last executing test programs: 3.63011376s ago: executing program 4 (id=2530): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0x16, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x200, 0x70bd26, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x18100}, 0x1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x1c, r2, 0x303, 0x4000, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4004010) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000000000)=0x40, 0x4) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r11, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x23, 0x4, 0x4, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) 2.898218262s ago: executing program 0 (id=2538): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x1, 0x71, 0x10, 0x23}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000000), 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x1, 0x71, 0x10, 0x23}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d}, 0x94) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000000), 0x4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async) 2.806435126s ago: executing program 0 (id=2541): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="350a0000000000006911ae00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'gretap0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x1, 0x700, 0x0, 0x6, {{0x45, 0x4, 0x0, 0x22, 0x114, 0x68, 0x0, 0x22, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, {[@timestamp={0x44, 0x10, 0xd1, 0x0, 0xb, [0x2, 0x8b5, 0xff]}, @cipso={0x86, 0x46, 0x3, [{0x2, 0x10, "7adfd5b8c53bd16b2136fddd1682"}, {0x7, 0x12, "ea7656850b8e7534e73a3884f8ef122f"}, {0x7, 0x11, "4efa570259b1bdf80da1e22ce879fd"}, {0x0, 0xd, "667e98de616695c8b648d2"}]}, @lsrr={0x83, 0x17, 0x8b, [@remote, @loopback, @loopback, @private=0xa010100, @empty]}, @noop, @timestamp_prespec={0x44, 0x54, 0x4c, 0x3, 0xa, [{@multicast1, 0x20}, {@loopback, 0x3}, {@empty, 0x7}, {@private=0xa010101, 0x7}, {@broadcast, 0x43ca92d1}, {@local, 0x6}, {@multicast2, 0x3}, {@multicast2, 0x3}, {@remote, 0x8}, {@broadcast, 0x3}]}, @timestamp_addr={0x44, 0x3c, 0x82, 0x1, 0x2, [{@multicast2, 0x966}, {@empty, 0x205}, {@remote, 0x1}, {@broadcast, 0x4}, {@broadcast, 0x9ad}, {@loopback, 0x3}, {@rand_addr=0x64010102, 0xad}]}, @generic={0x82, 0x2}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', r1, 0x4, 0x0, 0x1, 0xf, 0x4, @empty, @mcast1, 0x7800, 0x10, 0x3, 0x8e}}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r3, 0x215eb000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r4 = socket(0x2a, 0x2, 0x0) bind$packet(r4, &(0x7f0000000100)={0x2a, 0x7, 0x0, 0x1, 0x17}, 0x14) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) connect(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x3, 0x0, 0x2}}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x58, &(0x7f0000000240)}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="350a0000000000006911ae00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'gretap0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x1, 0x700, 0x0, 0x6, {{0x45, 0x4, 0x0, 0x22, 0x114, 0x68, 0x0, 0x22, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, {[@timestamp={0x44, 0x10, 0xd1, 0x0, 0xb, [0x2, 0x8b5, 0xff]}, @cipso={0x86, 0x46, 0x3, [{0x2, 0x10, "7adfd5b8c53bd16b2136fddd1682"}, {0x7, 0x12, "ea7656850b8e7534e73a3884f8ef122f"}, {0x7, 0x11, "4efa570259b1bdf80da1e22ce879fd"}, {0x0, 0xd, "667e98de616695c8b648d2"}]}, @lsrr={0x83, 0x17, 0x8b, [@remote, @loopback, @loopback, @private=0xa010100, @empty]}, @noop, @timestamp_prespec={0x44, 0x54, 0x4c, 0x3, 0xa, [{@multicast1, 0x20}, {@loopback, 0x3}, {@empty, 0x7}, {@private=0xa010101, 0x7}, {@broadcast, 0x43ca92d1}, {@local, 0x6}, {@multicast2, 0x3}, {@multicast2, 0x3}, {@remote, 0x8}, {@broadcast, 0x3}]}, @timestamp_addr={0x44, 0x3c, 0x82, 0x1, 0x2, [{@multicast2, 0x966}, {@empty, 0x205}, {@remote, 0x1}, {@broadcast, 0x4}, {@broadcast, 0x9ad}, {@loopback, 0x3}, {@rand_addr=0x64010102, 0xad}]}, @generic={0x82, 0x2}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', r1, 0x4, 0x0, 0x1, 0xf, 0x4, @empty, @mcast1, 0x7800, 0x10, 0x3, 0x8e}}) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r3, 0x215eb000) (async) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) (async) socket(0x2a, 0x2, 0x0) (async) bind$packet(r4, &(0x7f0000000100)={0x2a, 0x7, 0x0, 0x1, 0x17}, 0x14) (async) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) (async) connect(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x3, 0x0, 0x2}}, 0x80) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x58, &(0x7f0000000240)}, 0x10) (async) 2.444398714s ago: executing program 4 (id=2544): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a84000000060a010400000000000000000a0000010900010073797a310000000058000480340001800c0001007061"], 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_macvtap\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000a355b92bc33ad24170c0", @ANYRES64=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x24, 0x66, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xfff1, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c000000030601040000fcffffff0000070000080900020073797a3200000000050001"], 0x4c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1], 0x70}}, 0x0) 2.043474727s ago: executing program 4 (id=2550): socket$packet(0x11, 0x3, 0x300) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000d40)=""/210, 0xd2}, {&(0x7f0000002900)=""/239, 0xef}], 0x2}, 0x8910}], 0x1, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) unshare(0x880) close(0x3) 1.837060981s ago: executing program 2 (id=2552): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x9c}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x3c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "8c2fee66b2524ae58c316d733d651099"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44004001}, 0x4000040) sendmmsg(r0, &(0x7f0000002b40)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x80, 0x0}}], 0x1, 0x8000) recvmmsg$unix(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x40000100, 0x0) 1.676333378s ago: executing program 1 (id=2554): syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x1, @dev={0xac, 0x14, 0x14, 0x32}, @loopback}, "ffffff7f00000000"}}}}}, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x1, @dev={0xac, 0x14, 0x14, 0x32}, @loopback}, "ffffff7f00000000"}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x500, 0xfffffffe, 0x20}, 0x48) socket$nl_rdma(0x10, 0x3, 0x14) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x41, &(0x7f0000000000)={@local, @random="7affc58b95b5", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @echo={0x8, 0x0, 0x0, 0x7, 0x1e8f, "9d5045a4b5a57d529d952c94ce800bb8e919b4761bd404"}}}}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000440)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a0d4e01051d6ff63"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b10322bb5fe7e232f07da3e8bcfa46d3"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="08e0f23e5814c761bd5b4310649505c1"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a0d4e01051d6ff63"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b10322bb5fe7e232f07da3e8bcfa46d3"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="08e0f23e5814c761bd5b4310649505c1"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 1.633780293s ago: executing program 0 (id=2555): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES64=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000880) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x48}}, 0x48054) close(r3) listen(r2, 0x7d4165c9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x7d4165c9) listen(r5, 0x3) (async) listen(r5, 0x3) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) (async) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e24, 0x3, @empty, 0x9}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e24, 0x3, @empty, 0x9}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r8, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) (async) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) (async) writev(r9, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) (async) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) poll(&(0x7f0000000300)=[{r0, 0x1040}], 0x1, 0x81) (async) poll(&(0x7f0000000300)=[{r0, 0x1040}], 0x1, 0x81) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="200029bd700003000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0003000000080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=0x0, @ANYBLOB="0e466e2b1c657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB="79de34a827b746bdbd330b5635671f910909322a41376a948704da57dbdcee95f49534d1bf02e392cc0728fadc4c7f200da59db385b37f92bcf6fff56990f4b5d87f0b17a3c3018a9ef47db4fc69ecd795020b4c96ad2a991b16e34e281c95f7c6a9be9b1310c5460fe9e27ccd461dccea22c55786b8d15b8cd20dbc9a62be30f7fc6df3c42d16be197f79c075a0ecff68c411015d6ba6c98a486fe8d6c45b02a8790753f575e603c73f78c57eb931772958e8e0e0bfb1662e8ab89386751be3b82425df6293138a9cc9c012481d0fc3517f9119089b2ca55ff705f1489e5b6c"], 0x88}, 0x1, 0x0, 0x0, 0x4040810}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r9, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="84f0ff76", @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b00820a0000080001007063690011000200303030303a30303a31302e300000000008000b00040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0009000000"], 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="020200030c00000000000000000000000200090008000000e9000080000000002a40750c8816098707a598cd6203000600000000000200000000000000000000000000000002000100000000000000000000000000030005000500000002000000ac1514aa0000000000000000d0528e5a"], 0x60}, 0x1, 0x7}, 0x0) (async) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="020200030c00000000000000000000000200090008000000e9000080000000002a40750c8816098707a598cd6203000600000000000200000000000000000000000000000002000100000000000000000000000000030005000500000002000000ac1514aa0000000000000000d0528e5a"], 0x60}, 0x1, 0x7}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"/342], 0x158}}, 0x20008001) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"/342], 0x158}}, 0x20008001) 1.473202304s ago: executing program 1 (id=2556): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000050c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000005080)={&(0x7f0000002780)={0x28b8, r1, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x3f6, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0xc}, @device_b, @device_b, @initial, {0x5, 0x4}, @value=@ver_80211n={0x0, 0x5, 0x3, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x7, @default, 0x201, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x3, 0x1}]}, @val={0x3, 0x1, 0xc}, @val={0x4, 0x6, {0x20, 0x8, 0x1, 0x42}}, @void, @val={0x5, 0xd3, {0x9, 0x38, 0x7, "a19c0aff6d4ca3939c6385a692b1505ecc1f29dba4aa951d63e7f189c9f4552d873bb63aa117dfdf6a9807860e5b3f077318ec4ae7eecdd3379127d95633781a0f54580ee4ff71254569b168d518071e111f7813e16c2b6964695b7a095029757ca95704eaa22b29550db294193a349979d406d42f2691e5335f0bf647f85907be4ddf4c5cad85958076164de4c95f7c591d6a0dec1505c7cef55dd691a1a8021fd7b96f0b1f197ee5d4efc2210f3de58ef40d6e24be981240d97f132d234bba67f0e9f7a9a7701083f1e70d3e648629"}}, @val={0x25, 0x3, {0x0, 0xb5, 0x4}}, @void, @void, @val={0x2d, 0x1a, {0x1, 0x3, 0x7, 0x0, {0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x9, 0x7}}, @void, @void, @val={0x76, 0x6, {0xb, 0xc, 0xf, 0x5}}, [{0xdd, 0xa5, "7bccecf3be38d91b0f6902632a899923eeb7f054b7281f72dbe3cc476472599a4b06469d2ab69ac023a5c943c48f8f457cbce4aa9eae85455cb1dd06cd17d6e2131acee566774d41f1362652adc294d0d3cfcb3ae335141406b903ceae200fd00150ef57bb4479310d8f24bb875c5b25067eddc2e770e67a0a5730e65e63a815531b1f4ab24f449501d7c7c7d74b63df62947b247c9503e7a0ae093b2ea9adcde438329834"}, {0xdd, 0x1f, "e56c4e231f3e0ed6387038d723a05c467618994fefc8983958df2e87e35531"}, {0xdd, 0x38, "ac5e68ba04ab3ed003cda00fba1f8fff3cff2e0746497848c447e3222d8287b00e752f9e485008e40807ce8b8c20c903f8391952aa65eb9e"}, {0xdd, 0x87, "1e1a75a63e7d26a99538fa847a3a389752d43ca1b6fbb3b48855b94dc95c9aead48b076364adc09c91f9955085a75d7c092133c8aab32482cc03a831c7a3d27871e6176d3507107ee7272b3b21fecd578bbdb7f25a0c3f59cbd3b348e6b037654d997d6f80c354f7249cb928063a9183e59986e4a2a95eef21d52f2bdbad0353cca44585009e29"}, {0xdd, 0x69, "f5f4a077cccf48cfbaac4fbb902653a481496f8191294363f944773faae330c98586544452b2b344144da78e5d6105cc03e4a794f67035e136c58a46bc9aa92f88225089d6f7f3d822d58c3710e491545f6c24005123e4379ed00d6948331b1d66cf1cdbe8c0062c69"}, {0xdd, 0xbe, "866344f5c7ef434da49ba63a31042df8b64e6048dd1413a325fd70a56a8b3b73bf4266b70db7a19fbd53e068d55f9621fa45c295a2c9002e76b850b712897bf740ed68110bc6ded2fa543820398a329a3bcb3fbaf7df5ec7323586bfb4f5e51d90a8db61a2f72715bc0630a7cc21f5bd37c8f2efc26b393b675f85bf74613cc727c751bee8bf6ea365481da6bd2cade56dee7e6752eb0f854cb2d91200f662066b4016483410c385de441c89c0f1d2a16852bb24775014a964c73e586ab2"}]}}, @NL80211_ATTR_BEACON_TAIL={0x86, 0xf, [@rann={0x7e, 0x15, {{0x1, 0x1}, 0x9, 0x7c, @device_a, 0x4, 0x40, 0x10000}}, @peer_mgmt={0x75, 0x6, {0x0, 0x6, @val=0x2, @void, @void}}, @link_id={0x65, 0x12, {@initial, @device_a, @broadcast}}, @peer_mgmt={0x75, 0x6, {0x0, 0x400, @val=0xf001, @void, @void}}, @preq={0x82, 0x3b, {{0x0, 0x1, 0x1}, 0x7, 0x5, 0x5, @device_b, 0x7ff, @void, 0x1, 0x4, 0x3, [{{}, @device_a, 0x80}, {{0x1, 0x0, 0x1}, @broadcast, 0x1}, {{}, @device_a, 0x7f}]}}, @ibss={0x6, 0x2, 0x4}, @erp={0x2a, 0x1}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_FTM_RESPONDER={0x1220, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x5a, 0x2, "0e90dc6a01d37b1bfd12fa34266f6c5e004b0fb160bbc7ea769c3d1267ab29d10f082ee530b2c8f44ecf513790ec55ae30c5bd480c9b35ec2b1fb00a4139b4241c0e6983f4f63528b52c7b6200c9ba26757972c04b20"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0x1d, 0x2, "edbe46c6b167314fd3b6e18419ee6e0b6b3428d0f8e417592a"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xa1, 0x3, "5c64cf6a3ebb69cba168d925a68cd9d7be66e177d308f61b2d1e52aa2911b024dbbab0069587b8beac6444bcbb9f97fe75f41e447aa38ee6511cdcd4539022c37d7d3aaa6bc11ab9a81f89ba87a303f8e65a158afd5d5a7a5ea6b36e40299502e1247a4c066f9f8c5f257a1a6f09a6b49e694cf85a809423fdd5a8f74c9b63efc8f2ec7cb042b7fe73ccf9b98e7f4e01de4ee189d39a9f81b1d3ac7063"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xf4, 0x2, "7dc06667a9332bf05f2671eda8ffcac19893a48d0bcf757c9a43d24f0d3b993811ea198e17a6ebc37fba9aaa0b8868cf2126c02bc537e1430b5ca4da31a3a8b39ac3dd0a40ba2c0b749fb5d64e21b8a7e652c58e7c55cf79e7495914ca68275df4d8864361acb9f45b1cd441cbec1e41fba0f6ca1d5db56dab37d9a659fa504cc80d356d44787be276b602f7aa6cc07ba204cd8c965ef9c97dc61ec8af657110db7978ce4d40c276b9a3d5b517c2f2b5f6c4288d7d8349ba574ca8f8e88502ea0859a198393345feba229fdb00d950f17a9aabb1ed5b9b61debe969cbddc4f0ea339a3d61856d657231361552bf21462"}]}, @NL80211_ATTR_BEACON_TAIL={0x2f, 0xf, [@perr={0x84, 0x1c, {0xf8, 0x2, [{{}, @broadcast, 0x462, @void, 0x2f}, {{}, @device_a, 0x15ce2b51, @void, 0x3c}]}}, @ssid={0x0, 0x6, @default_ap_ssid}, @channel_switch={0x25, 0x3, {0x0, 0x4, 0x80}}]}, @NL80211_ATTR_PROBE_RESP={0x6db, 0x91, "f1132d26756f543433737f294fb0ee0a9c92b25dca43939a8565e56c31e8f6a7c7cc26b23dbd6f20f913159a8b872b3bd310e3c6beffe1e052c6bd8d33bc7c230f3d979e954968dbde0c656422348fb05d5e6639293c686a29fa3f765d261ebcfaa1ca2df24dbf03e0089061dfe18ec96ba9a592e0f85e3e81b82acbda9d5002643ce92a312a549e1315a45595316b52bd15edf6044fa9579aad3d94ae353a43b0624fbaa5596225830ef82ce2f6cac69995d310018ed57c0ed3129d1c5ed06628c2488ef99907f344115726a34468316b3dbcefe61789b22764adb9a9bec0dbb42233be3d85c1e3744ccab64a4e642c5a03fb4fc3cc061d867e2cf099082cc416195332f11feb892a694f35ebb775b39583d4dc86aa316bce5363fde9b617983ec88212833b313b9a4f277d00d67601763c49c1f60f0d7d5b934b2785a41542e1bfd3628059a9ec69bb95dfb3f4e8415af080a2fa3a249a7e87c00027003fcf6b8a69dbd9de12b68be1a125c922b59a11ca1bb1764c61896b0765853a6524ef76259e01afb5392a2ba0fa266bd0676d6019a995620bd1ad9863616d63ca9fafcb39f764ad064754c45a28e0997bc2d0a1a92ccd81c421118bf51fd3a55bc518075c0b8db3d744ec3e0089086145eb4ee9717c9fdaa192ef7946fc608045dda165b13b761186f2898b775628535570ae365084127dd4227ec0c35b6ef0ee257c82305a1f63242231109ae0021dfc3808b28f88efdc8ae99f3a9d9e53738820d14b0a1ee5f6994636f30ee1b2b51eb59c61b00dad53d28d8030a8a32a45c940b10bd98365855c9718dd5272c4d5fbb95047332720b36a026069f236e92a0e2fd9548717f5124f6e570dfeb010b0150adb611de7341f6d78981c704ed30dc0c97c67387c596ee66c5b9c81a2f00c65a1f8005aeb5d0090958cf0e92d2ee3e7f476abf7b73fdecae6afbafec784a1f27bfc0e317320a01570704e03d18606b738bc726bd61e1b40c802191c56ffb5332530c1aceeec851216c6a569cc63a5b248508ad39cadca2e40a5051d9b9192eb989ab653a83fc6bade8d36c90c055e8d982011860a2a6bdffaa58db8f03e64bbb5be1156405cae38a130052238fd61ed6360cafa1d8189e37d2db092c34298dcba8c0e07f904fc7f4b6e9ba1c78b7076f969be956f4a3215b601cdfa5eed79a9f69ab4072847328b7a1d9609420bcd02bfcf6a9a6619409ff32cc9b92722a0a0c1c45d29639da043ba3daa71fc9ac6c8ad48a3e4306b7050a912e844ed4ea984c140b9b0f973687b63c8eee8a8279522a783b8d3bc6cb6a97dff4786c9e122cb294e672b9ab279026565377bfeee84e1c2e687770c4dffb3ccfb52f0289ba8bb5149878d1c4d6a7cc9340a7fa19065d9239c5660ae9ea1bf3c4266a09037340d20a8693468feb89bdcd909678aff5c319b63d4aeb755460e0fa2e85fa9a580205e39c93d538bee8cf1859aad8c959a2ad3bc1b1de3f434f225df318e2b9a424c3c4dd2469af8231cd3f674adf24388767d1f3d497e0a8aef09d7e5f1c91be0e02430b942a7ec1f549376c528684fdc9e2579cb0f268b6b54bd8ab8770c5f08050a725ff28a42a3293e2dc9680d9babc1710dcf7c0f5936e779ae4b8c23b2b87c640ff9b191843efdd1d9bb8b6e3318ea35cd1a3c167ecf0093401b61ad7d234e73efb6e0f470d6b80ae6f17e6ff4ef52a57ed67e21ac01e85a7264e88cae048fbc24046eac2cba774be96ca0c4365b7237b98104e68b33d7d866b5ac6fadf506d223f641beae2e374b2d2b94cf731f2883cb9f217347c99f4b97d7d0eb2cf1d72ea99547cf576ab67f5da5b9e5b05cb8ddd0a59f5b6eccb78e0ba2f1ac41c9bf5b9569090a68074ab9ca49fef2d14c8a9cc6216ef3652763c1d8140f3e852f20113472e58945c5687d40a1f2f627a9780135b7c46d12cc1afa212fb567cd0a915d37d00c6cd5c40d85c3adf0746d4d6b65d46d7c7414252157efc08daaa677654d7f14c8800cd98255154f12179428b2e523a468fbc499f4fe9ed41a79e7dd0e85e9d4428348094a1e2a4a5e6c7a7fe31edd891cf9350fcae5d49f19a01095b11703a8391bc1f0bc2605e361825277b2d8600834da1c7c638a342d59ef6eba1db3f0697b774f0797a0c74e5dd405d09d8a8af7b3ad7458ac3692b3f575f23f4877eaf639d4ec4a2e048313d5bf700db3bdb521a294ce0b36b2d24ece558e6bae02645ec1ecc6eb96eb988a4381121bec5cb1f517a7ac28448c1f6bda3527de6d3206fa896cac00043dca3f9f0f9ab7cb84e5e3293acf53d40b659f4b97774707b1ca730a505b9fbea095cebc4b01f7dd4e7855b300a0c7e9edb752d88ab6ba89b9381a07759730f918cb9cb3d0321cf5848bc993d30bfce35a3b06182ef7754de39f664c551b192c6bc4c73d695585028851f9fbceef9cc7d5d6a157be757f89557dd0145f9d5f4ef8"}, @NL80211_ATTR_IE_PROBE_RESP={0xdf, 0x7f, [@mic={0x8c, 0x18, {0x2aa, "3bcedbc1d211", @long="4d3d45bf9b8d0758efeacd2d80f94750"}}, @random={0x5, 0xaf, "438c406aec23842d6292281023ea6544e4c64d6917e6d5d5a4a1696b9f84c300cad7c124cdce4e4656201e721204b101a2678468454d209ec4fda045faf17719ed1053f2b3c6d6e47371b8b33a4e544f6138d2286ed0364c4c9c149b2bcb0072e574192cb281a586d232b01f85fbf33025d8576acf791c132ec942867bfd14c15272b7815f1c07eb80b436b544a9d7415750daa60e6d9dfbf2d12cdbdb38ff532d2af77052d898747923fb2dfd3fd7"}, @channel_switch={0x25, 0x3, {0x0, 0xb, 0x3}}, @challenge={0x10, 0x1, 0xd2}, @cf={0x4, 0x6, {0x3, 0x1, 0x6, 0x2}}]}, @NL80211_ATTR_BEACON_HEAD={0x460, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {}, @device_a, @device_a, @random="b0c802916ec5", {0x7, 0x9}, @value=@ver_80211n={0x0, 0x36a6, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x6, @random=0x100, 0xa00, @val={0x0, 0xe, @random="d92be0f5feea4bb2d08a4d786280"}, @val={0x1, 0x7, [{0x36}, {0x6}, {0x1}, {0x5}, {0x16, 0x1}, {0x12}, {0x822a80390cb181bb}]}, @void, @void, @val={0x6, 0x2, 0x3332}, @val={0x5, 0x99, {0x51, 0xf7, 0xe, "a138bd11ccea76efcad7130d21ab212b6d7fdec346c47487de2240f6a5b42ffde0d6a81c57c52f0250355a8f0c5d06987be9d9dc5b50cc7f959a1d78cb70db587ed781da6b0c196f2236a94f66810bc0502f3985d1b2a11089d15465b29029777e78dcb34ec88e096d9e2fd3bbdea065ca6744677ad80af5e430f0f02abd01808146c173dff7fd0486d54266261bd78241fb6d3c8cdd"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x81, 0xac, 0xa3}}, @val={0x2d, 0x1a, {0x300, 0x0, 0x5, 0x0, {0x7, 0x81, 0x0, 0x55, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x6, 0x6, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xf2, 0x1, 0x0, 0x1, 0x2, 0x2, 0x41}}, @void, [{0xdd, 0x79, "208e2105280dd7e575c486380dd74b50045db5a30c6d9d4c2e1aa13e1a803a742a6683108912860d6bb83811b25f8acc1357e1593c75eca7f78c388b709c8754ea0b7d3fe3ebdb42f3ea355342c036bffefd5a3224af230ca9f166eb88ac80c0b4f1e627191875d69ee54bd8ff231b840176836c707fb88878"}, {0xdd, 0xab, "fcb953b5b31448be33ecc625b94246145c7367b84885c87c18a6cd59d29c3b21c9632b698a8428416a9575cf6be6be4ed5c2986e49d0791442f4cb9cdab8d210bb3072b4fc9c264e3895497e18779744b3830abfe3de7e87ecdc8336ad52821350ae5889ed37b3d9719e1770d6ac00412f2ce1a221af725ea859d835ed92025b848440f2fe9e37256edb0e592cbc06fa6eb069ba4e31798d8e6c823530d9d841a6ae0f0861d0472c93d744"}, {0xdd, 0xab, "c5c36a87001937712af7976834c703106c680e933633e96a1d115c8dab473703ea3f24ec866031465c49be7985f9babf5a11acc098b8996a0973a246e5cc5b107272acd9dbb94686a48837a3e9c93c5176744f7d9bf7384f3e1176dd1de75b3470117ec620981d2eec52b4181cb616e3ff4895deba282b287cc6819e7c10c0f9b812a30a5f98a61661520241cd200de594d5516eb1afb833d5e2eef0ad4d5d2bb1f9f6abc06c67447637a2"}, {0xdd, 0xb, "600ca1bc9a34994ed62c77"}, {0xdd, 0xd7, "4098edf445544410b412c43ca5d275162a08303b361009122939bab5329874b162902869f87a8fad34dfff4d15b7cb74ec8050485107ea276e990ea991b94978e9c9bbe90e224861ec5d619e683214681735ef1af2166b6827301781b3e29c441ead72c92f3daa3a3d4f6381bff702b2509824262d4f313d1ba7ef534c8457955efabd41f767e8f7119c154f0e16e13f9313e7fc4e8df2e64d061fc9962e9abdb05581756229d4da4aae4f1aa97b876284147494bfe1ae051b0ba39a6dd03d8f5a10a14b374109cc9db926855ba075a4aa260127e441bf"}, {0xdd, 0x48, "8a8c3d7b6b78186c0658bd94f86df3b2253ba04562a67826e0ce45adb249617481b003a9246862f16fa721fe2f01ece2d39ea98fb4c7b8133528160fb86f7a3e96ed7d0f67ebe595"}, {0xdd, 0x42, "0cd3a280720933c9748c3f4e3c48fa7ab4aa0162307c259b4e4d15f305f8e78d048bf5e651788c307e95ccaf961c3efd5fd0a0ebd9941577d9d12cd9eee2f05c2143"}]}}, @NL80211_ATTR_IE={0xae, 0x2a, [@random={0x0, 0x9, "b3c1eb2c3bed9aa62d"}, @fast_bss_trans={0x37, 0x74, {0x1, 0x2, "f76ad869e0daf0d9cb8ed496839e16f8", "5c7ca1ed26efee63acc0b915f3ff85784ac12e96ce85b365eedd71bc0a0d3318", "0832a9bc185ed3e4cd34664c51ffe32b49c38814d0fb5ce302a184372330f9fd", [{0x3, 0x10, "dd129a2e14751e544255bd7ccd0d1293"}, {0x1, 0xe, "d35a51dfc373d3e17ea26e02b7c1"}]}}, @ibss={0x6, 0x2, 0x6}, @cf={0x4, 0x6, {0x3, 0x9, 0x8, 0x7}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_b}}, @peer_mgmt={0x75, 0x4, {0x0, 0x401, @void, @void, @void}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}, @NL80211_ATTR_BEACON_HEAD={0x318, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7355}, @device_a, @device_b, @from_mac=@broadcast, {0x8, 0x7}}, 0x5, @default, 0x2, @void, @val={0x1, 0x2, [{0x2, 0x1}, {0x2}]}, @void, @val={0x4, 0x6, {0xf8, 0x4, 0x230, 0x9}}, @void, @void, @val={0x25, 0x3, {0x0, 0xb0, 0x4}}, @void, @val={0x3c, 0x4, {0x1, 0x1, 0x28, 0x5b}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x69, 0x5, 0x6, 0x7}}, [{0xdd, 