ 380.963900][T18643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.032493][T18958] Bluetooth: MGMT ver 1.23 [ 381.141088][T18643] veth0_vlan: entered promiscuous mode [ 381.172999][T18643] veth1_vlan: entered promiscuous mode [ 381.200609][T10998] Bluetooth: hci2: command tx timeout [ 381.211357][T18965] IPv6: sit1: Disabled Multicast RS [ 381.325495][T18643] veth0_macvtap: entered promiscuous mode [ 381.362800][T18973] netlink: 'syz.0.3513': attribute type 1 has an invalid length. [ 381.373503][T18971] tipc: Enabled bearer , priority 0 [ 381.451969][T18980] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3515'. [ 381.462505][T18980] netlink: 146780 bytes leftover after parsing attributes in process `syz.1.3515'. [ 381.476420][T18980] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3515'. [ 381.494971][T18971] syzkaller0: entered promiscuous mode [ 381.501380][T18975] nbd1: detected capacity change from 0 to 127 [ 381.501693][T18986] netlink: 'syz.0.3513': attribute type 21 has an invalid length. [ 381.515257][T18971] syzkaller0: entered allmulticast mode [ 381.516182][T18986] IPv6: NLM_F_CREATE should be specified when creating new route [ 381.522391][T18971] tipc: Resetting bearer [ 381.538721][T18643] veth1_macvtap: entered promiscuous mode [ 381.545511][T18986] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 381.552782][T18986] IPv6: NLM_F_CREATE should be set when creating new route [ 381.560073][T18986] IPv6: NLM_F_CREATE should be set when creating new route [ 381.564414][T10998] block nbd1: Receive control failed (result -104) [ 381.567290][T18986] IPv6: NLM_F_CREATE should be set when creating new route [ 381.696320][T18981] bond3: (slave gretap1): making interface the new active one [ 381.705931][T18981] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 381.719197][T18970] tipc: Resetting bearer [ 382.450468][ T5927] tipc: Node number set to 307544126 [ 383.216557][T18999] openvswitch: netlink: EtherType 0 is less than min 600 [ 383.287211][T10998] Bluetooth: hci2: command tx timeout [ 383.295718][T19001] sctp: [Deprecated]: syz.1.3519 (pid 19001) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.295718][T19001] Use struct sctp_sack_info instead [ 383.416901][T19004] netlink: 'syz.1.3520': attribute type 1 has an invalid length. [ 383.633410][T19011] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3522'. [ 384.104586][T18970] tipc: Disabling bearer [ 384.312026][T18643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.389813][T19026] netlink: 'syz.4.3526': attribute type 2 has an invalid length. [ 384.397840][T19026] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3526'. [ 384.435127][T18643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.497166][T17972] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.575026][T17972] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.622218][T17972] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.658873][T19038] macvtap1: entered allmulticast mode [ 384.672677][T19038] veth0_macvtap: entered allmulticast mode [ 384.697495][T17972] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.929554][T17972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.970576][T17972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.008856][T19053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3531'. [ 385.077421][ T7923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.113723][ T7923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.259593][T19066] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3535'. [ 385.468826][T19068] netlink: 'syz.0.3536': attribute type 2 has an invalid length. [ 385.999434][T19089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3540'. [ 386.050556][T19089] bridge_slave_1: left allmulticast mode [ 386.056250][T19089] bridge_slave_1: left promiscuous mode [ 386.084918][T19089] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.098369][T19089] bridge_slave_0: left allmulticast mode [ 386.108438][T19089] bridge_slave_0: left promiscuous mode [ 386.118129][T19089] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.193819][T19109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3546'. [ 386.425704][T19119] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3549'. [ 386.435805][T19098] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 386.538852][T19125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3549'. [ 386.617340][T19124] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 386.972152][T19150] tipc: Started in network mode [ 386.992898][T19150] tipc: Node identity 16353a82cdc9, cluster identity 1023 [ 387.003915][T19150] tipc: Enabled bearer , priority 0 [ 387.018071][T19150] syzkaller0: entered promiscuous mode [ 387.037343][T19150] syzkaller0: entered allmulticast mode [ 387.061017][T19155] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3560'. [ 387.087453][T19150] tipc: Resetting bearer [ 387.105936][T19147] tipc: Resetting bearer [ 387.182842][T19147] tipc: Disabling bearer [ 387.233916][T19159] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.252894][T19164] netlink: 'syz.3.3564': attribute type 30 has an invalid length. [ 387.355560][T19170] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3566'. [ 387.390744][T19174] netlink: 'syz.1.3567': attribute type 1 has an invalid length. [ 387.519481][T19184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.799516][T19187] netlink: 'syz.4.3571': attribute type 1 has an invalid length. [ 387.820474][T19187] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3571'. [ 387.837481][T19187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3571'. [ 387.839827][T19174] bond3: (slave bridge2): making interface the new active one [ 387.866519][T19174] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 388.001231][T17979] wlan1: Trigger new scan to find an IBSS to join [ 388.018531][T19207] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3573'. [ 388.077930][T19205] hsr0 speed is unknown, defaulting to 1000 [ 388.177956][T19213] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 388.352339][T19220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3579'. [ 388.858574][T19205] lo speed is unknown, defaulting to 1000 [ 389.515997][T19268] netlink: 'syz.3.3596': attribute type 5 has an invalid length. [ 389.571486][T19268] openvswitch: netlink: Message has -1 unknown bytes. [ 389.887315][T19279] tipc: Enabled bearer , priority 0 [ 389.948773][T19279] syzkaller0: entered promiscuous mode [ 389.976763][T19279] syzkaller0: entered allmulticast mode [ 390.020825][T19288] tipc: Resetting bearer [ 390.124334][T19293] netlink: 'syz.1.3603': attribute type 1 has an invalid length. [ 390.138665][T19293] netlink: 'syz.1.3603': attribute type 3 has an invalid length. [ 390.156148][T19295] syz.3.3604: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 390.187932][T19295] CPU: 1 UID: 0 PID: 19295 Comm: syz.3.3604 Not tainted syzkaller #0 PREEMPT(full) [ 390.187965][T19295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 390.187978][T19295] Call Trace: [ 390.187985][T19295] [ 390.187994][T19295] dump_stack_lvl+0x189/0x250 [ 390.188025][T19295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.188049][T19295] ? __pfx__printk+0x10/0x10 [ 390.188074][T19295] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 390.188096][T19295] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 390.188118][T19295] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 390.188143][T19295] warn_alloc+0x214/0x310 [ 390.188170][T19295] ? stack_depot_save_flags+0x40/0x860 [ 390.188200][T19295] ? __pfx_warn_alloc+0x10/0x10 [ 390.188229][T19295] ? kasan_save_track+0x4f/0x80 [ 390.188253][T19295] ? xskq_create+0x56/0x170 [ 390.188268][T19295] ? xsk_init_queue+0xb0/0x110 [ 390.188293][T19295] ? xsk_setsockopt+0x4dc/0x8d0 [ 390.188317][T19295] ? do_sock_setsockopt+0x179/0x1b0 [ 390.188339][T19295] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 390.188359][T19295] ? do_syscall_64+0xfa/0x3b0 [ 390.188378][T19295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.188416][T19295] __vmalloc_node_range_noprof+0x125/0x12f0 [ 390.188470][T19295] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 