last executing test programs: 3.823610941s ago: executing program 1 (id=8664): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYRESHEX=r0], 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004081) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000480)={0x0, 0x4, 0xf9, 0x9, 0x0, 0x0, 0xe6, 0x45, 0x0, 0xfd, 0x0, 0x20}, 0xe) shutdown(r1, 0x1) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) r4 = socket$packet(0x11, 0x3, 0x300) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x55, 0x0, 0x0, &(0x7f00000002c0)=[@cred, @cred]}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={0x0}, 0x1, 0x0, 0x0, 0x40818}, 0x40000d0) sendmmsg$inet(r7, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00', 0x91}}, [0x1fe, 0x100, 0x9b3, 0x8, 0x8007, 0x0, 0x8, 0xc, 0x80008, 0x10001, 0x2, 0xb, 0x5c4, 0x7, 0x8000000000000001]}, &(0x7f0000000300)=0x100) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r9, 0x11b, 0x6, &(0x7f0000000700)=0x3024, 0x4) ioctl$sock_inet_SIOCSIFNETMASK(r9, 0x891c, 0x0) sendmsg$xdp(r9, &(0x7f0000000380)={&(0x7f0000000180)={0x2c, 0x3, 0x0, 0xf}, 0x10, &(0x7f0000000800)=[{&(0x7f00000001c0)}, {&(0x7f0000000200)="17cec3c0c6da3472ee5701271a750313bc66", 0x12}, {&(0x7f0000000400)}, {&(0x7f0000000500)="7feeaf8962c97d03ea75fb0a510f948732040dc6dfa2da59ddaeff71994277b5f872e5256c4c8b49139c7af210c5db83f52d8b36c49bb41f60c82dd4dc78ae1248c4e51ca69f323061817445ddc5baa4c0139f4cdbb56eb616dad8057d46dab4f29a8465dbb66ae5d011e910ea25dbfafeca0e2f8dade2b85aff3f95f2113d5615a7cfdfd194adbe42047d58027091caffc0598471127aea0ff78f6afdc38f0627a732b7a376174c3cdf32f6575d16b261", 0xb1}, {&(0x7f00000005c0)="6e6013b5c108f9d3bc22c987ee038edfd7edb6316ab6d69b7b5f11f4fbfae50540a024c3e1c3c174f8d0a1dc531a5069f069a0cd35948f55ebb300d2d68a3d9524c914fcc594a6c3b35a2d3f5a92f288f372b851898ee103e3e6aee1e593ea9dbfec105979634133028c690ca6368a7a1d", 0x71}, {&(0x7f0000000640)="84d50eb96e38467581376e10020db379ed7a834da9bf5f3615070d36db14877ba4fb6dbcf86a1a75148df208479b12db9a6fd2091bd72a902f", 0x39}], 0x6, 0x0, 0x0, 0x200008c0}, 0x24004000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={r8, 0xfffffda5, &(0x7f00000006c0)}, &(0x7f0000000440)=0x10) syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd30800180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00024001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002000200003ab1e5f7f151"], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={r10, 0x9}, &(0x7f0000000080)=0x8) setsockopt$sock_attach_bpf(r4, 0x107, 0x14, &(0x7f0000000000)=r3, 0x4) 2.75581018s ago: executing program 1 (id=8675): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b70400008000000085000000aa00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd8f}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='veth1_to_bond\x00') 1.990983211s ago: executing program 1 (id=8681): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) (async) 1.869766427s ago: executing program 1 (id=8682): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) (async) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r1, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) (async) sendto$inet(r1, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) (async) write(r1, &(0x7f0000000600)="706728c2e94a6344d2a39a296041c2b39895975882e2daf1b2ac7a69040dfb7eaad18342e45e25039e9ecbc0274d5a190ef2bc6bb4faefa8bdfb6154fcda330a9d7f6a8780cc5c1564af7749e14aeb460c226d8eb6e56445f9c2c728c3792e6fcd3ceaefe119b8d8788ca7136efae10f29f45f45b2928a72c5b0421ec5f99e07e3c1df2ff6b4d6a2a26fbc688d45ca8d7b0259844956a9829750fde7ff093728c9a3fbe15a4408cb88c0d0c89f854ab7fea5daf8797dc23b52d34de4bd0a8eb2147daf594dd30b6f032a6c33a8548f902f79bb12ee80165f6e71ed6d53cf2eb2dcd45166b4420671a9ddd4054dd19a95c1942faff10ef1760b860692668b2fac1c6b3fa7b0fb441d3df56f4113ded028c7868bb449fc654c558e36cac2452f0149dfb935d9b226fea3deb257c02ce3a3d4b6c8cf5ad6b2843674a85468eb1d392e6a40c72550e2f99d5b2011779c62a4fdcb2ed2f37babfc48d0daa84f7bc0c2e13b51161a5a3fd05a262026ec5b2370dff711093ca06904e7c0260f448d4916df70de8dfbf6af45aced34706f5db5ea5cc2e34ac421e32e0858b7a6f4b071ee0995160565ac5643ffb37c81b39ec3da6d7b2ef94c2304dffeb890486e10c06c51a27b1520ac6fa7cc871acac5422f22e896d768d50767dcf32937d914cb8cfbd24205670b4909001701f628ccc71d56602e81cc59b57383bf2e05c8a5cb0d6403", 0x201) (async, rerun: 64) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 64) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.727083724s ago: executing program 0 (id=8684): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r3], 0x5c}}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000013000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.726387459s ago: executing program 1 (id=8685): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e00280002802400010020a10700"/96, 0x60) splice(r0, &(0x7f0000000000)=0x5, r0, &(0x7f0000000040)=0x8, 0x0, 0x1) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000440)={{0x3, 0xe, 0xc, 0x267e3e9e, 0x7}, [{0x9, 0x8, 0x2, 0x5}, {0x8, 0x8, 0x6, 0xb9}, {0x7, 0x8, 0x3, 0x8}, {0x3, 0x9b, 0x3, 0x9}]}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="94040000490000042cbd7000fddbdf250a002000", @ANYRES32=r2, @ANYBLOB="40000000080002000000000014000100fe8000000000000000000000000000171400010020010000000000000000000000000001080002000b000000080002000400000014000100fe8000000000000000000000000000bb0800020005000000080002000000000014000100fc020000000000000000000000000001"], 0x94}, 0x1, 0x0, 0x0, 0x24048800}, 0x4000000) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000400)=0x80000001, 0x4) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) read(0xffffffffffffffff, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000240)={'veth0_to_team\x00', 0x4301}) read$alg(r1, &(0x7f0000000180)=""/65, 0x41) 1.495379644s ago: executing program 4 (id=8689): sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x1c}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4c000) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000100)) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x1c}}, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200001000000000000000000000000000a000002090001000500000000000000d7670a77db394cdbb5ee5f71884859da3900fe994ca54fbb698b93b613e89ca0ed14c427bbf56a63f82a6247a62edd5a1c234dbf224a4390d21569ff9bf9a1996f7efb36f50597e9a3ac193d96cf687742a3ccca82b5f868ccffd2413f8198d171af5e892193f7d446dee8556519a4a4b39c200eb458020f1c74c1271d795fc3719fe36db0f75a464618f34faf537ef72e8e138af338ebcdf837f57c3487bda1a8960c7afd95a4c263662a435ac8aaeb646e1044c2fcb19a3eef6ef88344eadea4f90beca30a4f741fbfb49993a46a737019e012f0c3cd7dedb603216ca11e9b3d4cce567eec86633f2f93878e6d7c49b43a6de1225bc499f5eff6378a68cb34"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4c000) (async) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000100)) (async) 1.390257283s ago: executing program 0 (id=8690): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000800001a2460d4fd7486e6826ed286ea3a49d170fb1acc72c6179a7fc4b50c8e42d5659551dc169fdd40481e54af174b1b24ae3c2d41eb93958759bee283f66725b5955cd359e06e6ba12d687aacf696f72e4793d1aef00963e218c1f79a693163b133772a51ee984156342e9243d67c232f6ebeee09dfef9ec4852bd889f10e891cb624cc82f168b85cff72f065d6d0a4a2fa7f03f3e6f14d9daeaa7b7cedee1e218a8cb13f13bae3094a722508d6aa91dfb73aff1ab87a863dc090e14d678b2aadc30bd5f9bac4c87cb2de4af3d0"], 0x17) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x19, &(0x7f0000000300)=@framed={{}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6878}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 1.331384162s ago: executing program 0 (id=8691): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)=':#\x11({[}(\\\x00', 0x80200, &(0x7f0000000040)={@align=0x4, {0x1, 0x8000, 0x8, 0xdfa0}}, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xa}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000140)=0x2a9, 0x4) syz_emit_ethernet(0x5e, &(0x7f0000000180)={@random="a3b7e778bf76", @remote, @val={@val={0x88a8, 0x3, 0x1, 0x3}, {0x8100, 0x1}}, {@canfd={0xd, {{0x0, 0x0, 0x1, 0x1}, 0x9, 0x1, 0x0, 0x0, "50ad5428eabb5295ac81c4e28ff2b3821e69b42cd40c62b5db797adc1d9baad9821f12bdcb6a02011ebcacfbff9ed35d5b12b708e8e3af5d30d72460acfdeb88"}}}}, &(0x7f0000000200)={0x0, 0x2, [0xca2, 0xe2a, 0x5db, 0x276]}) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000240)={r0, 0x2}) r1 = epoll_create(0x29ba) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000280)={0x4}) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0x1e, &(0x7f00000002c0)=0x80, 0x4) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000300), 0x4) read(r1, &(0x7f0000000340)=""/4096, 0x1000) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000001340)={0x0, 0x40}, &(0x7f0000001380)=0x8) r3 = socket(0x23, 0x5, 0x2) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x32}]}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040015}, 0x20000000) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000001500)) setsockopt$inet6_tcp_buf(r3, 0x6, 0x17, &(0x7f0000001540)="cbc1ae8de9075ba0b25403aad01b33ccd0a279f1b24357f067d651966c5dda18a60dcf097c46d624aaf6e490030aabbc623e24cf50d51c8ac711a52f6decbd98a1af87b55005f9b6f211a5b96dda362c81a2190119d14e14a689bb9b9dcaa74624349232e671ca1bdd290fb41c9c0ffe58b0532677c9d467c9c004570bf96f303b3b9acf2d1528a5db48e2915d43006a848fe6638faa0fdd6aabb1b1f2ecd961f756f0f2d0d920ba97a2d0127c471e2a0cb6fed072f7c4839a626c9d21aa5867148c86b554ce8d975ce7fc7da8", 0xcd) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r0) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x4c, r4, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x68}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x4c}}, 0x20000809) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r5, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc4}, 0x0) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f00000018c0), &(0x7f0000001900)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001980)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001a80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)=@deltfilter={0x5c, 0x2d, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0x6}, {0x9, 0xd}, {0xf, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2c, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4800}}]}, @TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x200000c1) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001b00), r5) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x40, r7, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x40}}, 0x44080) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001c40), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000001d40)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x44, r8, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x44}, 0x1, 0x0, 0x0, 0x805}, 0x4000) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=@bloom_filter={0x1e, 0x3, 0x7, 0x2, 0x8400, r0, 0x6, '\x00', r6, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xb, @value=r0}, 0x50) ioctl$NILFS_IOCTL_GET_SUINFO(r9, 0x80186e84, &(0x7f0000001e80)={&(0x7f0000001e00)=[{0x70cf, 0x8, 0x2}, {0x61f8, 0xfffffffe}, {0x9, 0x80, 0x2}, {0x5, 0x8, 0x2}, {0x5, 0x1, 0x1}, {0x8000, 0x375}, {0x7fffffffffffffff, 0xfff, 0x2}], 0x7, 0x10, 0x5, 0x5}) 1.267632817s ago: executing program 4 (id=8692): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000500)={0x4ac, r2, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x39c, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4f, 0x0, "fe6cb89ff4c0883dcf04954b128da1bdef5d65961f44542896642d3cac4555722d308bfd64d5980b3d4e1b7715d6053d0e93dc4be7167f716cf61fffd408283d6df01a4e8bb9424dbde200"}, @NL80211_BAND_60GHZ={0x95, 0x2, "76b82c6694d35d8c71b253ef188fd534f61380b32d352325ef08cc487dc27cae3875e5a4957a8f7faac2fefdd8e2fe816bd7ec0495841accd6fc39f8502c6e2cd2d8e12bf6a6830164a5bc6a19fe64c751e8302682713b9b03f9af84c467de90cf95118295d2649dbe1e14c6fdcf8d48c2b3b48c497d785d7b1b608cf54ab3a74896c214bb95025b583fee9ac2a35a1d12"}, @NL80211_BAND_6GHZ={0x73, 0x3, "529394d99af34d79a52548fe85ad0ac7b399d858c851e33bbc37d1d71c5136f93d3bd086cbc56b4dd4c0bbe9cc5b26a941f5e7418c4874aa67205bfafeed3bc7c603ca8ecedfbb13c92f91acb995bab86100a26e9ff4759174411d4aeb292aaf53e4eecaae14d20757c8ceb29cb5ea"}, @NL80211_BAND_6GHZ={0x93, 0x3, "6066d55c057e97e4321f62b2886021904d2ceaf41dd62e6226efa6c5ee87c768d9ac388c517942490914c7e6413deab92a9d1e37c13af39fba872225c1ee64171a043f0b1f0e90d3612c5f7607eaf12995640c55a150bf5901e67c727481cce3c1a3b8278c16fc368c2be81b8a930f3b69137557a1bc8746dc2441f098863dc30257028fb2b8df00f1bb4bca1464ea"}, @NL80211_BAND_5GHZ={0xd8, 0x1, "d66c86b0739d71db68dbbdd4d648feb7945cfb6dbf3744b58fbd1befeb9e0f3d5647ab339e4426af415c14a4d2200de714953a63ef3a8d975262157752ce4ca4bf4ca873d307dac3b53e9ff96a1ff5f5b1c401ba4b9a204785d44b0697737e9e54b91348234283b9f2187a475fd0740f68c37325f2babd0c92199c301e5532c29c9ddc395bb6c7dfc40c67e6c0591a801a3b03fa322df5e0669c9d6e16bacc689c6059c87a80bd054012f3e1680a0e5110c6ade2074505255a13db5a0d96b6c34b7424a7bfb9d1285bda0ab96a9803692104ec8e"}, @NL80211_BAND_60GHZ={0xcd, 0x2, "4aa63e52f09d72ba91b01cab93de8991e81e6795e02e8dc11ccaf6f018ecd27e8df07184d56893e3d6a674bcaf70d0cf03a1cd9a6b7105fdeef8eb0fa06b8aec9f25b2671793c817f1cdd25cf563c956bbeb7c3361c3f2e29128acfcc04110ce515e587a68a3aa2950cf664a92cc86ec24b9d16fe1d800b52c0be2259a6e9d4f32ed720f443df336720c82ff33f8a04d252e4253ab5076710b4941607e543fbedde69533912ff9351f99ce34afa54e1f6210db85768dbc9b8b170022ba926e93ec22fa8a89ac2cd4d0"}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0x9}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8d06913480e02cbd, 0xe}}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xe8, 0x84, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_LC={0x8, 0x5, 0x5}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x19, 0x1, @random="2d7ba4ed1bb20651e998922f7ca3e3f867450306eb"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3d9}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x400}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0xffff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xb}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9436}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2e1}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}]}]}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x8082}, 0x4a015) 1.266871199s ago: executing program 3 (id=8693): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c00010029bd7000fcdbdf2507000000", @ANYRES32=r1, @ANYBLOB="8000ff0a0a000200aaaaaaaaaa0b00000600050002"], 0x30}, 0x1, 0x0, 0x0, 0x40440c4}, 0x8000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r3, {0x7, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xfffffefb}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x9, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0xa}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="4000000010000504000000000000000000000000d2dd5e1a61b7febf697932c1ea8af4078751239666b3788df486d0bc0f64", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006c6f7770616e0000040002800a000100aaaaaaaaaa000000"], 0x40}}, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000000940)=0x707987cd) recvmsg(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="24000000260029002dbd7000f9ffffff008b001bb1a1ea379d3800000000000000000000425539d3b271ad2b31e885eb64c6041ab3d103976630f304097c3e60d2a6741386f1c1a6b9e2e1689efcb0b9ddc946e812592b0a4f20f2e931acd738f1e5b354173086d91011354f0b42ea326a863e728da4c69d3aec321d505d79e140111214abf15e8b32740fe7f95100c16bd6a025b3d6d38bababe0c2eff1799b386d35212bd6799fd8890d75e6292bf60ab544575b8d21eb0c3929bffa0e"], 0x24}, 0x1, 0x0, 0x0, 0x8c811}, 0x48054) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) write(r5, &(0x7f0000000500)="bc2854", 0x3) 1.265502042s ago: executing program 0 (id=8694): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x4}, @TCA_SAMPLE_RATE, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x4}, {0xc}, {0x6, 0x4}}}]}]}, 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x18, 0x2f, 0x9, 0x70bd28, 0x1, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 1.181021835s ago: executing program 2 (id=8695): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}, 0x20000}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="f9369254c92970a4", 0x8}], 0x1}}], 0x2, 0x40) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x1000000000003e, 0x0, &(0x7f0000e5f000)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg1\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0100001000130780fffffffcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe32000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x1, @mcast2, 0x6}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f0000000180)={0x7, 0xe92}) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000f"], 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x3a) (async) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}, 0x20000}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="f9369254c92970a4", 0x8}], 0x1}}], 0x2, 0x40) (async) socket(0xa, 0x1, 0x0) (async) getsockopt$inet6_buf(r2, 0x29, 0x1000000000003e, 0x0, &(0x7f0000e5f000)) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg1\x00'}) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0100001000130780fffffffcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe32000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x1, @mcast2, 0x6}, 0x1c) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) (async) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f0000000180)={0x7, 0xe92}) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000f"], 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) (async) 1.069190268s ago: executing program 4 (id=8696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_DELRULE={0xac, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x84, 0x7, 0x1, 0x0, "a32a76e52a1824e6462d244bdb11ae5ca74b40188448b085a4c77ee807c260d7955f461350063ced09db5f28dc12596122f26cd785c0f5d6de380fe6ce7914d034224321e15ed9cd8f763ad60cc586b21ac9ca99ac44dfc871df752f0111557445cffe448e7dcea9dffbd7ebeafeec742e9b001ec918625ad1f31a0fda133c6e"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r6) (async) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) (async) write$nci(r8, &(0x7f0000003680)=ANY=[@ANYBLOB="61050309020200d949710000fe9ef4be437760909a49bd2280d234a28e"], 0x10dd) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000680)={r3, &(0x7f0000000580)='wireguard\x00', 