0xcf, "190f3f3f471c52c0c30cb0f9837aa2509c66f0dbcfd857d8a0f12ef9dee52c92ac9273abf769a1124b3917bd496d3777744525785edd5f6d79ada7a7b9c0e0f07a779c81a6ee76b2fb3398d3292507175b277f4ff196e89ac4a1704bb1e9c3499d934950d8d59124f9b425d509b5df8ff9c886ae935ada4e9defec9ab6c22647512452a08795c68a4553aabe01aac0ac9344e8b7f60170bfc575428a6ceadce9768aae60bde3f23ed0657707792d8603a0e68767d3ecc1bc6da348ed73d834480b5a043740c5d620f804e2ae9f1953"}, {0xdd, 0x58, "7774158c3792ddd9667a3cda86a9f702d333002d69d205c23e167f76ed1a479e5ff37eb7820fb2a79262acf58f5b2071b3e8072264ad613bfe00c230db2f84fc3b8803d03022bb1fefb29a07b2c6809664d83741dd8d4c3a"}, {0xdd, 0x74, "bcf8c6c1c107910039be5e8f18462a51ae983adcc15c48f8ecb1babe58701b7a9b3f825e7c2f5ec2c5664b21ebea76bd533d1267c152ad80c80ff587fe5b8b63b9091841dd129a85e4c80da8be909f5a5bee846e1080ebe720064247915f4c06258c9b3aae62dd25cae9d824e97ae3e345663e9c"}, {0xdd, 0xcf, "8d5b9dfb2058b6b10f1f9af2235e779e5bf3ee1c57d2cbab73fff38416c2399305d98e36f55d57a9e33e04bc4b5ecca6f7d1229cc52b10a61dd320671ee1aaca4fb813af7496a5657d923c987d8693dd385c0d7228c9ee6054a28df44573fdd2a8faafffa5de2f3d5b0666443284a06c42d2f047f30f4020e99d867bcd0938fc31c11687ea1f64c9c6d7a139f7c770a154a699df124ec6f9b136b9d4f71e713a60aafd897f35ba2e869362dee7bc96d4f08cef19d4f1e63aaa582058929dbc767a14852a58d2e46df05fa4da78579c"}, {0xdd, 0x55, "a1b0e7b5f83a718f4cb6abb4890a0426f61446c07bd90d91d363ca9489dfc9478d7fefee38190de6150713d63009cb9c7de40cbdbca309eb5cc2651c7c5f5b76f6619d91a3679ad26837856cae5073ec17e8d07da7"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x1f0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xe5, 0x3, "9dfe543bbd5c67ef6fea1250dd80b3ab0699a1cbbf77d824b72011505a7cb2222be651c12b9bddd79fd0678edaa62edaccdbd0be69b71da2edcba2168f4e729f37bbe03218f2e94bd5bde03a3d5245fb457e4d896853f4605099a1a44d80983ccafa71cfbd799fa2506445709e5001735711eff2e2bab0301197662316ee83509aa49df754395055d2f1a86a8588a555ce26bf46ab37414a47857e75a3262570dd30d3626364edea69fe8df669550e77b3468944c385852c8deacd88a5ccaf2526dc81cc7b014cd8600ab3b44c6974834234f2cf32e89fd0f73379f746fdc383b7"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x81, 0x3, "60f81c0621a4ebaa15980734343cf9bfa6601d012f4ed7fefdcd8858ecf4226fbd842efe34f9a4bf04447b241e259680506953cd58b61b1de11acb26fd69bb9730db682f31ea4d9f119aca4244af47f3b0a24b4367815fbcf01460e1aa4d9fac7afa97afe01b4c9ad06cdeb3b254b5b8145c7bdbb45aa47026a60fcd05"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x6c, 0x3, "90b1b9e8fe9396757029baeaa2e25f8e604ff26d8a5a2107f006e670e79c2c5f95f3db46f10155ae8dcb58805d322161ae114b5617dc1dece17e847afc43763bb063afc4b03e4d2de9eea633424c04bae6bc7060eb84b36bbbfbcc0ebb94d53ebf9ab40bd4a5fb12"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}]}, 0x28b8}}, 0x20040800) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x4, 0x2}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000140)="308879c97457d4c7552f5aa76915dc3065f4500864ccdb86a7ea184b96f1c436de829f9578d79c7890c43700dc68c87a6dc9ff536bcef8f464c09c488a83ed9b275263a748dcbf27b9519f13e852dc65b30b27fa4eb767cb09546db4769a2e611f77ec4f9ac7f5b9ced0c5cdd9613faab4809b436131f9a426ec8466681a2089423c405859508e8ead4fb7465751f499123a0c19126749ac870a3c6578a1d3059b7f60038a8af0ecc67181cbe92a40de900b00000000000000", 0xb9}, {&(0x7f0000000200)="95d8cd1d8c18608bd3e4a89c6ba3927c32ed365bd107b1ad5dfd68b80ecfa88711be", 0x22}, {&(0x7f0000000240)="9442f21d04e86b77923c6ee33460880c726fd95e342f5e0b3f", 0x19}, {&(0x7f00000009c0)="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", 0x109}], 0x4, &(0x7f0000000480)="0efcbc7e7229f1b1872abe096151abf0d17793f2bf929f5ba7fd5faff1e7d27139758057e13ddb71be00e15921f59feb7352614641df8043cd33e4d70f21e1441067d0e12d1e0eeb976288ea4403f9a6a41132fb62fbfc55", 0x58, 0x4008040}, 0x4041) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x44, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r5 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r5, &(0x7f0000000640)={&(0x7f00000005c0)=@l2={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}, {&(0x7f00000008c0)="7f25ea46a66cb794995594f2b00306ec896161006fa8624715e9af895d2e017dcb7ba0162cc3288edb4e5e4a043f678fb1c3ad54a6a6b0f495321f638b1676ffcdd11a6576cea82b1d9dea16414c4e1f78d8321779c932b63da7402ee3bdd8f704d5dd6b38da53951f991d7e33ca0e8f6f0770ace643c447d2b17ceb9955357c915f195d46bdb23bd67cac7f1175215375b1b584c58f8e51108c6d9f8777cffe9c8ebe3ebd0c80c154f48c2ba402181fbfa5c7e774183f06dadd847bb758aa4fb7bfae61bd0ccae096d905946741dc8f48948d7fea2540ad164f643539f0ec3bd2387c7a348531382c0210e78b6d", 0xee}, {&(0x7f0000000780)="06c8259d5676cf2ff59a5999fe9bd57dbd7cc309f5939d4ce006f2369141e20d3649e2a17086b5897a3fe16cbf52b72b172a74f7ffe74427dfd7515eb2d93db7aa93f6b8bdb962fb8edc916055095b8d23fe0c315547a7f3e8124e8288d2650a916b4428469e562970b87545915d1fbd4046ff10f864ae9dc7b104616894efd77db91610d91a7ba106f61509035419ea249a2f0bff73445a0e4144ab3157fd428922716c437930adff6d5e063b332bb5c65ca5553d228111a32cc94685d67fef83603077328cd8a291d0fee9a5e37240b445b35bc77a8648ba5dc749ea3d825ed8a1f27224dcab0eb5e7f02ccacac6d44b8e", 0xf2}], 0x3, 0x0, 0x0, 0x11000000}, 0x0) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000000)=ANY=[@ANYRES32=r5, @ANYBLOB="007f0005", @ANYRESDEC=0x0, @ANYBLOB=':max']) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x3}, {}, {0x1, 0xfff1}}}, 0x24}}, 0x40004) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r9 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r9, 0x0, 0x0) r10 = accept4(r3, 0x0, 0x0, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r11) sendmsg$IEEE802154_ASSOCIATE_REQ(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r12, 0xc11, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002740)=@newchain={0x24, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xe}, {0x9, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004880}, 0x44000) 1.469212787s ago: executing program 0 (id=2558): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000a00)='syz1\x00', 0x1ff) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) 1.286257603s ago: executing program 1 (id=2560): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 1.276754094s ago: executing program 0 (id=2561): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x101, @mcast2, 0x8e4}}, 0x0, 0x0, 0x2b, 0x0, "bb02a3c364ca41d6357e544524014004009412080000001e1ea6324d0093fcf19b49f31d0000000000000076a8a20122e4dbbe00000000000000000000000000000100"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xe4, 0x30, 0xffff, 0x0, 0x0, {}, [{0xd0, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0xd6}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x60, 0x2, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x6, 0xdade93c9824ef2cf, 0xffff, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe4}}, 0x0) 1.229845967s ago: executing program 1 (id=2562): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001e0001000000000000000000070000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n'], 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xc, 0x9, 0x7f, 0x305, 0x2001, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x25, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x74a}}, @const={0xf, 0x0, 0x0, 0xa, 0x5}, @float={0x9, 0x0, 0x0, 0x10, 0x2}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xf, 0x4}, {0x6, 0x3}, {0x6, 0x2}, {0x5, 0x3}]}]}, {0x0, [0x5f, 0xe, 0x30]}}, &(0x7f00000002c0)=""/178, 0x79, 0xb2, 0x0, 0xb, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0xffff, 0x6c7d1f70, 0x4, 0x4145, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1003, 0x8000004, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r6, &(0x7f00000021c0), 0x0}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000210400"/20, @ANYRES32=r5, @ANYBLOB="000000000000000020001280080001006772650014000200560800"/40], 0x40}}, 0x0) splice(r3, 0x0, r2, 0x0, 0x800, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) 1.174047577s ago: executing program 2 (id=2563): r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x54}}, 0x20044890) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NFC_CMD_FW_DOWNLOAD(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r7, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, '\'/^,,'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20008040) sendmsg$NFC_CMD_GET_SE(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r0, 0x8, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x50) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$nci(r8, &(0x7f0000000540)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x1, 0x2, 0x1, 0x0, {0x0, 0xa, 0x9, 0x8, 0xf9, 0xd, 0x5, 0x22, 0x85, "b8f8037cd9607c6c7afe6daccbed892b4ab65d2b53b43a3296de48b286bf3450328d5a115e5cda4ec40b7a177377db37da94e2721e0835e491178a7d21421ae2d93a81de257787ebc88352f3175a9f782592e2ac89e9dcb51a45b8996ccb1ea3810cd51209d437228ff56458dcc7feead2e23af7a3a0b8653b41cc58d5f4b9383e406ce2e7"}}, 0x96) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) ioctl$XFS_IOC_PATH_TO_HANDLE(r8, 0xc0385869, &(0x7f00000007c0)={r8, &(0x7f00000006c0)='[{-/\'\x00', 0x80000, &(0x7f0000000700)={@_ha_fsid={[0x98c0000, 0x8]}, {0x4, 0x8d7, 0x5, 0x81}}, 0x8, &(0x7f0000000740), &(0x7f0000000780)=0x5}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000ac0)={'team0\x00', 0x0}) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b00), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000bc0)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1b, 0x10, &(0x7f0000000980)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x1}, @map_fd={0x18, 0x3, 0x1, 0x0, r10}, @alu={0x4, 0x0, 0xc, 0x0, 0x0, 0x50, 0xfffffffffffffff0}, @alu={0x7, 0x0, 0x7, 0x2, 0xb, 0x30, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}], &(0x7f0000000a00)='syzkaller\x00', 0x9, 0x65, &(0x7f0000000a40)=""/101, 0x41100, 0x4, '\x00', r13, @fallback=0x2b, r14, 0x8, &(0x7f0000000b40)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x5, 0x10, 0x6}, 0x10, r15, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c00)=[{0x1, 0x5, 0xc, 0x760ae4a6835f65ce}, {0x0, 0x5, 0x9, 0x7}], 0x10, 0x80}, 0x94) r16 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r16, 0x29, 0x36, &(0x7f0000000d00)={0x1d, 0x5, '\x00', [@jumbo={0xc2, 0x4, 0xc6}, @calipso={0x7, 0x20, {0x2, 0x6, 0xfe, 0x8, [0x7, 0x7, 0x0]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x38) r17 = socket$netlink(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000d40)={'veth1_vlan\x00', 0x4000}) ioctl$TUNSETVNETBE(r10, 0x400454de, &(0x7f0000000d80)=0x1) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000dc0)={'veth0_vlan\x00'}) r18 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000e40), r6) sendmsg$NLBL_MGMT_C_REMOVE(r6, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x2c, r18, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000f40)) 1.048836035s ago: executing program 4 (id=2565): socket(0x11, 0x3, 0x0) (async) r0 = socket(0x11, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x50}}, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x50}}, 0x0) socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000), 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r4, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) setsockopt$sock_int(r4, 0x1, 0x2f, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) (async) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1}, @IFLA_GRE_IKEY={0x8, 0x4, 0x40000}]}}}]}, 0x48}}, 0x88890) write$tun(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000800008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x15, r7, 0x1, 0x0, 0x6, @remote}, 0x14) shutdown(r0, 0x1) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b05000080432f"], 0xdd12}], 0x1}, 0x20040890) 1.012674408s ago: executing program 1 (id=2566): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x79, "9d4625107f756ac4f28f3b65ca2a123101464bd790a231ee31b0947ecc67ef0450b8eae8011289a0e1d5fa7871e00c4d5a3d895136a9e6a492dec1d9f765880a197b833d2fc13ca5d64e42253f9ba8eb497a112c0efeffc1cd87e8e39ec2c9f2074d58d6e55a1a6474d713162991c1946946cd44281bc0f0f0"}, &(0x7f0000000180)=0x81) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 813.460584ms ago: executing program 2 (id=2567): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000080), 0x4) listen(r1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r0, 0x1, 0x200, 0xa9}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r3, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8005) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f0000001640)=""/4082, 0xff2}], 0x3}, 0x2}], 0x1, 0x0, 0x0) 777.758141ms ago: executing program 1 (id=2568): r0 = socket(0x1, 0x5, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)="c1e220a182cfa0a8442859", 0xb}, 0x1, 0x0, 0x0, 0x40000}, 0x4006040) recvmmsg(r1, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0xe88e164623c85842, 0x0) recvmmsg(r1, &(0x7f0000005340)=[{{0x0, 0x0, 0x0}, 0x7f}, {{&(0x7f0000004f80)=@nfc, 0x80, &(0x7f00000052c0), 0x0, &(0x7f0000005300)=""/19, 0x13}, 0x10}], 0x2, 0x0, &(0x7f00000054c0)={0x0, 0x989680}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r3 = socket$inet_tcp(0x2, 0x1, 0x6) recvmmsg(r2, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x2, @loopback, 0x3ff}}, 0x0, 0x0, 0x2b, 0x0, "e61d11b3a606bfc219831afd386198e838b64447e425cf9f56327fde27f4df6f967746c9069cf1abf07d759f7abdf161269ed1624c501e10dd947af5311385af8d3812bcb16306f2c92df8b1c1ce5a6e"}, 0xd8) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) pwritev(r4, 0x0, 0x0, 0x8840000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xa, 0x22a8, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4}, 0x94) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fbdbdf2503000000100007800c00018008000100", @ANYRES32=r0, @ANYBLOB="080001"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000844) 744.114946ms ago: executing program 0 (id=2569): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket(0x1, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="59cf0000000010000000080000001400018006000100020000000800050003"], 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x210}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000003c0)) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0xb2}]}, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000180)=r13, 0x4) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="010000c0f1e5e6f80724c100010003000000000059247e166ce25c51c2203aa496a9fcf310ddf36c35c74eb82086b7d6282c850cc037db7d31cff465903661697c04b3a92d31f929cdff8aa361cb0ff30bb904792fdeec2476ddbacfe205923db45b256478d3c41117cdfcc71a0b072771830bea5031afc28fb20b2993c77ad8c38a482f8e23d16e63612bc2c3767e375631bd29bc811842c86f51a8496745f2777bf5e032132f8373230aa6a76e3478a0892ac01cfc51ef3d1be3bf945a5fc1e0145c74fa4a29d0217cab24918223889560895481ff7f17d0e3ac7f779b136c03b57ae5ccd0fddb7a3109d18c63bd57d42cfb8ef8bb88f7cdd3cbb0ba7c21d7c543d88431e1281192846d229d91864055c495cdc8697e9f6f6938e2016a851c2a73086add5ab14374e2c5b4a069550d47a4e1a6798cc7943b4b6c02e0b23723c7e932920964af8906887d6fdcb8be139bad32d50227fc5742435f89d395d59494dce92b9aee8eea8247c6557618a7bdee88f096b3dd027f4cdf3e20d62eea13", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r15, &(0x7f0000000180), 0x0}, 0x20) sendmsg$nl_xfrm(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) connect$tipc(r9, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r8, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r16}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r8, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="a3000000", @ANYRES16=r3, @ANYBLOB="010026bd7000ffdbdf25030000002c0003800800010001000000080005007f00000105000800030000000800010002000000060007004e2200003c000180080009002100000008000b0073697000060002003a000000080005000000000008000600776c6300060004004e230000060004004e2100000800040006000000140002800800050009000000080008000200000014000380060004005c0000000500080004000000"], 0xac}, 0x1, 0x0, 0x0, 0x20000801}, 0xc0c0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc601000000001000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 606.092301ms ago: executing program 3 (id=2570): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000003900000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x1f}, 0x90) (async) r1 = socket$alg(0x26, 0x5, 0x0) unshare(0x20000400) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000004080)=ANY=[], 0x48) (async) r3 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x90000002}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000020000000080000000000000", @ANYRES32, @ANYBLOB="00000000000057453e2577e70000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/28], 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r4, 0x1, 0x19, 0x0, &(0x7f0000000280)) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000002600000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r5, 0x11, 0xcc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) r6 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="f4060000", @ANYRES64=r8, @ANYRES64=r4, @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018400000faffffff00000000000000001800000000f0ffff000000000180000018470000040000000000000007000000184a00"/128], &(0x7f0000000500)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0xb, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000640)=[{0x5, 0x5, 0x7, 0x6}], 0x10, 0x3}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000900)={r9, r10, 0x0, r0}, 0x10) (async) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r11, 0x0, 0x1a, 0x0, &(0x7f0000002540)) 596.787073ms ago: executing program 2 (id=2571): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x20000081) (async) r1 = socket(0x26, 0x1, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc001) (async) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1e}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x10008040}, 0x40001) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0x1f8, r5, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x401}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x200}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0xb756}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0xb5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0xc}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x182d}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x9}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x20004841}, 0x40011) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x810, 0x51}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x30}}, 0x14) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000940)={0x8, 'veth0_virt_wifi\x00', {'wlan0\x00'}, 0xf}) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000980)={'vlan0\x00', {0x2, 0x0, @private}}) (async) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x54, 0x1, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xe65c}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x712}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x100}]}]}, 0x54}}, 0x4000000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x30480, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000b40)={'wg0\x00', @remote}) (async) sendmsg$nl_route(r1, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)=@ipv4_delrule={0x48, 0x21, 0x4, 0x70bd27, 0x25dfdbfc, {0x2, 0x0, 0x10, 0xfa, 0x6, 0x0, 0x0, 0x4, 0x10009}, [@FRA_SRC={0x8, 0x2, @broadcast}, @FRA_FLOW={0x8, 0xb, 0x3}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xc2f}, @FRA_FLOW={0x8, 0xb, 0x7}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}]}, 0x48}}, 0x4) (async) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000cc0)={r1, 0x8, 0x59a, 0xfffffffffffffff7}) write$cgroup_type(r9, &(0x7f0000000d00), 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), r2) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x70, r10, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) (async) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000ec0)=0x3, 0x4) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000f00), r11) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r8, 0x8008f511, &(0x7f0000000f40)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000f80)) 514.818651ms ago: executing program 4 (id=2572): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40810}, 0x4008000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4048811}, 0x24008802) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) socket(0xa, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000071122e00000000009500000000000000fd9fa8e6e17cfa3d67e60ac522e60b84af52de233216241cf4e797a3ae4462a842d79cbdba2a5cf2556b377712d79e66c6471088cfce90f9cc96fd5118309f811397fae5e180d81fdbdceb79dc604a17295a80566e094b681e8523887dbcac19605316a0e8b31ed5b98f6a4c69134c0e1058acf9deadd562b8b609c320fa054b1a10e15d9d77d3a582a4bee49d973e7f2e97d41385191061ea217c337c567004e216a41c0418a1a766d38c4b2b1acdc72a58eb8db4f20f989d5d0dabb4faa624507223a75903366a06a1298fbf460adfb2a2d3"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000071122e00000000009500000000000000fd9fa8e6e17cfa3d67e60ac522e60b84af52de233216241cf4e797a3ae4462a842d79cbdba2a5cf2556b377712d79e66c6471088cfce90f9cc96fd5118309f811397fae5e180d81fdbdceb79dc604a17295a80566e094b681e8523887dbcac19605316a0e8b31ed5b98f6a4c69134c0e1058acf9deadd562b8b609c320fa054b1a10e15d9d77d3a582a4bee49d973e7f2e97d41385191061ea217c337c567004e216a41c0418a1a766d38c4b2b1acdc72a58eb8db4f20f989d5d0dabb4faa624507223a75903366a06a1298fbf460adfb2a2d3"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000900)=@req3={0x4, 0x4a2a, 0x0, 0x9, 0x7, 0x9, 0x8}, 0x1c) pselect6(0x40, &(0x7f0000000000)={0x7, 0x101, 0xfff, 0x9, 0xfffffffffffffff8, 0x6, 0x100000001, 0x8}, 0x0, &(0x7f00000000c0)={0x8, 0x8, 0x4, 0x8, 0x6, 0x1, 0x8}, &(0x7f0000000100), 0x0) (async) pselect6(0x40, &(0x7f0000000000)={0x7, 0x101, 0xfff, 0x9, 0xfffffffffffffff8, 0x6, 0x100000001, 0x8}, 0x0, &(0x7f00000000c0)={0x8, 0x8, 0x4, 0x8, 0x6, 0x1, 0x8}, &(0x7f0000000100), 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) accept4(r4, 0x0, 0x0, 0x800) (async) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) (async) sendmmsg$alg(r5, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x40000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="240000001800010000000000000000001d01060008000a00", @ANYRES32=r6, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r8], 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$netlink(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)=ANY=[], 0x114}], 0x1}, 0x800) recvmsg$can_raw(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/244, 0xf4}, {&(0x7f00000004c0)=""/89, 0x59}], 0x2}, 0x5) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="2400000009060101000000000000000003000009080009400000b222050001002a0000002f4495820fd581c6b501f9ccfc8c4a66f69cca01770e572487d39f8de8566289d33a31f0"], 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x48800) (async) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="2400000009060101000000000000000003000009080009400000b222050001002a0000002f4495820fd581c6b501f9ccfc8c4a66f69cca01770e572487d39f8de8566289d33a31f0"], 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x48800) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$nl_generic(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="881200002f00090027bd7000fbdbdf25040000006c121880"], 0x1288}, 0x1, 0x0, 0x0, 0x42014}, 0x4088010) 449.367985ms ago: executing program 3 (id=2573): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010014000000000000000200e70308000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a0002616000008009f0005000000080026000816"], 0x40}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x28, r0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x74}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x6, [@restrict={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x1}]}, @union]}, {0x0, [0x0, 0x0, 0x2e, 0x2e]}}, 0x0, 0x4a}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010014000000000000000200e70308000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a0002616000008009f0005000000080026000816"], 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x28, r0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x74}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x6, [@restrict={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x1}]}, @union]}, {0x0, [0x0, 0x0, 0x2e, 0x2e]}}, 0x0, 0x4a}, 0x20) (async) 414.842633ms ago: executing program 2 (id=2574): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a000000000000040000001801000020696c2500000000002020207b1ad8ff00000000bfa10000000000000701000004feffffb702000008000000b703000002000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x6}, 0x94) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000002ac0)={{r3, &(0x7f0000000000)='\x00', 0x22202, &(0x7f0000000040)={@align=0x10000, {0xa, 0x9, 0x9, 0x9}}, 0x5, &(0x7f0000000080), &(0x7f0000000100)=0x6}, 0xa, &(0x7f0000002980)=[{0x3, 0x2, &(0x7f0000000140)='^[$&,!