390.188513][T19295] ? __kasan_kmalloc+0x93/0xb0 [ 390.188541][T19295] vmalloc_user_noprof+0xad/0xf0 [ 390.188567][T19295] ? xskq_create+0xbf/0x170 [ 390.188586][T19295] xskq_create+0xbf/0x170 [ 390.188608][T19295] xsk_init_queue+0xb0/0x110 [ 390.188639][T19295] xsk_setsockopt+0x4dc/0x8d0 [ 390.188670][T19295] ? __pfx_xsk_setsockopt+0x10/0x10 [ 390.188697][T19295] ? __pfx_aa_sk_perm+0x10/0x10 [ 390.188729][T19295] ? aa_sock_opt_perm+0xff/0x1b0 [ 390.188752][T19295] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 390.188772][T19295] ? __pfx_xsk_setsockopt+0x10/0x10 [ 390.188802][T19295] do_sock_setsockopt+0x179/0x1b0 [ 390.188830][T19295] __x64_sys_setsockopt+0x13f/0x1b0 [ 390.188858][T19295] do_syscall_64+0xfa/0x3b0 [ 390.188876][T19295] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.188894][T19295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.188913][T19295] ? clear_bhb_loop+0x60/0xb0 [ 390.188932][T19295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.188948][T19295] RIP: 0033:0x7f68c098eba9 [ 390.188974][T19295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.188991][T19295] RSP: 002b:00007f68bebf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 390.189014][T19295] RAX: ffffffffffffffda RBX: 00007f68c0bd6090 RCX: 00007f68c098eba9 [ 390.189029][T19295] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 390.189041][T19295] RBP: 00007f68c0a11e19 R08: 0000000000000004 R09: 0000000000000000 [ 390.189054][T19295] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.189068][T19295] R13: 00007f68c0bd6128 R14: 00007f68c0bd6090 R15: 00007fff74aa54b8 [ 390.189099][T19295] [ 390.189116][T19295] Mem-Info: [ 390.496617][T19278] tipc: Resetting bearer [ 390.500076][T19295] active_anon:5198 inactive_anon:0 isolated_anon:0 [ 390.500076][T19295] active_file:2696 inactive_file:39979 isolated_file:0 [ 390.500076][T19295] unevictable:768 dirty:64 writeback:0 [ 390.500076][T19295] slab_reclaimable:13079 slab_unreclaimable:134019 [ 390.500076][T19295] mapped:33295 shmem:1379 pagetables:1094 [ 390.500076][T19295] sec_pagetables:0 bounce:0 [ 390.500076][T19295] kernel_misc_reclaimable:0 [ 390.500076][T19295] free:1290976 free_pcp:13740 free_cma:0 [ 390.549439][T19295] Node 0 active_anon:20792kB inactive_anon:0kB active_file:10784kB inactive_file:159712kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133880kB dirty:252kB writeback:0kB shmem:3980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16344kB pagetables:4220kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 390.582001][T19295] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 390.612958][T19295] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 390.642354][T19295] lowmem_reserve[]: 0 2497 [ 390.643866][T19278] tipc: Disabling bearer [ 390.654390][T19295] 2499 2499 2499 [ 390.654428][T19295] Node 0 DMA32 free:1252636kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20744kB inactive_anon:0kB active_file:10784kB inactive_file:158136kB unevictable:1536kB writepending:248kB present:3129332kB managed:2557416kB mlocked:0kB bounce:0kB free_pcp:40920kB local_pcp:20032kB free_cma:0kB [ 390.654493][T19295] lowmem_reserve[]: 0 0 1 1 1 [ 390.654536][T19295] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 390.654593][T19295] lowmem_reserve[]: 0 0 0 0 0 [ 390.654637][T19295] Node 1 Normal free:3895640kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14432kB local_pcp:12480kB free_cma:0kB [ 390.654697][T19295] lowmem_reserve[]: 0 0 0 0 0 [ 390.654741][T19295] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 390.654918][T19295] Node 0 DMA32: 243*4kB (UME) 558*8kB (UM) 272*16kB (UM) 139*32kB (UME) 63*64kB (UME) 79*128kB (UME) 40*256kB (UM) 27*512kB (UME) 6*1024kB (M) 3*2048kB (UME) 290*4096kB (UM) = 1252572kB [ 390.800637][T19295] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 390.813384][T19295] Node 1 Normal: 166*4kB (UM) 44*8kB (UME) 42*16kB (UME) 172*32kB (UME) 43*64kB (UME) 13*128kB (UME) 6*256kB (UME) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3895640kB [ 390.859566][T19295] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 390.869840][T19295] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 390.897360][T19295] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 390.920951][T19295] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 390.997515][T19295] 44051 total pagecache pages [ 391.020152][T19295] 0 pages in swap cache [ 391.074517][T19295] Free swap = 124996kB [ 391.078723][T19295] Total swap = 124996kB [ 391.092404][T19295] 2097051 pages RAM [ 391.096587][T19295] 0 pages HighMem/MovableOnly [ 391.112930][T19295] 425671 pages reserved [ 391.117227][T19295] 0 pages cma reserved [ 391.233015][T19314] block nbd2: server does not support multiple connections per device. [ 391.249850][T19324] netlink: 'syz.4.3611': attribute type 1 has an invalid length. [ 391.259630][T19314] block nbd2: shutting down sockets [ 391.389366][T19333] __nla_validate_parse: 15 callbacks suppressed [ 391.389384][T19333] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3615'. [ 391.418638][T19322] bond1 (unregistering): Released all slaves [ 391.507914][T19324] ip6tnl1: entered promiscuous mode [ 391.531458][T19324] ip6tnl1: entered allmulticast mode [ 391.800840][T19361] netlink: 146780 bytes leftover after parsing attributes in process `syz.4.3617'. [ 391.825580][T19364] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3619'. [ 392.322803][T19397] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3626'. [ 392.579635][T10998] block nbd2: Receive control failed (result -32) [ 392.756310][T19421] netlink: 'syz.0.3637': attribute type 28 has an invalid length. [ 392.796191][T19421] netlink: 'syz.0.3637': attribute type 3 has an invalid length. [ 392.852285][T19425] batadv1: entered allmulticast mode [ 392.861110][T19421] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3637'. [ 393.060120][T17977] wlan1: Trigger new scan to find an IBSS to join [ 393.149392][T19440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3644'. [ 393.164336][T19439] netlink: 'syz.3.3645': attribute type 4 has an invalid length. [ 393.193285][T19440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3644'. [ 393.401808][T19444] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3646'. [ 393.415497][T19445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3647'. [ 393.682830][T19459] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3648'. [ 394.238220][T19468] bridge1: entered promiscuous mode [ 394.272956][T19468] bridge1: entered allmulticast mode [ 394.643773][T19477] Bluetooth: MGMT ver 1.23 [ 394.910885][T19490] netlink: 'syz.3.3660': attribute type 1 has an invalid length. [ 394.946621][T19490] netlink: 'syz.3.3660': attribute type 1 has an invalid length. [ 395.409076][T19504] netlink: 'syz.2.3663': attribute type 10 has an invalid length. [ 395.577831][T17977] wlan1: Creating new IBSS network, BSSID 5a:ac:dc:6f:6c:f3 [ 395.653573][T19504] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 395.692135][T19509] Unsupported ieee802154 address type: 0 [ 395.852582][T19512] tipc: Enabled bearer , priority 0 [ 395.892494][T19512] syzkaller0: entered promiscuous mode [ 395.909164][T19512] syzkaller0: entered allmulticast mode [ 395.955046][T19520] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 396.087169][T19529] netlink: 'syz.0.3670': attribute type 1 has an invalid length. [ 396.137066][T19536] macvlan2: entered allmulticast mode [ 396.144460][T19536] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 396.418529][T19558] __nla_validate_parse: 5 callbacks suppressed [ 396.418542][T19558] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3676'. [ 396.552823][T19511] tipc: Resetting bearer [ 396.572945][T19511] tipc: Disabling bearer [ 396.827433][T19571] netlink: 'syz.4.3678': attribute type 64 has an invalid length. [ 396.840647][T19571] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3678'. [ 397.328899][T19593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3684'. [ 397.350284][T19593] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 397.367098][T19593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.399694][T19596] netlink: 