0x102, &(0x7f00000005c0)={@_ha_fsid={[0x205e, 0x5000]}, {0x7, 0x1207, 0x6, 0xfffffffffffffff9}}, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x2e96b52e}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x2, 0x0, r8, 0x4086, '\x00', r4, r9, 0x5, 0x3, 0x3}, 0x50) (async) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="94010000", @ANYRES16=r7, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r10 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r11, {0x0, 0xe}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008815}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r11, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x2}, {0x5, 0x3}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x4}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33}, 0x94) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r12, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001d80)="ca", 0x1}], 0x1}, 0x20004014) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a4c000000060a010400000003000000000200000a200004801c0001800a0001006d617463680000000c00028008000100756de109ac4c66fe5279f308e1db569d977a30000000000900020073797a320000000014000000110001000000000000"], 0x74}}, 0x4) (async) close(r0) close(r10) 997.175305ms ago: executing program 0 (id=8697): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'syzkaller1\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x2000800) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000680)={@mcast1, 0x0}, &(0x7f00000006c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000700)={'ip6_vti0\x00', 0x0, 0x29, 0xd8, 0x80, 0x0, 0x5e, @empty, @mcast1, 0x700, 0x20, 0x400, 0xffffffff}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x80, 0x1, 0x7, 0x9, {{0x1a, 0x4, 0x0, 0x1a, 0x68, 0x68, 0x0, 0x6, 0x2f, 0x0, @multicast2, @multicast2, {[@timestamp={0x44, 0x8, 0xfa, 0x0, 0x9, [0x10]}, @cipso={0x86, 0x3f, 0xffffffffffffffff, [{0x7, 0xf, "250118d7f4803feb1941b5a683"}, {0x0, 0xb, "251f745223ed23185a"}, {0x0, 0x10, "6d5304b6a31e08177fcfd782b6bb"}, {0x7, 0xf, "da67a6cd2b19b6da79d223bd7a"}]}, @lsrr={0x83, 0xb, 0xc5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000880)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000980)={'tunl0\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x80, 0x40, 0x9, 0x80000001, {{0x8, 0x4, 0x0, 0x3b, 0x20, 0x66, 0x0, 0x0, 0x2f, 0x0, @private=0xa010102, @remote, {[@timestamp_prespec={0x44, 0xc, 0x34, 0x3, 0x5, [{@rand_addr=0x64010101, 0xe}]}]}}}}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010027bd7000fbdbdf251000000008000300", @ANYRES32=r10, @ANYBLOB="08000600", @ANYRES8, @ANYBLOB="08003a0019edb3e2ffff00002d5654dd1054366cc6b31f4d9687757ef8588d0f6be25942ce92338a063d389215522562e326ad1400dc73ba98fc7dd056c607a76d68b530898c7d81706e85dc5f0edec8af63ec15758621c96beca6b97833278f05410882f03ea1a663a751033a46a8bc35"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a80)={'ip6_vti0\x00', &(0x7f0000000a00)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x8, 0x3, 0x4, @private2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x7, 0x40, 0x4, 0x4}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001700)={&(0x7f00000010c0)=ANY=[@ANYBLOB="20060000", @ANYRES16=0x0, @ANYBLOB="02022bbd7000fddbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="2c02028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004004000000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000080000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r13, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="740102803c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c000400020004ac0000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ffffff7f40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000800000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004003a7affff08000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="b400028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000e0000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000110", @ANYRES32=r6, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="f40002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400e100000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004005c00000008000600", @ANYRES32=r13, @ANYBLOB], 0x620}, 0x1, 0x0, 0x0, 0x4008090}, 0x4004095) r14 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r14, 0x6, 0x21, &(0x7f0000001080)="3a53e6ff19acc27dfcd05fbc5da0cca1", 0x20) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05002abd7000000000002e00000008000300", @ANYRES32=r1, @ANYBLOB="0a003400010101010101000006006600f8880000040067000c00490005ac0f0006ac0f00"], 0x40}, 0x1, 0x0, 0x0, 0x14004040}, 0x810) socket(0xf, 0x6, 0xd139) r15 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4012001c}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r15, 0x300, 0x70b52b, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '*^}@^]:^\'*'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc8d0}, 0x4048001) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r17, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r17, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r16, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRES16=r17], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x20000844) 956.191147ms ago: executing program 2 (id=8698): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr, @broadcast}, &(0x7f00000000c0)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x2f, 0x10, 0x2, 0xffffffff, 0x5c, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x80, 0x408, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x88372f1fd120639e, 0xf, 0x4, 0xfffffffa, 0x40, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7f28, 0x20, 0x80000001, 0x61}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000380)={@private0, 0x0}, &(0x7f00000003c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x10, 0x7, 0x2, 0x4, {{0xb, 0x4, 0x3, 0x2, 0x2c, 0x66, 0x0, 0x9, 0x2f, 0x0, @multicast1, @rand_addr=0x64010101, {[@lsrr={0x83, 0x17, 0x36, [@broadcast, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x0, 0xa1, &(0x7f0000000600)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xcf, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x19c, r1, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x80}, 0x81) r12 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r12, 0x89e1, &(0x7f0000000a80)={@dev={0xac, 0x14, 0x14, 0x44}, @remote}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000bc0)={0x1, &(0x7f0000000ac0)="4e2b9ea02a8cc5cfcbc6fa5aedea78f215114ad54da4afc5ff505831508a1d875b965a22e20267f20ddfb8f6e6355530377580b555382f29235cbe2cd1c0e4e5abb3b5b1c9481753bc2d45d88c222299ac06ea16ff7f2b82450e610e76ead6e0fbbc1a1fd3f60a3fec4f9caed61da59b0fb87f4fd2d681845addf129ab21028a0082a1b34d7d49c81e61971077d46666d0733742722ff4324d7760e9ba", &(0x7f0000000b80)=@tcp=r13, 0x4}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000c40)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000cc0)={'tunl0\x00', &(0x7f0000000c80)={'syztnl2\x00', r8, 0x20, 0x20, 0x3ff, 0x1, {{0x7, 0x4, 0x0, 0x8, 0x1c, 0x67, 0x0, 0x3, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@timestamp={0x44, 0x8, 0x57, 0x0, 0x7, [0x26a]}]}}}}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0xac, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r15}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000001) r16 = socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000e40), r0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r17, 0x84, 0x0, &(0x7f0000000e80)={0x0, 0x0, 0x800, 0xb}, 0x10) r18 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000ec0)={0x28, 0x0, 0x2711}, 0x10, 0x100800) ioctl$sock_SIOCGIFCONF(r18, 0x8912, &(0x7f0000001000)=@buf={0xdc, &(0x7f0000000f00)="91950b079f627ba2270f0dba266564519507092590b5029391c2711dcdece9a871d0f0ff240aa58cee3e6b7c4148b4e1658dfc95e72c800535d05c8ccdf93567f3cbdd66aa0e168155ad79bd87c000ab653e36cf516547c1683587a0f3ded1248c6b00f9e80f4f42aa16c88dab87b7a574dc9319c9521bc830ea480a9bb3786bfe2a8f78e045a5161858151298f0c6e022f8a3fe8e84a4a5cbe04d6a6b5b581c0d594a4c30cd6632adf67ee3051cfd95f042d86c383cabbf58a4d9176c2e14d772aea59df33735c52171eb1a6197396522f9e2043edd4bbe4b72b0ca"}) ioctl$XFS_IOC_COMMIT_RANGE(r16, 0x40585883, &(0x7f0000001040)={r13, 0x0, 0x8, 0x8866, 0x80, 0x4, [0x7, 0x6, 0x4, 0x8, 0x3da, 0x88f]}) r19 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$sock_linger(r19, 0x1, 0xd, &(0x7f00000010c0), &(0x7f0000001100)=0x8) getpeername(r16, &(0x7f0000001140)=@xdp, &(0x7f00000011c0)=0x80) 872.887726ms ago: executing program 3 (id=8699): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)='\b\x00', 0x2}, {&(0x7f0000000200)="000000001824", 0x6}], 0x2}, 0x240088d4) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private0, 0x9, 0x1, 0xff, 0x3, 0x7}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000019280)=ANY=[], 0x1c}}, 0x4000800) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="94000000", @ANYRES16=0x0, @ANYBLOB="010025bd7000fedbdf253700000008000300", @ANYRES32=r3, @ANYBLOB="08005700ff070000050019010b0000000800a1000800000008e227000900000008002700000000000800a000030000000800a0000700000005001801180000000500190108000000050018013200000008002600f816000008009f0004000000080026006c0900000800a100050000000800a10080000000"], 0x94}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000080) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe94, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5, 0x8}, {}, {0x0, 0x1}, {}, {}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x3, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x80000000, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0xfffffffd, 0x0, 0x0, 0x0, 0xa92}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="00082cbd7000fcdbdf250500000014002000ff02000000000000000000000000000108001800ac1414bb06000e000300000008000a000000000006001c0020000000"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x3c56009759ed419b) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='memory.events.local\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000500), 0x3) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "8ed4dc99a64a8101", "6cd445b8e3540d4cd1e3687229a125f34904fbe8b4759d178a2651c370f3602a", "b34b79f3", "355f7a643ff4ea74"}, 0x38) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) 703.832286ms ago: executing program 1 (id=8700): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000280)="14dfdbe1c98ac804e501160063d25a80648c5691", 0x14}], 0x1}, 0x44000) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10020) 702.74084ms ago: executing program 2 (id=8701): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x40}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a3200000000e4040000060a010400000000000000000500000008000b40000000000900010073797a300000000008000940000000020c0005800800014000000000c4000740ab487b1b512f33a8dbd67a8b35f2405127f309901ea13e31d5810f85eae8f528c938c24abb1b1abbda2e7fa6e0758629bb09ed64a8ba5b2ef3c3591fd06d7e10d93c0857ecac854ac51ad69639d98adb2c1464e444cc1a6a2e7ee244622433b51f58606b063f4938101a7e764c957eba2e913b2ac10435471fa769740a1275cb467e5264b71bc8727fc12e9aba46e4a8abf3dda91e0da608d6a0"], 0x558}}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x3c, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000001780)={0x1, 'ip6tnl0\x00', {}, 0x8}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x448, 0xffffffff, 0x210, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x84, 0x0, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e23], [0x4e21, 0x4e24], [0x7f, 0x8e, 0x7, 0x0, 0x8, 0x2d, 0x9, 0x7, 0x60e91136, 0x9, 0x1ff, 0xfffffffe, 0x9, 0x4, 0xa, 0x95, 0x20000, 0x2f3c0e19, 0x3, 0x7, 0x4, 0x5, 0x200, 0xffffffff, 0xe, 0x7f, 0x2, 0x0, 0x1, 0x0, 0x2, 0x7, 0x6, 0x7, 0x3, 0x40, 0x9, 0x9, 0x7, 0x9, 0x9, 0x730, 0x5, 0x3, 0x10, 0x101, 0x1, 0x800, 0x80, 0x9, 0x7fffffff, 0x0, 0x3, 0x6, 0x1, 0x4, 0xffff, 0x6, 0x5, 0x3, 0xffffffb0, 0x9, 0x1, 0x3], 0x4, [{0x1, 0x4}, {0x1, 0x6, 0x9}, {0x4, 0x4}, {0x40, 0xf9, 0x8}], 0x2, 0x3}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x3, [0x24, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x31, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x7}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) 643.053776ms ago: executing program 4 (id=8702): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) r3 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0xa9fe0000}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='r', 0x1}], 0x1}, 0xe0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000041000701fefeffff00000000017c0000040042801400018006000600800a000008001c00", @ANYRES32=r4, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f0000000280)='connect aa:aa:aa:aa:aa:10 2', 0x1b) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000004c0)={r8, 0x3, 0x6}, 0x10) close(0x3) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r5, @ANYRES32=r2], 0x20}}, 0x48040) 583.568459ms ago: executing program 3 (id=8703): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x1, 0x4, 0x0, 0x1, 0x6}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 335.171447ms ago: executing program 3 (id=8704): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x80002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYRES32=r4], 0xa) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r6, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) close(r5) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x23, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x80) 330.14465ms ago: executing program 2 (id=8705): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x4004) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000340)={{r0, &(0x7f0000000140)=')@([]\x00', 0x2, &(0x7f0000000180)={@_ha_fsid={[0x1, 0x8]}, {0x3, 0x6, 0x8, 0x3}}, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x1305}, {[0x400, 0x0, 0x2, 0x8]}, 0x46, 0xd2, &(0x7f0000000240)=""/210}) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f00000003c0)={r0}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x9, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", "", ""]}, 0x30}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001e80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001e40)={&(0x7f0000000700)={0x1728, r1, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0xf8, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x5, @empty, 0x958}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xe}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d662fb3d07294019a90ffda82315a266a9e306f49d827c101c1f427e14f12bb7"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PEERS={0xddc, 0x8, 0x0, 0x1, [{0x740, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x548, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x8}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xe5}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7ff}, @WGPEER_A_ALLOWEDIPS={0x1c0, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}]}]}, {0x1e8, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fffd7087c77956fb175a92516d438319aae758fb25b5677973f9f50478a3a5f7"}, @WGPEER_A_ALLOWEDIPS={0x18c, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xb}}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x5, @private0, 0x2}}]}, {0x184, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x148, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x54, @empty}}]}, {0x32c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x2d0, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @remote}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x7d8, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xf8, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x100}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}}, @WGPEER_A_ALLOWEDIPS={0x80, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @private=0xa010101}}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @broadcast}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0x61c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_ALLOWEDIPS={0x3e8, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}]}, {0x4}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8, @remote, 0x6}}, @WGPEER_A_ALLOWEDIPS={0x204, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9c42a3cf9fbc8764128f49e5e19c2fc1751d16d904edc2eeaac190802320dd0b"}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1728}, 0x1, 0x0, 0x0, 0x4040085}, 0xc33d0f9b7d209c9b) r6 = accept$phonet_pipe(r2, &(0x7f0000001ec0), &(0x7f0000001f00)=0x10) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000001f40), 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000001f80)={0x3, 'netdevsim0\x00', {}, 0x4}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002000), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000020c0)={'ip6_vti0\x00', &(0x7f0000002040)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x1, 0x5ba, 0x50, @empty, @remote, 0x18, 0x8, 0xfffffff4, 0xf522}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000002180)={'syztnl2\x00', &(0x7f0000002100)={'ip6gre0\x00', 0x0, 0x4, 0xa9, 0x9, 0x5, 0x20, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x78a0, 0x1, 0x4, 0xbe9}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000002280)={'syztnl1\x00', &(0x7f00000021c0)={'erspan0\x00', 0x0, 0x21, 0x80, 0x7, 0x3b90, {{0x23, 0x4, 0x2, 0x5, 0x8c, 0x66, 0x0, 0xb7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @local, {[@rr={0x7, 0x7, 0x9f, [@empty]}, @timestamp_prespec={0x44, 0x14, 0xa3, 0x3, 0xe, [{@local, 0x2}, {@multicast1, 0x5}]}, @lsrr={0x83, 0xf, 0x32, [@rand_addr=0x64010100, @private=0xa010101, @empty]}, @generic={0xd4, 0xe, "0ed9e6b5d37659748d8b219a"}, @ssrr={0x89, 0xb, 0xb9, [@empty, @broadcast]}, @timestamp={0x44, 0x10, 0x5b, 0x0, 0xe, [0x0, 0x10, 0xfffffff8]}, @ssrr={0x89, 0x1f, 0x4e, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @empty, @local, @private=0xa010102, @loopback, @multicast1]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f00000023c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002380)={&(0x7f00000022c0)={0xbc, r8, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0xbc}}, 0x10) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(r12, 0x5421, &(0x7f0000002400)=0x800) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000002440)) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000002480)='wg2\x00', 