\xad/\x00', &(0x7f0000000180)="10a2", 0x2, 0x2}, {0x1, 0x8, &(0x7f00000001c0)='GPL\x00', &(0x7f0000000200)="91a6bf09", 0x4}, {0x3, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000480)="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", 0x1000, 0x20}, {0x3, 0x2, &(0x7f0000001480)='&]/#\x00', &(0x7f00000014c0)="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", 0x1000, 0x10}, {0x0, 0x7, &(0x7f00000024c0)='\x00', &(0x7f0000002500)="ed14eadc7d39308677c1", 0xa}, {0x3, 0x3, &(0x7f0000002540)='\x00', &(0x7f0000002580)="d05d674d9671f042b1fb89917b69718ec1c0dfdf5a324da44f8563a90c7f5f964a422e46da1d0188fa42113741b84d5d6f9d5439f07b041fecee1a1f10398eb4717af540878cbfecbc6327157b51b33913007ffa57fd05717ded925a145795247dd467b5933a18a896b76c1e11d6a8ca56b8deca7e618f75c889aefdb888dfbd8195a7432da933056ab6afbee5d9f7ce9a3acde6", 0x94}, {0x3, 0x6, &(0x7f0000002640)=')\'-\x00', &(0x7f0000002680)="f8d8dd9e7a2b71771dc729a05fd24deac0cfbeb037510ff31c8f832710e3aea3d8c04c059ada7c6bd8f7d55c1811e7ffbb84ad5d33", 0x35, 0x8}, {0x1, 0x7f, &(0x7f00000026c0)='\'\\\x00', &(0x7f0000002700)="baff935a9535e3babbfe21d78d84f2bd683fb420ded0594722ae3f43f9a32cb0121a71f8bd6ef9421610b4c8b26d29794a41a31e90a1c19bd9aab784954190a3c13bd1e45dcf1768e0ce0fccdc2af9b0d7b71443246fefaed617f4ec7b2c0fbdae0d463cec4a14d295ac174c72a3833571334acde70cc114f7eb1e42362c0e7b4906aaabb87ac2fd4552914901ad182dc5b003a3002c6af6ed43ec17d258119e5828585c01cf62c4e75a4ebf564ab0dabb10a7ed9a9d1bf874e290ac5541b03b1bffde4a3c00dd16d604f7ae28f1284ec305d8bea00b098e3d4c401d7d31502f623402", 0xe3}, {0x3, 0x7, &(0x7f0000002800)='GPL\x00', &(0x7f0000002840)="8d4da2f84672f8963e99fac27606f83b6f57347f2d4edb4d459c50d4609cd661e8d91de278b1ac5c27", 0x29, 0x20}, {0x1, 0xa8d7, &(0x7f0000002880)='\x00', &(0x7f00000028c0)="1455c87bd4a508625938612d25e06ac33233d868dd78f29f75d02e6480bd1edbf43a69327eb5b230b08db671263a1f7c95205719c59b82945600dc86344efb9ec547a974031a447b5f6931dc9a475618fd956817e4396ceb3cf385da1d08ed6a7b54da2b55573a406a75e89be91d43d5ff30b33db0f1254c372c9ded89d8ffe06847", 0x82, 0x10}]}) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000002b40)) 375.457569ms ago: executing program 3 (id=2575): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r1}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r7 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000006c0)={'netdevsim0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0xfdfd, 0x6}, 0x4) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) close(r9) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r8, 0x25, 0x2, @val=@tcx={@void, @value=r6}}, 0x1c) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100001080000e3015b08162335a00000", @ANYRES32=r8, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r6], 0x34}, 0x1, 0x0, 0x0, 0x200048d0}, 0xc0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x22, &(0x7f0000000440)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x9}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x1}, @exit, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1d3}}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfffff119}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xa}], &(0x7f0000000580)='syzkaller\x00', 0x8, 0xe5, &(0x7f00000005c0)=""/229, 0x40f00, 0x3, '\x00', r8, 0x0, r3, 0x8, &(0x7f00000006c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0xa, 0x0, 0x81}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000007c0)=[r2], &(0x7f0000000800)=[{0x1, 0x4, 0x10, 0xc}, {0x5, 0x2, 0xe, 0x6}, {0x0, 0x5, 0x3, 0xc}, {0x5, 0x2, 0x9, 0xc}, {0x3, 0x2, 0xa, 0x8}, {0x3, 0x3, 0x8, 0x7}, {0x1, 0x3, 0xc, 0x7}], 0x10, 0x9}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r4, 0x4) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="4bb77112fbf0441f2d628e0d1b93862128c1fffee4e98d3a7bd5a4d6e0eaa741542a9c22f4148833f57249d5ef4de1b8e6c305318098a2948c30575fa200bdbb9960fa992670c0f3067cbd9bc44801de38ec9d5ed9db9b0fcb86fbff11716b2e69cf7519df57cff3bf7608045ffc0c4623fbeb5f"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, r11, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x81}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000040)=0x7, 0x4) 213.258519ms ago: executing program 2 (id=2576): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ppoll(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x25dfdc00, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x40}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x70, r1, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="51a62b5ac323"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="168b4c6ca687"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000800) socket$pptp(0x18, 0x1, 0x2) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r9, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) read$nci(r6, &(0x7f0000000200)=""/100, 0x64) read$nci(r6, &(0x7f00000002c0)=""/100, 0x64) write$nci(r6, 0x0, 0x0) write$nci(r6, &(0x7f0000000640)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x1, 0x2, 0x0, 0x2, {0x0, 0xad}}, 0x5) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="a1e0afd9525b"}) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x2a0, 0x0, 0x1a8, 0x90, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0x110, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) write$tun(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="1c0008000100000000003d0000004600003f00000000008490783fffffffac14140700000000ec0aeb6d118b86b2ba04c957cfaef8141fa3bcc20fa588ac18dc13372c38ba8541a79cc954eb335e29f74e3133e6280f1584f0ddd35ee00d548fa645ad38d734c81b92d25831909ccce44df7ed511564", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="be000000907800130e0300050200000000000000000002d588dc050391000000"], 0x4e) 210.32263ms ago: executing program 3 (id=2577): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r1, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x18, 0x30, 0xb, 0x70bd2c, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 160.422699ms ago: executing program 4 (id=2578): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_emit_ethernet(0xda, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000cc000088a90d0eefc915000000019078ac1e0001ac1414aa0b009078032c00004b00000000000000048900000a010101ac1414aa862a00000002060d5e000000ff000000f5870000050404a60012960605390006fff5800000b61ae5e81d8783aed4d3b937f93a93071b57640101010a010100e00000020a010102640101000a010102085000000000001208051a5f89f58e0820f284210200b7c8000cdf61168c24ac88ad078c00122189ea43e2149b8444a30300505c09a00712ffd11634eea26b0faffa0dea2e903528000802a209"], 0x0) getsockname$l2tp6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0xfffffffffffffd3d) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas', 0x7) r2 = socket$kcm(0x10, 0x2, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r7, 0x990, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x5}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x80000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0xc010) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) 85.471663ms ago: executing program 3 (id=2579): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000280)=0xd1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000354000000120a01010000000000000000000000000900010073797a3000000000090002006f30303000000000080003400000000720000480060001000002000005000200110000000c000300080001000000001e54000000120a01010000000000000000020000000900010073797a3000000000090002006f303130000000000800034000000007200004800600fc000002000005000200110000000c0003"], 0x3204}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000280)=0xd1, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000354000000120a01010000000000000000000000000900010073797a3000000000090002006f30303000000000080003400000000720000480060001000002000005000200110000000c000300080001000000001e54000000120a01010000000000000000020000000900010073797a3000000000090002006f303130000000000800034000000007200004800600fc000002000005000200110000000c0003"], 0x3204}}, 0x0) (async) 0s ago: executing program 3 (id=2580): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000300), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x2500, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000002000270300000000010000008100000000000000000000001400030069703667c697995c703000000000000014000c0074"], 0x44}}, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000140)={0x9, &(0x7f00000000c0)=[{0x6, 0xfb, 0x6, 0x7}, {0x9, 0x5, 0x2, 0x8}, {0xffff, 0x5, 0xf, 0x3}, {0x0, 0x73, 0x9, 0x8}, {0x9743, 0xaa, 0x3, 0x5}, {0x7b, 0xc, 0x5, 0xffff}, {0xfe7f, 0x2, 0x5}, {0x5, 0x6, 0xc, 0x6}, {0x947a, 0xa, 0x4, 0x5}]}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000a000000080026000816"], 0x40}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@union={0x9, 0x0, 0x0, 0x5, 0x0, 0x5}, @volatile={0x5, 0x0, 0x0, 0x9, 0x2}, @func={0xa, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x5f, 0x61, 0x61, 0x0, 0x0]}}, &(0x7f0000000440)=""/137, 0x43, 0x89, 0x0, 0x4}, 0x28) ioctl$SIOCSIFHWADDR(r1, 0x89b0, &(0x7f0000000540)={'macvlan0\x00', @random="00009e0c1100"}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="250a0000000000bbe23d250064a229ee1058006111a20000f2d3c381517083a9000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) listen(r5, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000300), 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x2500, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000002000270300000000010000008100000000000000000000001400030069703667c697995c703000000000000014000c0074"], 0x44}}, 0x0) (async) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000140)={0x9, &(0x7f00000000c0)=[{0x6, 0xfb, 0x6, 0x7}, {0x9, 0x5, 0x2, 0x8}, {0xffff, 0x5, 0xf, 0x3}, {0x0, 0x73, 0x9, 0x8}, {0x9743, 0xaa, 0x3, 0x5}, {0x7b, 0xc, 0x5, 0xffff}, {0xfe7f, 0x2, 0x5}, {0x5, 0x6, 0xc, 0x6}, {0x947a, 0xa, 0x4, 0x5}]}) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000a000000080026000816"], 0x40}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@union={0x9, 0x0, 0x0, 0x5, 0x0, 0x5}, @volatile={0x5, 0x0, 0x0, 0x9, 0x2}, @func={0xa, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x5f, 0x61, 0x61, 0x0, 0x0]}}, &(0x7f0000000440)=""/137, 0x43, 0x89, 0x0, 0x4}, 0x28) (async) ioctl$SIOCSIFHWADDR(r1, 0x89b0, &(0x7f0000000540)={'macvlan0\x00', @random="00009e0c1100"}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="250a0000000000bbe23d250064a229ee1058006111a20000f2d3c381517083a9000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) kernel console output (not intermixed with test programs): CREATE should be set when creating new route [ 186.410852][ T7219] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.486786][ T7223] netlink: 'syz.1.379': attribute type 1 has an invalid length. [ 186.496035][ T7223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.558820][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 186.622989][ T7187] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 186.843254][ T7229] netlink: 'syz.4.382': attribute type 21 has an invalid length. [ 186.882934][ T7229] netlink: 152 bytes leftover after parsing attributes in process `syz.4.382'. [ 186.961951][ T7240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.386'. [ 186.993543][ T7242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.385'. [ 187.072738][ T5639] block nbd0: Receive control failed (result -107) [ 187.099471][ T7245] IPVS: Unknown mcast interface: macvlan1 [ 187.152464][ T7248] netlink: 20 bytes leftover after parsing attributes in process `syz.4.388'. [ 187.268098][ T7246] netlink: 'syz.2.387': attribute type 1 has an invalid length. [ 187.305037][ T7246] netlink: 224 bytes leftover after parsing attributes in process `syz.2.387'. [ 187.375319][ T7256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.390'. [ 187.389197][ T7256] netlink: 'syz.4.390': attribute type 10 has an invalid length. [ 187.400619][ T7256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.390'. [ 187.412183][ T7260] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 187.431804][ T7260] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 187.588906][ T7256] geneve2: entered promiscuous mode [ 187.595318][ T7256] geneve2: entered allmulticast mode [ 187.637230][ T7265] bond4: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 188.138890][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.402'. [ 188.275909][ T7299] netlink: 'syz.2.405': attribute type 30 has an invalid length. [ 188.353311][ T7306] block nbd1: Unsupported socket: should be TCP or UNIX. [ 188.408700][ T7309] netlink: 100 bytes leftover after parsing attributes in process `syz.1.407'. [ 188.639449][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.409'. [ 188.879161][ T7303] bond1: option fail_over_mac: invalid value (16) [ 188.920413][ T7303] bond1 (unregistering): Released all slaves [ 189.652222][ T7354] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 189.678852][ T7354] bond5 (unregistering): Released all slaves [ 189.748950][ T7359] tc_dump_action: action bad kind [ 192.550488][ T7364] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 192.762251][ T7435] bridge_slave_0: left allmulticast mode [ 192.769216][ T7435] bridge_slave_0: left promiscuous mode [ 192.793668][ T7435] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.836481][ T7441] netlink: 'syz.0.435': attribute type 17 has an invalid length. [ 192.868915][ T7441] __nla_validate_parse: 6 callbacks suppressed [ 192.868936][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.435'. [ 192.950272][ T7435] bridge_slave_1: left allmulticast mode [ 192.975025][ T7441] netlink: 28 bytes leftover after parsing attributes in process `syz.0.435'. [ 193.008652][ T7435] bridge_slave_1: left promiscuous mode [ 193.039970][ T7435] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.079612][ T7435] bond0: (slave bond_slave_0): Releasing backup interface [ 193.122138][ T7435] bond0: (slave bond_slave_1): Releasing backup interface [ 193.141457][ T7435] team0: Port device team_slave_0 removed [ 193.155212][ T7435] team0: Port device team_slave_1 removed [ 193.161929][ T7435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.171139][ T7435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.182633][ T7435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.190635][ T7435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.200023][ T7435] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 193.243653][ T7441] gretap0: entered promiscuous mode [ 193.263507][ T7441] gretap0: left promiscuous mode [ 193.623189][ T7468] xt_CT: No such helper "snmp" [ 193.644634][ T7482] netdevsim netdevsim3: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 193.657876][ T7482] netdevsim netdevsim3: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 193.679588][ T7472] netlink: 68 bytes leftover after parsing attributes in process `syz.0.441'. [ 193.710479][ T7466] bond5 (unregistering): Released all slaves [ 193.780965][ T7475] netlink: 20 bytes leftover after parsing attributes in process `syz.0.441'. [ 193.801229][ T7490] netlink: 24 bytes leftover after parsing attributes in process `syz.3.444'. [ 193.861955][ T7495] netlink: 24 bytes leftover after parsing attributes in process `syz.3.444'. [ 194.045069][ T7504] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.449'. [ 194.107395][ T7501] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 194.138890][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'. [ 194.223643][ T7501] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 194.283774][ T7501] gretap2: entered promiscuous mode [ 194.325397][ T7501] gretap2: entered allmulticast mode [ 194.395107][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.423094][ T7523] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20004 [ 194.435767][ T7506] netlink: 104 bytes leftover after parsing attributes in process `syz.1.447'. [ 194.459727][ T7506] netlink: ct family unspecified [ 194.481612][ T7506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.695387][ T7543] netlink: 28 bytes leftover after parsing attributes in process `syz.3.457'. [ 194.729265][ T7543] netlink: 'syz.3.457': attribute type 7 has an invalid length. [ 194.748191][ T7543] netlink: 'syz.3.457': attribute type 8 has an invalid length. [ 194.967356][ T7550] netlink: 'syz.0.460': attribute type 2 has an invalid length. [ 195.115726][ T7555] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 195.182372][ T7554] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 195.473317][ T7583] xt_bpf: check failed: parse error [ 195.939817][ T7600] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 196.514113][ T29] audit: type=1804 audit(1785684799.053:3): pid=7631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.478" name="/newroot/94/cgroup.controllers" dev="tmpfs" ino=495 res=1 errno=0 [ 196.588725][ T29] audit: type=1800 audit(1785684799.063:4): pid=7631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.478" name="cgroup.controllers" dev="tmpfs" ino=495 res=0 errno=0 [ 196.669877][ T7637] pim6reg: entered allmulticast mode [ 196.703956][ T7639] pim6reg: left allmulticast mode [ 196.792766][ T5851] IPVS: starting estimator thread 0... [ 196.833582][ T7637] nbd: must specify at least one socket [ 196.841182][ T7648] netlink: 'syz.1.483': attribute type 7 has an invalid length. [ 196.906257][ T7646] IPVS: using max 25 ests per chain, 60000 per kthread [ 196.954438][ T7651] netlink: 'syz.2.482': attribute type 39 has an invalid length. [ 197.430320][ T7670] Illegal XDP return value 7670 on prog (id 87) dev syz_tun, expect packet loss! [ 198.697152][ T7735] __nla_validate_parse: 9 callbacks suppressed [ 198.697171][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'. [ 198.773896][ T7740] netlink: 212936 bytes leftover after parsing attributes in process `syz.1.509'. [ 198.801788][ T7740] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 198.958968][ T7745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.303153][ T7762] x_tables: duplicate underflow at hook 2 [ 199.570446][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 199.786258][ T7791] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 199.852300][ T7792] xt_hashlimit: size too large, truncated to 1048576 [ 200.018670][ T7801] syzkaller0: entered promiscuous mode [ 200.024488][ T7801] syzkaller0: entered allmulticast mode [ 200.273582][ T7807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.527'. [ 200.452098][ T7813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.531'. [ 200.633881][ T7823] netlink: 'syz.2.533': attribute type 2 has an invalid length. [ 200.661548][ T7828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.534'. [ 201.008194][ T7839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.539'. [ 201.250367][ T7852] netlink: 220 bytes leftover after parsing attributes in process `syz.2.541'. [ 201.293926][ T7857] netlink: 'syz.3.542': attribute type 49 has an invalid length. [ 201.521754][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.545'. [ 201.759494][ T7885] netlink: 'syz.3.549': attribute type 12 has an invalid length. [ 201.769554][ T7885] netlink: 'syz.3.549': attribute type 29 has an invalid length. [ 201.777941][ T7885] netlink: 148 bytes leftover after parsing attributes in process `syz.3.549'. [ 201.788257][ T7885] netlink: 'syz.3.549': attribute type 1 has an invalid length. [ 201.797438][ T7885] netlink: 'syz.3.549': attribute type 2 has an invalid length. [ 201.866073][ T7841] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 202.317715][ T7902] block nbd1: Unsupported socket: should be TCP or UNIX. [ 202.456893][ T7913] IPv6: NLM_F_REPLACE set, but no existing node found! [ 202.647870][ T7919] netlink: 'syz.4.561': attribute type 2 has an invalid length. [ 203.184843][ T29] audit: type=1804 audit(1785684805.713:5): pid=7936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.562" name="/newroot/118/cgroup.controllers" dev="tmpfs" ino=621 res=1 errno=0 [ 203.239810][ T7936] netlink: 'syz.1.562': attribute type 3 has an invalid length. [ 203.298942][ T7938] syzkaller0: entered promiscuous mode [ 203.336486][ T29] audit: type=1800 audit(1785684805.713:6): pid=7936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.562" name="cgroup.controllers" dev="tmpfs" ino=621 res=0 errno=0 [ 203.366502][ T7938] syzkaller0: entered allmulticast mode [ 204.261296][ T7962] netlink: 'syz.0.569': attribute type 2 has an invalid length. [ 204.399685][ T7963] openvswitch: netlink: IP tunnel TTL not specified. [ 204.621331][ T7973] netlink: 'syz.4.572': attribute type 21 has an invalid length. [ 204.637176][ T7971] __nla_validate_parse: 6 callbacks suppressed [ 204.637198][ T7971] netlink: 20 bytes leftover after parsing attributes in process `syz.1.571'. [ 204.675785][ T7971] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 204.811349][ T7971] bond5: (slave geneve2): making interface the new active one [ 204.820722][ T7971] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 204.835375][ T7394] netdevsim netdevsim1 : set [1, 1] type 2 family 0 port 20000 - 0 [ 204.855961][ T7394] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 204.869885][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.573'. [ 204.879979][ T7971] netlink: 28 bytes leftover after parsing attributes in process `syz.1.571'. [ 204.889629][ T7394] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 204.940005][ T7981] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.014251][ T7390] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 205.649172][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.576'. [ 206.106295][ T8010] netlink: 52 bytes leftover after parsing attributes in process `syz.1.578'. [ 206.420884][ T8017] netlink: 44 bytes leftover after parsing attributes in process `syz.4.580'. [ 207.441959][ T8039] tipc: Started in network mode [ 207.453836][ T8039] tipc: Node identity 8a8bbded0de9, cluster identity 4711 [ 207.478034][ T8039] tipc: Enabled bearer , priority 0 [ 207.552375][ T8044] team0: Device ipvlan0 failed to register rx_handler [ 207.659003][ T8030] tipc: Disabling bearer [ 209.225630][ T8075] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 209.241845][ T8076] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 209.411380][ T8083] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 209.615457][ T8086] validate_nla: 2 callbacks suppressed [ 209.615478][ T8086] netlink: 'syz.0.596': attribute type 1 has an invalid length. [ 210.304595][ T50] Bluetooth: hci4: command tx timeout [ 211.247758][ T8102] netlink: 'syz.3.601': attribute type 1 has an invalid length. [ 211.260514][ T8102] netlink: 'syz.3.601': attribute type 16 has an invalid length. [ 211.272899][ T8102] netlink: 20 bytes leftover after parsing attributes in process `syz.3.601'. [ 211.719591][ T8112] netlink: 24 bytes leftover after parsing attributes in process `syz.3.605'. [ 211.833004][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 211.841676][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 211.848053][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 212.039394][ T8116] syzkaller0: entered promiscuous mode [ 212.046222][ T8116] syzkaller0: entered allmulticast mode [ 212.781105][ T8122] netlink: 'syz.0.610': attribute type 21 has an invalid length. [ 212.814665][ T8122] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 212.870072][ T8122] bond3 (unregistering): Released all slaves [ 214.627633][ T8131] netlink: 'syz.3.613': attribute type 8 has an invalid length. [ 214.696040][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'. [ 214.711659][ T8135] netlink: 'syz.2.614': attribute type 10 has an invalid length. [ 214.720816][ T8135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.614'. [ 215.086242][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.616'. [ 215.097899][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.617'. [ 215.110768][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.617'. [ 215.130806][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.617'. [ 215.152580][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.617'. [ 215.179755][ T8146] netlink: 'syz.3.617': attribute type 1 has an invalid length. [ 215.200906][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.617'. [ 216.539223][ T8174] netlink: 'syz.0.624': attribute type 4 has an invalid length. [ 217.219406][ T8191] __nla_validate_parse: 77 callbacks suppressed [ 217.219426][ T8191] netlink: 28 bytes leftover after parsing attributes in process `syz.3.629'. [ 217.265195][ T8191] netlink: 28 bytes leftover after parsing attributes in process `syz.3.629'. [ 217.418338][ T8196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.631'. [ 219.113858][ T8226] netlink: 'syz.4.640': attribute type 1 has an invalid length. [ 219.260765][ T8226] 8021q: adding VLAN 0 to HW filter on device bond3 [ 219.441909][ T8230] bond3: (slave geneve2): making interface the new active one [ 219.478702][ T8230] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 219.881426][ T8245] netlink: 'syz.4.643': attribute type 1 has an invalid length. [ 220.215780][ T8245] bond4: entered promiscuous mode [ 220.242893][ T8245] 8021q: adding VLAN 0 to HW filter on device bond4 [ 220.336670][ T8259] netlink: 36 bytes leftover after parsing attributes in process `syz.0.646'. [ 220.452792][ T8249] bond4: (slave bridge1): making interface the new active one [ 220.476206][ T8249] bridge1: entered promiscuous mode [ 220.523610][ T8249] bridge1: left promiscuous mode [ 221.371387][ T8298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.656'. [ 221.423186][ T8298] xt_hashlimit: size too large, truncated to 1048576 [ 221.520252][ T8306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.659'. [ 221.582152][ T8300] netlink: 36 bytes leftover after parsing attributes in process `syz.4.657'. [ 221.693711][ T8306] netlink: 20 bytes leftover after parsing attributes in process `syz.2.659'. [ 221.878705][ T8320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.471010][ T8342] netlink: 'syz.2.670': attribute type 11 has an invalid length. [ 222.480528][ T8342] netlink: 4320 bytes leftover after parsing attributes in process `syz.2.670'. [ 222.616241][ T8347] bond2: option mode: invalid value (10) [ 222.625488][ T8347] bond2 (unregistering): Released all slaves [ 222.711280][ T8355] netlink: 28 bytes leftover after parsing attributes in process `syz.4.674'. [ 223.308358][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.682'. [ 223.338075][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.682'. [ 223.378517][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.684'. [ 223.450721][ T8388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.684'. [ 223.452008][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.684'. [ 223.528492][ T8395] xt_addrtype: ipv6 does not support BROADCAST matching [ 223.669966][ T8391] syzkaller0: entered promiscuous mode [ 223.679737][ T8391] syzkaller0: entered allmulticast mode [ 223.827667][ T8400] netlink: 244 bytes leftover after parsing attributes in process `syz.3.689'. [ 223.916298][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.691'. [ 224.080525][ T8410] netlink: 40 bytes leftover after parsing attributes in process `syz.2.693'. [ 224.176827][ T8409] bridge_slave_0: left allmulticast mode [ 224.196961][ T8409] bridge_slave_0: left promiscuous mode [ 224.221785][ T8409] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.251487][ T8409] bridge_slave_1: left allmulticast mode [ 224.270765][ T8409] bridge_slave_1: left promiscuous mode [ 224.283491][ T8409] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.309768][ T8409] bond0: (slave bond_slave_0): Releasing backup interface [ 224.328150][ T8409] bond0: (slave bond_slave_1): Releasing backup interface [ 224.347766][ T8409] team0: Port device team_slave_0 removed [ 224.359709][ T8409] team0: Port device team_slave_1 removed [ 224.367627][ T8409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.376817][ T8409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.389212][ T8409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.397800][ T8409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.409451][ T8409] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 224.449117][ T8419] erspan0: entered promiscuous mode [ 224.457639][ T8419] erspan0: entered allmulticast mode [ 224.716218][ T8447] netlink: 'syz.3.698': attribute type 1 has an invalid length. [ 224.790126][ T8447] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.910669][ T8448] bond3 (unregistering): Released all slaves [ 224.972094][ T8447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.993867][ T8447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.018133][ T8447] bond2: (slave batadv_slave_0): Enslaving as a backup interface with an up link [ 225.027733][ T8465] netlink: 'syz.1.702': attribute type 1 has an invalid length. [ 225.209754][ T8470] netlink: 'syz.4.704': attribute type 4 has an invalid length. [ 225.264318][ T5626] Bluetooth: hci4: command 0x0405 tx timeout [ 225.382667][ T8480] vlan0: entered promiscuous mode [ 225.393808][ T8480] geneve1: entered promiscuous mode [ 225.405425][ T8480] vlan0: entered allmulticast mode [ 225.414699][ T8480] geneve1: entered allmulticast mode [ 225.630755][ T8491] syzkaller1: entered promiscuous mode [ 225.650033][ T8491] syzkaller1: entered allmulticast mode [ 226.043619][ T8510] tipc: MTU too low for tipc bearer [ 226.093366][ T8510] geneve2: entered promiscuous mode [ 226.106142][ T8514] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.271805][ T8523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.215548][ T8577] syzkaller0: entered promiscuous mode [ 227.233464][ T8577] syzkaller0: entered allmulticast mode [ 227.955364][ T8608] netlink: 'syz.0.743': attribute type 1 has an invalid length. [ 228.068383][ T8608] 8021q: adding VLAN 0 to HW filter on device bond3 [ 228.101505][ T8617] __nla_validate_parse: 8 callbacks suppressed [ 228.101525][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.745'. [ 228.131131][ T8614] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 228.178795][ T8608] macvlan2: entered promiscuous mode [ 228.186488][ T8608] macvlan2: entered allmulticast mode [ 228.193456][ T8608] bond3: entered promiscuous mode [ 228.200176][ T8608] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 228.212291][ T8608] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 228.229555][ T8608] bond3: left promiscuous mode [ 228.285550][ T8618] bond3: entered promiscuous mode [ 228.296064][ T8618] bond3: entered allmulticast mode [ 228.409735][ T8622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.746'. [ 228.687212][ T8648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.730087][ T8649] team0: No ports can be present during mode change [ 228.888015][ T8661] netlink: 80 bytes leftover after parsing attributes in process `syz.1.754'. [ 229.030864][ T8668] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 229.138058][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.756'. [ 229.308774][ T8678] syzkaller0: entered promiscuous mode [ 229.340406][ T8678] syzkaller0: entered allmulticast mode [ 229.495495][ T8696] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 229.531142][ T8696] syzkaller1: group set to 0 [ 232.359805][ T8689] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 235.348880][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 250.816478][ T8765] netlink: 'syz.3.779': attribute type 12 has an invalid length. [ 250.851406][ T8765] netlink: 132 bytes leftover after parsing attributes in process `syz.3.779'. [ 250.934385][ T8770] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.944663][ T8770] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.023363][ T8765] syzkaller0: entered promiscuous mode [ 251.037350][ T8765] syzkaller0: entered allmulticast mode [ 251.362217][ T8791] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 251.737267][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.792'. [ 251.775832][ T8808] netlink: 50 bytes leftover after parsing attributes in process `syz.3.792'. [ 251.813405][ T8808] netlink: 50 bytes leftover after parsing attributes in process `syz.3.792'. [ 251.873950][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.796'. [ 251.913334][ T8808] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 252.095386][ T8822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.651826][ T8859] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.808'. [ 252.662809][ T8859] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 252.851338][ T8862] 8021q: adding VLAN 0 to HW filter on device bond4 [ 253.242821][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.816'. [ 253.436311][ T8891] netlink: 'syz.0.818': attribute type 15 has an invalid length. [ 253.562365][ T8899] bond4: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 253.596804][ T8899] bond4 (unregistering): Released all slaves [ 253.672179][ T8904] netlink: 'syz.0.822': attribute type 1 has an invalid length. [ 253.727044][ T8904] netlink: 28 bytes leftover after parsing attributes in process `syz.0.822'. [ 253.745679][ T8899] bond4: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 253.761858][ T8899] bond4 (unregistering): Released all slaves [ 253.936765][ T8899] bond4: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 253.961128][ T8899] bond4 (unregistering): Released all slaves [ 254.280346][ T8899] bond4: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 254.335737][ T8899] bond4 (unregistering): Released all slaves [ 254.379078][ T8938] IPVS: set_ctl: invalid protocol: 25974 48.95.116.111:24418 [ 254.497487][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'. [ 254.748859][ T8954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.833'. [ 254.888766][ T8954] bond0: entered promiscuous mode [ 254.920360][ T8954] batadv0: entered promiscuous mode [ 254.957118][ T8954] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 254.998857][ T8954] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 255.010144][ T8954] bond0: left promiscuous mode [ 255.031533][ T8954] batadv0: left promiscuous mode [ 255.829556][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.891483][ T9011] __nla_validate_parse: 3 callbacks suppressed [ 255.891503][ T9011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.850'. [ 255.954742][ T9014] netlink: 'syz.0.851': attribute type 4 has an invalid length. [ 256.157105][ T9031] netlink: 'syz.2.853': attribute type 10 has an invalid length. [ 256.343422][ T9031] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 256.384929][ T9042] netlink: 'syz.3.856': attribute type 10 has an invalid length. [ 256.388420][ T9031] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 256.539237][ T9042] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.586232][ T9042] bond0: (slave team0): Enslaving as an active interface with an up link [ 256.596366][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.857'. [ 256.617890][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.857'. [ 256.633548][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.857'. [ 256.646360][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.857'. [ 256.671147][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.857'. [ 256.698656][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.857'. [ 256.710654][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.857'. [ 256.720611][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.857'. [ 256.730260][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.857'. [ 259.361778][ T9045] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 259.574969][ T9081] mac80211_hwsim hwsim7 ÿ: renamed from wlan1 (while UP) [ 259.632622][ T9089] ip6gre1: entered allmulticast mode [ 259.930621][ T9100] netlink: 'syz.3.872': attribute type 12 has an invalid length. [ 259.939427][ T9100] netlink: 'syz.3.872': attribute type 29 has an invalid length. [ 259.951002][ T9100] netlink: 'syz.3.872': attribute type 1 has an invalid length. [ 259.959637][ T9100] netlink: 'syz.3.872': attribute type 2 has an invalid length. [ 259.970649][ T9098] netlink: 'syz.3.872': attribute type 12 has an invalid length. [ 259.995943][ T9098] netlink: 'syz.3.872': attribute type 29 has an invalid length. [ 260.003887][ T9098] netlink: 'syz.3.872': attribute type 1 has an invalid length. [ 260.124035][ T9110] bond5: option xmit_hash_policy: invalid value (64) [ 260.133354][ T9110] bond5 (unregistering): Released all slaves [ 260.958023][ T9160] bond4: Setting coupled_control to off (0) [ 261.021418][ T9164] __nla_validate_parse: 35 callbacks suppressed [ 261.021440][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.890'. [ 261.171626][ T9178] netlink: 32 bytes leftover after parsing attributes in process `syz.1.888'. [ 261.552730][ T9193] netlink: 52 bytes leftover after parsing attributes in process `syz.0.898'. [ 261.871836][ T9213] validate_nla: 2 callbacks suppressed [ 261.871855][ T9213] netlink: 'syz.1.902': attribute type 12 has an invalid length. [ 261.990999][ T9211] bond6: peer notification delay (25) is not a multiple of miimon (1627137029), value rounded to 0 ms [ 262.005606][ T9211] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 262.036801][ T9211] bond6 (unregistering): Released all slaves [ 262.111475][ T9213] netlink: 'syz.1.902': attribute type 12 has an invalid length. [ 262.140770][ T9213] netlink: 'syz.1.902': attribute type 12 has an invalid length. [ 262.152518][ T9213] netlink: 'syz.1.902': attribute type 12 has an invalid length. [ 262.161381][ T9213] netlink: 'syz.1.902': attribute type 12 has an invalid length. [ 262.173743][ T9213] netlink: 'syz.1.902': attribute type 12 has an invalid length. [ 262.182666][ T9213] netlink: 'syz.1.902': attribute type 12 has an invalid length. [ 262.237478][ T9213] netlink: 'syz.1.902': attribute type 12 has an invalid length. [ 262.266129][ T9213] netlink: 'syz.1.902': attribute type 12 has an invalid length. [ 262.276876][ T9213] netlink: 'syz.1.902': attribute type 12 has an invalid length. [ 262.386471][ T9233] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 262.571146][ T9239] bond0: (slave team0): Releasing backup interface [ 262.593644][ T9239] bridge_slave_0: left allmulticast mode [ 262.605546][ T9239] bridge_slave_0: left promiscuous mode [ 262.618846][ T9239] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.633788][ T9239] bridge_slave_1: left allmulticast mode [ 262.651775][ T9239] bridge_slave_1: left promiscuous mode [ 262.671248][ T9239] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.680696][ T9221] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 262.773588][ T9239] bond0: (slave bond_slave_0): Releasing backup interface [ 262.815334][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.909'. [ 262.839883][ T9239] bond0: (slave bond_slave_1): Releasing backup interface [ 262.858321][ T9239] team0: Port device team_slave_0 removed [ 262.866081][ T9249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 262.876898][ T9257] xt_hashlimit: size too large, truncated to 1048576 [ 262.878463][ T9249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.909'. [ 262.902512][ T9239] team0: Port device team_slave_1 removed [ 262.913371][ T9239] bond2: (slave batadv_slave_0): Removing an active aggregator [ 262.925549][ T9239] bond2: (slave batadv_slave_0): Releasing backup interface [ 262.940315][ T9239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.952768][ T9239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.963729][ T9239] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 262.985218][ T9260] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.911'. [ 263.358316][ T9242] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 263.454810][ T9270] syzkaller0: entered promiscuous mode [ 263.483411][ T9270] syzkaller0: entered allmulticast mode [ 263.553557][ T9276] netlink: 20 bytes leftover after parsing attributes in process `syz.1.919'. [ 263.576238][ T9276] openvswitch: netlink: Multiple metadata blocks provided [ 263.691948][ T9286] netlink: 20 bytes leftover after parsing attributes in process `syz.3.923'. [ 264.073123][ T9308] netlink: 52 bytes leftover after parsing attributes in process `syz.3.929'. [ 264.624407][ T5639] Bluetooth: hci1: command 0x0406 tx timeout [ 264.737868][ T9340] vxcan1: entered allmulticast mode [ 264.920556][ T9349] syzkaller0: entered promiscuous mode [ 264.932953][ T5626] block nbd1: Receive control failed (result -32) [ 264.946496][ T9349] syzkaller0: entered allmulticast mode [ 264.994552][ T9351] tipc: Started in network mode [ 265.017069][ T9351] tipc: Node identity b2ba3428a1dd, cluster identity 4711 [ 265.042867][ T9351] tipc: Enabled bearer , priority 0 [ 265.062162][ T9347] tipc: Resetting bearer [ 265.119293][ T9347] tipc: Disabling bearer [ 265.538564][ T9377] openvswitch: netlink: IPv4 tun info is not correct [ 265.547368][ T9377] vcan0: tx drop: invalid da for name 0x0000000400000000 [ 265.682720][ T9379] syzkaller0: entered promiscuous mode [ 265.691513][ T9388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.703946][ T9379] syzkaller0: entered allmulticast mode [ 265.731660][ T9388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.744552][ T9388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.757616][ T9388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.795365][ T9388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.816055][ T9388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.857243][ T9388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.240747][ T9413] __nla_validate_parse: 7 callbacks suppressed [ 266.240765][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.962'. [ 267.750660][ T9422] ipt_ECN: cannot use operation on non-tcp rule [ 268.155710][ T9435] net_ratelimit: 58 callbacks suppressed [ 268.155740][ T9435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.237408][ T7618] IPVS: starting estimator thread 0... [ 268.365645][ T9441] IPVS: using max 27 ests per chain, 64800 per kthread [ 268.375351][ T9448] netlink: 44 bytes leftover after parsing attributes in process `syz.2.969'. [ 268.407544][ T9448] IPVS: sh: FWM 3 0x00000003 - no destination available [ 268.546993][ T9452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.972'. [ 268.690077][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888031f71000: rx timeout, send abort [ 269.195259][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888031f73800: rx timeout, send abort [ 269.203763][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888031f71000: abort rx timeout. Force session deactivation [ 269.707653][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888031f73800: abort rx timeout. Force session deactivation [ 270.139207][ T9459] validate_nla: 57 callbacks suppressed [ 270.139227][ T9459] netlink: 'syz.2.974': attribute type 4 has an invalid length. [ 270.182210][ T9459] netlink: 'syz.2.974': attribute type 4 has an invalid length. [ 270.492071][ T9478] set match dimension is over the limit! [ 271.372732][ T9484] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 273.437133][ T9506] netlink: 'syz.3.985': attribute type 1 has an invalid length. [ 273.450377][ T9492] virt_wifi0 speed is unknown, defaulting to 1000 [ 273.563095][ T9506] bond5: entered promiscuous mode [ 273.570727][ T9506] 8021q: adding VLAN 0 to HW filter on device bond5 [ 273.591543][ T9492] virt_wifi0 speed is unknown, defaulting to 1000 [ 273.784553][ T9521] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 273.793728][ T9492] virt_wifi0 speed is unknown, defaulting to 1000 [ 273.809754][ T9492] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 273.832160][ T9492] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 273.890559][ T9492] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 273.959877][ T9492] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 274.028461][ T9492] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 274.245359][ T9492] virt_wifi0 speed is unknown, defaulting to 1000 [ 274.297177][ T9492] virt_wifi0 speed is unknown, defaulting to 1000 [ 274.330205][ T9492] virt_wifi0 speed is unknown, defaulting to 1000 [ 274.348880][ T9492] virt_wifi0 speed is unknown, defaulting to 1000 [ 274.363313][ T9492] virt_wifi0 speed is unknown, defaulting to 1000 [ 274.560888][ T9562] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1002'. [ 274.571176][ T9563] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1002'. [ 