'syz.4.3682': attribute type 4 has an invalid length. [ 397.457436][T19591] netlink: 'syz.4.3682': attribute type 4 has an invalid length. [ 397.548364][T19606] netlink: 'syz.1.3687': attribute type 1 has an invalid length. [ 397.713608][T19623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3692'. [ 397.756714][T19623] veth0: entered promiscuous mode [ 397.763492][T19623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3692'. [ 397.998647][T19637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3697'. [ 398.014443][T19637] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3697'. [ 398.027268][T19637] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3697'. [ 398.289380][T19650] pim6reg: entered allmulticast mode [ 398.315755][T19650] pim6reg: left allmulticast mode [ 398.363466][T19649] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3700'. [ 398.372973][T19649] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3700'. [ 398.668170][T19671] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 399.051314][T19683] openvswitch: netlink: IPv4 tun info is not correct [ 399.253420][T19700] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 399.781776][T19730] syzkaller0: entered promiscuous mode [ 399.787383][T19730] syzkaller0: entered allmulticast mode [ 399.836572][T19729] tipc: Enabled bearer , priority 0 [ 399.887368][T19729] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 400.045647][T19730] tipc: Resetting bearer [ 400.110412][T19728] tipc: Resetting bearer [ 400.180989][T19759] openvswitch: netlink: Actions may not be safe on all matching packets [ 400.186107][T19757] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 400.200924][T19728] tipc: Disabling bearer [ 400.507837][T19778] ipvlan0: entered promiscuous mode [ 400.514820][T19778] ipvlan0: entered allmulticast mode [ 400.524135][T19778] veth0_vlan: entered allmulticast mode [ 401.037734][T19805] syz_tun: entered allmulticast mode [ 401.075758][T19806] pimreg: entered allmulticast mode [ 401.170913][T19811] netlink: 'syz.1.3752': attribute type 21 has an invalid length. [ 401.184114][T19811] netlink: 'syz.1.3752': attribute type 5 has an invalid length. [ 401.417212][T19820] syzkaller1: entered promiscuous mode [ 401.424413][T19820] syzkaller1: entered allmulticast mode [ 401.498882][T19820] syzkaller0: entered promiscuous mode [ 401.506457][T19820] syzkaller0: entered allmulticast mode [ 401.861593][T19802] syz_tun: left allmulticast mode [ 402.131343][T19845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.157724][T19850] __nla_validate_parse: 13 callbacks suppressed [ 402.157743][T19850] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3762'. [ 402.558395][T19868] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 402.828045][T19886] netlink: 'syz.0.3770': attribute type 1 has an invalid length. [ 403.282435][ T5868] Bluetooth: hci2: command 0x0405 tx timeout [ 404.816263][T19879] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.3767'. [ 404.902517][T19886] 8021q: adding VLAN 0 to HW filter on device bond4 [ 405.177082][T19914] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3780'. [ 405.454519][T19929] ipvlan2: entered promiscuous mode [ 405.541306][T19935] netlink: 'syz.3.3787': attribute type 15 has an invalid length. [ 405.550866][T19935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3787'. [ 405.587071][T19935] netlink: 'syz.3.3787': attribute type 15 has an invalid length. [ 405.589394][ T7914] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 405.618011][ T7914] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 405.627121][ T7914] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 405.638132][ T7914] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 405.648457][T19935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3787'. [ 405.662531][T19935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3787'. [ 405.742349][T19944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3789'. [ 405.756848][T19944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3789'. [ 405.857539][T19954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3792'. [ 405.878904][T19954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3792'. [ 406.062098][T19954] tipc: Started in network mode [ 406.071306][T19954] tipc: Node identity f6f2ef1095c3, cluster identity 4711 [ 406.078645][T19954] tipc: Enabled bearer , priority 0 [ 406.089835][T19963] syzkaller0: entered promiscuous mode [ 406.095480][T19963] syzkaller0: entered allmulticast mode [ 406.164296][T19954] tipc: Resetting bearer [ 406.182321][T19966] sctp: [Deprecated]: syz.0.3796 (pid 19966) Use of int in maxseg socket option. [ 406.182321][T19966] Use struct sctp_assoc_value instead [ 406.199911][ T7904] wlan1: Selected IBSS BSSID 5a:ac:dc:6f:6c:f3 based on configured SSID [ 406.211924][T19953] tipc: Resetting bearer [ 406.268786][T19953] tipc: Disabling bearer [ 406.936361][T20005] openvswitch: netlink: Missing valid actions attribute. [ 406.973104][T20005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.324978][T20027] __nla_validate_parse: 2 callbacks suppressed [ 407.324996][T20027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3818'. [ 407.380253][T20026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3818'. [ 407.649374][T20055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3825'. [ 407.667815][T20055] netlink: 'syz.1.3825': attribute type 4 has an invalid length. [ 407.875686][T20065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3828'. [ 408.188281][T20089] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3836'. [ 408.220577][T20091] netlink: 'syz.1.3837': attribute type 24 has an invalid length. [ 408.352930][T20097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3839'. [ 408.482357][T20103] pim6reg1: entered promiscuous mode [ 408.487920][T20103] pim6reg1: entered allmulticast mode [ 409.090851][T20124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3848'. [ 409.154740][T20126] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3850'. [ 409.440595][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.580617][T20141] nbd3: detected capacity change from 0 to 63 [ 409.672174][T20151] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3856'. [ 409.686916][T20151] nbd: must specify an index to disconnect [ 409.737044][T20153] netlink: 'syz.4.3860': attribute type 10 has an invalid length. [ 409.746601][T20153] veth0_vlan: entered allmulticast mode [ 409.774529][T20153] veth0_vlan: left promiscuous mode [ 409.782654][T20153] veth0_vlan: entered promiscuous mode [ 409.795860][T20153] team0: Device veth0_vlan failed to register rx_handler [ 409.853957][T20156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3861'. [ 409.866017][T20121] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 409.937204][T20156] vlan2: entered allmulticast mode [ 409.950500][T20156] bridge0: entered allmulticast mode [ 409.966286][T20156] bridge2: port 1(vlan2) entered blocking state [ 409.973353][T20156] bridge2: port 1(vlan2) entered disabled state [ 409.984454][T20156] vlan2: entered promiscuous mode [ 409.989614][T20156] bridge0: entered promiscuous mode [ 410.318733][T10998] block nbd3: Receive control failed (result -104) [ 410.969433][T10998] Bluetooth: hci2: command 0x0405 tx timeout [ 411.041202][T10998] Bluetooth: hci0: command 0x0c20 tx timeout [ 411.876239][ T9] hid-generic 0005:15C2:5505.0001: unknown main item tag 0x0 [ 411.906204][ T9] hid-generic 0005:15C2:5505.0001: unknown main item tag 0x0 [ 411.936475][ T9] hid-generic 0005:15C2:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 412.008845][ T55] block nbd1: Possible stuck request ffff888025920000: control (read@0,1024B). Runtime 30 seconds [ 412.021613][ T55] block nbd1: Possible stuck request ffff8880259201c0: control (read@1024,1024B). Runtime 30 seconds [ 412.032881][ T55] block nbd1: Possible stuck request ffff888025920380: control (read@2048,1024B). Runtime 30 seconds [ 412.044748][ T55] block nbd1: Possible stuck request ffff888025920540: control (read@3072,1024B). Runtime 30 seconds [ 412.428629][T20287] __nla_validate_parse: 39 callbacks