0x4) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f00000024c0), &(0x7f0000002500)=0x4) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000002540)=0xffffffffffffffff) ioctl$NILFS_IOCTL_SET_SUINFO(r4, 0x40186e8d, &(0x7f0000002680)={&(0x7f0000002580)=[{0x5, 0x0, 0x0, {0x45fd, 0xb, 0x2}}, {0x4, 0x2, 0x0, {0x101, 0xfffffffd, 0x1}}, {0xd9, 0x2, 0x0, {0x829, 0xbd, 0x1}}, {0xffffffffffffffff, 0x2, 0x0, {0x7, 0x3, 0x2}}, {0xa, 0x1, 0x0, {0x8, 0x8000, 0x2}}, {0x0, 0x2, 0x0, {0x7fffffffffffffff, 0x2, 0x2}}, {0x101, 0x2, 0x0, {0x2, 0xff}}, {0x80, 0x0, 0x0, {0x5, 0xe}}], 0x8, 0x20, 0x4, 0x800}) bind$pptp(r2, &(0x7f00000026c0)={0x18, 0x2, {0x3, @private=0xa010102}}, 0x1e) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002740), r4) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x14, r13, 0x10, 0x3, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 323.700094ms ago: executing program 0 (id=8706): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x2}, 0x0, 0x6e6bb9, 0x1}, {{@in=@remote, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r6, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r11, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f0000000540), 0x3c) 271.662975ms ago: executing program 4 (id=8707): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x7fffffff, 0x6, {0x0, 0x0, 0x0, 0x0, {0x8, 0x7}, {0x10, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xfffffffffffffece}, {0x14, 0x8002}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x20004005) r0 = socket$nl_rdma(0x10, 0x3, 0x14) accept4(r0, 0x0, &(0x7f0000000000), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, 0x0, 0x0, 0x8010) (async) sendmmsg(r1, 0x0, 0x0, 0x8010) 239.506591ms ago: executing program 3 (id=8708): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 170.938998ms ago: executing program 2 (id=8709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000004d00)={0x0, 0x0, &(0x7f0000004cc0)={&(0x7f0000004800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x70}}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x44, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1b, 0x48, 0x9, 0x4f, 0x70, 0xb, 0x1, 0x3, 0xb, 0xb, 0xb, 0x24, 0x37, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x0, 0x5}, {0x4, 0x1}, {0x1, 0x6}, {0x1, 0x3}, {0x7, 0x5}, {0x7, 0x1}, {0x2, 0x6}, {0x0, 0x9}, {0x0, 0x4}, {0x1}, {0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x400c004}, 0x800) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000000)={0x14, r3, 0x10, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x600c860}, 0x4000000) 50.733855ms ago: executing program 4 (id=8710): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xc0, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x35}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}, @CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}]}, @CTA_PROTOINFO={0x54, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x50, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x5}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xa}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x6}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x9}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x9}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x80}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x9}]}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x44090) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES64=r0], 0x7c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 46.724753ms ago: executing program 3 (id=8711): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f00000001c0)={{0xc8, 0xff}, 0x100, './file0\x00'}) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x7ac48000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r4], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="e0f61cff6375718432fb484144fc33f94893a586d8736c1527fa11b51415cdf406501d8eeb75b1c71621351c664e8048ef30e425eb68119e9a18682064cca8023f7004e6a83a585ca1d7af2f342294bd7bf2891d2ee26dbe80ecaed3eea5c0225e5da4bbb2aa1c146d7c72940044abd447f3b07525a35e392d80b9d57234dc9bb711be26671ebc5cb0ae738b2a948e232ec9", 0x92}], 0x1}}], 0x1, 0x4000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) recvmmsg(r4, &(0x7f0000008ac0)=[{{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000007340)=[{&(0x7f0000005ec0)=""/112, 0x70}, {&(0x7f0000005f40)=""/130, 0x82}, {&(0x7f0000006000)=""/4096, 0x1000}, {&(0x7f0000007000)=""/7, 0x7}, {&(0x7f0000007080)=""/129, 0x81}, {&(0x7f0000007140)=""/93, 0x5d}, {&(0x7f00000071c0)=""/165, 0xa5}, {&(0x7f0000000480)=""/111, 0x6f}, {&(0x7f0000007300)=""/34, 0x22}], 0x9}}], 0x2, 0x40, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000002c0)=[{{0x1, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'gretap0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x0, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x2c, r10, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc1}, 0x40) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600032fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 0s ago: executing program 2 (id=8712): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000390426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128008002500ffffffff00"/36], 0x9a}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xffffff22, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x39, &(0x7f00000006c0)}, 0x2c) sendto$l2tp6(r1, &(0x7f00000002c0)="6e90748e15d18befd87ed2ad652ad28b30535d08c285610a88637a943237c0508244d530d33e0adb32bd6f6d5d89a50fe39239ee5a069ab2a054c83fec2ac5195d9ce32b184fdbafda643a7bea34fed606", 0x51, 0xc000, &(0x7f0000000380)={0xa, 0x0, 0x80000001, @mcast2, 0xfffff2ed, 0x4}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x240488c4) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f00000000c0)=0x6) kernel console output (not intermixed with test programs): retap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 887.249319][T30589] gretap1: entered promiscuous mode [ 887.255111][T30589] gretap1: entered allmulticast mode [ 887.354853][T30426] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.529534][T30426] : (slave netdevsim1): Releasing backup interface [ 887.563303][T30426] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.766335][T30426] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.984879][T30627] netlink: 'syz.3.6431': attribute type 4 has an invalid length. [ 888.001292][T30627] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6431'. [ 888.038960][T30627] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 888.056525][T30628] netlink: 'syz.1.6432': attribute type 1 has an invalid length. [ 888.073221][T30627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6431'. [ 888.219949][T30632] netlink: 'syz.3.6431': attribute type 3 has an invalid length. [ 888.264038][T30638] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6434'. [ 888.279297][T30634] netlink: 'syz.0.6433': attribute type 4 has an invalid length. [ 888.319269][T30640] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6435'. [ 888.369367][T30640] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 888.371187][T30645] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6436'. [ 888.438754][T30647] netlink: 'syz.0.6437': attribute type 30 has an invalid length. [ 888.527352][T30647] bond2: option arp_missed_max: invalid value (0) [ 888.534176][T30647] bond2: option arp_missed_max: allowed values 1 - 255 [ 888.550272][T30647] bond2 (unregistering): Released all slaves [ 888.671266][T30426] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 888.701894][T30426] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 888.839720][T30654] syzkaller0: entered promiscuous mode [ 888.857013][T30654] syzkaller0: entered allmulticast mode [ 888.872499][T30426] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 888.918006][T30426] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 888.946540][T30426] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 888.967280][T30678] Cannot find del_set index 4 as target [ 888.991670][T30426] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 889.138914][T17316] Bluetooth: hci4: command tx timeout [ 889.248620][T30691] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6449'. [ 889.271230][T30691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6449'. [ 889.362389][T30698] netlink: 'syz.0.6451': attribute type 8 has an invalid length. [ 891.220716][T17316] Bluetooth: hci4: command tx timeout [ 891.471950][T30426] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 891.483770][T30426] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 891.500656][T30705] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 891.511806][T30705] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 891.531183][T30695] tipc: Enabling of bearer rejected, failed to enable media [ 891.630329][T30726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6453'. [ 891.741401][T30729] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6454'. [ 891.773413][T30733] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6456'. [ 891.846168][T30426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 891.869785][T30735] siw: device registration error -23 [ 891.943016][T30426] 8021q: adding VLAN 0 to HW filter on device team0 [ 891.991891][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.999126][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 892.045979][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.053245][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 892.272537][T30752] syzkaller0: entered promiscuous mode [ 892.296952][T30752] syzkaller0: entered allmulticast mode [ 892.374466][T30752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 892.700986][T30778] netlink: 'syz.0.6468': attribute type 1 has an invalid length. [ 892.782982][T30778] 8021q: adding VLAN 0 to HW filter on device bond2 [ 892.852650][T30778] bond2: (slave geneve2): making interface the new active one [ 892.862168][T30778] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 892.914221][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.984396][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.010751][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.019890][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.176979][T30796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6473'. [ 893.566676][T30426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 893.633783][T30823] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6477'. [ 893.700425][T30823] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 893.727719][T30823] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 893.867538][T30831] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6479'. [ 894.332070][T30426] veth0_vlan: entered promiscuous mode [ 894.438008][T30426] veth1_vlan: entered promiscuous mode [ 894.454289][T30848] syzkaller1: entered promiscuous mode [ 894.479020][T30848] syzkaller1: entered allmulticast mode [ 894.490328][T30854] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6485'. [ 894.585599][T30426] veth0_macvtap: entered promiscuous mode [ 894.637293][T30857] netlink: 4084 bytes leftover after parsing attributes in process `syz.2.6487'. [ 894.693169][T30426] veth1_macvtap: entered promiscuous mode [ 894.785221][T30426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 894.850199][T30426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 895.790134][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.948973][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.976957][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.037015][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.186741][T27367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.227909][T27367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.357437][T27369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.387547][T27369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.499392][T30890] openvswitch: netlink: Key type 31 is not supported [ 896.539807][T30890] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6494'. [ 896.941326][T30903] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6497'. [ 897.193596][T30908] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6498'. [ 897.244303][T28735] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 897.260235][T28735] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 897.287545][T28735] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 897.307997][T28735] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 897.317541][T28735] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 898.748680][T30906] lo speed is unknown, defaulting to 1000 [ 898.774263][T30906] lo speed is unknown, defaulting to 1000 [ 898.946803][T30958] netlink: 'syz.3.6506': attribute type 2 has an invalid length. [ 899.057301][T30948] netlink: 'syz.3.6506': attribute type 2 has an invalid length. [ 899.068039][T30948] netlink: 67 bytes leftover after parsing attributes in process `syz.3.6506'. [ 899.378004][T17316] Bluetooth: hci2: command tx timeout [ 899.532055][T30965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6511'. [ 899.783969][T30977] netlink: 'syz.0.6512': attribute type 1 has an invalid length. [ 899.900180][T30906] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.907404][T30906] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.914828][T30906] bridge_slave_0: entered allmulticast mode [ 899.922892][T30906] bridge_slave_0: entered promiscuous mode [ 899.931935][T30906] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.943590][T30906] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.952359][T30906] bridge_slave_1: entered allmulticast mode [ 899.960244][T30906] bridge_slave_1: entered promiscuous mode [ 899.994947][T30906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 900.009874][T30906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 900.047157][T30906] team0: Port device team_slave_0 added [ 900.057323][T30906] team0: Port device team_slave_1 added [ 900.088393][T30906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 900.095519][T30906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 900.123830][T30906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 900.137169][T30906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 900.144322][T30906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 900.171812][T30906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 900.224639][T30906] hsr_slave_0: entered promiscuous mode [ 900.231990][T30906] hsr_slave_1: entered promiscuous mode [ 900.239151][T30906] debugfs: 'hsr0' already exists in 'hsr' [ 900.244893][T30906] Cannot create hsr debugfs directory [ 900.410147][T30906] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 900.422935][T30906] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.433327][T30906] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 37499 - 0 [ 900.522259][T30906] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 900.533833][T30906] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.544308][T30906] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 37499 - 0 [ 900.631988][T30906] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 900.642507][T30906] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.653417][T30906] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 37499 - 0 [ 900.734499][T30906] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 900.745155][T30906] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.755950][T30906] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 37499 - 0 [ 900.776973][T30929] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 900.989390][T30990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6516'. [ 901.226991][T31002] netlink: 'syz.0.6518': attribute type 39 has an invalid length. [ 901.253642][T31004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6520'. [ 901.467018][T17316] Bluetooth: hci2: command tx timeout [ 901.584763][T30906] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 901.599304][T30906] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 901.607891][T30906] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 901.623624][T30906] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 901.645109][T31011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6521'. [ 901.656622][T30906] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 901.679588][T30906] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 901.706034][T30906] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 901.747013][T30906] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 902.695787][T31048] 8021q: adding VLAN 0 to HW filter on device bond1 [ 902.751354][T31048] 8021q: adding VLAN 0 to HW filter on device bond4 [ 902.819073][T31052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6525'. [ 902.843378][T27356] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 902.876692][T30906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.005984][T30906] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.051241][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.058491][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.127222][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.134498][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 903.333686][T31084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6531'. [ 903.539144][T17316] Bluetooth: hci2: command tx timeout [ 903.803762][T31100] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6537'. [ 903.830855][T31100] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6537'. [ 903.844631][T31100] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6537'. [ 903.870094][T31098] syzkaller0: entered promiscuous mode [ 903.880770][T31098] syzkaller0: entered allmulticast mode [ 904.581589][T30906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 904.730666][T30906] veth0_vlan: entered promiscuous mode [ 904.752381][T31140] __nla_validate_parse: 4 callbacks suppressed [ 904.752398][T31140] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6547'. [ 904.809234][T30906] veth1_vlan: entered promiscuous mode [ 904.834784][ T9861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.862618][ T9861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.939375][T30906] veth0_macvtap: entered promiscuous mode [ 904.987163][T30906] veth1_macvtap: entered promiscuous mode [ 905.060683][T31151] netlink: 'syz.3.6550': attribute type 3 has an invalid length. [ 905.072568][T30906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 905.114430][T30906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 905.144304][T31151] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6550'. [ 905.249691][ T9861] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.279990][ T9861] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.383149][ T9861] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.414429][T31158] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6553'. [ 905.436288][ T9861] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.604599][T31164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6555'. [ 905.618978][T17316] Bluetooth: hci2: command tx timeout [ 905.635724][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.669933][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.765770][T27371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.799631][T27371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.866586][T31172] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6557'. [ 905.970223][T31178] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 906.229796][T31190] netlink: 'syz.1.6563': attribute type 21 has an invalid length. [ 906.245725][T31190] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6563'. [ 906.270420][T31190] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6563'. [ 906.383283][T31198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6564'. [ 906.418724][T31198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6564'. [ 906.529168][ T9861] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.555663][ T9861] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.575603][ T9861] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.588497][T31208] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6568'. [ 906.598333][ T9861] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.627434][T31204] lo speed is unknown, defaulting to 1000 [ 906.710123][T31204] lo speed is unknown, defaulting to 1000 [ 907.218555][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 907.287422][T31235] openvswitch: netlink: IP tunnel dst address not specified [ 907.520412][T31241] x_tables: unsorted underflow at hook 4 [ 908.224244][T31265] Cannot find set identified by id 0 to match [ 908.233149][T31255] kthread_run failed with err -4 [ 908.734868][T31287] sctp: [Deprecated]: syz.0.6592 (pid 31287) Use of int in maxseg socket option. [ 908.734868][T31287] Use struct sctp_assoc_value instead [ 909.501344][T31325] 8021q: VLANs not supported on sit0 [ 909.582969][T31323] bridge: RTM_NEWNEIGH with invalid ether address [ 909.948917][T31347] __nla_validate_parse: 8 callbacks suppressed [ 909.948938][T31347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6608'. [ 910.073494][T31352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6613'. [ 910.232415][T31365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6616'. [ 910.252409][T31367] netlink: 'syz.2.6617': attribute type 3 has an invalid length. [ 910.278478][T31367] netlink: 'syz.2.6617': attribute type 1 has an invalid length. [ 910.290629][T31367] netlink: 212 bytes leftover after parsing attributes in process `syz.2.6617'. [ 910.319879][T31367] NCSI netlink: No device for ifindex 813332851 [ 910.363708][T31371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6617'. [ 910.501583][T31376] bond4: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 910.544922][T31376] bond4 (unregistering): Released all slaves [ 910.620699][T31377] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 911.021858][T31412] netlink: 'syz.3.6627': attribute type 4 has an invalid length. [ 911.115870][T31415] netlink: 'syz.3.6627': attribute type 1 has an invalid length. [ 911.149774][T31412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6627'. [ 911.169403][T31412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6627'. [ 911.249124][T31423] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6630'. [ 911.474456][T31436] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6634'. [ 911.764899][T31448] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6637'. [ 912.345658][T31473] netlink: 'syz.2.6643': attribute type 3 has an invalid length. [ 912.552725][T18469] IPVS: starting estimator thread 0... [ 912.559874][T31476] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 912.667959][T31485] IPVS: using max 25 ests per chain, 60000 per kthread [ 912.766118][T31496] openvswitch: netlink: Message has 512 unknown bytes. [ 912.897032][T31504] netlink: 'syz.3.6653': attribute type 13 has an invalid length. [ 912.928193][T31504] veth1_macvtap: left promiscuous mode [ 912.961705][T31504] macsec0: entered allmulticast mode [ 913.023239][T31512] netlink: 'syz.2.6656': attribute type 10 has an invalid length. [ 913.126269][T17316] block nbd4: Receive control failed (result -32) [ 914.333342][T31555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 914.420507][T31555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 914.451217][T31555] bond0 (unregistering): Released all slaves [ 915.114236][T31601] netlink: 'syz.4.6681': attribute type 1 has an invalid length. [ 915.374468][T31615] sctp: [Deprecated]: syz.2.6685 (pid 31615) Use of int in max_burst socket option deprecated. [ 915.374468][T31615] Use struct sctp_assoc_value instead [ 915.502344][T31615] bond1 (unregistering): Released all slaves [ 915.617558][T31632] Unsupported ieee802154 address type: 0 [ 915.661910][T31634] netlink: 'syz.1.6691': attribute type 1 has an invalid length. [ 915.685989][T31634] __nla_validate_parse: 12 callbacks suppressed [ 915.686011][T31634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6691'. [ 915.702614][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 915.723966][T31634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6691'. [ 916.159780][T31648] syzkaller0: entered promiscuous mode [ 916.165541][T31648] syzkaller0: entered allmulticast mode [ 916.186431][T31666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 916.302461][T31680] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 916.466193][T31689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6705'. [ 916.519650][T31689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6705'. [ 916.595299][T31689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6705'. [ 916.611868][T31700] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 916.644356][T31700] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 919.020486][T31714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6709'. [ 919.048625][T31717] netlink: 'syz.4.6710': attribute type 1 has an invalid length. [ 919.334636][T31734] syzkaller0: entered promiscuous mode [ 919.345463][T31734] syzkaller0: entered allmulticast mode [ 919.410350][T31738] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6717'. [ 919.420831][T31738] openvswitch: netlink: IPv4 frag type 32 is out of range max 2 [ 919.936258][T31746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 920.554131][T31771] openvswitch: netlink: IPv4 tunnel dst address is zero [ 920.561396][T31771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 922.710371][T31758] vlan2: entered allmulticast mode [ 922.715603][T31758] bond0: entered allmulticast mode [ 922.721887][T31758] bond_slave_0: entered allmulticast mode [ 922.727689][T31758] bond_slave_1: entered allmulticast mode [ 922.959508][T31793] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6732'. [ 922.984880][T31794] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6733'. [ 923.006097][T31794] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6733'. [ 923.040759][T31794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6733'. [ 923.235194][T31803] syzkaller0: entered promiscuous mode [ 923.254817][T31803] syzkaller0: entered allmulticast mode [ 923.316145][T31809] IPVS: nq: FWM 3 0x00000003 - no destination available [ 923.325746][T21521] IPVS: starting estimator thread 0... [ 923.418884][T31815] IPVS: using max 26 ests per chain, 62400 per kthread [ 923.495701][T31820] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6738'. [ 923.513026][T31820] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6738'. [ 923.543153][T31820] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6738'. [ 923.649927][T31822] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6738'. [ 923.668633][T31830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6742'. [ 923.700661][T31830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 923.758292][T31830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6742'. [ 923.839285][ T9861] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 923.888049][ T9861] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 923.912229][ T9861] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 923.933843][T31836] openvswitch: netlink: IP tunnel dst address not specified [ 923.947907][ T9861] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 923.960486][T31836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 923.993676][T31839] tipc: Failed to obtain node identity [ 924.020967][T31839] tipc: Enabling of bearer rejected, failed to enable media [ 924.280188][T31864] x_tables: duplicate underflow at hook 4 [ 924.385755][T18469] IPVS: starting estimator thread 0... [ 924.461431][T31874] netlink: 'syz.2.6757': attribute type 1 has an invalid length. [ 924.478195][T31871] IPVS: using max 25 ests per chain, 60000 per kthread [ 927.172955][T31856] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 927.428767][T31896] netlink: 'syz.4.6764': attribute type 12 has an invalid length. [ 927.894921][T31925] netlink: 'syz.3.6770': attribute type 21 has an invalid length. [ 927.932940][T31926] netlink: 'syz.1.6772': attribute type 1 has an invalid length. [ 928.066325][T31926] 8021q: adding VLAN 0 to HW filter on device bond5 [ 928.329443][T31943] lo speed is unknown, defaulting to 1000 [ 928.350831][T31943] lo speed is unknown, defaulting to 1000 [ 928.555890][T31955] __nla_validate_parse: 13 callbacks suppressed [ 928.555913][T31955] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6777'. [ 928.784981][T31972] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6780'. [ 928.990152][T31982] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6786'. [ 929.010972][T31982] netlink: 'syz.0.6786': attribute type 1 has an invalid length. [ 929.174689][T31987] Bluetooth: MGMT ver 1.23 [ 929.185756][T31987] Bluetooth: hci1: too big key_count value 32778 [ 929.219658][T31990] dvmrp0: entered allmulticast mode [ 929.350006][T31993] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6789'. [ 929.520232][T32000] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6789'. [ 929.535767][T31999] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6790'. [ 932.296391][T31999] bond4 (unregistering): Released all slaves [ 932.894466][T32042] netlink: 'syz.2.6796': attribute type 1 has an invalid length. [ 932.988412][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 933.060941][T32043] bond1: (slave geneve2): making interface the new active one [ 933.076076][T32043] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 933.108474][T27370] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 933.130842][T27370] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 933.178078][ T9863] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 933.219524][T32063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6802'. [ 933.232868][T32058] mac80211_hwsim hwsim50 wlan0: entered promiscuous mode [ 933.241860][T32063] batadv0: entered promiscuous mode [ 933.371961][ T9863] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 933.532907][T32078] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6807'. [ 933.667950][T32081] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6808'. [ 933.903626][T32092] bond1: option min_links: invalid value (18446744073709551614) [ 933.912342][T32092] bond1: option min_links: allowed values 0 - 2147483647 [ 933.927652][T32092] bond1 (unregistering): Released all slaves [ 933.961951][T32097] netlink: 'syz.4.6813': attribute type 2 has an invalid length. [ 934.102206][T32102] netlink: 'syz.1.6815': attribute type 11 has an invalid length. [ 934.137616][T32102] netlink: 'syz.1.6815': attribute type 4 has an invalid length. [ 934.184576][T32102] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6815'. [ 934.232086][T32111] netlink: 'syz.3.6817': attribute type 2 has an invalid length. [ 934.267549][T32114] veth0_to_team: default FDB implementation only supports local addresses [ 934.269055][T32111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6817'. [ 934.641450][T32135] netlink: 'syz.0.6827': attribute type 64 has an invalid length. [ 934.652406][T32132] syzkaller1: entered promiscuous mode [ 934.699059][T32132] syzkaller1: entered allmulticast mode [ 934.782775][T32142] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6829'. [ 934.792932][T32142] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6829'. [ 934.876355][T32149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6831'. [ 935.154327][T32166] openvswitch: netlink: Duplicate or invalid key (type 0). [ 935.161947][T32166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 935.234064][T32166] pim6reg: entered allmulticast mode [ 935.251695][T32166] pim6reg: left allmulticast mode [ 935.428666][T32178] netlink: 784 bytes leftover after parsing attributes in process `syz.3.6839'. [ 935.745231][T32191] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6843'. [ 935.858577][T32195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6844'. [ 935.915981][T32199] ip6t_srh: unknown srh invflags 4000 [ 935.930081][T18485] IPVS: starting estimator thread 0... [ 935.990268][T32202] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6847'. [ 936.028596][T32200] IPVS: using max 25 ests per chain, 60000 per kthread [ 936.401936][T32230] team0: No ports can be present during mode change [ 936.751074][T32245] syzkaller0: entered promiscuous mode [ 936.760462][T32245] syzkaller0: entered allmulticast mode [ 936.788016][ T9863] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 936.910489][ T9863] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 936.926080][ T9863] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 936.936404][ T9863] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 937.021513][T32268] netlink: 'syz.4.6866': attribute type 1 has an invalid length. [ 937.134317][T32268] 8021q: adding VLAN 0 to HW filter on device bond1 [ 937.154432][T32279] netlink: 'syz.4.6866': attribute type 10 has an invalid length. [ 937.162767][T32279] dummy0: entered promiscuous mode [ 937.170364][T32274] dummy0: left promiscuous mode [ 937.216279][T32274] bond1: (slave dummy0): making interface the new active one [ 937.231061][T32274] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 937.255932][T32269] syzkaller0: entered promiscuous mode [ 937.267809][T32269] syzkaller0: entered allmulticast mode [ 937.317706][T32280] bond2: option all_slaves_active: invalid value (3) [ 937.329442][T32280] bond2 (unregistering): Released all slaves [ 937.378642][T28735] Bluetooth: hci2: command 0x0405 tx timeout [ 937.920374][T32309] tipc: Failed to obtain node identity [ 937.928702][T32309] tipc: Enabling of bearer rejected, failed to enable media [ 938.684448][T32350] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 938.693175][T32350] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 938.713696][T32355] __nla_validate_parse: 9 callbacks suppressed [ 938.713715][T32355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6891'. [ 938.730501][T32355] netlink: 'syz.3.6891': attribute type 5 has an invalid length. [ 938.741121][T32355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6891'. [ 938.766202][T32355] geneve2: entered promiscuous mode [ 938.771873][T32355] geneve2: entered allmulticast mode [ 938.789259][T27356] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 938.817511][T27356] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 938.846940][T27356] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 938.876730][T27356] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 938.908995][T32358] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 938.916308][T32358] IPv6: NLM_F_CREATE should be set when creating new route [ 939.468902][T32396] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6903'. [ 939.676749][T32411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6909'. [ 939.810561][T32411] openvswitch: netlink: IP tunnel dst address not specified [ 940.072769][T32430] netlink: 'syz.3.6914': attribute type 2 has an invalid length. [ 942.439096][T32441] syzkaller1: entered promiscuous mode [ 942.472523][T32441] syzkaller1: entered allmulticast mode [ 942.584410][T32453] openvswitch: netlink: Actions may not be safe on all matching packets [ 942.999433][T32479] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6927'. [ 943.035069][T32479] netlink: 6 bytes leftover after parsing attributes in process `syz.1.6927'. [ 943.196285][T32479] bond6: option mode: invalid value (10) [ 943.223580][T32499] netlink: Conntrack attr has 12 unknown bytes [ 943.231099][T32499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 943.240712][T32500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 943.254582][T32479] bond6 (unregistering): Released all slaves [ 943.495650][T32509] netlink: 'syz.2.6936': attribute type 2 has an invalid length. [ 943.746028][T32522] netlink: 'syz.1.6942': attribute type 9 has an invalid length. [ 944.050445][T32539] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6943'. [ 944.154751][T32549] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6950'. [ 944.332631][T32562] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6954'. [ 944.375466][T32563] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6951'. [ 944.394801][T32565] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6954'. [ 944.627281][T32573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6957'. [ 944.643388][T32573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 944.656963][T32575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6959'. [ 