274.667451][ T9574] netlink: 'syz.2.1004': attribute type 39 has an invalid length. [ 274.884870][ T9580] : renamed from bond0 (while UP) [ 275.136289][ T9584] bond6: entered promiscuous mode [ 275.152713][ T9602] netlink: 3042 bytes leftover after parsing attributes in process `syz.4.1010'. [ 275.171612][ T9584] bond6: entered allmulticast mode [ 275.179450][ T9584] 8021q: adding VLAN 0 to HW filter on device bond6 [ 275.187434][ T9602] netlink: 26 bytes leftover after parsing attributes in process `syz.4.1010'. [ 275.197066][ T9602] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1010'. [ 276.002887][ T9644] netlink: 'syz.4.1023': attribute type 10 has an invalid length. [ 276.046572][ T9650] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1026'. [ 276.078797][ T9644] : (slave macsec0): Error -34 calling dev_set_mtu [ 276.089419][ T9650] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0) [ 276.123755][ T9658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1027'. [ 276.142867][ T9650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.175722][ T9657] syzkaller0: entered promiscuous mode [ 276.198473][ T9658] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1027'. [ 276.210062][ T9657] syzkaller0: entered allmulticast mode [ 276.575244][ T9675] syzkaller0: entered promiscuous mode [ 276.601331][ T9675] syzkaller0: entered allmulticast mode [ 276.767131][ T9685] xt_time: unknown flags 0xf4 [ 276.774153][ T9688] netlink: 'syz.2.1033': attribute type 1 has an invalid length. [ 277.676868][ T9728] netlink: 'syz.1.1047': attribute type 39 has an invalid length. [ 277.712703][ T9732] netlink: 'syz.2.1049': attribute type 1 has an invalid length. [ 277.746837][ T9732] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1049'. [ 277.768560][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1049'. [ 277.957266][ T9746] netlink: 'syz.2.1053': attribute type 2 has an invalid length. [ 278.031984][ T9751] openvswitch: netlink: ct_state flags ffffffff unsupported [ 278.107272][ T9754] netlink: 'syz.2.1056': attribute type 1 has an invalid length. [ 278.231628][ T9754] 8021q: adding VLAN 0 to HW filter on device bond2 [ 278.413847][ T9769] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 278.724539][ T9800] syzkaller1: entered promiscuous mode [ 278.730085][ T9800] syzkaller1: entered allmulticast mode [ 279.075823][ T9816] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 279.108572][ T9817] x_tables: duplicate entry at hook 3 [ 279.320349][ T9833] tipc: Enabled bearer , priority 0 [ 279.433220][ T9833] syzkaller0: entered promiscuous mode [ 279.439300][ T9833] syzkaller0: entered allmulticast mode [ 279.446281][ T9833] tipc: Resetting bearer [ 279.475123][ T9829] tipc: Resetting bearer [ 279.825732][ T9853] __nla_validate_parse: 1 callbacks suppressed [ 279.825751][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1083'. [ 280.228098][ T9861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1087'. [ 280.255446][ T9862] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000 [ 281.505736][ T9829] tipc: Disabling bearer [ 281.527366][ T7617] tipc: Node number set to 2271395309 [ 281.563578][ T9866] tap0: tun_chr_ioctl cmd 2148553947 [ 281.714919][ T9867] virt_wifi0 speed is unknown, defaulting to 1000 [ 281.740701][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1090'. [ 281.852719][ T9880] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1092'. [ 281.928954][ T9880] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1092'. [ 282.053283][ T9887] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 282.228927][ T9894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.239131][ T9895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.380618][ T9897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1099'. [ 282.426209][ T9897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1099'. [ 282.486324][ T9897] netlink: 'syz.4.1099': attribute type 3 has an invalid length. [ 282.618958][ T9904] tap0: tun_chr_ioctl cmd 1074025672 [ 282.631821][ T9906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1100'. [ 282.644381][ T9904] tap0: ignored: set checksum disabled [ 282.804336][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1104'. [ 283.070906][ T29] audit: type=1800 audit(1785684885.613:7): pid=9925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1106" name=680B20 dev="tmpfs" ino=1141 res=0 errno=0 [ 283.428873][ T9937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1110'. [ 283.571813][ T9911] openvswitch: netlink: Flow actions attr not present in new flow. [ 283.635830][ T9911] netlink: 'syz.0.1103': attribute type 10 has an invalid length. [ 284.968449][ T9989] netlink: 'syz.2.1121': attribute type 1 has an invalid length. [ 284.999525][ T9997] x_tables: duplicate underflow at hook 2 [ 285.086906][ T9989] 8021q: adding VLAN 0 to HW filter on device bond4 [ 285.216976][T10007] __nla_validate_parse: 4 callbacks suppressed [ 285.216993][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1124'. [ 285.244053][T10007] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1124'. [ 285.463839][ T9991] bond4: (slave veth3): Enslaving as an active interface with a down link [ 285.557203][T10003] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 285.572768][T10003] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 285.939670][T10019] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1129'. [ 286.407167][T10037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1135'. [ 286.468027][T10037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1135'. [ 286.478497][T10041] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 286.750297][T10050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1137'. [ 286.983534][T10064] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1142'. [ 287.274478][T10080] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1146'. [ 287.576076][T10100] sctp: [Deprecated]: syz.0.1152 (pid 10100) Use of int in max_burst socket option deprecated. [ 287.576076][T10100] Use struct sctp_assoc_value instead [ 287.733179][T10105] team0: Device gtp0 is of different type [ 287.800339][T10109] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1155'. [ 287.842993][T10109] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1155'. [ 287.853359][T10109] netlink: 'syz.1.1155': attribute type 4 has an invalid length. [ 287.866152][T10114] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 287.875769][T10114] tipc: Enabled bearer , priority 8 [ 288.128458][T10128] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 288.994625][ T855] tipc: Node number set to 325530664 [ 289.049439][T10178] syzkaller0: entered promiscuous mode [ 289.068975][T10178] syzkaller0: entered allmulticast mode [ 289.169587][T10186] sit0: entered promiscuous mode [ 289.200691][T10192] netlink: 'syz.0.1183': attribute type 28 has an invalid length. [ 289.223822][T10186] netlink: 'syz.1.1181': attribute type 1 has an invalid length. [ 289.242649][T10192] netlink: 'syz.0.1183': attribute type 3 has an invalid length. [ 289.475648][T10199] Bluetooth: MGMT ver 1.23 [ 289.490070][T10199] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 289.599028][T10205] netlink: 'syz.0.1187': attribute type 12 has an invalid length. [ 289.621148][T10205] netlink: 'syz.0.1187': attribute type 12 has an invalid length. [ 290.253806][T10241] x_tables: unsorted underflow at hook 2 [ 290.490044][T10255] netlink: 'syz.4.1202': attribute type 4 has an invalid length. [ 291.176202][T10287] netlink: 'syz.3.1209': attribute type 1 has an invalid length. [ 291.338577][T10289] netlink: 'syz.3.1209': attribute type 10 has an invalid length. [ 291.356454][T10289] __nla_validate_parse: 10 callbacks suppressed [ 291.356477][T10289] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1209'. [ 291.796105][T10303] netlink: 193 bytes leftover after parsing attributes in process `syz.3.1214'. [ 291.927213][T10314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1216'. [ 291.956570][T10306] syzkaller0: entered promiscuous mode [ 291.970064][T10306] syzkaller0: entered allmulticast mode [ 292.172032][T10324] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1219'. [ 292.438761][T10339] tipc: Enabling of bearer rejected, failed to enable media [ 292.693290][T10354] netlink: 'syz.2.1228': attribute type 1 has an invalid length. [ 292.791481][T10354] bond5: entered promiscuous mode [ 292.802438][T10354] 8021q: adding VLAN 0 to HW filter on device bond5 [ 292.835878][T10362] bond5: (slave bridge3): making interface the new active one [ 292.843676][T10362] bridge3: entered promiscuous mode [ 292.850949][T10362] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 292.866105][T10358] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1226'. [ 292.930372][T10362] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 292.930372][T10362] Please contact the netfilter-devel mailing list or update your nftables rules. [ 293.155304][T10374] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1232'. [ 293.301420][T10380] netlink: 'syz.0.1234': attribute type 1 has an invalid length. [ 293.800851][T10403] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1242'. [ 293.879133][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1242'. [ 293.920246][T10408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1242'. [ 294.315054][T10425] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1246'. [ 294.398253][T10433] bridge3: entered promiscuous mode [ 294.403765][T10433] bridge3: entered allmulticast mode [ 294.475142][T10435] syzkaller0: entered promiscuous mode [ 294.480978][T10435] syzkaller0: entered allmulticast mode [ 294.781446][T10437] sit0: left promiscuous mode [ 294.896105][T10437] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.905383][T10437] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.401283][T10437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.433706][T10437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.667945][T10437] bond1: left promiscuous mode [ 295.672830][T10437] bridge1: left promiscuous mode [ 295.693394][T10437] gretap2: left promiscuous mode [ 295.698972][T10437] gretap2: left allmulticast mode [ 295.785558][ T9784] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.816023][ T9784] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 295.846697][ T9784] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.872445][ T9784] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 295.999135][T10465] geneve3: entered promiscuous mode [ 296.218397][ T35] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.251310][ T35] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 296.277337][ T35] netdevsim netdevsim1 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.301191][ T35] netdevsim netdevsim1 : unset [1, 1] type 2 family 0 port 20000 - 0 [ 296.312105][T10474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.615608][T10487] ieee802154 phy1 wpan1: encryption failed: -22 [ 296.912382][T10498] team0: Device gtp0 is of different type [ 296.954972][T10503] __nla_validate_parse: 3 callbacks suppressed [ 296.954992][T10503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1269'. [ 297.266923][T10526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1275'. [ 297.325373][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1276'. [ 297.352597][T10526] bond0: entered promiscuous mode [ 297.358029][T10526] bond0: entered allmulticast mode [ 297.642286][T10539] syzkaller0: entered promiscuous mode [ 297.667804][T10539] syzkaller0: entered allmulticast mode [ 297.747869][T10549] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 297.927986][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1284'. [ 298.071086][T10557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1284'. [ 298.084720][T10563] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1286'. [ 298.209511][T10567] vcan1: entered promiscuous mode [ 298.228972][T10567] vcan1: entered allmulticast mode [ 298.590922][T10577] netlink: 'syz.3.1288': attribute type 1 has an invalid length. [ 298.638884][T10581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1289'. [ 298.639153][T10577] netlink: 'syz.3.1288': attribute type 2 has an invalid length. [ 298.672661][T10581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1289'. [ 298.711308][T10583] ipt_REJECT: TCP_RESET invalid for non-tcp [ 298.880556][T10586] nbd: socks must be embedded in a SOCK_ITEM attr [ 299.008932][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1292'. [ 299.025993][T10592] netlink: 'syz.0.1292': attribute type 8 has an invalid length. [ 299.121660][T10597] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1293'. [ 299.390747][T10613] xt_nat: multiple ranges no longer supported [ 299.440305][T10613] syzkaller0: entered promiscuous mode [ 299.448060][T10613] syzkaller0: entered allmulticast mode [ 299.816904][ T7616] hsr0: entered promiscuous mode [ 300.215082][T10642] veth3: left allmulticast mode [ 300.327033][T10647] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 300.350118][T10647] bond6 (unregistering): Released all slaves [ 300.511244][T10653] bond6: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 300.976579][T10675] virt_wifi0 speed is unknown, defaulting to 1000 [ 300.995012][T10688] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 302.105390][T10739] netlink: 'syz.0.1331': attribute type 1 has an invalid length. [ 302.143282][T10739] __nla_validate_parse: 4 callbacks suppressed [ 302.143300][T10739] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1331'. [ 302.160408][T10740] netlink: 'syz.1.1332': attribute type 1 has an invalid length. [ 302.170917][T10743] ieee802154 phy1 wpan1: encryption failed: -22 [ 302.422682][T10740] 8021q: adding VLAN 0 to HW filter on device bond7 [ 302.786104][T10773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1337'. [ 302.942703][T10758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.952497][T10758] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.968550][T10758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.053067][T10758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.069254][T10758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.091090][T10758] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 303.101967][T10758] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 303.122431][T10758] veth1_vlan: left promiscuous mode [ 303.130450][T10758] veth0_vlan: left promiscuous mode [ 303.137807][T10758] veth0_vlan: entered promiscuous mode [ 303.146252][T10758] veth1_vlan: entered promiscuous mode [ 303.157804][T10758] veth1_macvtap: left promiscuous mode [ 303.166449][T10758] veth0_macvtap: left promiscuous mode [ 303.173230][T10758] veth0_macvtap: entered promiscuous mode [ 303.181100][T10758] veth1_macvtap: entered promiscuous mode [ 303.193693][T10758] 8021q: adding VLAN 0 to HW filter on device  [ 303.201910][T10758] netdevsim netdevsim1 : left promiscuous mode [ 303.211814][T10758] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 303.221264][T10758] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 303.230600][T10758] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 303.240359][T10758] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 303.259402][ T7383] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.266749][ T7383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.279591][ T7383] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.286858][ T7383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.353101][T10763] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.438075][T10740] bond7: (slave geneve3): making interface the new active one [ 303.460348][T10740] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 303.563532][T10459] virt_wifi0 speed is unknown, defaulting to 1000 [ 303.572756][T10740] syz.1.1332 (10740) used greatest stack depth: 19296 bytes left [ 303.665873][ T9784] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.699274][ T9784] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.739405][ T9784] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.755218][T10782] netlink: 'syz.3.1343': attribute type 1 has an invalid length. [ 303.777977][ T9784] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.812632][T10786] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.875279][T10782] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 303.894453][ T9788] netdevsim netdevsim1 : set [1, 0] type 2 family 0 port 6081 - 0 [ 303.968208][ T9788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.009926][ T9788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.083616][T10797] netlink: 'syz.2.1346': attribute type 1 has an invalid length. [ 304.095251][ T9785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.107339][T10795] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1342'. [ 304.138466][T10804] openvswitch: netlink: Message has 8 unknown bytes. [ 304.169242][T10795] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1342'. [ 304.191834][T10804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.206689][T10795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 304.214564][T10795] IPv6: NLM_F_CREATE should be set when creating new route [ 304.370084][T10809] netlink: 'syz.2.1348': attribute type 18 has an invalid length. [ 304.392826][T10809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1348'. [ 304.468050][ T9788] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.488008][ T9788] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.519970][ T9788] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.552097][ T9788] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.580706][T10818] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1349'. [ 304.878765][T10830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1353'. [ 305.066585][T10839] netlink: 'syz.4.1354': attribute type 1 has an invalid length. [ 305.281686][T10855] netlink: 'syz.0.1358': attribute type 1 has an invalid length. [ 305.306332][T10839] 8021q: adding VLAN 0 to HW filter on device bond5 [ 305.339791][T10842] xt_CT: No such helper "snmp" [ 305.366426][T10843] bond5: (slave veth0_to_bond): making interface the new active one [ 305.393065][T10843] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 305.486504][T10862] netlink: 'syz.2.1359': attribute type 1 has an invalid length. [ 305.502628][T10851] bond6 (unregistering): Released all slaves [ 305.582413][T10855] 8021q: adding VLAN 0 to HW filter on device bond7 [ 305.629959][ T5288] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 305.702480][T10857] bond7: (slave ip6erspan0): making interface the new active one [ 305.712512][T10857] bond7: (slave ip6erspan0): Enslaving as an active interface with an up link [ 305.732856][ T9785] bond0: (slave netdevsim1): interface is now down [ 305.744779][T10860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.869053][T10878] netlink: 'syz.2.1359': attribute type 10 has an invalid length. [ 305.881497][T10878] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1359'. [ 305.999106][T10878] dummy0: entered promiscuous mode [ 306.047451][T10860] syzkaller0: entered promiscuous mode [ 306.066018][T10860] syzkaller0: entered allmulticast mode [ 306.437778][T10904] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1369'. [ 307.107867][T10898] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.115225][T10898] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.579782][T10898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.629464][T10898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.699271][T10944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1374'. [ 308.187003][ T9788] netdevsim netdevsim1 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.223282][ T9788] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.261566][ T9788] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.298899][ T9788] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.314948][ T7382] bond0: (slave netdevsim1): interface is now down [ 308.392574][ T7382] bond0: now running without any active interface! [ 308.436193][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1377'. [ 308.475884][T10957] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1380'. [ 308.493257][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1377'. [ 308.638275][T10962] sctp: [Deprecated]: syz.3.1383 (pid 10962) Use of struct sctp_assoc_value in delayed_ack socket option. [ 308.638275][T10962] Use struct sctp_sack_info instead [ 308.705402][T10962] sctp: [Deprecated]: syz.3.1383 (pid 10962) Use of struct sctp_assoc_value in delayed_ack socket option. [ 308.705402][T10962] Use struct sctp_sack_info instead [ 309.519627][T11001] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1393'. [ 309.611215][T11008] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1394'. [ 309.657095][T11004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1394'. [ 309.731268][T11013] netlink: 'syz.4.1397': attribute type 1 has an invalid length. [ 309.739214][ T7383] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.739312][ T7383] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.739375][ T7383] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.767451][ T7383] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.904576][T11013] 8021q: adding VLAN 0 to HW filter on device bond6 [ 310.003164][T11025] hsr0: entered promiscuous mode [ 310.012872][T11025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1399'. [ 310.034921][T11025] hsr_slave_0: left promiscuous mode [ 310.053094][T11025] hsr_slave_1: left promiscuous mode [ 310.086493][T11025] hsr0 (unregistering): left promiscuous mode [ 310.377297][T11030] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 310.647777][T11050] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1404'. [ 311.178450][T11063] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 311.205659][T11063] syzkaller1: linktype set to 823 [ 311.226413][T11064] syzkaller1: entered promiscuous mode [ 311.245993][T11064] syzkaller1: entered allmulticast mode [ 311.315001][T11055] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1406'. [ 311.936282][T11101] bridge4: entered promiscuous mode [ 311.962966][T11101] bridge4: entered allmulticast mode [ 312.052404][T11103] bridge0: port 1(gretap0) entered blocking state [ 312.104390][T11103] bridge0: port 1(gretap0) entered disabled state [ 312.114887][T11103] gretap0: entered allmulticast mode [ 312.143292][T11103] gretap0: entered promiscuous mode [ 312.194809][T11109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.290915][T11127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.351412][T11129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.580439][ T29] audit: type=1107 audit(1785684915.123:8): pid=11143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷•%èÍUýAÊÃËÙ ë0ä™ ' [ 313.006312][T11167] __nla_validate_parse: 2 callbacks suppressed [ 313.006332][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1434'. [ 313.096834][T11167] netlink: 