suppressed [ 412.428650][T20287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3897'. [ 412.459488][T20294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3899'. [ 412.637102][T20302] tipc: Enabling of bearer rejected, failed to enable media [ 412.661402][T20302] syzkaller0: entered promiscuous mode [ 412.668346][T20302] syzkaller0: entered allmulticast mode [ 412.863306][T20303] block nbd4: server does not support multiple connections per device. [ 412.881660][T20303] block nbd4: shutting down sockets [ 412.914023][T20311] netlink: 'syz.2.3905': attribute type 58 has an invalid length. [ 412.961021][T20311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3905'. [ 413.064554][T20320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3907'. [ 413.076502][T20317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3906'. [ 413.718239][T20365] netlink: 'syz.0.3920': attribute type 4 has an invalid length. [ 413.744988][T20365] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3920'. [ 413.770743][T20361] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3917'. [ 413.781505][T20365] 8021q: VLANs not supported on ip6_vti0 [ 414.046639][T20388] netlink: 'syz.3.3927': attribute type 1 has an invalid length. [ 414.054853][T20388] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3927'. [ 414.156332][T20390] block nbd0: NBD_DISCONNECT [ 414.325224][T20405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3929'. [ 414.367216][T20408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3929'. [ 414.638452][T20422] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 414.880653][T20434] tipc: Enabled bearer , priority 0 [ 414.918938][T20434] syzkaller0: entered promiscuous mode [ 414.925777][T20434] syzkaller0: entered allmulticast mode [ 415.018454][T20434] tipc: Resetting bearer [ 415.057918][T20434] netlink: 'syz.3.3939': attribute type 10 has an invalid length. [ 415.115514][T20434] team0: Device veth1_macvtap failed to register rx_handler [ 415.147452][T20432] tipc: Resetting bearer [ 415.165826][T20432] tipc: Disabling bearer [ 415.322539][T20464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.333787][T20464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.952980][T20476] netlink: 'syz.0.3950': attribute type 33 has an invalid length. [ 415.995614][T20476] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 416.000517][T20478] netlink: 'syz.2.3949': attribute type 13 has an invalid length. [ 416.020447][T20478] netlink: 'syz.2.3949': attribute type 58 has an invalid length. [ 416.039193][T20481] netlink: 'syz.4.3952': attribute type 3 has an invalid length. [ 416.148065][T20476] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 416.215352][T20491] netlink: 'syz.4.3953': attribute type 15 has an invalid length. [ 416.292953][T20467] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 416.400212][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.516211][T20506] syzkaller0: entered promiscuous mode [ 416.523484][T20506] syzkaller0: entered allmulticast mode [ 416.534982][T20505] tipc: Started in network mode [ 416.542690][T20505] tipc: Node identity 8209747441d9, cluster identity 4711 [ 416.554071][T20505] tipc: Enabled bearer , priority 0 [ 416.578458][T20508] team_slave_0: entered promiscuous mode [ 416.584618][T20508] team_slave_1: entered promiscuous mode [ 416.674644][T20506] tipc: Resetting bearer [ 416.723027][T20506] tipc: Disabling bearer [ 417.013590][T20527] tipc: Enabled bearer , priority 0 [ 417.046500][T20527] tipc: Resetting bearer [ 417.166051][T20524] tipc: Disabling bearer [ 417.440229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.699364][T20568] __nla_validate_parse: 17 callbacks suppressed [ 417.699394][T20568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3978'. [ 417.724709][T20568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.774020][T20568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.788337][T20568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.802021][T20568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.128657][T20586] netlink: 'syz.2.3983': attribute type 1 has an invalid length. [ 418.149091][T20545] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 419.020492][T20621] netlink: 'syz.1.3992': attribute type 21 has an invalid length. [ 419.028613][T20621] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3992'. [ 419.143428][T20623] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3991'. [ 419.165456][T20623] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3991'. [ 419.198988][T20629] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3994'. [ 419.210972][T20625] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3993'. [ 419.350140][T20634] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3997'. [ 419.369521][T10998] Bluetooth: hci0: command 0x0c20 tx timeout [ 419.411552][T20638] netlink: 'syz.3.3999': attribute type 11 has an invalid length. [ 419.424626][T20638] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3999'. [ 419.686842][T20655] netlink: 'syz.3.4005': attribute type 11 has an invalid length. [ 419.722467][T20655] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4005'. [ 419.792398][T20660] netlink: 'syz.4.4007': attribute type 1 has an invalid length. [ 419.800543][T20660] netlink: 'syz.4.4007': attribute type 1 has an invalid length. [ 419.811090][T20660] netlink: 'syz.4.4007': attribute type 29 has an invalid length. [ 419.820045][T20660] netlink: 'syz.4.4007': attribute type 29 has an invalid length. [ 419.838921][T20660] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4007'. [ 419.880841][ C0] TC_ACT_REPEAT abuse ? [ 419.980549][ C0] TC_ACT_REPEAT abuse ? [ 420.160332][ C1] TC_ACT_REPEAT abuse ? [ 420.293006][T20685] tipc: Enabled bearer , priority 12 [ 420.322817][ T5928] TC_ACT_REPEAT abuse ? [ 420.330599][T17978] TC_ACT_REPEAT abuse ? [ 420.341936][ T5948] TC_ACT_REPEAT abuse ? [ 420.353445][ T5928] TC_ACT_REPEAT abuse ? [ 421.120294][ C1] TC_ACT_REPEAT abuse ? [ 421.167320][T20730] netlink: 'syz.2.4028': attribute type 8 has an invalid length. [ 421.410128][ T5927] tipc: Node number set to 3285218420 [ 421.690299][T20756] netlink: 'syz.4.4035': attribute type 30 has an invalid length. [ 421.958269][T20770] netlink: 'syz.1.4039': attribute type 20 has an invalid length. [ 421.978397][T20770] netlink: 'syz.1.4039': attribute type 20 has an invalid length. [ 422.612773][T20806] bond4 (unregistering): Released all slaves [ 422.648126][T20811] ip6tnl1: entered promiscuous mode [ 422.656729][T20811] ip6tnl1: entered allmulticast mode [ 422.738210][T20810] __nla_validate_parse: 12 callbacks suppressed [ 422.738231][T20810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4052'. [ 422.789680][T20821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4055'. [ 422.902421][T20821] macvtap1: entered promiscuous mode [ 422.908403][T20821] vlan0: entered promiscuous mode [ 422.914020][T20821] macvtap1: entered allmulticast mode [ 422.919537][T20821] vlan0: entered allmulticast mode [ 422.925312][T20821] veth0_vlan: entered allmulticast mode [ 423.257699][T20846] vxcan1 speed is unknown, defaulting to 1000 [ 423.305208][T20856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4066'. [ 423.309008][T20850] unknown channel width for channel at 909000KHz? [ 423.326786][T20846] vxcan1 speed is unknown, defaulting to 1000 [ 423.339178][T20846] vxcan1 speed is unknown, defaulting to 1000 [ 423.670739][T20866] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 423.698593][T20866] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 423.750432][T20867] unknown channel width for channel at 909000KHz? [ 423.758982][T20867] unknown channel width for channel at 909000KHz? [ 423.789877][T20867] unknown channel width for channel at 909000KHz? [ 423.798595][T20870] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4068'. [ 423.830293][T20872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4069'. [ 424.013534][T20879] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4070'. [ 424.175014][T20846] infiniband syz2: set active [ 424.179827][T20846] infiniband syz2: added vxcan1 [ 424.192107][T20846] syz2: rxe_create_cq: returned err = -12 [ 424.197963][T20846] infiniband syz2: Couldn't create ib_mad CQ [ 424.204670][T20846] infiniband syz2: Couldn't open port 1 [ 424.223221][ T5927] vxcan1 speed is unknown, defaulting to 1000 [ 424.239663][T20886] netlink: 'syz.1.4074': attribute type 11 has an invalid length. [ 424.241368][T20884] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4073'. [ 424.262504][T20886] netlink: 'syz.1.4074': attribute type 11 has an invalid length. [ 424.281065][T20886] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4074'. [ 424.353362][T20846] RDS/IB: syz2: added [ 424.357456][T20846] smc: adding ib device syz2 with port count 1 [ 424.387627][T20891] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 424.401769][T20846] smc: ib device syz2 port 1 has pnetid [ 424.456564][ T5928] vxcan1 speed is unknown, defaulting to 1000 [ 424.458344][T20891] validate_nla: 1 callbacks suppressed [ 424.458360][T20891] netlink: 'syz.0.4075': attribute type 2 has an invalid length. [ 424.468062][T20846] vxcan1 speed is unknown, defaulting to 1000 [ 424.575660][T20897] netlink: 'syz.3.4077': attribute type 83 has an invalid length. [ 424.647015][T20898] netlink: 'syz.3.4077': attribute type 4 has an invalid length. [ 424.675461][T20901] tipc: New replicast peer: 255.255.255.255 [ 424.687014][T20901] tipc: Enabled bearer , priority 10 [ 424.710872][T20901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4078'. [ 424.854939][T20910] netlink: 'syz.0.4082': attribute type 4 has an invalid length. [ 424.916103][T20915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4083'. [ 425.080386][T20920] netem: change failed [ 425.100939][T20920] netem: change failed [ 425.131199][T20920] netem: change failed [ 425.161771][T20920] netem: change failed [ 425.166487][T20920] netem: change failed [ 425.189134][T20920] netem: change failed [ 425.193377][T20846] vxcan1 speed is unknown, defaulting to 1000 [ 425.253862][T20920] netem: change failed [ 425.259556][T20920] netem: change failed [ 425.270913][T20920] netem: change failed [ 425.300823][T20920] netem: change failed [ 425.323498][T20920] netem: change failed [ 425.359873][T20920] netem: change failed [ 425.369556][T20920] netem: change failed [ 425.399486][T17979] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.445107][T17979] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.475900][T20920] netem: change failed [ 425.496380][T20920] netem: change failed [ 425.515742][T17979] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.544919][T17979] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.570558][T20920] netem: change failed [ 425.591465][T20920] netem: change failed [ 425.613130][T20920] netem: change failed [ 425.684762][T20920] netem: change failed [ 425.715508][T20920] netem: change failed [ 425.725448][T20920] netem: change failed [ 425.744365][T20920] netem: change failed [ 425.765918][T20920] netem: change failed [ 425.778020][T20920] netem: change failed [ 425.810120][ T5928] tipc: Node number set to 3540983073 [ 425.829569][T20846] vxcan1 speed is unknown, defaulting to 1000 [ 426.081243][ T5927] TC_ACT_REPEAT abuse ? [ 426.085677][T17977] TC_ACT_REPEAT abuse ? [ 426.090867][ T5928] TC_ACT_REPEAT abuse ? [ 426.095962][ T5927] TC_ACT_REPEAT abuse ? [ 426.279426][T20964] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 426.616466][T20979] bond4 (unregistering): Released all slaves [ 426.674824][T20992] netlink: 'syz.1.4103': attribute type 39 has an invalid length. [ 426.812633][T20987] bond3: entered promiscuous mode [ 426.817814][T20987] bond3: entered allmulticast mode [ 426.823878][T20987] 8021q: adding VLAN 0 to HW filter on device bond3 [ 427.088540][T20987] bond3 (unregistering): Released all slaves [ 427.132407][T20846] vxcan1 speed is unknown, defaulting to 1000 [ 427.754711][T21032] netlink: 'syz.1.4116': attribute type 83 has an invalid length. [ 429.619860][T21023] xfrm1: entered allmulticast mode [ 429.626214][T21030] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 429.640907][T21030] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 429.655276][T20846] vxcan1 speed is unknown, defaulting to 1000 [ 429.781551][T21041] tc_dump_action: action bad kind [ 429.795932][T21042] tc_dump_action: action bad kind [ 429.843958][T21046] __nla_validate_parse: 14 callbacks suppressed [ 429.843978][T21046] netlink: 352 bytes leftover after parsing attributes in process `syz.1.4120'. [ 430.100821][T21057] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4125'. [ 430.396796][T20846] vxcan1 speed is unknown, defaulting to 1000 [ 430.504283][T21080] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 430.569698][T21086] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-272); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 430.620073][T21086] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-272); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 430.675138][T21086] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-272); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 430.684290][T21091] sctp: [Deprecated]: syz.4.4132 (pid 21091) Use of int in max_burst socket option deprecated. [ 430.684290][T21091] Use struct sctp_assoc_value instead [ 430.690145][T21086] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-272); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 430.690728][T21086] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-272); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 430.744263][T10998] Bluetooth: hci2: link tx timeout [ 430.760565][T10998] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 431.090015][T21086] net_ratelimit: 4773 callbacks suppressed [ 431.090034][T21086] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-272); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 431.112268][T21086] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-272); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 431.126858][T21086] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-272); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 431.141614][T21086] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-272); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 431.156005][T21086] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-272); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 431.170680][T21086] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-272); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 431.185139][T21086] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-272); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 431.202377][T21086] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-272); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 431.217010][T21086] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-272); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 431.232127][T21086] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-272); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 431.343544][T20846] vxcan1 speed is unknown, defaulting to 1000 [ 431.462685][ T5927] IPVS: starting estimator thread 0... [ 431.468607][T21104] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20004 [ 431.600224][T21105] IPVS: using max 32 ests per chain, 76800 per kthread [ 431.798317][T21120] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4140'. [ 431.812098][T21121] tipc: Enabled bearer , priority 0 [ 432.045567][T21118] tipc: Disabling bearer [ 432.093273][T20846] vxcan1 speed is unknown, defaulting to 1000 [ 432.284997][T21147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4144'. [ 432.431735][T21152] macvlan4: entered promiscuous mode [ 432.461995][T21152] macvlan4: entered allmulticast mode [ 432.471208][T21152] bond2: entered promiscuous mode [ 432.485386][T21152] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 432.515516][T21152] bond2: left promiscuous mode [ 432.800942][ T5868] Bluetooth: hci2: command 0x0405 tx timeout [ 432.828095][T20846] vxcan1 speed is unknown, defaulting to 1000 [ 433.269267][T21188] veth0_to_team: entered promiscuous mode [ 433.277799][T21188] veth0_to_team: entered allmulticast mode [ 433.432350][T20846] vxcan1 