944.684257][T32579] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6960'. [ 945.540791][T32627] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6977'. [ 945.760826][T32633] dvmrp0: entered allmulticast mode [ 945.769270][T32633] openvswitch: netlink: IP tunnel dst address not specified [ 945.848346][T32640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6983'. [ 945.873124][T32640] netlink: 'syz.4.6983': attribute type 1 has an invalid length. [ 945.915078][T32640] 8021q: adding VLAN 0 to HW filter on device bond2 [ 945.941390][T32640] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 946.405787][T32662] netlink: 'syz.4.6990': attribute type 3 has an invalid length. [ 946.679711][T32671] lo speed is unknown, defaulting to 1000 [ 946.688284][T32671] lo speed is unknown, defaulting to 1000 [ 946.852532][T32685] Bluetooth: hci1: too big key_count value 32778 [ 947.808577][T32727] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 948.064832][T32741] syzkaller1: entered promiscuous mode [ 948.095669][T32741] syzkaller1: entered allmulticast mode [ 948.252599][T32751] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 948.891981][ T316] netlink: 'syz.1.7019': attribute type 4 has an invalid length. [ 949.164478][ T329] netlink: 'syz.0.7023': attribute type 21 has an invalid length. [ 949.777579][ T356] __nla_validate_parse: 2 callbacks suppressed [ 949.777600][ T356] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7029'. [ 949.835348][ T356] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7029'. [ 949.866657][ T356] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 949.919277][ T354] syzkaller0: entered promiscuous mode [ 949.946118][ T354] syzkaller0: entered allmulticast mode [ 950.736913][ T385] netlink: 240 bytes leftover after parsing attributes in process `syz.2.7036'. [ 951.016913][ T405] netlink: 232 bytes leftover after parsing attributes in process `syz.3.7043'. [ 951.027301][ T407] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.7042'. [ 951.326196][ T427] netlink: 'syz.1.7049': attribute type 4 has an invalid length. [ 951.622364][ T443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7054'. [ 951.655151][ T443] netlink: 136 bytes leftover after parsing attributes in process `syz.0.7054'. [ 951.690811][ T443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7054'. [ 951.695117][ T438] netlink: 'syz.3.7055': attribute type 83 has an invalid length. [ 952.111560][ T461] bond2: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 952.142829][ T461] bond2 (unregistering): Released all slaves [ 952.160171][ T477] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7065'. [ 952.186022][ T468] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 952.266766][ T480] erspan0: entered promiscuous mode [ 952.302904][ T480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7066'. [ 953.167143][ T537] syzkaller1: entered promiscuous mode [ 953.185521][ T537] syzkaller1: entered allmulticast mode [ 953.602371][ T565] netlink: 'syz.4.7089': attribute type 10 has an invalid length. [ 953.651997][ T565] geneve2: entered promiscuous mode [ 953.664728][ T565] geneve2: entered allmulticast mode [ 953.887561][ T579] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 953.976234][ T582] netlink: 'syz.1.7096': attribute type 14 has an invalid length. [ 954.002732][ T582] netlink: 'syz.1.7096': attribute type 13 has an invalid length. [ 954.263877][ T584] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.271725][ T584] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.471984][ T584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 954.506645][ T584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 954.576693][ T584] macsec0: left allmulticast mode [ 954.695671][ T584] geneve2: left promiscuous mode [ 954.701561][ T584] geneve2: left allmulticast mode [ 954.778407][ T598] macsec1: entered promiscuous mode [ 954.800253][ T598] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 954.890601][ T59] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 954.914828][ T59] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.945398][ T59] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 954.964314][ T59] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 954.975020][ T59] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.999423][ T59] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 955.033759][ T59] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 955.061679][ T59] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.086624][ T59] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 955.173666][ T612] bond3: (slave bond_slave_1): Device is not our slave [ 955.181267][ T612] bond3: option active_slave: invalid value (bond_slave_1) [ 955.198558][ T612] bond3 (unregistering): Released all slaves [ 955.296365][ T617] netlink: 'syz.1.7108': attribute type 3 has an invalid length. [ 955.322760][ T625] __nla_validate_parse: 15 callbacks suppressed [ 955.322782][ T625] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7110'. [ 955.329980][T27370] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 955.391233][T27370] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.423054][T27370] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 955.521947][ T627] netlink: 'syz.3.7111': attribute type 3 has an invalid length. [ 955.622743][ T638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 955.650614][ T638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 955.665970][ T638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 955.675659][ T638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 955.760191][ T646] tipc: Failed to remove unknown binding: 66,0,0/0:2277015203/2277015204 [ 956.109304][ T662] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7123'. [ 956.378725][ T679] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7127'. [ 956.441358][ T684] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.512423][ T684] bridge_slave_1 (unregistering): left allmulticast mode [ 956.543291][ T684] bridge_slave_1 (unregistering): left promiscuous mode [ 956.552578][ T684] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.671696][ T690] syzkaller0: entered promiscuous mode [ 956.681220][ T690] syzkaller0: entered allmulticast mode [ 959.429948][ T719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7137'. [ 959.488066][ T719] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7137'. [ 959.592659][ T720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7137'. [ 959.642636][ T720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7137'. [ 959.669406][ T735] mac80211_hwsim hwsim62 syzkaller0: entered promiscuous mode [ 959.697676][ T735] mac80211_hwsim hwsim62 syzkaller0: entered allmulticast mode [ 959.897625][ T745] syzkaller0: entered promiscuous mode [ 959.905333][ T745] syzkaller0: entered allmulticast mode [ 960.014775][ T756] netlink: 'syz.1.7148': attribute type 6 has an invalid length. [ 960.039755][ T755] netlink: 'syz.1.7148': attribute type 6 has an invalid length. [ 960.241951][ T772] ip6t_rpfilter: unknown options [ 960.244909][ T767] netlink: zone id is out of range [ 960.261676][ T767] netlink: zone id is out of range [ 960.282784][ T767] netlink: zone id is out of range [ 960.301951][ T767] netlink: zone id is out of range [ 960.307351][ T767] netlink: zone id is out of range [ 960.331242][ T767] netlink: zone id is out of range [ 960.336524][ T767] netlink: zone id is out of range [ 960.348600][ T767] netlink: zone id is out of range [ 960.355763][ T767] netlink: zone id is out of range [ 960.363327][ T767] netlink: zone id is out of range [ 962.632530][ T792] netlink: 'syz.2.7156': attribute type 1 has an invalid length. [ 962.681758][ T796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7157'. [ 962.690997][ T796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7157'. [ 962.790090][ T793] macvtap1: entered allmulticast mode [ 962.843615][ T794] bond2: (slave bridge4): making interface the new active one [ 962.852957][ T794] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 962.863752][ T800] tipc: Started in network mode [ 962.870455][ T800] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 962.880072][ T800] tipc: Enabling of bearer rejected, failed to enable media [ 962.888816][ T801] tipc: Enabling of bearer rejected, failed to enable media [ 962.948359][ T805] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 963.110839][ T824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7163'. [ 963.136716][ T826] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20003 [ 963.160897][ T825] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20003 [ 963.253914][ T831] netlink: 'syz.4.7168': attribute type 11 has an invalid length. [ 963.275919][ T831] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7168'. [ 963.505444][ T846] netlink: 'syz.3.7173': attribute type 1 has an invalid length. [ 963.526133][ T846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7173'. [ 963.592983][ T854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 963.702492][ T858] nbd: socks must be embedded in a SOCK_ITEM attr [ 963.732458][ T858] x_tables: duplicate underflow at hook 1 [ 963.750807][ T858] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7177'. [ 963.791282][ T858] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7177'. [ 963.984485][ T873] netlink: 'syz.4.7180': attribute type 2 has an invalid length. [ 964.302897][ T889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7185'. [ 964.370171][ T892] IPVS: Error connecting to the multicast addr [ 964.409485][ T898] netlink: 'syz.1.7188': attribute type 1 has an invalid length. [ 964.455212][ T898] 8021q: adding VLAN 0 to HW filter on device bond6 [ 964.489949][ T898] bond6: (slave geneve3): making interface the new active one [ 964.501699][ T898] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 964.531994][ T902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7190'. [ 964.632460][ T902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7190'. [ 964.651470][ T902] netlink: 'syz.3.7190': attribute type 14 has an invalid length. [ 964.679539][ T902] netlink: 'syz.3.7190': attribute type 14 has an invalid length. [ 964.742296][ T913] netlink: 'syz.0.7192': attribute type 10 has an invalid length. [ 964.755169][ T909] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 965.026033][T27370] tipc: Subscription rejected, illegal request [ 965.273133][ T943] bridge0: port 2(batadv1) entered blocking state [ 965.289591][ T943] bridge0: port 2(batadv1) entered disabled state [ 965.307395][ T943] batadv1: entered allmulticast mode [ 965.324885][ T943] batadv1: entered promiscuous mode [ 965.368448][ T957] netlink: 'syz.1.7203': attribute type 6 has an invalid length. [ 965.393217][ T957] netlink: 'syz.1.7203': attribute type 6 has an invalid length. [ 965.651155][ T972] bond2: option all_slaves_active: invalid value (222) [ 965.664635][ T972] bond2 (unregistering): Released all slaves [ 965.768841][ T1165] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 965.778938][ T1165] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 966.072760][ T990] tipc: New replicast peer: 255.255.255.255 [ 966.079924][ T990] tipc: Enabled bearer , priority 10 [ 966.139568][ T992] netlink: 'syz.2.7214': attribute type 17 has an invalid length. [ 966.157014][ T992] erspan0: entered promiscuous mode [ 966.165978][ T992] gretap0: entered promiscuous mode [ 966.354956][ T1007] xt_l2tp: invalid flags combination: 8 [ 966.627467][ T1022] netlink: 'syz.0.7222': attribute type 21 has an invalid length. [ 966.864639][ T1033] IPv6: NLM_F_CREATE should be specified when creating new route [ 966.907387][ T1033] xt_hashlimit: size too large, truncated to 1048576 [ 967.079685][T18503] tipc: Node number set to 1 [ 967.146123][ T1053] syzkaller0: entered promiscuous mode [ 967.167531][ T1053] syzkaller0: entered allmulticast mode [ 967.632275][ T1107] netlink: 'syz.4.7248': attribute type 9 has an invalid length. [ 967.643575][ T1101] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 967.684507][ T1098] macvlan2: entered promiscuous mode [ 967.703676][ T1098] macvlan2: entered allmulticast mode [ 967.723705][ T1098] bond3: (slave macvlan2): Error -98 calling set_mac_address [ 967.792341][ T1104] syzkaller0: entered promiscuous mode [ 967.817039][ T1104] syzkaller0: entered allmulticast mode [ 967.855601][ T1104] net_ratelimit: 10 callbacks suppressed [ 967.855621][ T1104] openvswitch: netlink: IP tunnel TTL not specified. [ 968.178062][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 968.302774][ T1142] mac80211_hwsim hwsim62 syzkaller0: left promiscuous mode [ 968.308680][ T1140] __nla_validate_parse: 26 callbacks suppressed [ 968.308742][ T1140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7255'. [ 968.329700][ T1142] mac80211_hwsim hwsim62 syzkaller0: left allmulticast mode [ 968.405437][ T1147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7258'. [ 968.435213][ T1147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7258'. [ 968.470985][ T1147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7258'. [ 968.485807][ T1147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7258'. [ 968.495864][ T1147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7258'. [ 968.677026][ T1154] tipc: Started in network mode [ 968.689477][ T1154] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 968.714020][ T1154] tipc: Enabling of bearer rejected, failed to enable media [ 968.753761][ T1154] netlink: 'syz.0.7261': attribute type 12 has an invalid length. [ 968.777701][ T1154] netlink: 'syz.0.7261': attribute type 29 has an invalid length. [ 968.796429][ T1154] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7261'. [ 969.254776][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.416425][ T1186] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7267'. [ 969.628140][T28735] Bluetooth: hci5: command 0x0406 tx timeout [ 969.652938][ T1170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 969.669616][ T1170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 970.090404][ T1170] macvtap1: left allmulticast mode [ 970.199467][T27370] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.238070][T27370] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 970.264160][T27370] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.287810][T27370] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 970.303529][T27370] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.328005][T27370] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 970.347078][T27370] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.388140][T27370] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 970.422118][ T1190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7268'. [ 970.478568][ T1190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7268'. [ 970.823812][ T1221] netlink: 'syz.0.7277': attribute type 6 has an invalid length. [ 970.826552][ T1215] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 4104 [ 970.855958][ T1221] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 971.314681][ T1247] netlink: 'syz.2.7284': attribute type 32 has an invalid length. [ 971.336322][ T1247] mac80211_hwsim hwsim62 syzkaller0: entered promiscuous mode [ 971.345213][ T1247] mac80211_hwsim hwsim62 syzkaller0: entered allmulticast mode [ 971.605737][ T1254] netlink: 'syz.4.7289': attribute type 6 has an invalid length. [ 971.772614][ T1267] netlink: 'syz.2.7291': attribute type 11 has an invalid length. [ 972.058937][ T1277] Bluetooth: hci1: too big key_count value 32778 [ 972.385224][ T1292] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 972.409179][ T1292] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 973.196446][ T1340] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 973.213758][ T1340] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 973.325992][ T1345] __nla_validate_parse: 4 callbacks suppressed [ 973.326012][ T1345] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7312'. [ 973.368986][ T1345] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7312'. [ 973.597112][ T1361] netlink: 'syz.1.7316': attribute type 1 has an invalid length. [ 973.661168][ T1367] netlink: 'syz.1.7316': attribute type 10 has an invalid length. [ 973.675775][ T1367] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7316'. [ 973.720772][ T1361] bond7: option mode: invalid value (9) [ 973.730523][ T1372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7321'. [ 973.741210][ T1361] bond7 (unregistering): Released all slaves [ 973.750640][ T1373] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7316'. [ 973.781274][ T1367] dummy0: entered promiscuous mode [ 973.792301][ T1375] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7322'. [ 973.834062][ T1375] 0·: renamed from hsr0 [ 973.850794][ T1375] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 973.879316][ T1375] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 973.899221][ T1375] 0·: entered allmulticast mode [ 973.905365][ T1375] hsr_slave_0: entered allmulticast mode [ 973.911734][ T1375] hsr_slave_1: entered allmulticast mode [ 973.920072][ T1375] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 974.256376][ T1395] sctp: [Deprecated]: syz.1.7328 (pid 1395) Use of int in maxseg socket option. [ 974.256376][ T1395] Use struct sctp_assoc_value instead [ 974.303982][ T1399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7329'. [ 974.371077][ T1395] netlink: 'syz.1.7328': attribute type 3 has an invalid length. [ 974.390093][ T1395] netlink: 'syz.1.7328': attribute type 1 has an invalid length. [ 974.408716][ T1395] netlink: 212 bytes leftover after parsing attributes in process `syz.1.7328'. [ 974.444946][ T1395] NCSI netlink: No device for ifindex 813332851 [ 974.466610][ T1408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7333'. [ 974.614642][ T1411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7332'. [ 974.653331][ T1417] netlink: 'syz.3.7331': attribute type 3 has an invalid length. [ 975.790792][ T1464] pimreg3: entered allmulticast mode [ 976.030749][ T1475] netlink: 'syz.3.7350': attribute type 11 has an invalid length. [ 976.317537][ T1486] mac80211_hwsim hwsim62 ÿ: renamed from wlan1 [ 976.414949][ T1492] netlink: 'syz.4.7353': attribute