'syz.4.1434': attribute type 1 has an invalid length. [ 313.122308][T11167] netlink: 'syz.4.1434': attribute type 2 has an invalid length. [ 313.179379][ T5626] Bluetooth: hci4: link tx timeout [ 313.188695][ T5626] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 313.202487][ T5626] Bluetooth: hci4: link tx timeout [ 313.210645][ T5626] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 313.241385][T11179] netlink: 'syz.1.1438': attribute type 2 has an invalid length. [ 313.271337][T11179] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1438'. [ 313.473465][T11194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1444'. [ 313.767023][T11212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.901136][T11214] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 314.071677][T11228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.119544][T11224] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1451'. [ 314.754788][T11265] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1464'. [ 314.797202][T11270] team0: Cannot enslave team device to itself [ 314.915705][ T5723] IPVS: starting estimator thread 0... [ 315.034364][T11275] IPVS: using max 30 ests per chain, 72000 per kthread [ 315.156341][T11286] netlink: 'syz.2.1471': attribute type 8 has an invalid length. [ 315.264607][ T5626] Bluetooth: hci4: command 0x0405 tx timeout [ 315.409543][T11303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1474'. [ 315.497588][T11303] netlink: 'syz.4.1474': attribute type 10 has an invalid length. [ 315.552906][T11303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1474'. [ 315.649688][T11303] geneve3: entered promiscuous mode [ 315.665975][T11303] geneve3: entered allmulticast mode [ 315.827265][T11323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.932782][T11322] veth1: entered allmulticast mode [ 315.948748][T11331] netlink: 'syz.4.1481': attribute type 28 has an invalid length. [ 315.970233][T11331] netlink: 'syz.4.1481': attribute type 3 has an invalid length. [ 315.991933][T11326] veth3: entered allmulticast mode [ 315.998445][T11331] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1481'. [ 316.230029][T11350] netlink: 'syz.3.1482': attribute type 1 has an invalid length. [ 316.450755][T11361] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1488'. [ 316.668349][T11379] IPv6: NLM_F_CREATE should be specified when creating new route [ 316.678701][T11376] netlink: 'syz.2.1492': attribute type 1 has an invalid length. [ 316.682763][T11380] IPVS: set_ctl: invalid protocol: 43 172.30.0.5:20003 [ 316.695558][T11375] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1490'. [ 316.705610][T11379] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 316.712890][T11379] IPv6: NLM_F_CREATE should be set when creating new route [ 316.720274][T11379] IPv6: NLM_F_CREATE should be set when creating new route [ 316.833002][T11376] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 317.020734][T11398] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 317.036328][T11398] IPv6: NLM_F_CREATE should be set when creating new route [ 317.269879][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.626456][T11427] netlink: 'syz.2.1504': attribute type 10 has an invalid length. [ 317.659677][T11430] netlink: 'syz.1.1506': attribute type 1 has an invalid length. [ 317.794853][T11430] bond9: entered promiscuous mode [ 317.828534][T11430] 8021q: adding VLAN 0 to HW filter on device bond9 [ 317.843195][T11443] sctp: [Deprecated]: syz.2.1509 (pid 11443) Use of int in maxseg socket option. [ 317.843195][T11443] Use struct sctp_assoc_value instead [ 317.863186][T11434] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 317.889385][T11435] vlan3: entered allmulticast mode [ 317.895454][T11435] bond9: entered allmulticast mode [ 317.915678][T11453] xt_hashlimit: size too large, truncated to 1048576 [ 317.922609][T11449] bridge0: port 3(syz_tun) entered blocking state [ 317.922748][T11449] bridge0: port 3(syz_tun) entered disabled state [ 317.923035][T11449] syz_tun: entered allmulticast mode [ 318.001721][T11449] syz_tun: entered promiscuous mode [ 318.082131][T11445] bond9: (slave bridge5): making interface the new active one [ 318.097939][T11445] bridge5: entered promiscuous mode [ 318.111358][T11445] bridge5: entered allmulticast mode [ 318.119430][T11445] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 318.510394][T11476] netlink: 'syz.3.1515': attribute type 21 has an invalid length. [ 318.528573][T11476] IPv6: NLM_F_CREATE should be specified when creating new route [ 318.537142][T11476] netlink: 'syz.3.1515': attribute type 1 has an invalid length. [ 318.687740][T11483] __nla_validate_parse: 5 callbacks suppressed [ 318.687759][T11483] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1519'. [ 318.718433][T11487] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1520'. [ 318.729015][T11483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1519'. [ 319.104176][ T5639] block nbd3: Receive control failed (result -32) [ 319.108476][ T5626] block nbd3: Receive control failed (result -32) [ 319.202739][T11506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1525'. [ 319.229887][T11502] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 319.463221][T11525] geneve4: entered promiscuous mode [ 319.612616][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 319.672951][T11538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1534'. [ 319.687923][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1534'. [ 319.716451][T11543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1535'. [ 319.732234][T11532] bond8: entered promiscuous mode [ 319.739411][T11532] 8021q: adding VLAN 0 to HW filter on device bond8 [ 319.763257][T11535] 8021q: adding VLAN 0 to HW filter on device bond8 [ 319.770750][T11535] bond8: (slave ipip0): The slave device specified does not support setting the MAC address [ 319.794560][T11535] bond8: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 319.809473][T11535] bond8: (slave ipip0): making interface the new active one [ 319.820093][T11535] ipip0: entered promiscuous mode [ 319.827619][T11535] bond8: (slave ipip0): Enslaving as an active interface with an up link [ 320.062880][T11556] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.092820][T11557] nbd: couldn't find device at index 2 [ 320.405925][T11568] vlan3: entered allmulticast mode [ 321.153125][T11600] bond7: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 321.199283][T11600] bond7 (unregistering): Released all slaves [ 321.266575][T11613] syzkaller1: entered promiscuous mode [ 321.276088][T11613] syzkaller1: entered allmulticast mode [ 321.907500][T11635] syzkaller1: entered promiscuous mode [ 321.917175][T11639] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1560'. [ 321.935440][T11635] syzkaller1: entered allmulticast mode [ 322.092534][T11639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1560'. [ 322.212431][T11639] hsr_slave_1 (unregistering): left promiscuous mode [ 322.363257][T11628] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 322.696377][T11667] lo speed is unknown, defaulting to 1000 [ 322.718340][T11667] lo speed is unknown, defaulting to 1000 [ 322.882764][T11667] lo speed is unknown, defaulting to 1000 [ 322.911065][T11667] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 322.972305][T11667] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 323.053745][T11668] smbdirect: ib_dev[syz0] removed [ 323.081054][T11667] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 323.194487][T11684] IPv6: sit3: Disabled Multicast RS [ 323.203868][T11667] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 323.223758][T11684] sit3: entered allmulticast mode [ 323.351629][T11692] hsr_slave_1 (unregistering): left promiscuous mode [ 323.513029][T11667] lo speed is unknown, defaulting to 1000 [ 323.577115][T11667] lo speed is unknown, defaulting to 1000 [ 323.617280][T11667] lo speed is unknown, defaulting to 1000 [ 323.648234][T11667] lo speed is unknown, defaulting to 1000 [ 323.677867][T11667] lo speed is unknown, defaulting to 1000 [ 323.922674][T11718] ip6gre2: entered allmulticast mode [ 323.941216][ T35] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 324.025203][T11727] __nla_validate_parse: 3 callbacks suppressed [ 324.025223][T11727] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1580'. [ 324.536127][T11746] IPVS: sh: FWM 3 0x00000003 - no destination available [ 324.788342][T11768] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1594'. [ 324.953666][T11776] validate_nla: 4 callbacks suppressed [ 324.953683][T11776] netlink: 'syz.2.1595': attribute type 2 has an invalid length. [ 325.037780][T11780] netlink: 'syz.0.1597': attribute type 2 has an invalid length. [ 325.049134][T11780] netlink: 'syz.0.1597': attribute type 2 has an invalid length. [ 325.944531][T11800] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1604'. [ 326.176568][T11815] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1607'. [ 326.205601][T11819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1609'. [ 326.236904][T11817] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 326.245046][T11817] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 326.276948][ T7383] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 326.329006][T11806] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 326.570747][T11823] ip6gre1: left allmulticast mode [ 326.581096][T11823] vlan3: left allmulticast mode [ 326.591944][T11823] bond0: left allmulticast mode [ 326.820586][T11833] syzkaller1: entered promiscuous mode [ 326.833019][T11833] syzkaller1: entered allmulticast mode [ 326.996851][T11843] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1612'. [ 327.055816][T11847] xt_nat: multiple ranges no longer supported [ 327.123322][T11845] netlink: 576 bytes leftover after parsing attributes in process `syz.4.1614'. [ 327.263915][T11855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1617'. [ 327.483193][T11863] netlink: 'syz.4.1619': attribute type 1 has an invalid length. [ 327.570806][T11863] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 327.688673][T11877] netlink: 'syz.2.1625': attribute type 33 has an invalid length. [ 327.794849][T11877] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 327.823004][T11884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1624'. [ 327.847266][T11877] bond6 (unregistering): Released all slaves [ 327.905040][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 327.940862][T11890] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1626'. [ 327.982548][T11890] netlink: 'syz.0.1626': attribute type 5 has an invalid length. [ 328.009726][T11891] netlink: 'syz.0.1626': attribute type 5 has an invalid length. [ 328.378432][T11907] bridge5: entered promiscuous mode [ 328.406485][T11907] bridge5: entered allmulticast mode [ 329.047070][T11948] netlink: 'syz.3.1644': attribute type 83 has an invalid length. [ 329.053567][T11950] __nla_validate_parse: 6 callbacks suppressed [ 329.053617][T11950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1646'. [ 329.079460][T11945] syzkaller1: entered promiscuous mode [ 329.085942][T11945] syzkaller1: entered allmulticast mode [ 329.258432][T11963] veth11: entered allmulticast mode [ 329.293077][T11965] syzkaller1: entered allmulticast mode [ 329.454626][T11970] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1650'. [ 329.572737][T11972] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 329.587616][T11972] bond7 (unregistering): Released all slaves [ 329.798478][T11984] batadv_slave_0: entered promiscuous mode [ 329.835918][T11984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1654'. [ 329.916720][T11988] sctp: [Deprecated]: syz.1.1657 (pid 11988) Use of int in max_burst socket option deprecated. [ 329.916720][T11988] Use struct sctp_assoc_value instead [ 330.033490][T11998] IPVS: length: 8 != 1152 [ 330.096212][T12003] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1662'. [ 330.258222][T12014] SET target dimension over the limit! [ 330.505635][T12029] macvtap1: entered promiscuous mode [ 330.511345][T12029] macvtap1: entered allmulticast mode [ 330.524078][T12029] veth1_vlan: entered allmulticast mode [ 330.711879][T12044] netlink: 'syz.0.1672': attribute type 1 has an invalid length. [ 330.808424][T12044] 8021q: adding VLAN 0 to HW filter on device bond9 [ 330.988474][T12061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1677'. [ 331.031448][T12061] xfrm1: entered promiscuous mode [ 331.048405][T12061] xfrm1: entered allmulticast mode [ 331.061638][T12061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1677'. [ 331.395245][T12085] netlink: 'syz.0.1682': attribute type 1 has an invalid length. [ 331.479132][T12085] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 331.672313][T12102] ipvlan2: entered promiscuous mode [ 331.842379][T12113] netlink: 'syz.2.1690': attribute type 10 has an invalid length. [ 331.915487][T12116] tipc: Failed to remove unknown binding: 66,0,0/0:132835271/132835273 [ 331.937765][T12116] tipc: Failed to remove unknown binding: 66,0,0/0:132835271/132835272 [ 331.959998][T12116] tipc: Failed to remove unknown binding: 66,0,0/0:132835271/132835273 [ 332.002523][T12116] tipc: Failed to remove unknown binding: 66,0,0/0:132835271/132835272 [ 332.030244][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1694'. [ 332.044499][T12123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1694'. [ 332.089753][T12129] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 332.203763][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1693'. [ 332.450050][T12147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1703'. [ 332.464792][T12147] netlink: 'syz.1.1703': attribute type 6 has an invalid length. [ 332.557405][T12147] netlink: 'syz.1.1703': attribute type 6 has an invalid length. [ 332.574195][ T35] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.599601][T12151] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 332.616883][ T35] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.643079][ T35] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.667772][ T35] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.849017][T12161] netlink: zone id is out of range [ 332.865781][T12161] netlink: zone id is out of range [ 332.877924][T12161] netlink: zone id is out of range [ 332.904703][T12161] netlink: zone id is out of range [ 332.926415][T12161] netlink: zone id is out of range [ 332.946549][T12161] netlink: zone id is out of range [ 332.968508][T12161] netlink: zone id is out of range [ 332.991848][T12161] netlink: zone id is out of range [ 333.013017][T12161] netlink: zone id is out of range [ 333.126258][T12169] netlink: 'syz.1.1709': attribute type 1 has an invalid length. [ 333.671722][T12185] sctp: [Deprecated]: syz.1.1714 (pid 12185) Use of int in max_burst socket option. [ 333.671722][T12185] Use struct sctp_assoc_value instead [ 333.807105][T12189] netlink: 'syz.0.1715': attribute type 1 has an invalid length. [ 334.158693][T12207] bridge3: entered promiscuous mode [ 334.182264][T12207] bridge3: entered allmulticast mode [ 334.462360][T12216] lo speed is unknown, defaulting to 1000 [ 334.708716][T12221] ipvlan1: entered allmulticast mode [ 334.714554][T12221] batadv_slave_1: entered allmulticast mode [ 334.727792][T12221] batman_adv: batadv0: Adding interface: ipvlan1 [ 334.745695][T12221] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.801281][T12221] batman_adv: batadv0: Interface activated: ipvlan1 [ 335.701219][T12259] __nla_validate_parse: 10 callbacks suppressed [ 335.701241][T12259] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1733'. [ 335.824268][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 336.187126][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1737'. [ 336.223562][T12284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1740'. [ 336.340873][T12284] raw_sendmsg: syz.3.1740 forgot to set AF_INET. Fix it! [ 336.412091][T12284] netlink: 'syz.3.1740': attribute type 1 has an invalid length. [ 336.441701][T12284] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1740'. [ 336.512939][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1742'. [ 336.571883][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1742'. [ 336.611024][T12294] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1742'. [ 336.641386][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1742'. [ 336.678550][T12301] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1742'. [ 337.096870][T12323] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1752'. [ 337.364567][T12330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.477065][T12330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.558788][T12340] erspan0: entered promiscuous mode [ 338.537721][T12401] team0: No ports can be present during mode change [ 338.552861][T12405] No such timeout policy "s" [ 338.572348][T12405] net_ratelimit: 6 callbacks suppressed [ 338.572370][T12405] netlink: Failed to associated timeout policy 's' [ 338.666416][T12405] bond7: entered promiscuous mode [ 338.697987][T12405] bond7: entered allmulticast mode [ 338.709314][T12405] 8021q: adding VLAN 0 to HW filter on device bond7 [ 338.946189][T12424] syzkaller1: entered promiscuous mode [ 338.961251][T12426] netlink: 'syz.1.1784': attribute type 21 has an invalid length. [ 338.962735][T12424] syzkaller1: entered allmulticast mode [ 339.003917][T12426] netlink: 'syz.1.1784': attribute type 4 has an invalid length. [ 339.027780][T12426] netlink: 'syz.1.1784': attribute type 5 has an invalid length. [ 339.043222][T12433] netlink: 'syz.1.1784': attribute type 21 has an invalid length. [ 339.059574][T12433] netlink: 'syz.1.1784': attribute type 4 has an invalid length. [ 339.079304][T12433] netlink: 'syz.1.1784': attribute type 5 has an invalid length. [ 339.255830][T12442] Bluetooth: MGMT ver 1.23 [ 340.409032][T12497] IPv6: sit2: Disabled Multicast RS [ 340.429971][T12497] sit2: entered allmulticast mode [ 340.713623][T12517] __nla_validate_parse: 15 callbacks suppressed [ 340.713648][T12517] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1810'. [ 340.848343][T12521] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 340.907529][T12523] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1813'. [ 340.991685][T12527] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1815'. [ 341.099489][T12531] bond_slave_1: entered allmulticast mode [ 341.120667][T12530] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1816'. [ 341.154165][T12530] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1816'. [ 341.180678][T12537] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1817'. [ 341.312150][T12504] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 341.677534][T12558] veth0: entered promiscuous mode [ 341.692064][T12558] veth0: left promiscuous mode [ 341.925766][T12571] netlink: 'syz.0.1829': attribute type 11 has an invalid length. [ 341.987501][T12580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1832'. [ 342.191535][T12592] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1834'. [ 342.397407][T12574] syzkaller0: entered promiscuous mode [ 342.407335][T12574] syzkaller0: entered allmulticast mode [ 342.643282][T12612] x_tables: duplicate underflow at hook 1 [ 342.822386][T12617] xt_TCPMSS: Only works on TCP SYN packets [ 343.056080][T12632] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1843'. [ 343.284853][T12646] netlink: 'syz.2.1848': attribute type 8 has an invalid length. [ 343.511878][T12655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1851'. [ 343.852281][T12672] netlink: 'syz.1.1855': attribute type 4 has an invalid length. [ 343.868887][T12672] .