speed is unknown, defaulting to 1000 [ 433.514495][T17977] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 433.828572][T21203] netlink: 'syz.2.4162': attribute type 18 has an invalid length. [ 433.846970][T17972] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.856243][T17972] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.896078][T17972] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.911873][T17972] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.973576][T21208] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4163'. [ 434.089073][T21214] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4164'. [ 434.112878][T21214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4164'. [ 434.138644][T21214] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 434.425981][T21240] ve: renamed from ipvlan1 [ 434.446290][T21239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4171'. [ 434.475109][T21236] macvlan2: entered allmulticast mode [ 434.486967][T21236] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 434.697464][T21252] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4174'. [ 434.718016][T21254] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4176'. [ 434.977998][T21264] __nla_validate_parse: 2 callbacks suppressed [ 434.978018][T21264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4180'. [ 435.247657][T21275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4184'. [ 435.482796][T21294] netlink: 'syz.0.4188': attribute type 32 has an invalid length. [ 435.514490][T21294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4188'. [ 435.560935][T21295] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4188'. [ 435.649020][T21297] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4191'. [ 436.226769][ T7916] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 436.301194][T21294] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 436.414652][T21294] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 436.580937][T21310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4194'. [ 436.628560][T21316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4196'. [ 436.655792][T21310] pim6reg: entered allmulticast mode [ 436.746772][T21317] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 436.842500][T21318] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 437.094191][T21332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4201'. [ 437.103823][T21329] tipc: Enabled bearer , priority 12 [ 437.124006][T21303] infiniband syz0: set down [ 437.129031][T21303] infiniband syz0: added ipvlan1 [ 437.177861][T21303] RDS/IB: syz0: added [ 437.182629][T21303] smc: adding ib device syz0 with port count 1 [ 437.188933][T21303] smc: ib device syz0 port 1 has pnetid [ 437.229771][T21340] syzkaller1: entered promiscuous mode [ 437.235762][T21340] syzkaller1: entered allmulticast mode [ 437.561474][T21356] syzkaller0: entered promiscuous mode [ 437.566994][T21356] syzkaller0: entered allmulticast mode [ 437.670430][T21360] netlink: 896 bytes leftover after parsing attributes in process `syz.3.4210'. [ 437.692745][T21359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4209'. [ 437.707227][T21359] net_ratelimit: 1736 callbacks suppressed [ 437.707249][T21359] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 437.759411][T21359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.819767][T21365] bridge5: entered promiscuous mode [ 437.856412][T21365] bridge5: entered allmulticast mode [ 438.210720][ T5948] tipc: Node number set to 1664216848 [ 438.412649][T21391] team0: Device vti0 is of different type [ 438.977490][T21418] netlink: 'syz.1.4227': attribute type 21 has an invalid length. [ 439.729733][T19214] udevd[19214]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 439.754661][T21448] netlink: 'syz.1.4238': attribute type 1 has an invalid length. [ 439.806794][T21454] IPVS: set_ctl: invalid protocol: 103 100.1.1.2:20003 [ 439.959658][T21458] netlink: 'syz.4.4241': attribute type 1 has an invalid length. [ 440.042543][T21462] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 440.166191][ T1306] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 440.191724][ T1198] block nbd3: Possible stuck request ffff888025995080: control (read@0,1024B). Runtime 30 seconds [ 440.202729][ T1198] block nbd3: Possible stuck request ffff888025995240: control (read@1024,1024B). Runtime 30 seconds [ 440.215336][ T1198] block nbd3: Possible stuck request ffff888025995400: control (read@2048,1024B). Runtime 30 seconds [ 440.226525][ T1198] block nbd3: Possible stuck request ffff8880259955c0: control (read@3072,1024B). Runtime 30 seconds [ 440.357935][T21473] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 440.401214][T21477] __nla_validate_parse: 12 callbacks suppressed [ 440.401232][T21477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4247'. [ 440.430415][T21478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4247'. [ 440.457078][T21483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.498146][ T7921] veth7: left allmulticast mode [ 440.514040][ T7921] veth7: left promiscuous mode [ 440.529242][T21489] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4248'. [ 440.557109][ T7921] bridge8: port 1(veth7) entered disabled state [ 440.800901][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.925183][T21505] netlink: 'syz.0.4253': attribute type 11 has an invalid length. [ 441.399541][ T7921] bond0 (unregistering): (slave geneve2): Releasing active interface [ 441.449073][ T6041] TC_ACT_REPEAT abuse ? [ 442.001407][ T7921] bond1 (unregistering): Released all slaves [ 442.085613][ T55] block nbd1: Possible stuck request ffff888025920000: control (read@0,1024B). Runtime 60 seconds [ 442.097883][ T55] block nbd1: Possible stuck request ffff8880259201c0: control (read@1024,1024B). Runtime 60 seconds [ 442.109177][ T55] block nbd1: Possible stuck request ffff888025920380: control (read@2048,1024B). Runtime 60 seconds [ 442.120402][ T55] block nbd1: Possible stuck request ffff888025920540: control (read@3072,1024B). Runtime 60 seconds [ 442.173344][ T7921] bond0 (unregistering): Released all slaves [ 442.186503][ T7921] bond2 (unregistering): Released all slaves [ 442.199007][ T7921] bond3 (unregistering): Released all slaves [ 442.343604][ T7921] tipc: Left network mode [ 442.733793][T21545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4265'. [ 442.804401][T21545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.827586][T21545] batadv0: mtu less than device minimum [ 442.882294][T21545] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 442.894617][T21545] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 442.906525][T21545] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 442.918364][T21545] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 442.930347][T21545] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 442.942241][T21545] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 442.954107][T21545] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 442.966016][T21545] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 442.977919][T21545] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 443.023441][T21554] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4267'. [ 443.038135][T21545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.043665][T21555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4266'. [ 443.056052][T21545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.090340][T21545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.098800][T21545] batman_adv: batadv0: Interface deactivated: dummy0 [ 443.106341][T21545] batman_adv: batadv0: Removing interface: dummy0 [ 443.197331][T21554] syzkaller0: entered promiscuous mode [ 443.228439][T21554] syzkaller0: entered allmulticast mode [ 443.414302][T21567] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4269'. [ 443.815889][T21578] netlink: 'syz.0.4273': attribute type 11 has an invalid length. [ 443.868998][T21579] netlink: 'syz.0.4273': attribute type 10 has an invalid length. [ 443.872500][T21566] hsr0 speed is unknown, defaulting to 1000 [ 443.935352][T21579] batman_adv: batadv0: Adding