type 1 has an invalid length. [ 976.503826][ T1500] netlink: 'syz.2.7356': attribute type 1 has an invalid length. [ 976.560267][ T1492] bond3: entered promiscuous mode [ 976.573837][ T1492] 8021q: adding VLAN 0 to HW filter on device bond3 [ 976.604503][ T1492] netlink: 'syz.4.7353': attribute type 83 has an invalid length. [ 976.642549][ T1500] bond4: entered promiscuous mode [ 976.649951][ T1500] 8021q: adding VLAN 0 to HW filter on device bond4 [ 976.689654][ T1503] 8021q: adding VLAN 0 to HW filter on device bond3 [ 976.697120][ T1503] bond3: (slave ipip0): The slave device specified does not support setting the MAC address [ 976.710646][ T1503] bond3: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 976.763020][ T1503] bond3: (slave ipip0): making interface the new active one [ 976.786535][ T1503] ipip0: entered promiscuous mode [ 976.803305][ T1503] bond3: (slave ipip0): Enslaving as an active interface with an up link [ 976.857559][ T1511] 8021q: adding VLAN 0 to HW filter on device bond4 [ 976.885723][ T1511] bond4: (slave ipip0): The slave device specified does not support setting the MAC address [ 976.909034][ T1511] bond4: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 976.927031][ T1511] bond4: (slave ipip0): making interface the new active one [ 976.941385][ T1511] ipip0: entered promiscuous mode [ 976.949349][ T1511] bond4: (slave ipip0): Enslaving as an active interface with an up link [ 977.411766][ T1548] netlink: 'syz.0.7368': attribute type 10 has an invalid length. [ 977.460930][ T1548] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 978.536797][ T1633] netlink: 'syz.2.7387': attribute type 1 has an invalid length. [ 978.602963][ T1634] __nla_validate_parse: 16 callbacks suppressed [ 978.602986][ T1634] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7390'. [ 979.003377][ T1663] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7398'. [ 979.097257][ T1668] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7401'. [ 979.185891][ T1677] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 979.829028][ T1724] netlink: 'syz.4.7415': attribute type 1 has an invalid length. [ 979.844391][ T1724] netlink: 'syz.4.7415': attribute type 4 has an invalid length. [ 979.861522][ T1724] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.7415'. [ 980.273698][ T1746] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7424'. [ 980.380009][ T1757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7424'. [ 980.471742][ T1757] bond2: entered promiscuous mode [ 980.477464][ T1757] 8021q: adding VLAN 0 to HW filter on device bond2 [ 980.592487][ T1774] netlink: 'syz.1.7430': attribute type 10 has an invalid length. [ 980.624408][ T1774] dummy0: left promiscuous mode [ 980.706254][ T1774] team0: Port device dummy0 added [ 980.746280][ T1780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7431'. [ 980.764094][ T1780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7431'. [ 980.775661][ T1780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7431'. [ 980.788630][ T1780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7431'. [ 981.028041][ T1798] netlink: 'syz.1.7433': attribute type 21 has an invalid length. [ 982.015977][ T1846] sch_tbf: burst 0 is lower than device lo mtu (1294) ! [ 984.735422][ T1840] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 984.981538][ T1907] __nla_validate_parse: 47 callbacks suppressed [ 984.981563][ T1907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7465'. [ 985.000293][ T1903] netlink: 'syz.3.7468': attribute type 1 has an invalid length. [ 985.000334][ T1904] netlink: 'syz.3.7468': attribute type 1 has an invalid length. [ 985.014624][ T1909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7465'. [ 985.039258][ T1911] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7466'. [ 985.113847][ T1903] 8021q: adding VLAN 0 to HW filter on device bond3 [ 985.339989][ T1926] mac80211_hwsim hwsim62 syzkaller0: left promiscuous mode [ 985.361634][ T1926] mac80211_hwsim hwsim62 syzkaller0: left allmulticast mode [ 985.414080][ T1932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7473'. [ 985.491633][ T1932] veth0_macvtap: left promiscuous mode [ 985.630287][ T1933] syzkaller0: entered promiscuous mode [ 985.654883][ T1933] syzkaller0: entered allmulticast mode [ 985.734678][ T1948] sctp: [Deprecated]: syz.3.7478 (pid 1948) Use of int in maxseg socket option. [ 985.734678][ T1948] Use struct sctp_assoc_value instead [ 985.831111][ T1955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7477'. [ 985.957281][ T1963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7477'. [ 985.970709][ T1962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7482'. [ 986.114537][ T1968] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7484'. [ 986.151380][ T1963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7477'. [ 986.236845][ T1963] macsec1: entered promiscuous mode [ 986.280765][ T1963] bridge0: entered promiscuous mode [ 986.290240][ T1963] macsec1: entered allmulticast mode [ 986.310721][ T1963] bridge0: entered allmulticast mode [ 986.344414][ T1976] syzkaller1: entered promiscuous mode [ 986.365675][ T1976] syzkaller1: entered allmulticast mode [ 986.394684][ T1982] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7486'. [ 986.617293][ T1992] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 986.653963][ T1992] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 986.689515][ T1995] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 986.885977][ T2011] nbd: must specify an index to disconnect [ 987.431510][ T2034] block nbd6: server does not support multiple connections per device. [ 987.491454][ T2034] block nbd6: shutting down sockets [ 987.706649][ T2055] team0: Port device dummy0 removed [ 987.724801][ T2055] netlink: 'syz.1.7508': attribute type 10 has an invalid length. [ 987.737052][ T2055] dummy0: entered promiscuous mode [ 987.965000][ T2066] syzkaller0: entered promiscuous mode [ 987.979065][ T2066] syzkaller0: entered allmulticast mode [ 988.034465][ T2068] netlink: 'syz.1.7513': attribute type 7 has an invalid length. [ 988.067893][ T2068] netlink: 'syz.1.7513': attribute type 8 has an invalid length. [ 989.398477][ T2111] netlink: 'syz.1.7529': attribute type 1 has an invalid length. [ 989.555024][ T2111] 8021q: adding VLAN 0 to HW filter on device bond7 [ 989.650767][ T2111] bond7: (slave gretap1): making interface the new active one [ 989.672167][ T2111] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 989.821674][ T2128] syzkaller1: entered promiscuous mode [ 989.828764][ T2128] syzkaller1: entered allmulticast mode [ 990.054234][ T2144] __nla_validate_parse: 9 callbacks suppressed [ 990.054253][ T2144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7536'. [ 990.240215][ T2154] tipc: Enabling of bearer rejected, failed to enable media [ 990.496191][ T2166] netlink: 'syz.3.7542': attribute type 1 has an invalid length. [ 990.562577][ T2166] bond4: entered promiscuous mode [ 990.568366][ T2166] 8021q: adding VLAN 0 to HW filter on device bond4 [ 990.651752][ T2176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7545'. [ 990.897414][ T2183] netlink: 'syz.3.7547': attribute type 2 has an invalid length. [ 990.917883][ T2183] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7547'. [ 990.989993][ T2183] : entered promiscuous mode [ 991.078742][ T2200] netlink: 'syz.2.7550': attribute type 7 has an invalid length. [ 991.109429][ T2200] netlink: 140 bytes leftover after parsing attributes in process `syz.2.7550'. [ 991.130881][ T2204] openvswitch: netlink: Multiple metadata blocks provided [ 991.174818][ T2203] netlink: 'syz.1.7551': attribute type 1 has an invalid length. [ 991.191336][ T2200] netlink: 512 bytes leftover after parsing attributes in process `syz.2.7550'. [ 991.213618][ T2203] netlink: 'syz.1.7551': attribute type 2 has an invalid length. [ 991.361118][ T2209] xt_cluster: node mask cannot exceed total number of nodes [ 991.623085][ T2228] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7559'. [ 991.637670][ T2228] netlink: 680 bytes leftover after parsing attributes in process `syz.4.7559'. [ 991.686290][ T2232] netlink: 'syz.3.7560': attribute type 1 has an invalid length. [ 991.823074][ T2238] openvswitch: netlink: VXLAN extension 61 out of range max 1 [ 992.211054][ T2266] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 992.266238][ T2269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7571'. [ 992.291549][ T2272] netlink: 'syz.1.7565': attribute type 1 has an invalid length. [ 992.354397][ T2272] 8021q: adding VLAN 0 to HW filter on device bond8 [ 992.383157][ T2273] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 992.395158][ T2273] bond4: (slave vti0): Error -95 calling set_mac_address [ 992.681302][ T2241] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 992.699688][ T2296] SET target dimension over the limit! [ 992.999324][ T2310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7580'. [ 993.057623][ T2317] x_tables: unsorted entry at hook 1 [ 993.089113][ T2310] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 993.133658][ T2319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7582'. [ 993.177950][ T2315] vlan3: entered allmulticast mode [ 993.441197][T17316] Bluetooth: hci2: link tx timeout [ 993.448045][T17316] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 993.466579][T17316] Bluetooth: hci2: link tx timeout [ 993.472347][T17316] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 993.534873][ T2340] syzkaller0: entered promiscuous mode [ 993.540770][ T2340] syzkaller0: entered allmulticast mode [ 993.839395][ T2351] netlink: Unknown nat attribute (0) [ 993.844964][ T2351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 994.144391][ T2361] syzkaller1: entered promiscuous mode [ 994.150336][ T2361] syzkaller1: entered allmulticast mode [ 994.533553][ T2377] netlink: 'syz.2.7597': attribute type 14 has an invalid length. [ 995.101558][ T2406] sctp: [Deprecated]: syz.1.7607 (pid 2406) Use of int in maxseg socket option. [ 995.101558][ T2406] Use struct sctp_assoc_value instead [ 995.218328][T17316] Bluetooth: hci1: command 0x0406 tx timeout [ 995.538039][T28735] Bluetooth: hci2: command 0x0405 tx timeout [ 996.379768][ T2329] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 996.619946][ T2412] __nla_validate_parse: 1 callbacks suppressed [ 996.619968][ T2412] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7610'. [ 996.656553][ T2412] IPVS: Error connecting to the multicast addr [ 996.908074][ T2433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7616'. [ 996.970171][ T2438] tap0: tun_chr_ioctl cmd 1074025672 [ 996.985071][ T2438] tap0: ignored: set checksum disabled [ 997.022080][ T2444] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7620'. [ 997.058896][ T2442] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7619'. [ 997.085587][ T2447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7620'. [ 997.095419][ T2442] tipc: Enabled bearer , priority 18 [ 997.355970][ T2471] gtp1: entered promiscuous mode [ 997.370602][ T2471] gtp1: entered allmulticast mode [ 997.630959][T28735] Bluetooth: hci2: command 0x0405 tx timeout [ 997.702231][ T2492] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 998.369285][ T2546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7639'. [ 998.400638][ T2546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7639'. [ 998.733344][ T2557] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7643'. [ 998.769865][ T2557] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7643'. [ 998.944222][ T2566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7645'. [ 998.977168][ T2566] bridge: RTM_NEWNEIGH with invalid ether address [ 999.209161][ T2574] netlink: 'syz.2.7648': attribute type 3 has an invalid length. [ 999.237064][ T2574] netlink: 'syz.2.7648': attribute type 1 has an invalid length. [ 999.273884][ T2577] netlink: 'syz.2.7648': attribute type 3 has an invalid length. [ 999.323193][ T2577] netlink: 'syz.2.7648': attribute type 1 has an invalid length. [ 999.392611][ T2586] netlink: 'syz.3.7650': attribute type 10 has an invalid length. [ 999.534921][ T2592] netlink: 'syz.4.7651': attribute type 1 has an invalid length. [ 999.628947][ T2600] bond5: entered promiscuous mode [ 999.653293][ T2600] bond5: entered allmulticast mode [ 999.728339][ T2590] vlan2: entered allmulticast mode [ 999.738742][ T2604] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 1000.022158][ T2619] netlink: 'syz.2.7659': attribute type 83 has an invalid length. [ 1000.560010][ T2639] syzkaller1: entered promiscuous mode [ 1000.584240][ T2639] syzkaller1: entered allmulticast mode [ 1000.790620][ T2657] netlink: 'syz.4.7670': attribute type 1 has an invalid length. [ 1000.936159][ T2664] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1000.951384][ T2670] veth0_to_bridge: entered promiscuous mode [ 1001.080801][ T2669] veth0_to_bridge: left promiscuous mode [ 1002.623012][ T2722] netlink: 'syz.0.7685': attribute type 3 has an invalid length. [ 1002.675653][ T2729] ipvlan0: entered promiscuous mode [ 1002.715605][ T2730] ipvlan1: entered promiscuous mode [ 1003.185507][ T2761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1003.252017][ T2761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1003.401433][ T2767] lo: entered allmulticast mode [ 1003.429704][ T2767] lo: left allmulticast mode [ 1003.535818][ T2767] syzkaller0: entered promiscuous mode [ 1003.580492][ T2767] syzkaller0: entered allmulticast mode [ 1003.810558][ T5288] veth0_vlan: left promiscuous mode [ 1003.867449][T18477] veth0_vlan: entered promiscuous mode [ 1005.341577][ T2882] __nla_validate_parse: 9 callbacks suppressed [ 1005.341596][ T2882] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7705'. [ 1005.446133][ T2892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7710'. [ 1005.450279][ T2888] netlink: 'syz.2.7709': attribute type 2 has an invalid length. [ 1005.473120][T28735] Bluetooth: hci4: command 0x0406 tx timeout [ 1005.645315][ T2892] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1006.249423][ T2919] netlink: 'syz.3.7716': attribute type 4 has an invalid length. [ 1006.276569][ T2893] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1006.485592][ T2929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1006.552743][ T2933] mac80211_hwsim hwsim62 syzkaller0: entered promiscuous mode [ 1006.571700][ T2933] mac80211_hwsim hwsim62 syzkaller0: entered allmulticast mode [ 1006.744172][ T2943] xt_hashlimit: size too large, truncated to 1048576 [ 1006.874418][ T2949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7724'. [ 1007.362514][ T2958] syzkaller0: entered promiscuous mode [ 1007.381704][ T2958] syzkaller0: entered allmulticast mode [ 1007.451282][ T2963] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7729'. [ 1007.538902][ T2336] Bluetooth: hci1: command 0x0406 tx timeout [ 1007.685412][ T2966] lo speed is unknown, defaulting to 1000 [ 1007.706277][ T2970] vlan0: entered allmulticast mode [ 1007.759472][ T2966] lo speed is unknown, defaulting to 1000 [ 1008.059560][ T2977] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7735'. [ 1008.139733][ T2977] netlink: 'syz.2.7735': attribute type 21 has an invalid length. [ 1008.324098][ T2978] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1008.691103][ T2986] ip6gre1: entered allmulticast mode [ 1008.948929][ T2992] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7740'. [ 1009.070029][ T2994] sctp: [Deprecated]: syz.0.7741 (pid 2994) Use of int in maxseg socket option. [ 1009.070029][ T2994] Use struct sctp_assoc_value instead [ 1009.192380][ T2996] mac80211_hwsim hwsim61 wlan0: entered promiscuous mode [ 1009.230239][ T2996] batman_adv: batadv0: Adding interface: wlan0 [ 1009.253453][ T2996] batman_adv: batadv0: Interface activated: wlan0 [ 1009.521633][ T3014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7745'. [ 1009.550861][ T3015] netlink: 'syz.4.7746': attribute type 3 has an invalid length. [ 1009.569562][ T3015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7746'. [ 1009.598066][ T3015] netlink: 'syz.4.7746': attribute type 3 has an invalid length. [ 1009.626670][ T3015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7746'. [ 1009.718116][ T3015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7746'. [ 1009.829034][ T3029] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1009.851301][ T3029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1010.755116][ T3078] __nla_validate_parse: 2 callbacks suppressed [ 1010.755138][ T3078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7759'. [ 1010.774178][ T3078] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7759'. [ 1010.866414][ T3078] netlink: 592 bytes leftover after parsing attributes in process `syz.4.7759'. [ 1010.984459][ T3085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7761'. [ 1010.997291][ T3085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1011.021194][ T3085] netlink: 232 bytes leftover after parsing attributes in process `syz.2.7761'. [ 1011.090516][ T3090] netlink: 'syz.4.7762': attribute type 1 has an invalid length. [ 1011.282940][ T3090] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1011.304678][ T3094] ipvlan1: entered allmulticast mode [ 1011.311022][ T3094] mac80211_hwsim hwsim58 wlan1: entered allmulticast mode [ 1011.371699][ T3095] bond5: (slave geneve2): making interface the new active one [ 1011.392734][ T3095] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 1011.663739][ T3114] netlink: 'syz.0.7768': attribute type 1 has an invalid length. [ 1011.922310][ T3130] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20001 [ 1012.249051][ T3149] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7778'. [ 1012.281223][ T3149] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 1012.829176][ T3174] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1012.999919][ T3178] netlink: 'syz.2.7785': attribute type 1 has an invalid length. [ 1013.153333][ T3178] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1013.289620][ T3199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7788'. [ 1013.375793][ T3189] bond6: (slave gretap1): making interface the new active one [ 1013.426622][ T3189] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 1013.493918][ T3184] netlink: 'syz.0.7787': attribute type 1 has an invalid length. [ 1013.548443][ T3184] nbd: error processing sock list [ 1013.606464][ T3184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7787'. [ 1014.037640][ T3231] netlink: 50 bytes leftover after parsing attributes in process `syz.2.7794'. [ 1014.302254][ T3236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7797'. [ 1014.338362][ T3238] "syz.4.7796" (3238) uses obsolete ecb(arc4) skcipher [ 1014.363639][ T3235] 0: reclassify loop, rule prio 0, protocol 03 [ 1015.240202][ T3272] netlink: 'syz.1.7808': attribute type 11 has an invalid length. [ 1015.289067][ T3272] netlink: 'syz.1.7808': attribute type 11 has an invalid length. [ 1015.417073][ T3278] lo speed is unknown, defaulting to 1000 [ 1015.479817][ T3278] lo speed is unknown, defaulting to 1000 [ 1015.556218][ T3285] netlink: 'syz.2.7812': attribute type 2 has an invalid length. [ 1015.845110][ T3293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1015.852881][ T3294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1015.865054][ T3295] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 1015.895922][ T3294] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 1016.393394][ T3311] __nla_validate_parse: 7 callbacks suppressed [ 1016.393415][ T3311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7816'. [ 1016.689371][ T3322] netlink: 'syz.4.7818': attribute type 1 has an invalid length. [ 1016.709997][ T3322] netlink: 236 bytes leftover after parsing attributes in process `syz.4.7818'. [ 1017.194738][ T3338] veth0_to_bridge: entered allmulticast mode [ 1017.270194][T27367] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.542635][ T3348] netlink: 'syz.1.7825': attribute type 5 has an invalid length. [ 1017.579009][ T3348] netlink: 'syz.1.7825': attribute type 9 has an invalid length. [ 1017.592337][ T3350] mac80211_hwsim hwsim62 syzkaller0: left promiscuous mode [ 1017.609866][ T3348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7825'. [ 1017.633540][ T3350] mac80211_hwsim hwsim62 syzkaller0: left allmulticast mode [ 1017.781413][ T3359] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7826'. [ 1017.869228][ T3361] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7828'. [ 1018.519471][ T3376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7831'. [ 1018.648715][ T3382] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7832'. [ 1018.690380][ T3382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7832'. [ 1018.736562][ T3388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7836'. [ 1018.814794][ T3392] tipc: Started in network mode [ 1018.815614][ T3388] tls_set_device_offload: netdev not found [ 1018.839433][ T3392] tipc: Node identity 659, cluster identity 4711 [ 1018.866265][ T3392] tipc: Node number set to 1625 [ 1019.054303][ T3402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7840'. [ 1020.030513][ T3451] netlink: 'syz.1.7854': attribute type 1 has an invalid length. [ 1020.043625][ T3451] netlink: 'syz.1.7854': attribute type 2 has an invalid length. [ 1020.221787][ T3454] netlink: 'syz.0.7855': attribute type 11 has an invalid length. [ 1020.411159][ T3464] netlink: 'syz.1.7858': attribute type 4 has an invalid length. [ 1020.438774][ T3465] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 1020.452808][ T9863] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.821671][ T3474] syzkaller0: entered promiscuous mode [ 1020.836499][ T3474] syzkaller0: entered allmulticast mode [ 1020.922569][ T3474] netlink: 'syz.4.7863': attribute type 21 has an invalid length. [ 1020.935112][ T3478] mac80211_hwsim hwsim62 syzkaller0: entered promiscuous mode [ 1020.941512][ T3474] IPv6: NLM_F_CREATE should be specified when creating new route [ 1020.951168][ T3474] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1020.958494][ T3474] IPv6: NLM_F_CREATE should be set when creating new route [ 1020.965833][ T3474] IPv6: NLM_F_CREATE should be set when creating new route [ 1020.971277][ T3478] mac80211_hwsim hwsim62 syzkaller0: entered allmulticast mode [ 1020.973291][ T3474] IPv6: NLM_F_CREATE should be set when creating new route [ 1021.340780][ T3490] bridge_slave_0: invalid flags given to default FDB implementation [ 1021.405123][ T3497] __nla_validate_parse: 11 callbacks suppressed [ 1021.405145][ T3497] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7871'. [ 1021.424421][ T3499] netlink: 'syz.2.7870': attribute type 1 has an invalid length. [ 1021.663255][ T3507] veth0_macvtap: entered allmulticast mode [ 1021.679630][ T3507] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1021.944142][ T3524] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.7880'. [ 1021.973258][ T3525] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.7880'. [ 1022.075147][ T3530] vlan2: entered promiscuous mode [ 1022.091567][ T3530] veth1_to_bond: entered promiscuous mode [ 1022.113079][ T3530] vlan2: entered allmulticast mode [ 1022.131200][ T3530] veth1_to_bond: entered allmulticast mode [ 1022.298998][ T3536] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7884'. [ 1022.601049][ T3546] ip6gre0: Master is either lo or non-ether device [ 1022.639546][ T3549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7886'. [ 1022.765123][ T3560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7888'. [ 1023.204966][ T3580] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7895'. [ 1023.481307][ T3597] tipc: Trying to set illegal importance in message [ 1023.617277][ T3602] mac80211_hwsim hwsim62 syzkaller0: left promiscuous mode [ 1023.639773][ T3602] mac80211_hwsim hwsim62 syzkaller0: left allmulticast mode [ 1024.049240][ T3621] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 1024.091379][ T3621] bond5 (unregistering): Released all slaves [ 1024.219263][ T3630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7908'. [ 1024.310163][ T3628] bond7: option lp_interval: invalid value (0) [ 1024.336166][ T3628] bond7: option lp_interval: allowed values 1 - 2147483647 [ 1024.378913][ T3628] bond7 (unregistering): Released all slaves [ 1024.809868][ T3649] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 1024.826895][ T3655] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7915'. [ 1024.859572][ T3660] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7915'. [ 1025.436143][ T3688] ªªªªª»: renamed from dummy0 (while UP) [ 1026.091804][ T3711] xt_ecn: cannot match TCP bits for non-tcp packets [ 1026.325617][ T3725] netlink: 'syz.4.7934': attribute type 7 has an invalid length. [ 1026.390168][ T3725] netlink: 'syz.4.7934': attribute type 7 has an invalid length. [ 1026.429462][ T3732] __nla_validate_parse: 4 callbacks suppressed [ 1026.429482][ T3732] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7935'. [ 1026.466831][ T3725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7934'. [ 1026.489587][ T3732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7935'. [ 1026.513937][ T3725] x_tables: duplicate underflow at hook 1 [ 1026.524048][ T3732] netlink: 'syz.2.7935': attribute type 1 has an invalid length. [ 1026.562335][ T3732] netlink: 'syz.2.7935': attribute type 2 has an invalid length. [ 1027.042585][ T3758] ip6gre1: entered promiscuous mode [ 1027.293755][ T3765] syzkaller0: entered promiscuous mode [ 1027.307551][ T3765] syzkaller0: entered allmulticast mode [ 1027.315407][ T3772] netlink: 'syz.2.7948': attribute type 2 has an invalid length. [ 1027.345400][ T3772] netlink: 244 bytes leftover after parsing attributes in process `syz.2.7948'. [ 1027.603558][ T3782] nbd: must specify a size in bytes for the device [ 1027.780441][ T3789] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7953'. [ 1027.818350][ T3789] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 1028.251195][ T3805] netlink: 576 bytes leftover after parsing attributes in process `syz.4.7959'. [ 1028.392178][ T3813] netlink: 'syz.2.7960': attribute type 29 has an invalid length. [ 1028.419654][ T3813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7960'. [ 1028.450518][ T3813] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7960'. [ 1029.331264][ T3857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7975'. [ 1029.343237][ T3851] netlink: 'syz.2.7973': attribute type 1 has an invalid length. [ 1029.367819][ T3851] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7973'. [ 1029.422466][ T3862] rdma_op ffff88804c86d1f0 conn xmit_rdma 0000000000000000 [ 1030.629897][ T3925] syzkaller0: entered promiscuous mode [ 1030.654227][ T3925] syzkaller0: entered allmulticast mode [ 1030.694929][ T3934] tipc: Failed to remove unknown binding: 66,0,0/0:2098214259/2098214261 [ 1030.729041][ T3934] tipc: Failed to remove unknown binding: 66,0,0/0:2098214259/2098214260 [ 1030.771869][ T3934] tipc: Failed to remove unknown binding: 66,0,0/0:2098214259/2098214261 [ 1030.839982][ T3934] tipc: Failed to remove unknown binding: 66,0,0/0:2098214259/2098214260 [ 1030.934908][ T3950] netlink: 'syz.1.7997': attribute type 1 has an invalid length. [ 1031.046846][ T3950] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1031.902518][ T4015] netlink: 'syz.0.8008': attribute type 2 has an invalid length. [ 1031.941069][ T3994] tipc: Enabling of bearer rejected, failed to enable media [ 1031.993580][ T4015] : entered promiscuous mode [ 1032.006580][ T4017] tipc: Failed to remove unknown binding: 66,1,1/1625:2539815747/2539815749 [ 1032.442113][ T4034] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1032.452854][ T4034] __nla_validate_parse: 5 callbacks suppressed [ 1032.452876][ T4034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8015'. [ 1032.595655][ T4042] x_tables: unsorted underflow at hook 4 [ 1032.608883][ T4041] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8019'. [ 1032.622632][ T4044] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8019'. [ 1032.819975][ T4056] netlink: 'syz.0.8022': attribute type 1 has an invalid length. [ 1032.896156][ T4062] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 1033.005200][ T4056] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1033.463299][ T4099] openvswitch: netlink: Multiple metadata blocks provided [ 1033.662921][ T4113] bond7: Unable to set up delay as MII monitoring is disabled [ 1033.720611][ T4113] bond7 (unregistering): Released all slaves [ 1033.813301][ T4122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8038'. [ 1033.862818][ T4122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8038'. [ 1033.952682][ T4126] bond5: option all_slaves_active: invalid value (222) [ 1033.964168][ T4126] bond5 (unregistering): Released all slaves [ 1034.165158][ T4149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8042'. [ 1034.493081][ T4162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8047'. [ 1034.944482][ T4186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8056'. [ 1034.944525][ T4187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8056'. [ 1035.040085][ T4187] bond11: option xmit_hash_policy: invalid value (64) [ 1035.051808][ T4187] bond11 (unregistering): Released all slaves [ 1035.129902][ T4201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8060'. [ 1035.147090][ T4203] netlink: 'syz.3.8058': attribute type 1 has an invalid length. [ 1035.153101][ T4186] bond11: option xmit_hash_policy: invalid value (64) [ 1035.162938][ T4203] netlink: 'syz.3.8058': attribute type 3 has an invalid length. [ 1035.174138][ T4186] bond11 (unregistering): Released all slaves [ 1035.284132][ T4201] bond7 (unregistering): Released all slaves [ 1035.406851][ T4193] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1035.425159][ T4193] bond5 (unregistering): Released all slaves [ 1035.838962][ T9863] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1035.866352][ T9863] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1035.978226][T27367] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1036.092309][ T4240] netlink: 'syz.2.8070': attribute type 10 has an invalid length. [ 1036.143662][ T4240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1036.173200][ T4240] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1036.287014][ T4256] netlink: 'syz.2.8073': attribute type 5 has an invalid length. [ 1036.455201][ T4265] netlink: 'syz.1.8075': attribute type 1 has an invalid length. [ 1036.480036][ T4265] netlink: 'syz.1.8075': attribute type 1 has an invalid length. [ 1036.815633][ T4283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1039.217975][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1039.262273][ T4292] __nla_validate_parse: 11 callbacks suppressed [ 1039.262294][ T4292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8081'. [ 1039.316549][ T4294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1039.529593][ T4312] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8089'. [ 1039.582975][ T4314] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1039.625534][ T4316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8091'. [ 1039.656452][ T4316] netlink: 'syz.4.8091': attribute type 1 has an invalid length. [ 1039.794227][ T4320] netlink: 'syz.0.8093': attribute type 83 has an invalid length. [ 1039.829549][ T4326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1039.881760][ T4324] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8095'. [ 1039.985321][ T4331] netlink: 'syz.3.8098': attribute type 1 has an invalid length. [ 1040.029184][ T4331] bond5: entered promiscuous mode [ 1040.035377][ T4331] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1040.042259][ T4335] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8099'. [ 1040.076323][ T4339] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8100'. [ 1040.085782][ T4339] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8100'. [ 1040.111982][ T4331] macvtap1: entered allmulticast mode [ 1040.155896][ T4337] macvtap2: entered allmulticast mode [ 1040.210031][ T4331] bond5: (slave bridge3): making interface the new active one [ 1040.225847][ T4341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8102'. [ 1040.231018][ T4331] bridge3: entered promiscuous mode [ 1040.302095][ T4331] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 1040.332127][ T4350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8103'. [ 1040.470803][ T4358] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1040.493163][ T4359] netlink: 'syz.3.8106': attribute type 3 has an invalid length. [ 1040.521477][ T4359] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8106'. [ 1040.700910][ T4368] netlink: 'syz.3.8108': attribute type 3 has an invalid length. [ 1040.734665][ T4370] netlink: 'syz.2.8109': attribute type 6 has an invalid length. [ 1041.293794][ T4399] xt_HMARK: proto mask must be zero with L3 mode [ 1041.654565][ T4423] netlink: 'syz.4.8124': attribute type 1 has an invalid length. [ 1041.784329][ T4423] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1042.003885][ T4446] netlink: 'syz.2.8129': attribute type 1 has an invalid length. [ 1042.129662][ T4456] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1042.208794][ T4446] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1042.375022][ T4456] xt_hashlimit: size too large, truncated to 1048576 [ 1042.403063][ T4462] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1042.474824][ T4462] bond8 (unregistering): Released all slaves [ 1042.837953][ T4493] netlink: 'syz.3.8140': attribute type 23 has an invalid length. [ 1042.862001][ T4494] netlink: 'syz.3.8140': attribute type 23 has an invalid length. [ 1043.168756][ T4517] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1043.811457][ T4561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.291072][ T4583] __nla_validate_parse: 14 callbacks suppressed [ 1044.291094][ T4583] netlink: 6 bytes leftover after parsing attributes in process `syz.4.8168'. [ 1044.408976][ T4590] team0: No ports can be present during mode change [ 1044.686255][ T4605] tipc: Failed to obtain node identity [ 1044.697613][ T4605] tipc: Enabling of bearer rejected, failed to enable media [ 1044.754916][ T4610] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8178'. [ 1044.846664][ T4609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8178'. [ 1044.862111][ T4610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8178'. [ 1044.926117][ T4623] validate_nla: 3 callbacks suppressed [ 1044.926154][ T4623] netlink: 'syz.0.8183': attribute type 1 has an invalid length. [ 1044.976972][ T4628] netlink: 'syz.2.8184': attribute type 1 has an invalid length. [ 1044.987336][ T4623] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1044.995007][ T4628] netlink: 'syz.2.8184': attribute type 11 has an invalid length. [ 1045.005300][ T4628] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8184'. [ 1045.015713][ T4628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8184'. [ 1045.046555][ T4624] bond8: (slave veth3): Enslaving as a backup interface with a down link [ 1045.254451][ T4643] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8188'. [ 1045.508931][T30169] tipc: Resetting bearer [ 1045.865304][ T4675] mac80211_hwsim hwsim62 syzkaller0: entered promiscuous mode [ 1045.886528][ T4675] mac80211_hwsim hwsim62 syzkaller0: entered allmulticast mode [ 1045.925183][ T4677] netlink: 'syz.2.8198': attribute type 1 has an invalid length. [ 1045.956560][ T4675] netlink: 'syz.2.8198': attribute type 1 has an invalid length. [ 1046.167126][ T4700] openvswitch: netlink: IP tunnel TTL not specified. [ 1046.204522][ T4700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1046.336482][ T4715] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8208'. [ 1046.394702][ T4718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8208'. [ 1046.499334][ T4715] bond8: entered allmulticast mode [ 1046.511382][ T4715] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1046.721898][ T4729] syz_tun: entered allmulticast mode [ 1046.776463][ T4734] dvmrp8: entered allmulticast mode [ 1046.790076][ T4726] syz_tun: left allmulticast mode [ 1047.197540][ T4750] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8220'. [ 1047.606252][ T4784] lo speed is unknown, defaulting to 1000 [ 1047.642659][ T4784] lo speed is unknown, defaulting to 1000 [ 1047.962342][ T4805] sctp: [Deprecated]: syz.4.8236 (pid 