`: renamed from bond0 [ 344.400194][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056ba3400: rx timeout, send abort [ 344.771255][T12724] syzkaller0: entered promiscuous mode [ 344.777302][T12724] syzkaller0: entered allmulticast mode [ 344.900387][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056ba3000: rx timeout, send abort [ 344.910482][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056ba3400: abort rx timeout. Force session deactivation [ 345.408699][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056ba3000: abort rx timeout. Force session deactivation [ 345.423628][T12752] netlink: 'syz.2.1882': attribute type 2 has an invalid length. [ 345.518692][T12752] : entered promiscuous mode [ 345.603066][T12758] bond8: option min_links: invalid value (18446744073709551614) [ 345.613295][T12758] bond8: option min_links: allowed values 0 - 2147483647 [ 345.625991][T12758] bond8 (unregistering): Released all slaves [ 345.913600][T12776] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 345.922724][T12776] batman_adv: batadv0: Adding interface: wlan0 [ 345.929720][T12776] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.957978][T12776] batman_adv: batadv0: Interface activated: wlan0 [ 346.111396][T12788] __nla_validate_parse: 4 callbacks suppressed [ 346.111417][T12788] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1891'. [ 346.735646][T12816] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1899'. [ 346.828973][T12818] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee [ 346.832142][T12821] syz_tun: left allmulticast mode [ 346.856447][T12818] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1900'. [ 346.864798][T12821] syz_tun: left promiscuous mode [ 346.882152][T12821] bridge0: port 3(syz_tun) entered disabled state [ 346.920337][T12825] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1902'. [ 346.944418][T12827] xt_TCPMSS: Only works on TCP SYN packets [ 346.969187][T12821] bridge_slave_0: left allmulticast mode [ 346.988528][T12821] bridge_slave_0: left promiscuous mode [ 347.005733][T12821] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.008322][T12829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1902'. [ 347.036591][T12831] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 347.054623][T12821] bridge_slave_1: left allmulticast mode [ 347.069569][T12832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1902'. [ 347.074326][T12821] bridge_slave_1: left promiscuous mode [ 347.114238][T12821] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.139387][T12821] bond5: (slave veth0_to_bond): Releasing active interface [ 347.181607][T12837] netlink: 'syz.1.1904': attribute type 1 has an invalid length. [ 347.192856][T12821] : (slave bond_slave_0): Releasing backup interface [ 347.195871][T12837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.213921][T12821] : (slave bond_slave_1): Releasing backup interface [ 347.230286][T12838] openvswitch: netlink: Flow actions attr not present in new flow. [ 347.246691][T12821] team0: Port device team_slave_1 removed [ 347.253566][T12821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.262242][T12821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.273452][T12821] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 347.308969][T12840] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 347.319057][T12827] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.326326][T12827] team0: Cannot enslave team device to itself [ 347.445223][T12842] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1905'. [ 347.479176][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1905'. [ 347.501384][T12842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1905'. [ 347.527438][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1905'. [ 347.618953][T12850] netlink: 'syz.0.1907': attribute type 10 has an invalid length. [ 347.675354][T12850] team0: Device veth0_macvtap failed to register rx_handler [ 348.200686][T12883] block nbd0: Unsupported socket: should be TCP or UNIX. [ 349.486090][T12946] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 349.550498][T12956] IPVS: length: 131 != 8 [ 350.096056][T12984] netlink: 'syz.2.1946': attribute type 1 has an invalid length. [ 350.111553][T12985] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 350.121429][T12985] netlink: 'syz.0.1945': attribute type 10 has an invalid length. [ 350.230283][T12978] sit3: entered promiscuous mode [ 350.239978][T12978] sit3: entered allmulticast mode [ 350.292162][T12986] ipvlan2: entered promiscuous mode [ 350.337614][T12991] ipvlan3: entered promiscuous mode [ 350.452823][T13003] netlink: 'syz.0.1948': attribute type 3 has an invalid length. [ 350.487258][T13003] netlink: 'syz.0.1948': attribute type 3 has an invalid length. [ 350.533808][T13009] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20004 [ 350.878389][T13029] netlink: 'syz.2.1956': attribute type 12 has an invalid length. [ 351.184203][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 351.278351][T13055] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 351.298619][T13063] __nla_validate_parse: 15 callbacks suppressed [ 351.298638][T13063] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1965'. [ 351.317306][T13065] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1965'. [ 351.478881][T13071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1967'. [ 351.646019][T13077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1969'. [ 351.682635][T13077] netlink: 'syz.3.1969': attribute type 4 has an invalid length. [ 351.882031][T13094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1973'. [ 352.091085][T13109] netlink: 'syz.1.1979': attribute type 1 has an invalid length. [ 352.121554][T13110] netlink: 'syz.3.1980': attribute type 1 has an invalid length. [ 352.220077][T13109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.236979][T13109] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1979'. [ 352.249472][T13109] netlink: 'syz.1.1979': attribute type 10 has an invalid length. [ 352.262391][T13109] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1979'. [ 352.293889][T13110] bond7: entered promiscuous mode [ 352.299791][T13110] 8021q: adding VLAN 0 to HW filter on device bond7 [ 352.313212][T13112] ip_vti0: entered allmulticast mode [ 352.482291][T13112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.503759][T13112] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 352.551340][T13112] bond0: (slave ip_vti0): Error -95 calling set_mac_address [ 352.623231][T13109] dummy0: entered promiscuous mode [ 352.658487][T13142] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1985'. [ 352.681651][T13121] 8021q: adding VLAN 0 to HW filter on device bond7 [ 352.697326][T13121] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 352.709610][T13121] bond7: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 352.732478][T13121] bond7: (slave ip6gre1): making interface the new active one [ 352.740582][T13121] ip6gre1: entered promiscuous mode [ 352.748067][T13121] bond7: (slave ip6gre1): Enslaving as an active interface with an up link [ 352.774152][T13145] netlink: 584 bytes leftover after parsing attributes in process `syz.4.1985'. [ 352.816197][T13145] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1985'. [ 353.220241][T13159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.248296][T13164] netlink: 'syz.1.1993': attribute type 1 has an invalid length. [ 353.638271][T13183] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 353.667487][T13183] bond8 (unregistering): Released all slaves [ 354.073726][T13217] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.508279][T13235] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 355.241059][T13259] vlan4: entered promiscuous mode [ 355.252142][T13259] bridge0: entered promiscuous mode [ 355.318822][T13262] syzkaller0: entered promiscuous mode [ 355.341092][T13262] syzkaller0: entered allmulticast mode [ 355.558556][T13271] validate_nla: 3 callbacks suppressed [ 355.558578][T13271] netlink: 'syz.2.2022': attribute type 5 has an invalid length. [ 356.070774][T13296] batadv_slave_0: left promiscuous mode [ 356.536700][T13319] __nla_validate_parse: 8 callbacks suppressed [ 356.536722][T13319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2034'. [ 356.619488][T13322] tap0: tun_chr_ioctl cmd 1074025672 [ 356.630588][T13322] tap0: ignored: set checksum disabled [ 356.697979][T13325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.814502][ T5626] block nbd4: Receive control failed (result -32) [ 356.861745][T13335] netlink: 'syz.1.2040': attribute type 1 has an invalid length. [ 356.929828][T13338] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2040'. [ 356.970965][T13335] 8021q: adding VLAN 0 to HW filter on device bond11 [ 356.999405][T13339] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2041'. [ 357.015669][T13341] bond11: entered promiscuous mode [ 357.032168][T13341] bond11: entered allmulticast mode [ 357.581295][T13365] xt_CT: You must specify a L4 protocol and not use inversions on it [ 357.629162][T13365] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2048'. [ 357.741099][T13365] xt_CT: You must specify a L4 protocol and not use inversions on it [ 357.972572][T13376] syzkaller0: entered promiscuous mode [ 357.987133][T13376] syzkaller0: entered allmulticast mode [ 358.052815][T13388] netlink: 'syz.3.2055': attribute type 1 has an invalid length. [ 358.167948][T13388] 8021q: adding VLAN 0 to HW filter on device bond8 [ 358.219743][T13388] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2055'. [ 358.310223][T13396] bond8: (slave geneve2): making interface the new active one [ 358.367848][T13396] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 358.653044][T13410] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2062'. [ 358.846529][T13422] netlink: 'syz.2.2064': attribute type 10 has an invalid length. [ 358.876640][T13422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.894791][T13423] xt_hashlimit: size too large, truncated to 1048576 [ 358.908052][T13425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2066'. [ 358.929715][T13423] xt_hashlimit: max too large, truncated to 1048576 [ 358.942888][T13422] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 358.961479][T13423] xt_hashlimit: overflow, rate too high: 0 [ 358.990129][T13401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2058'. [ 359.209132][T13438] netlink: zone id is out of range [ 359.229480][T13438] netlink: zone id is out of range [ 359.237524][T13438] netlink: zone id is out of range [ 359.242948][T13438] netlink: zone id is out of range [ 359.260678][T13438] netlink: zone id is out of range [ 359.282982][T13438] netlink: zone id is out of range [ 359.294249][T13438] netlink: zone id is out of range [ 359.309169][T13438] netlink: zone id is out of range [ 359.326835][T13438] netlink: zone id is out of range [ 359.346003][T13438] netlink: zone id is out of range [ 359.413884][T13448] syzkaller0: entered promiscuous mode [ 359.428109][T13448] syzkaller0: entered allmulticast mode [ 359.440846][T13450] ip6t_rpfilter: unknown options [ 359.574578][T13454] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2075'. [ 359.936993][T13473] lo speed is unknown, defaulting to 1000 [ 360.969974][T13524] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2091'. [ 361.249878][T13547] tipc: Enabling of bearer rejected, failed to enable media [ 361.360372][T13556] netlink: 'syz.0.2102': attribute type 1 has an invalid length. [ 361.593744][T13571] __nla_validate_parse: 1 callbacks suppressed [ 361.593764][T13571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2105'. [ 361.746670][T13571] 8021q: adding VLAN 0 to HW filter on device bond10 [ 361.785060][T13578] tipc: Failed to remove unknown binding: 66,0,0/0:2192130655/2192130656 [ 361.795590][T13578] tipc: Failed to remove unknown binding: 66,0,0/0:2192130655/2192130656 [ 361.829268][T13581] netlink: 'syz.1.2108': attribute type 25 has an invalid length. [ 361.906105][T13583] SET target dimension over the limit! [ 362.067034][T13587] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 362.096126][T13587] bond6: (slave lo): Enslaving as an active interface with an up link [ 362.127417][T13602] syzkaller0: entered promiscuous mode [ 362.143192][T13602] syzkaller0: entered allmulticast mode [ 362.434302][T13613] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2116'. [ 362.506763][T13619] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2116'. [ 362.588553][T13613] €: renamed from ip6gre0 [ 362.825097][T13637] netlink: 'syz.1.2124': attribute type 1 has an invalid length. [ 363.040354][T13637] 8021q: adding VLAN 0 to HW filter on device bond12 [ 363.136718][T13649] bond12: (slave gretap3): making interface the new active one [ 363.156991][T13649] bond12: (slave gretap3): Enslaving as an active interface with an up link [ 363.318241][T13631] syzkaller1: entered promiscuous mode [ 363.325864][T13631] syzkaller1: entered allmulticast mode [ 363.441054][T13675] syzkaller0: entered promiscuous mode [ 363.447825][T13675] syzkaller0: entered allmulticast mode [ 363.463252][T13676] netlink: 'syz.1.2128': attribute type 11 has an invalid length. [ 363.583197][T13641] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 364.125327][T13692] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.2131'. [ 364.402668][T13695] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2132'. [ 364.705613][ T9790] bond0: (slave batadv0): interface is now down [ 366.253093][T13715] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 366.330279][T13722] syzkaller0: entered promiscuous mode [ 366.352622][T13722] syzkaller0: entered allmulticast mode [ 367.234525][T13771] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2152'. [ 367.264525][ T9788] bond0: (slave batadv0): interface is now down [ 367.651821][T13802] netlink: 'syz.4.2162': attribute type 1 has an invalid length. [ 367.818048][T13802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2162'. [ 367.842474][T13813] netlink: 'syz.3.2165': attribute type 10 has an invalid length. [ 367.866779][T13802] bridge4: entered promiscuous mode [ 367.895382][T13802] bond10: (slave bridge4): making interface the new active one [ 367.917251][T13817] netlink: 'syz.3.2165': attribute type 10 has an invalid length. [ 367.927239][T13802] bond10: (slave bridge4): Enslaving as an active interface with an up link [ 368.945821][ T7616] lo speed is unknown, defaulting to 1000 [ 369.119663][T13871] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2182'. [ 369.171779][T13876] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2182'. [ 369.195141][T13873] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2181'. [ 369.210913][T13874] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 369.221115][T13874] syzkaller1: linktype set to 823 [ 369.232323][T13873] netlink: 'syz.1.2181': attribute type 16 has an invalid length. [ 369.256959][T13873] netlink: 'syz.1.2181': attribute type 2 has an invalid length. [ 369.279380][T13873] netlink: 64110 bytes leftover after parsing attributes in process `syz.1.2181'. [ 369.314638][T13869] lo speed is unknown, defaulting to 1000 [ 369.331112][T13881] netlink: 'syz.4.2184': attribute type 3 has an invalid length. [ 369.806462][T13904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2191'. [ 369.825427][ T9784] bond0: (slave batadv0): interface is now down [ 370.862013][T13937] netlink: 'syz.1.2197': attribute type 15 has an invalid length. [ 371.068988][T13923] syzkaller0: entered promiscuous mode [ 371.075471][T13923] syzkaller0: entered allmulticast mode [ 371.333755][T13953] netlink: 'syz.4.2202': attribute type 3 has an invalid length. [ 371.361794][T13953] netlink: 'syz.4.2202': attribute type 1 has an invalid length. [ 371.373106][T13953] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2202'. [ 372.390144][ T9790] bond0: (slave batadv0): interface is now down [ 373.958694][T14000] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2213'. [ 374.148752][T14010] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2217'. [ 374.168497][T14016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2217'. [ 374.204482][T14016] block nbd5: Unsupported socket: should be TCP or UNIX. [ 374.243608][T14021] nbd: socks must be embedded in a SOCK_ITEM attr [ 374.410343][T14029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.471879][T14032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.544503][T14036] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2223'. [ 374.697832][T14043] netlink: 'syz.0.2227': attribute type 1 has an invalid length. [ 374.753776][T14047] x_tables: duplicate underflow at hook 1 [ 374.903908][T14051] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 374.958247][ T9788] bond0: (slave batadv0): interface is now down [ 375.074953][T14060] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2231'. [ 375.272949][T14076] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2236'. [ 375.388959][T14076] x_tables: duplicate underflow at hook 1 [ 375.410903][T14084] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2238'. [ 375.421586][T14085] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2237'. [ 375.649005][T14090] netlink: 'syz.1.2241': attribute type 3 has an invalid length. [ 375.670592][T14090] veth1_to_bond: entered allmulticast mode [ 375.683884][T14090] netlink: 'syz.1.2241': attribute type 1 has an invalid length. [ 375.980423][T14117] netlink: 'syz.2.2249': attribute type 30 has an invalid length. [ 376.036461][T14114] ksmbd: Unknown IPC event: 4, ignore. [ 376.091473][T14117] bond7: option arp_missed_max: invalid value (0) [ 376.144201][T14117] bond7: option arp_missed_max: allowed values 1 - 255 [ 376.180912][T14117] bond7 (unregistering): Released all slaves [ 376.197679][T14130] ipt_rpfilter: unknown options [ 376.225138][T14132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2251'. [ 376.242666][T14089] veth1_to_bond: left allmulticast mode [ 376.243438][T14134] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2251'. [ 376.341396][T14130] lo: entered promiscuous mode [ 376.376290][T14130] net_ratelimit: 6 callbacks suppressed [ 376.376310][T14130] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 376.910832][T14162] Cannot find add_set index 4 as target [ 377.247288][T14181] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 377.439461][T14197] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 377.451435][T14187] bond11: (slave bond_slave_1): Device is not bonding slave [ 377.460547][T14187] bond11: option active_slave: invalid value (bond_slave_1) [ 377.473070][T14187] bond11 (unregistering): Released all slaves [ 377.558313][T14190] lo speed is unknown, defaulting to 1000 [ 377.584393][ T7383] bond0: (slave batadv0): interface is now down [ 377.816768][T14207] netlink: 'syz.2.2276': attribute type 29 has an invalid length. [ 377.964787][T14208] bridge5: entered promiscuous mode [ 378.237176][T14222] syzkaller0: entered promiscuous mode [ 378.249846][T14222] syzkaller0: entered allmulticast mode [ 378.637780][T14245] netlink: 'syz.1.2283': attribute type 7 has an invalid length. [ 378.649983][T14245] netlink: 'syz.1.2283': attribute type 8 has an invalid length. [ 378.673143][T14246] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 378.686348][T14245] veth1_to_team: entered promiscuous mode [ 378.707371][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 378.733470][T14245] gretap0: entered promiscuous mode [ 378.763750][T14245] veth1_to_team: left promiscuous mode [ 378.800840][T14245] gretap0: left promiscuous mode [ 378.880646][T14255] netlink: 'syz.3.2288': attribute type 1 has an invalid length. [ 378.980238][T14255] __nla_validate_parse: 8 callbacks suppressed [ 378.980260][T14255] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2288'. [ 379.002532][T14255] 8021q: adding VLAN 0 to HW filter on device bond9 [ 379.066509][T14256] tap0: tun_chr_ioctl cmd 1074025676 [ 379.094584][T14256] tap0: owner set to 0 [ 379.158336][T14269] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2293'. [ 379.175470][T14269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2293'. [ 379.208749][T14269] xt_hashlimit: size too large, truncated to 1048576 [ 379.623052][T14278] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 379.633445][T14279] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 379.761836][T14298] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 379.828214][T14300] netlink: 'syz.2.2301': attribute type 1 has an invalid length. [ 379.841987][T14300] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2301'. [ 379.972530][T14303] tipc: Started in network mode [ 379.994443][T14303] tipc: Node identity 9a5b32cd8fcf, cluster identity 4711 [ 380.017894][T14303] tipc: Enabled bearer , priority 0 [ 380.144148][ T9788] bond0: (slave batadv0): interface is now down [ 380.234805][T14311] syzkaller0: entered promiscuous mode [ 380.240381][T14311] syzkaller0: entered allmulticast mode [ 380.246885][T14311] tipc: Resetting bearer [ 380.310890][T14301] tipc: Resetting bearer [ 380.338323][T14326] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2309'. [ 380.613084][T14340] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2313'. [ 382.449767][T14301] tipc: Disabling bearer [ 382.461303][T14349] virt_wifi0 speed is unknown, defaulting to 1000 [ 382.461712][ T5851] tipc: Node number set to 362033869 [ 382.497320][T14349] virt_wifi0 speed is unknown, defaulting to 1000 [ 382.526216][T14349] virt_wifi0 speed is unknown, defaulting to 1000 [ 382.533808][T14349] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 382.549066][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 382.558531][T14349] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 382.577808][T14349] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 382.624186][T14349] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 382.705934][ T9788] bond0: (slave batadv0): interface is now down [ 382.714831][T14358] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2317'. [ 382.751748][ T9788] bond0: now running without any active interface! [ 382.778193][T14361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2319'. [ 382.804787][T14349] virt_wifi0 speed is unknown, defaulting to 1000 [ 382.822207][T14349] virt_wifi0 speed is unknown, defaulting to 1000 [ 382.851553][T14349] virt_wifi0 speed is unknown, defaulting to 1000 [ 382.878463][T14349] virt_wifi0 speed is unknown, defaulting to 1000 [ 382.937082][T14349] virt_wifi0 speed is unknown, defaulting to 1000 [ 383.207852][T14378] netlink: 'syz.2.2323': attribute type 1 has an invalid length. [ 383.365600][T14387] macvlan0: entered promiscuous mode [ 383.371495][T14387] macvlan0: entered allmulticast mode [ 383.378712][T14387] bond7: entered promiscuous mode [ 383.386184][T14387] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 383.407250][T14387] bond7: left promiscuous mode [ 383.465071][T14389] smc: net device lo applied user defined pnetid SYZ0 [ 383.548895][T14399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2327'. [ 383.576543][T14399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2327'. [ 383.714274][T14404] Cannot find set identified by id 65534 to match [ 383.867494][T14414] netlink: 'syz.1.2333': attribute type 1 has an invalid length. [ 384.110557][T14424] netlink: 'syz.2.2335': attribute type 21 has an invalid length. [ 384.377326][T14444] __nla_validate_parse: 3 callbacks suppressed [ 384.377348][T14444] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2341'. [ 384.410841][T14448] netlink: 'syz.3.2342': attribute type 1 has an invalid length. [ 384.532640][T14448] 8021q: adding VLAN 0 to HW filter on device bond11 [ 384.568113][T14444] tipc: Enabling of bearer rejected, failed to enable media [ 384.715332][T14458] bond11: (slave geneve3): making interface the new active one [ 384.731418][T14458] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 384.850743][T14465] bond13 (unregistering): Released all slaves [ 384.912581][T14477] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 385.000251][T14464] syzkaller0: entered promiscuous mode [ 385.007750][T14480] netlink: 'syz.3.2347': attribute type 34 has an invalid length. [ 385.020966][T14464] syzkaller0: entered allmulticast mode [ 385.035748][T14480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2347'. [ 385.366158][T14493] tipc: Cannot configure node identity twice [ 385.545635][T14499] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 385.579130][T14497] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 385.626010][T14497] batman_adv: batadv0: Adding interface: gretap1 [ 385.653358][T14497] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.682032][T14497] batman_adv: batadv0: Interface activated: gretap1 [ 385.897538][T14517] syzkaller0: entered promiscuous mode [ 385.903894][T14517] syzkaller0: entered allmulticast mode [ 386.024288][T14528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2364'. [ 386.227398][T14539] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 386.339963][T14543] netlink: 'syz.3.2369': attribute type 17 has an invalid length. [ 386.348709][T14543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2369'. [ 386.358847][T14543] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2369'. [ 386.405330][T14546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2368'. [ 386.517026][T14551] xt_hashlimit: size too large, truncated to 1048576 [ 386.840068][T14571] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2377'. [ 386.866886][T14571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2377'. [ 387.251648][T14595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2384'. [ 387.550897][T14602] netlink: 'syz.1.2385': attribute type 83 has an invalid length. [ 387.569096][T14603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2386'. [ 387.826525][T14616] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 388.247779][T14637] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 389.043198][T14670] tc action pedit offset must be on 32 bit boundaries [ 389.676033][T14698] syzkaller0: entered promiscuous mode [ 389.697357][T14709] __nla_validate_parse: 3 callbacks suppressed [ 389.697378][T14709] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2415'. [ 389.702716][T14698] syzkaller0: entered allmulticast mode [ 