interface: team0 [ 443.960449][T21579] batman_adv: batadv0: The MTU of interface team0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem. [ 444.020596][T21579] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 444.248002][T21569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4270'. [ 444.262440][T21586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4275'. [ 444.718183][T21613] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4281'. [ 447.744266][T21654] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 447.759115][T21654] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 447.795955][T21654] gretap3: entered promiscuous mode [ 447.807782][T21654] gretap3: entered allmulticast mode [ 447.834579][T21652] pimreg3: entered allmulticast mode [ 448.131952][T21671] __nla_validate_parse: 1 callbacks suppressed [ 448.131972][T21671] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4293'. [ 448.357571][T21677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4298'. [ 448.761654][T21566] vxcan1 speed is unknown, defaulting to 1000 [ 449.244259][T21718] netlink: 'syz.0.4308': attribute type 3 has an invalid length. [ 449.581837][T21730] netlink: 'syz.3.4311': attribute type 29 has an invalid length. [ 449.665900][T21739] net_ratelimit: 30 callbacks suppressed [ 449.665919][T21739] TC_ACT_REPEAT abuse ? [ 449.726146][T21739] TC_ACT_REPEAT abuse ? [ 449.760818][T21739] TC_ACT_REPEAT abuse ? [ 449.782001][T21739] TC_ACT_REPEAT abuse ? [ 449.800675][T21739] TC_ACT_REPEAT abuse ? [ 449.805308][T21739] TC_ACT_REPEAT abuse ? [ 449.835531][T21739] TC_ACT_REPEAT abuse ? [ 449.842775][T21739] TC_ACT_REPEAT abuse ? [ 449.847431][T21739] TC_ACT_REPEAT abuse ? [ 449.852429][T21739] TC_ACT_REPEAT abuse ? [ 449.908311][T21752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4318'. [ 449.934587][T21750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4317'. [ 450.138136][T21758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4319'. [ 450.178307][T21750] hsr_slave_0 (unregistering): left promiscuous mode [ 450.188887][T21761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4319'. [ 450.600387][T21776] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4323'. [ 450.640562][T21776] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4323'. [ 450.732048][ T7921] hsr_slave_0: left promiscuous mode [ 450.758042][ T7921] hsr_slave_1: left promiscuous mode [ 450.791787][ T7921] veth1_macvtap: left promiscuous mode [ 450.815235][ T7921] veth0_macvtap: left promiscuous mode [ 451.875816][T21789] team0: No ports can be present during mode change [ 452.213558][T21809] can: request_module (can-proto-3) failed. [ 452.672423][ T7921] IPVS: stop unused estimator thread 0... [ 453.065833][T21868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4348'. [ 453.205293][T21868] veth0_macvtap: left promiscuous mode [ 453.411942][T21886] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4352'. [ 453.422908][T21885] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4352'. [ 454.067786][T21915] team0: Device vti0 is of different type [ 454.106056][T21916] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4359'. [ 454.116552][T21922] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4360'. [ 454.227168][T21924] netlink: 'syz.3.4363': attribute type 17 has an invalid length. [ 454.246549][T21924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4363'. [ 454.269452][T21924] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4363'. [ 454.350345][T21930] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4366'. [ 454.424990][T21936] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4368'. [ 454.438235][T21936] sit1: entered allmulticast mode [ 454.586517][T21942] netlink: 'syz.0.4369': attribute type 1 has an invalid length. [ 454.598238][T21942] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4369'. [ 454.611440][T21942] netlink: 'syz.0.4369': attribute type 1 has an invalid length. [ 454.663970][T21946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4372'. [ 454.669707][T21942] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.687644][T21942] batman_adv: batadv0: Interface activated: team0 [ 454.696932][T21942] net_ratelimit: 26 callbacks suppressed [ 454.696943][T21942] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 454.767319][T21951] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 455.207300][T21971] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.301670][T21981] netlink: 'syz.1.4382': attribute type 4 has an invalid length. [ 455.361928][T21983] netlink: 'syz.1.4382': attribute type 4 has an invalid length. [ 459.148009][T22057] netlink: 'syz.1.4402': attribute type 1 has an invalid length. [ 459.167807][T22059] batadv_slave_0: entered promiscuous mode [ 459.185137][T22057] __nla_validate_parse: 10 callbacks suppressed [ 459.185158][T22057] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4402'. [ 459.249344][T22056] batadv_slave_0: left promiscuous mode [ 459.276533][T22063] gtp0: entered promiscuous mode [ 459.301940][T22063] gtp0: entered allmulticast mode [ 459.421423][T22069] netlink: 'syz.0.4408': attribute type 1 has an invalid length. [ 459.438760][T22069] netlink: 15 bytes leftover after parsing attributes in process `syz.0.4408'. [ 459.470457][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.526009][T22077] netlink: 'syz.2.4410': attribute type 10 has an invalid length. [ 459.604633][T22082] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4412'. [ 459.662906][T17972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.688288][T22087] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4413'. [ 459.754625][ T30] audit: type=1800 audit(1757837340.751:7): pid=22087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4413" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1696 res=0 errno=0 [ 459.810533][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.914198][T22100] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4416'. [ 460.306531][T22128] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4423'. [ 460.632435][T22147] bond5: entered promiscuous mode [ 460.641973][ T5928] TC_ACT_REPEAT abuse ? [ 460.659174][T22147] bond5: entered allmulticast mode [ 460.674755][T22151] openvswitch: netlink: IP tunnel dst address not specified [ 460.684807][T22153] netlink: 'syz.0.4433': attribute type 11 has an invalid length. [ 460.692816][T22147] 8021q: adding VLAN 0 to HW filter on device bond5 [ 460.704470][T22153] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4433'. [ 461.240445][T22174] syzkaller1: entered promiscuous mode [ 461.256890][T22174] syzkaller1: entered allmulticast mode [ 461.257768][T22175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4440'. [ 461.287101][T22172] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4441'. [ 461.357098][T22180] bond0: entered allmulticast mode [ 461.366967][T22180] bond_slave_0: entered allmulticast mode [ 461.380775][T22180] bond_slave_1: entered allmulticast mode [ 461.432433][T22190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4444'. [ 461.462982][T22190] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 461.583298][T22197] netlink: 'syz.4.4446': attribute type 18 has an invalid length. [ 461.609894][T22197] netlink: 'syz.4.4446': attribute type 18 has an invalid length. [ 461.626490][ T7921] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.637215][ T7921] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.646734][ T7921] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.657333][ T7921] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.769317][T22205] openvswitch: netlink: Key 4 has unexpected len 5396 expected 12 [ 461.993535][T22216] openvswitch: netlink: EtherType 0 is less than min 600 [ 462.359364][T22231] xt_HMARK: proto mask must be zero with L3 mode [ 462.873475][T22255] tipc: Enabled bearer , priority 0 [ 462.902613][T22255] syzkaller0: entered promiscuous mode [ 462.908135][T22255] syzkaller0: entered allmulticast mode [ 462.961502][T22255] tipc: Resetting bearer [ 462.986548][T22253] tipc: Resetting bearer [ 463.024275][T22253] tipc: Disabling bearer [ 463.287327][T22280] netlink: 'syz.1.4476': attribute type 7 has an invalid length. [ 463.317978][T22280] : entered promiscuous mode [ 463.537023][T22294] openvswitch: netlink: Multiple metadata blocks provided [ 463.744216][T22310] netlink: 'syz.4.4485': attribute type 11 has an invalid length. [ 463.755342][T22314] netlink: 'syz.4.4485': attribute type 11 has an invalid length. [ 463.799635][T22320] netlink: 'syz.2.4489': attribute type 23 has an invalid length. [ 463.887919][T22322] xt_limit: Overflow, try lower: 604147548/4200216962 [ 464.305644][T22341] __nla_validate_parse: 12 callbacks suppressed [ 464.305664][T22341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4497'. [ 464.625620][T22365] bridge: RTM_NEWNEIGH with invalid ether address [ 464.638839][T22365] netlink: 'syz.4.4506': attribute type 2 has an invalid length. [ 464.657824][T22359] tc_dump_action: action bad kind [ 464.688236][T22359] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 464.711577][T22359] syzkaller0: Linktype set failed because interface is up [ 464.753687][ T147] syzkaller0: tun_net_xmit 76 [ 464.769518][ T147] syzkaller0: tun_net_xmit 48 [ 464.780629][ T5948] syzkaller0: tun_net_xmit 76 [ 464.880503][ T5868] Bluetooth: hci0: command 0x0c20 tx timeout [ 464.880569][T10998] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 464.921888][T19214] udevd[19214]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory [ 464.935242][ T5949] syzkaller0: tun_net_xmit 76 [ 465.582205][T22389] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4512'. [ 466.111531][T22396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4513'. [ 467.884337][T22409] netlink: 'syz.0.4516': attribute type 39 has an invalid length. [ 468.852064][T22425] Oops: general protection fault, probably for non-canonical address 0xfbd5a5d5a0000003: 0000 [#1] SMP KASAN PTI [ 468.864017][T22425] KASAN: maybe wild-memory-access in range [0xdead4ead00000018-0xdead4ead0000001f] [ 468.873307][T22425] CPU: 1 UID: 0 PID: 22425 Comm: syz.2.4518 Not tainted syzkaller #0 PREEMPT(full) [ 468.882847][T22425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 468.892899][T22425] RIP: 0010:smc_diag_dump_proto+0x4c8/0x1ff0 [ 468.899059][T22425] Code: 80 3c 2f 00 74 08 48 89 df e8 94 31 fa f6 4c 8b 23 4d 85 e4 0f 84 26 02 00 00 48 89 5c 24 38 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 69 31 fa f6 4d 8b 2c 24 49 83 c5 [ 468.918823][T22425] RSP: 0018:ffffc9000f90ef40 EFLAGS: 00010a06 [ 468.924957][T22425] RAX: 1bd5a9d5a0000003 RBX: ffff88807de02040 RCX: ffff8880598eda00 [ 468.932913][T22425] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 468.940866][T22425] RBP: ffffc9000f90f2b0 R08: ffff88807de01a5f R09: 1ffff1100fbc034b [ 468.948821][T22425] R10: dffffc0000000000 R11: ffffed100fbc034c R12: dead4ead00000018 [ 468.956807][T22425] R13: dffffc0000000000 R14: ffff88807de01a00 R15: 1ffff1100fbc0408 [ 468.964778][T22425] FS: 00007f46ee6736c0(0000) GS:ffff888125d15000(0000) knlGS:0000000000000000 [ 468.973801][T22425] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 468.980392][T22425] CR2: 000020000000e000 CR3: 000000007ee6c000 CR4: 00000000003526f0 [ 468.988474][T22425] Call Trace: [ 468.991754][T22425] [ 468.994682][T22425] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 469.000312][T22425] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 469.005844][T22425] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 469.011381][T22425] ? __phys_addr+0xd3/0x180 [ 469.015937][T22425] ? __kasan_kmalloc_large+0x85/0xa0 [ 469.021241][T22425] ? rcu_is_watching+0x15/0xb0 [ 469.026009][T22425] ? rcu_is_watching+0x15/0xb0 [ 469.030792][T22425] ? trace_kmalloc+0x1f/0xd0 [ 469.035429][T22425] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 469.042040][T22425] ? __build_skb_around+0x257/0x3e0 [ 469.047306][T22425] smc_diag_dump+0x59/0xa0 [ 469.051736][T22425] netlink_dump+0x6e1/0xe90 [ 469.056247][T22425] ? __pfx_netlink_dump+0x10/0x10 [ 469.061363][T22425] ? __netlink_lookup+0x752/0x810 [ 469.066405][T22425] ? netlink_lookup+0x30/0x200 [ 469.071182][T22425] ? netlink_lookup+0x30/0x200 [ 469.076018][T22425] ? netlink_lookup+0x30/0x200 [ 469.080770][T22425] __netlink_dump_start+0x5cb/0x7e0 [ 469.086048][T22425] smc_diag_handler_dump+0x178/0x210 [ 469.091412][T22425] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 469.097222][T22425] ? __pfx_smc_diag_dump+0x10/0x10 [ 469.102345][T22425] ? sock_diag_lock_handler+0x19/0x290 [ 469.107829][T22425] ? sock_diag_lock_handler+0x19/0x290 [ 469.113295][T22425] sock_diag_rcv_msg+0x4cc/0x600 [ 469.118222][T22425] netlink_rcv_skb+0x208/0x470 [ 469.122977][T22425] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 469.128442][T22425] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 469.133713][T22425] ? netlink_deliver_tap+0x2e/0x1b0 [ 469.138897][T22425] netlink_unicast+0x82f/0x9e0 [ 469.143655][T22425] ? __pfx_netlink_unicast+0x10/0x10 [ 469.148944][T22425] ? netlink_sendmsg+0x642/0xb30 [ 469.153869][T22425] ? skb_put+0x11b/0x210 [ 469.158272][T22425] netlink_sendmsg+0x805/0xb30 [ 469.163029][T22425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.168299][T22425] ? aa_sock_msg_perm+0xf1/0x1d0 [ 469.173224][T22425] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 469.178500][T22425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.183769][T22425] __sock_sendmsg+0x21c/0x270 [ 469.188437][T22425] ____sys_sendmsg+0x505/0x830 [ 469.193212][T22425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 469.198550][T22425] ? import_iovec+0x74/0xa0 [ 469.203081][T22425] ___sys_sendmsg+0x21f/0x2a0 [ 469.207771][T22425] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.212976][T22425] ? __fget_files+0x2a/0x420 [ 469.217558][T22425] ? __fget_files+0x3a0/0x420 [ 469.222232][T22425] __x64_sys_sendmsg+0x19b/0x260 [ 469.227244][T22425] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 469.232697][T22425] ? rcu_is_watching+0x15/0xb0 [ 469.237445][T22425] ? do_syscall_64+0xbe/0x3b0 [ 469.242108][T22425] do_syscall_64+0xfa/0x3b0 [ 469.246593][T22425] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.251773][T22425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.257911][T22425] ? clear_bhb_loop+0x60/0xb0 [ 469.262577][T22425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.268453][T22425] RIP: 0033:0x7f46ed78eba9 [ 469.272854][T22425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.292541][T22425] RSP: 002b:00007f46ee673038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.300972][T22425] RAX: ffffffffffffffda RBX: 00007f46ed9d6180 RCX: 00007f46ed78eba9 [ 469.308930][T22425] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 000000000000001f [ 469.316891][T22425] RBP: 00007f46ed811e19 R08: 0000000000000000 R09: 0000000000000000 [ 469.324844][T22425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.332884][T22425] R13: 00007f46ed9d6218 R14: 00007f46ed9d6180 R15: 00007ffda04350a8 [ 469.340846][T22425] [ 469.343856][T22425] Modules linked in: [ 469.348821][T22425] ---[ end trace 0000000000000000 ]--- [ 469.354505][T22425] RIP: 0010:smc_diag_dump_proto+0x4c8/0x1ff0 [ 469.360542][T22425] Code: 80 3c 2f 00 74 08 48 89 df e8 94 31 fa f6 4c 8b 23 4d 85 e4 0f 84 26 02 00 00 48 89 5c 24 38 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 69 31 fa f6 4d 8b 2c 24 49 83 c5 [ 469.380415][T22425] RSP: 0018:ffffc9000f90ef40 EFLAGS: 00010a06 [ 469.386479][T22425] RAX: 1bd5a9d5a0000003 RBX: ffff88807de02040 RCX: ffff8880598eda00 [ 469.394745][T22425] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 469.402912][T22425] RBP: ffffc9000f90f2b0 R08: ffff88807de01a5f R09: 1ffff1100fbc034b [ 469.411190][T22425] R10: dffffc0000000000 R11: ffffed100fbc034c R12: dead4ead00000018 [ 469.419152][T22425] R13: dffffc0000000000 R14: ffff88807de01a00 R15: 1ffff1100fbc0408 [ 469.427131][T22425] FS: 00007f46ee6736c0(0000) GS:ffff888125d15000(0000) knlGS:0000000000000000 [ 469.436091][T22425] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 469.443096][T22425] CR2: 000020000000e000 CR3: 000000007ee6c000 CR4: 00000000003526f0 [ 469.451160][T22425] Kernel panic - not syncing: Fatal exception [ 469.457638][T22425] Kernel Offset: disabled [ 469.461943][T22425] Rebooting in 86400 seconds..