389.805543][T14712] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2415'. [ 390.062459][T14726] openvswitch: netlink: Flow key attr not present in new flow. [ 390.186661][T14731] tipc: Can't bind to reserved service type 0 [ 390.329195][T14735] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 390.532801][T14747] netlink: 'syz.4.2424': attribute type 1 has an invalid length. [ 390.549934][T14747] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2424'. [ 390.636627][T14747] nbd1: detected capacity change from 0 to 127 [ 390.767905][ T1635] block nbd1: Dead connection, failed to find a fallback [ 390.777279][ T1635] block nbd1: shutting down sockets [ 390.803616][ T1635] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 390.830086][ T1635] Buffer I/O error on dev nbd1, logical block 0, async page read [ 390.849332][ T1635] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 390.872863][ T1635] Buffer I/O error on dev nbd1, logical block 1, async page read [ 390.881014][ T1635] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 390.890854][ T1635] Buffer I/O error on dev nbd1, logical block 2, async page read [ 390.907899][ T1635] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 390.917945][ T1635] Buffer I/O error on dev nbd1, logical block 3, async page read [ 390.951670][ T1635] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 390.961704][ T1635] Buffer I/O error on dev nbd1, logical block 0, async page read [ 390.969793][ T1635] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 390.979393][ T1635] Buffer I/O error on dev nbd1, logical block 1, async page read [ 390.987433][ T1635] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 390.997382][ T1635] Buffer I/O error on dev nbd1, logical block 2, async page read [ 391.005469][ T1635] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 391.015113][ T1635] Buffer I/O error on dev nbd1, logical block 3, async page read [ 391.023099][ T1635] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 391.033282][ T1635] Buffer I/O error on dev nbd1, logical block 0, async page read [ 391.041943][ T1635] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 391.051545][ T1635] Buffer I/O error on dev nbd1, logical block 1, async page read [ 391.061640][ T8758] ldm_validate_partition_table(): Disk read failed. [ 391.079942][ T8758] Dev nbd1: unable to read RDB block 0 [ 391.087274][ T8758] nbd1: unable to read partition table [ 391.119724][ T8758] ldm_validate_partition_table(): Disk read failed. [ 391.127883][ T8758] Dev nbd1: unable to read RDB block 0 [ 391.135123][ T8758] nbd1: unable to read partition table [ 392.696129][T14742] bond6: (slave lo): Releasing backup interface [ 392.710788][T14742] bond6: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 392.781714][T14742] bond0: (slave batadv0): Releasing backup interface [ 392.831658][T14742] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 393.101151][T14768] netlink: 'syz.2.2429': attribute type 4 has an invalid length. [ 393.114183][T14768] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2429'. [ 393.123806][T14767] bridge0: port 1(dummy0) entered blocking state [ 393.139654][T14767] bridge0: port 1(dummy0) entered disabled state [ 393.149906][T14767] dummy0: entered allmulticast mode [ 393.162571][T14767] dummy0: entered promiscuous mode [ 393.171609][T14767] bridge0: port 1(dummy0) entered blocking state [ 393.179394][T14767] bridge0: port 1(dummy0) entered forwarding state [ 393.227634][T14770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2428'. [ 393.287518][T14772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2430'. [ 393.308378][T14771] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 393.426741][T14782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2434'. [ 393.801536][T14806] netlink: 'syz.3.2440': attribute type 21 has an invalid length. [ 393.835558][T14806] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2440'. [ 393.875054][T14806] netlink: 'syz.3.2440': attribute type 5 has an invalid length. [ 393.911382][T14806] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2440'. [ 394.192970][T14817] xt_connbytes: Forcing CT accounting to be enabled [ 394.224538][T14817] xt_CT: You must specify a L4 protocol and not use inversions on it [ 394.249506][T14822] syzkaller0: entered promiscuous mode [ 394.280191][T14822] syzkaller0: entered allmulticast mode [ 394.319024][T14792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2435'. [ 394.619124][T14817] geneve3: entered promiscuous mode [ 394.902452][T14844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 395.040597][T14852] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2453'. [ 395.050778][T14852] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 395.274398][ T5626] Bluetooth: hci1: command 0x0406 tx timeout [ 397.051117][T14850] vlan2: entered promiscuous mode [ 397.056363][T14850] bridge0: entered promiscuous mode [ 397.061777][T14850] vlan2: entered allmulticast mode [ 397.067565][T14850] bridge0: entered allmulticast mode [ 397.230340][T14868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2457'. [ 397.239796][ T9784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.251062][T14868] openvswitch: netlink: Flow actions attr not present in new flow. [ 397.281934][ T9784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.304081][ T9784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.354079][ T9788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.634959][T14883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2464'. [ 397.645398][T14893] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2465'. [ 397.655869][T14893] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2465'. [ 397.726284][T14897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2465'. [ 399.820093][T14909] netlink: 'syz.1.2470': attribute type 21 has an invalid length. [ 399.848588][T14909] IPv6: NLM_F_CREATE should be specified when creating new route [ 399.905461][T14919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2471'. [ 400.021343][T14922] netlink: 'syz.4.2475': attribute type 19 has an invalid length. [ 400.531449][T14951] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2483'. [ 400.841018][T14963] pim6reg: entered allmulticast mode [ 400.849546][T14961] netlink: 'syz.3.2486': attribute type 3 has an invalid length. [ 400.860926][T14963] pim6reg: left allmulticast mode [ 400.908375][T14966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2489'. [ 400.954951][T14971] netlink: 'syz.2.2490': attribute type 10 has an invalid length. [ 401.005540][T14966] team0 (unregistering): Port device team_slave_0 removed [ 401.008143][T14975] netlink: 'syz.2.2490': attribute type 10 has an invalid length. [ 401.038406][T14966] team0 (unregistering): Port device team_slave_1 removed [ 401.096731][T14971] dummy0: left promiscuous mode [ 401.127373][T14971] team0: Port device dummy0 added [ 401.137048][T14986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2493'. [ 401.163866][T14975] team0: Port device dummy0 removed [ 401.195189][T14965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.205226][T14988] syzkaller0: entered promiscuous mode [ 401.219006][T14988] syzkaller0: entered allmulticast mode [ 401.437556][T14997] syzkaller0: entered promiscuous mode [ 401.443355][T14997] syzkaller0: entered allmulticast mode [ 401.546656][T15003] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2498'. [ 401.648579][T15008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2501'. [ 401.686007][T15008] 8021q: adding VLAN 0 to HW filter on device bond8 [ 401.921320][T15024] netlink: 580 bytes leftover after parsing attributes in process `syz.4.2506'. [ 401.935547][T15022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2505'. [ 401.998700][T15022] netlink: 56751 bytes leftover after parsing attributes in process `syz.1.2505'. [ 402.129649][T15039] netlink: 'syz.2.2511': attribute type 1 has an invalid length. [ 402.138999][T15039] netlink: 'syz.2.2511': attribute type 4 has an invalid length. [ 402.147509][T15039] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2511'. [ 402.359926][T15048] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 402.381197][T15048] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 402.418231][T15048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2513'. [ 402.903537][T15069] vlan2: entered promiscuous mode [ 402.929423][T15069] geneve1: entered promiscuous mode [ 402.942202][T15069] vlan2: entered allmulticast mode [ 402.953662][T15069] geneve1: entered allmulticast mode [ 402.962117][T15074] veth1_to_bond: entered allmulticast mode [ 403.205338][T15074] veth1_to_bond: left allmulticast mode [ 403.239777][T15092] netlink: 'syz.3.2525': attribute type 39 has an invalid length. [ 403.407936][T15096] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 403.616709][T15108] syzkaller0: entered promiscuous mode [ 403.649384][T15108] syzkaller0: entered allmulticast mode [ 404.010359][T15134] lo speed is unknown, defaulting to 1000 [ 404.021682][T15134] virt_wifi0 speed is unknown, defaulting to 1000 [ 404.808666][ T29] audit: type=1804 audit(1785685007.353:9): pid=15169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2545" name="/newroot/516/cgroup.controllers" dev="tmpfs" ino=2658 res=1 errno=0 [ 404.890540][ T29] audit: type=1800 audit(1785685007.353:10): pid=15169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2545" name="cgroup.controllers" dev="tmpfs" ino=2658 res=0 errno=0 [ 405.007896][T15176] netlink: Conntrack attr has 12 unknown bytes [ 405.014570][T15176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.169959][T15181] netlink: 'syz.1.2551': attribute type 4 has an invalid length. [ 405.204296][T15181] netlink: 'syz.1.2551': attribute type 2 has an invalid length. [ 405.847324][T15213] __nla_validate_parse: 9 callbacks suppressed [ 405.847344][T15213] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2562'. [ 406.380395][T15242] netlink: 280 bytes leftover after parsing attributes in process `syz.0.2569'. [ 406.471060][T15252] netlink: 212936 bytes leftover after parsing attributes in process `syz.0.2569'. [ 406.490424][ T5626] block nbd0: Receive control failed (result -107) [ 406.497421][T15252] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 406.499414][T15250] block nbd0: reconnected socket [ 406.667809][T15256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2572'. [ 406.700954][T15264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2575'. [ 406.881313][T15277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2579'. [ 406.921150][T15281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2579'. [ 407.056981][T15289] netlink: 'syz.3.2580': attribute type 12 has an invalid length. [ 407.073862][T15289] [ 407.076243][T15289] ====================================================== [ 407.083271][T15289] WARNING: possible circular locking dependency detected [ 407.090311][T15289] syzkaller #0 Not tainted [ 407.094739][T15289] ------------------------------------------------------ [ 407.101774][T15289] syz.3.2580/15289 is trying to acquire lock: [ 407.107853][T15289] ffffffff8ec848e0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x15b/0x650 [ 407.117031][T15289] [ 407.117031][T15289] but task is already holding lock: [ 407.124409][T15289] ffff8880319cd038 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 407.133914][T15289] [ 407.133914][T15289] which lock already depends on the new lock. [ 407.133914][T15289] [ 407.144330][T15289] [ 407.144330][T15289] the existing dependency chain (in reverse order) is: [ 407.153352][T15289] [ 407.153352][T15289] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 407.160935][T15289] __might_fault+0xcb/0x130 [ 407.165978][T15289] _copy_from_iter+0x100/0x1660 [ 407.171395][T15289] tcp_sendmsg_locked+0x2620/0x55c0 [ 407.177138][T15289] tcp_sendmsg+0x2f/0x50 [ 407.181923][T15289] sock_sendmsg_nosec+0x10e/0x180 [ 407.187496][T15289] sock_write_iter+0x2de/0x3e0 [ 407.192803][T15289] vfs_write+0x612/0xba0 [ 407.197603][T15289] ksys_write+0x150/0x270 [ 407.202467][T15289] do_syscall_64+0x174/0x580 [ 407.207603][T15289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.214125][T15289] [ 407.214125][T15289] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 407.221793][T15289] lock_sock_nested+0x41/0x100 [ 407.227102][T15289] inet_shutdown+0x6a/0x390 [ 407.232139][T15289] nbd_mark_nsock_dead+0x2cb/0x550 [ 407.237799][T15289] recv_work+0x1cee/0x1e10 [ 407.242754][T15289] process_scheduled_works+0xa8e/0x14e0 [ 407.248841][T15289] worker_thread+0xa47/0xfb0 [ 407.253969][T15289] kthread+0x388/0x470 [ 407.258581][T15289] ret_from_fork+0x514/0xb70 [ 407.263720][T15289] ret_from_fork_asm+0x1a/0x30 [ 407.269019][T15289] [ 407.269019][T15289] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 407.276687][T15289] __mutex_lock+0x19d/0x1550 [ 407.281821][T15289] nbd_queue_rq+0x373/0x1150 [ 407.286971][T15289] blk_mq_dispatch_rq_list+0x499/0x1990 [ 407.293065][T15289] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 407.299940][T15289] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 407.306491][T15289] blk_mq_run_work_fn+0x16c/0x300 [ 407.312062][T15289] process_scheduled_works+0xa8e/0x14e0 [ 407.318149][T15289] worker_thread+0xa47/0xfb0 [ 407.323297][T15289] kthread+0x388/0x470 [ 407.327914][T15289] ret_from_fork+0x514/0xb70 [ 407.333047][T15289] ret_from_fork_asm+0x1a/0x30 [ 407.338433][T15289] [ 407.338433][T15289] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 407.345659][T15289] __mutex_lock+0x19d/0x1550 [ 407.350792][T15289] nbd_queue_rq+0xc1/0x1150 [ 407.355834][T15289] blk_mq_dispatch_rq_list+0x499/0x1990 [ 407.361928][T15289] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 407.368804][T15289] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 407.375330][T15289] blk_mq_run_work_fn+0x16c/0x300 [ 407.380916][T15289] process_scheduled_works+0xa8e/0x14e0 [ 407.387004][T15289] worker_thread+0xa47/0xfb0 [ 407.392134][T15289] kthread+0x388/0x470 [ 407.396764][T15289] ret_from_fork+0x514/0xb70 [ 407.401917][T15289] ret_from_fork_asm+0x1a/0x30 [ 407.407225][T15289] [ 407.407225][T15289] -> #3 (set->srcu){.+.+}-{0:0}: [ 407.414373][T15289] __synchronize_srcu+0xc9/0x2f0 [ 407.419965][T15289] elevator_switch+0x1e8/0x7b0 [ 407.425274][T15289] elevator_change+0x2fa/0x480 [ 407.430589][T15289] elevator_set_default+0x375/0x440 [ 407.436336][T15289] blk_register_queue+0x3f3/0x4e0 [ 407.441906][T15289] __add_disk+0x6cb/0xe30 [ 407.446771][T15289] add_disk_fwnode+0x100/0x3a0 [ 407.452092][T15289] nbd_dev_add+0x733/0xb60 [ 407.457050][T15289] nbd_init+0x15f/0x1e0 [ 407.461751][T15289] do_one_initcall+0x250/0x870 [ 407.467064][T15289] do_initcall_level+0x10a/0x1a0 [ 407.472535][T15289] do_initcalls+0x59/0xa0 [ 407.477396][T15289] kernel_init_freeable+0x29d/0x3e0 [ 407.483140][T15289] kernel_init+0x1d/0x1d0 [ 407.488017][T15289] ret_from_fork+0x514/0xb70 [ 407.493153][T15289] ret_from_fork_asm+0x1a/0x30 [ 407.498450][T15289] [ 407.498450][T15289] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 407.506290][T15289] __mutex_lock+0x19d/0x1550 [ 407.511425][T15289] elevator_change+0x1af/0x480 [ 407.516736][T15289] elevator_set_none+0xb5/0x140 [ 407.522132][T15289] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 407.528476][T15289] nbd_start_device+0x189/0xb30 [ 407.533882][T15289] nbd_genl_connect+0x1597/0x1c10 [ 407.539597][T15289] genl_family_rcv_msg_doit+0x233/0x340 [ 407.545707][T15289] genl_rcv_msg+0x614/0x7a0 [ 407.550766][T15289] netlink_rcv_skb+0x226/0x4a0 [ 407.556099][T15289] genl_rcv+0x28/0x40 [ 407.560629][T15289] netlink_unicast+0x7bb/0x940 [ 407.565924][T15289] netlink_sendmsg+0x813/0xb40 [ 407.571225][T15289] sock_sendmsg_nosec+0x13a/0x180 [ 407.576798][T15289] ____sys_sendmsg+0x54e/0x850 [ 407.582106][T15289] ___sys_sendmsg+0x2a5/0x360 [ 407.587319][T15289] __x64_sys_sendmsg+0x1b1/0x290 [ 407.592886][T15289] do_syscall_64+0x174/0x580 [ 407.598016][T15289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.604453][T15289] [ 407.604453][T15289] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 407.613086][T15289] blk_alloc_queue+0x544/0x690 [ 407.618416][T15289] __blk_mq_alloc_disk+0x194/0x390 [ 407.624069][T15289] nbd_dev_add+0x494/0xb60 [ 407.629034][T15289] nbd_init+0x15f/0x1e0 [ 407.633731][T15289] do_one_initcall+0x250/0x870 [ 407.639039][T15289] do_initcall_level+0x10a/0x1a0 [ 407.644529][T15289] do_initcalls+0x59/0xa0 [ 407.649480][T15289] kernel_init_freeable+0x29d/0x3e0 [ 407.655224][T15289] kernel_init+0x1d/0x1d0 [ 407.660109][T15289] ret_from_fork+0x514/0xb70 [ 407.665264][T15289] ret_from_fork_asm+0x1a/0x30 [ 407.670579][T15289] [ 407.670579][T15289] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 407.677834][T15289] __lock_acquire+0x1520/0x2cf0 [ 407.683237][T15289] lock_acquire+0x106/0x350 [ 407.688281][T15289] fs_reclaim_acquire+0x71/0x100 [ 407.693757][T15289] prepare_alloc_pages+0x15b/0x650 [ 407.699486][T15289] __alloc_frozen_pages_noprof+0x12f/0x380 [ 407.705844][T15289] alloc_pages_mpol+0x212/0x380 [ 407.711285][T15289] alloc_pages_noprof+0xac/0x2a0 [ 407.716765][T15289] __pmd_alloc+0x3a/0x5c0 [ 407.721637][T15289] handle_mm_fault+0xe20/0x3080 [ 407.727033][T15289] do_user_addr_fault+0x744/0x1340 [ 407.732705][T15289] exc_page_fault+0x6a/0xc0 [ 407.737755][T15289] asm_exc_page_fault+0x26/0x30 [ 407.743176][T15289] rep_movs_alternative+0x30/0xa0 [ 407.748758][T15289] _copy_from_user+0x7a/0xb0 [ 407.753888][T15289] dev_set_hwtstamp+0x17a/0x660 [ 407.759307][T15289] dev_ioctl+0x7b4/0x1150 [ 407.764189][T15289] sock_do_ioctl+0x23e/0x320 [ 407.769371][T15289] sock_ioctl+0x57a/0x7e0 [ 407.774249][T15289] __se_sys_ioctl+0xfc/0x170 [ 407.779392][T15289] do_syscall_64+0x174/0x580 [ 407.784526][T15289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.790959][T15289] [ 407.790959][T15289] other info that might help us debug this: [ 407.790959][T15289] [ 407.801203][T15289] Chain exists of: [ 407.801203][T15289] fs_reclaim --> sk_lock-AF_INET --> &mm->mmap_lock [ 407.801203][T15289] [ 407.813763][T15289] Possible unsafe locking scenario: [ 407.813763][T15289] [ 407.821237][T15289] CPU0 CPU1 [ 407.826629][T15289] ---- ---- [ 407.832022][T15289] rlock(&mm->mmap_lock); [ 407.836496][T15289] lock(sk_lock-AF_INET); [ 407.843461][T15289] lock(&mm->mmap_lock); [ 407.850332][T15289] lock(fs_reclaim); [ 407.854335][T15289] [ 407.854335][T15289] *** DEADLOCK *** [ 407.854335][T15289] [ 407.862490][T15289] 2 locks held by syz.3.2580/15289: [ 407.867700][T15289] #0: ffffffff9002dac0 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 407.876519][T15289] #1: ffff8880319cd038 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 407.886465][T15289] [ 407.886465][T15289] stack backtrace: [ 407.892387][T15289] CPU: 0 UID: 0 PID: 15289 Comm: syz.3.2580 Not tainted syzkaller #0 PREEMPT(full) [ 407.892413][T15289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 407.892437][T15289] Call Trace: [ 407.892446][T15289] [ 407.892455][T15289] dump_stack_lvl+0xe8/0x150 [ 407.892483][T15289] print_circular_bug+0x2e1/0x300 [ 407.892503][T15289] check_noncircular+0x12e/0x150 [ 407.892523][T15289] __lock_acquire+0x1520/0x2cf0 [ 407.892551][T15289] ? is_bpf_text_address+0x26/0x2b0 [ 407.892583][T15289] ? prepare_alloc_pages+0x15b/0x650 [ 407.892607][T15289] lock_acquire+0x106/0x350 [ 407.892630][T15289] ? prepare_alloc_pages+0x15b/0x650 [ 407.892660][T15289] fs_reclaim_acquire+0x71/0x100 [ 407.892681][T15289] ? prepare_alloc_pages+0x15b/0x650 [ 407.892704][T15289] prepare_alloc_pages+0x15b/0x650 [ 407.892731][T15289] __alloc_frozen_pages_noprof+0x12f/0x380 [ 407.892759][T15289] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 407.892786][T15289] ? __pfx_policy_nodemask+0x10/0x10 [ 407.892814][T15289] ? __pfx___css_rstat_updated+0x10/0x10 [ 407.892837][T15289] ? __thp_vma_allowable_orders+0x2c2/0xb60 [ 407.892863][T15289] alloc_pages_mpol+0x212/0x380 [ 407.892891][T15289] alloc_pages_noprof+0xac/0x2a0 [ 407.892908][T15289] __pmd_alloc+0x3a/0x5c0 [ 407.892928][T15289] handle_mm_fault+0xe20/0x3080 [ 407.892953][T15289] ? handle_mm_fault+0xec/0x3080 [ 407.892975][T15289] ? __pfx_handle_mm_fault+0x10/0x10 [ 407.892999][T15289] ? __lock_acquire+0x683/0x2cf0 [ 407.893025][T15289] ? lock_mm_and_find_vma+0xa7/0x340 [ 407.893048][T15289] do_user_addr_fault+0x744/0x1340 [ 407.893081][T15289] exc_page_fault+0x6a/0xc0 [ 407.893102][T15289] asm_exc_page_fault+0x26/0x30 [ 407.893131][T15289] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 407.893158][T15289] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 63 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 407.893173][T15289] RSP: 0018:ffffc9000395fa78 EFLAGS: 00050202 [ 407.893188][T15289] RAX: 00007ffffffff001 RBX: 000000000000000c RCX: 000000000000000c [ 407.893199][T15289] RDX: 0000000000000001 RSI: 000000110c9e0000 RDI: ffffc9000395fbf0 [ 407.893210][T15289] RBP: ffffc9000395fc68 R08: 0000000000000003 R09: 0000000000000004 [ 407.893221][T15289] R10: dffffc0000000000 R11: fffff5200072bf7f R12: ffff8880775d0000 [ 407.893240][T15289] R13: ffffc9000395fd10 R14: ffffc9000395fbf0 R15: 000000110c9e0000 [ 407.893260][T15289] _copy_from_user+0x7a/0xb0 [ 407.893276][T15289] dev_set_hwtstamp+0x17a/0x660 [ 407.893296][T15289] ? __pfx_dev_set_hwtstamp+0x10/0x10 [ 407.893320][T15289] ? __dev_get_by_name+0xe5/0x130 [ 407.893342][T15289] ? dev_ifsioc+0x32f/0x1360 [ 407.893358][T15289] ? dev_load+0x21/0x1f0 [ 407.893373][T15289] dev_ioctl+0x7b4/0x1150 [ 407.893389][T15289] sock_do_ioctl+0x23e/0x320 [ 407.893413][T15289] ? __pfx_sock_do_ioctl+0x10/0x10 [ 407.893434][T15289] ? hook_file_ioctl+0x1f0/0x5f0 [ 407.893457][T15289] sock_ioctl+0x57a/0x7e0 [ 407.893479][T15289] ? __pfx_sock_ioctl+0x10/0x10 [ 407.893500][T15289] ? __fget_files+0x2a/0x420 [ 407.893522][T15289] ? __fget_files+0x3a2/0x420 [ 407.893544][T15289] ? __fget_files+0x2a/0x420 [ 407.893567][T15289] ? bpf_lsm_file_ioctl+0x9/0x20 [ 407.893588][T15289] ? __pfx_sock_ioctl+0x10/0x10 [ 407.893608][T15289] __se_sys_ioctl+0xfc/0x170 [ 407.893625][T15289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.893642][T15289] do_syscall_64+0x174/0x580 [ 407.893662][T15289] ? trace_irq_disable+0x3b/0x140 [ 407.893683][T15289] ? clear_bhb_loop+0x40/0x90 [ 407.893702][T15289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.893719][T15289] RIP: 0033:0x7efd50b9e019 [ 407.893754][T15289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.893768][T15289] RSP: 002b:00007efd519e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 407.893785][T15289] RAX: ffffffffffffffda RBX: 00007efd50e26090 RCX: 00007efd50b9e019 [ 407.893797][T15289] RDX: 0000200000000540 RSI: 00000000000089b0 RDI: 0000000000000004 [ 407.893808][T15289] RBP: 00007efd50c3500c R08: 0000000000000000 R09: 0000000000000000 [ 407.893819][T15289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.893830][T15289] R13: 00007efd50e26128 R14: 00007efd50e26090 R15: 00007ffc4cb0c118 [ 407.893849][T15289] [ 408.350424][T15290] x_tables: unsorted entry at hook 3 [ 408.506535][T15276] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512