4805) Use of int in max_burst socket option deprecated. [ 1047.962342][ T4805] Use struct sctp_assoc_value instead [ 1049.056105][ T4859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1049.348423][ T4875] __nla_validate_parse: 7 callbacks suppressed [ 1049.348442][ T4875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8253'. [ 1049.392919][ T4880] netlink: 'syz.3.8254': attribute type 1 has an invalid length. [ 1049.412547][ T4880] netlink: 'syz.3.8254': attribute type 1 has an invalid length. [ 1049.433576][ T4880] netlink: 'syz.3.8254': attribute type 1 has an invalid length. [ 1049.449024][ T4880] netlink: 'syz.3.8254': attribute type 1 has an invalid length. [ 1049.492075][ T4880] netlink: 'syz.3.8254': attribute type 1 has an invalid length. [ 1049.731838][ T4892] bridge_slave_0 (unregistering): left promiscuous mode [ 1049.767573][ T4892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.829129][ T4894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8259'. [ 1049.961134][ T4900] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8256'. [ 1050.014988][ T4885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8256'. [ 1050.365175][ T4924] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8270'. [ 1050.434677][ T4925] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1050.455746][ T4930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8268'. [ 1050.480142][ T4930] validate_nla: 28 callbacks suppressed [ 1050.480163][ T4930] netlink: 'syz.3.8268': attribute type 10 has an invalid length. [ 1050.485418][ T4923] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1050.521980][ T4934] lo: entered allmulticast mode [ 1050.542725][ T4934] tunl0: entered allmulticast mode [ 1050.551731][ T4934] gre0: entered allmulticast mode [ 1050.557447][ T4934] gretap0: entered allmulticast mode [ 1050.566732][ T4934] erspan0: entered allmulticast mode [ 1050.573718][ T4934] ip_vti0: entered allmulticast mode [ 1050.600294][ T4934] ip6_vti0: entered allmulticast mode [ 1050.630195][ T4934] sit0: entered allmulticast mode [ 1050.655342][ T4934] ip6tnl0: entered allmulticast mode [ 1050.681933][ T4934] ip6gre0: entered allmulticast mode [ 1050.695172][ T4934] syz_tun: entered allmulticast mode [ 1050.817564][ T4947] bond6: Removing last ns target with arp_interval on [ 1051.048337][ T4965] netlink: 84 bytes leftover after parsing attributes in process `syz.2.8280'. [ 1051.102313][ T4967] netlink: 'syz.0.8281': attribute type 33 has an invalid length. [ 1051.164949][ T4967] bond9: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1051.184519][ T4967] bond9 (unregistering): Released all slaves [ 1051.463489][ T4989] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8286'. [ 1051.480007][ T4989] erspan0: left promiscuous mode [ 1051.491266][ T4990] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1051.756751][ T4999] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1051.795835][ T5002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8291'. [ 1051.818840][ T5002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1051.907160][ T5002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1052.196175][ T5023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8296'. [ 1052.397076][ T5033] bond7: Unable to set down delay as MII monitoring is disabled [ 1052.407386][ T5033] bond7 (unregistering): Released all slaves [ 1052.604220][ T5045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1052.973602][ T5073] netlink: 'syz.1.8310': attribute type 1 has an invalid length. [ 1052.990477][ T5072] tipc: Enabled bearer , priority 10 [ 1053.002172][ T5072] netlink: 'syz.4.8308': attribute type 1 has an invalid length. [ 1053.146676][ T5082] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 1053.474272][ T5105] block nbd2: NBD_DISCONNECT [ 1053.492429][ T5105] block nbd2: Send disconnect failed -32 [ 1053.526043][ T5105] block nbd2: shutting down sockets [ 1054.125970][ T5137] netlink: 'syz.1.8317': attribute type 11 has an invalid length. [ 1054.796432][ T9863] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1054.911188][ T9863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1054.920595][ T9863] bond_slave_0: left promiscuous mode [ 1054.926206][ T9863] bond_slave_0: left allmulticast mode [ 1054.937456][ T9863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1054.948636][ T9863] bond_slave_1: left promiscuous mode [ 1054.954289][ T9863] bond_slave_1: left allmulticast mode [ 1054.960658][ T9863] bond0 (unregistering): Released all slaves [ 1054.975576][ T9863] bond1 (unregistering): Released all slaves [ 1055.007498][ T9863] bond2 (unregistering): Released all slaves [ 1055.035873][ T9863] bond3 (unregistering): Released all slaves [ 1055.056860][ T9863] bond4 (unregistering): Released all slaves [ 1055.089532][ T9863] bond5 (unregistering): Released all slaves [ 1055.115048][ T9863] bond6 (unregistering): Released all slaves [ 1055.342635][ T9863] tipc: Disabling bearer [ 1055.358853][ T5148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1055.411765][ T9863] tipc: Left network mode [ 1055.462666][ T5155] __nla_validate_parse: 6 callbacks suppressed [ 1055.462686][ T5155] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8326'. [ 1055.709802][ T5165] sock: sock_timestamping_bind_phc: sock not bind to device [ 1055.780411][ T5165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8328'. [ 1055.865773][ T5169] netlink: 'syz.2.8329': attribute type 1 has an invalid length. [ 1055.884914][ T5175] xt_hashlimit: size too large, truncated to 1048576 [ 1056.272786][ T5178] tc action pedit offset must be on 32 bit boundaries [ 1056.281862][ T5178] tc action pedit offset must be on 32 bit boundaries [ 1056.288734][ T5178] tc action pedit offset must be on 32 bit boundaries [ 1056.295548][ T5178] tc action pedit offset must be on 32 bit boundaries [ 1056.302545][ T5178] tc action pedit offset must be on 32 bit boundaries [ 1056.309420][ T5178] tc action pedit offset must be on 32 bit boundaries [ 1056.316225][ T5178] tc action pedit offset must be on 32 bit boundaries [ 1056.323117][ T5178] tc action pedit offset must be on 32 bit boundaries [ 1056.329989][ T5178] tc action pedit offset must be on 32 bit boundaries [ 1056.336834][ T5178] tc action pedit offset must be on 32 bit boundaries [ 1056.343730][ T5178] TC_ACT_REPEAT abuse ? [ 1056.389470][ T5185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8331'. [ 1056.464400][ T5192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8335'. [ 1056.651458][ T5194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1056.703456][ T5199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1057.047640][ T5216] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8342'. [ 1057.233042][ T5220] netlink: 'syz.2.8343': attribute type 1 has an invalid length. [ 1057.261735][ T5222] openvswitch: netlink: IPv4 tun info is not correct [ 1057.486513][ T5220] bond9: entered promiscuous mode [ 1057.503121][ T5220] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1057.513020][ T5231] netlink: 'syz.0.8346': attribute type 21 has an invalid length. [ 1057.533306][ T5231] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8346'. [ 1057.605029][ T5231] syzkaller0: entered promiscuous mode [ 1057.621584][ T5231] syzkaller0: entered allmulticast mode [ 1057.675420][ T9863] hsr_slave_0: left promiscuous mode [ 1057.720440][ T9863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1057.751834][ T9863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1057.762356][ T5235] ip6t_srh: unknown srh invflags 4000 [ 1058.182293][ T9863] team0 (unregistering): Port device team_slave_1 removed [ 1058.459812][ T12] smc: removing ib device syz1 [ 1058.567978][T27368] smbdirect: ib_dev[syz2] removed [ 1058.585205][ T5249] gre2: entered promiscuous mode [ 1058.603824][ T5249] gre2: entered allmulticast mode [ 1058.625705][ T5244] syzkaller1: entered promiscuous mode [ 1058.635644][ T5244] syzkaller1: entered allmulticast mode [ 1058.650883][ T12] smbdirect: ib_dev[syz1] removed [ 1058.793418][ T5278] netlink: 'syz.4.8357': attribute type 1 has an invalid length. [ 1059.076527][ T5298] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8360'. [ 1059.096452][ T5299] netlink: 'syz.4.8357': attribute type 10 has an invalid length. [ 1059.107034][ T5278] bond10: option mode: invalid value (8) [ 1059.116738][ T5278] bond10 (unregistering): Released all slaves [ 1059.137765][ T5299] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8357'. [ 1059.468492][ T5293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8359'. [ 1059.510119][ T5292] bond1: (slave dummy0): Releasing active interface [ 1059.552297][ T5296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8359'. [ 1059.572259][ T5299] dummy0: entered promiscuous mode [ 1060.264334][T27366] tipc: Subscription rejected, illegal request [ 1060.841756][ T5367] netlink: 'syz.0.8374': attribute type 83 has an invalid length. [ 1061.067627][ T5379] tunl0: entered promiscuous mode [ 1061.081609][ T5379] tunl0: left allmulticast mode [ 1061.093075][ T5379] netlink: 'syz.2.8377': attribute type 4 has an invalid length. [ 1061.116577][ T5379] __nla_validate_parse: 5 callbacks suppressed [ 1061.116597][ T5379] netlink: 9 bytes leftover after parsing attributes in process `syz.2.8377'. [ 1061.502262][ T5397] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8382'. [ 1061.582653][ T5402] netlink: 168 bytes leftover after parsing attributes in process `syz.2.8383'. [ 1062.045237][ T5419] ip6erspan0: entered promiscuous mode [ 1062.073390][ T5427] netlink: 'syz.0.8390': attribute type 3 has an invalid length. [ 1062.088409][ T5431] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8391'. [ 1062.274242][ T5441] netlink: 'syz.2.8393': attribute type 3 has an invalid length. [ 1062.302945][ T5441] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1063.112406][ T5484] netdevsim netdevsim0: Direct firmware load for ÿ failed with error -2 [ 1063.123649][ T5484] netdevsim netdevsim0: Falling back to sysfs fallback for: ÿ [ 1063.196101][ T5486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8403'. [ 1063.205285][ T5486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8403'. [ 1063.306170][ T9863] IPVS: stop unused estimator thread 0... [ 1063.591532][ T5497] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1063.782166][ T5510] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 1064.045130][ T5529] bond7 (unregistering): Released all slaves [ 1064.330649][ T5545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8419'. [ 1064.896376][ T5572] netlink: 'syz.1.8426': attribute type 2 has an invalid length. [ 1064.914259][ T5572] netlink: 244 bytes leftover after parsing attributes in process `syz.1.8426'. [ 1065.040144][ T5576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8427'. [ 1065.125037][ T5576] bond10: Invalid ad_actor_system MAC address. [ 1065.149032][ T5576] bond10: option ad_actor_system: invalid value (1) [ 1065.187388][ T5576] bond10 (unregistering): Released all slaves [ 1065.251954][ T5582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8429'. [ 1065.456565][ T5591] syzkaller0: entered promiscuous mode [ 1065.464416][ T5591] syzkaller0: entered allmulticast mode [ 1065.836573][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1065.859781][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 1065.959603][ T5600] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1065.987971][ T5600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1066.023488][ T5600] veth1_vlan: left promiscuous mode [ 1066.048203][ T5600] veth1_vlan: entered promiscuous mode [ 1066.063035][ T5600] veth1_macvtap: left promiscuous mode [ 1066.070401][ T5600] veth0_macvtap: left promiscuous mode [ 1066.077306][ T5600] veth0_macvtap: entered promiscuous mode [ 1066.085434][ T5600] veth1_macvtap: entered promiscuous mode [ 1066.104242][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1066.131241][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1066.142313][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1066.157274][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1066.182530][ T5600] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1066.275892][ T5601] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1066.313487][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.320751][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1066.358680][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.366005][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1066.561264][ T5634] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 1066.576421][ T5635] netlink: 'syz.4.8439': attribute type 1 has an invalid length. [ 1066.611479][ T5635] netlink: 'syz.4.8439': attribute type 4 has an invalid length. [ 1066.663510][ T5635] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.8439'. [ 1066.713249][ T5632] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8438'. [ 1066.760977][ T5640] bridge_slave_1: left allmulticast mode [ 1066.778960][ T5640] bridge_slave_1: left promiscuous mode [ 1066.798969][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.830596][ T5646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8444'. [ 1066.833027][ T5640] bridge_slave_0: left allmulticast mode [ 1066.846004][ T5640] bridge_slave_0: left promiscuous mode [ 1066.852797][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.300052][ T5668] netlink: 'syz.0.8450': attribute type 11 has an invalid length. [ 1067.326029][ T5671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8453'. [ 1067.359624][ T5671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8453'. [ 1067.639726][ T5681] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1067.859405][ T5693] netlink: 'syz.0.8458': attribute type 1 has an invalid length. [ 1070.621376][ T5722] bridge2: entered promiscuous mode [ 1070.626750][ T5722] bridge2: entered allmulticast mode [ 1070.635494][ T5722] team0: Port device bridge2 added [ 1070.641775][ T5724] bridge0: port 1(team0) entered blocking state [ 1070.649059][ T5724] bridge0: port 1(team0) entered disabled state [ 1070.655833][ T5724] team0: entered allmulticast mode [ 1070.661843][ T5724] team_slave_0: entered allmulticast mode [ 1070.667640][ T5724] team_slave_1: entered allmulticast mode [ 1070.676150][ T5724] team0: entered promiscuous mode [ 1070.681915][ T5724] team_slave_0: entered promiscuous mode [ 1070.688147][ T5724] team_slave_1: entered promiscuous mode [ 1070.695201][ T5724] bridge0: port 1(team0) entered blocking state [ 1070.703965][ T5724] bridge0: port 1(team0) entered forwarding state [ 1070.831240][ T5736] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8468'. [ 1070.854973][ T5736] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1070.862328][ T5736] IPv6: NLM_F_CREATE should be set when creating new route [ 1070.911594][ T5739] netlink: 'syz.4.8468': attribute type 1 has an invalid length. [ 1071.243890][ T5762] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8475'. [ 1071.254879][ T5741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8470'. [ 1071.272511][ T5761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8475'. [ 1071.373449][ T5769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8476'. [ 1071.529565][ T5778] netlink: 'syz.4.8480': attribute type 1 has an invalid length. [ 1071.691495][ T5786] __nla_validate_parse: 1 callbacks suppressed [ 1071.691515][ T5786] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8480'. [ 1071.746076][ T5790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8483'. [ 1071.756029][ T5790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8483'. [ 1071.781759][ T5778] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1071.804425][ T5778] bond10: (slave bond11): making interface the new active one [ 1071.814801][ T5778] bond10: (slave bond11): Enslaving as an active interface with an up link [ 1071.844172][ T5796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8482'. [ 1071.862939][ T5785] bond10: (slave gretap2): Enslaving as a backup interface with an up link [ 1071.890339][ T5790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8483'. [ 1071.900495][ T5790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8483'. [ 1071.912753][ T5786] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1072.226428][ T5812] veth0: entered promiscuous mode [ 1072.254950][ T5812] veth0: left promiscuous mode [ 1072.332391][ T5819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8489'. [ 1072.432868][ T5824] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8490'. [ 1072.463445][ T5824] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8490'. [ 1072.488058][ T5824] netlink: 'syz.3.8490': attribute type 6 has an invalid length. [ 1072.510059][ T5824] netlink: 'syz.3.8490': attribute type 5 has an invalid length. [ 1072.529037][ T5824] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8490'. [ 1072.816324][ T5845] geneve4: entered promiscuous mode [ 1072.830387][ T5845] geneve4: entered allmulticast mode [ 1072.847513][ T5851] netlink: 'syz.3.8498': attribute type 1 has an invalid length. [ 1072.848848][T27366] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 1072.869980][T27366] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 1072.899838][T27368] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 1072.929383][T27368] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 1073.015557][ T5854] tipc: Enabled bearer , priority 10 [ 1073.100837][ T5854] team0: Port device team_slave_0 removed [ 1073.295871][ T5873] openvswitch: netlink: Multiple metadata blocks provided [ 1073.307485][ T5853] tipc: Resetting bearer [ 1073.381530][ T5853] tipc: Disabling bearer [ 1073.981380][ T5906] xt_TCPMSS: Only works on TCP SYN packets [ 1074.602098][ T5940] tipc: Started in network mode [ 1074.620599][ T5940] tipc: Node identity 00000000000000000000000000000001, cluster identity 2351 [ 1074.655518][ T5940] tipc: Enabling of bearer rejected, failed to enable media [ 1074.781379][ T5945] netlink: 'syz.1.8524': attribute type 16 has an invalid length. [ 1074.934503][ T5959] syzkaller0: entered promiscuous mode [ 1074.980343][ T5959] syzkaller0: entered allmulticast mode [ 1075.013529][ T5962] netlink: 'syz.3.8528': attribute type 28 has an invalid length. [ 1075.064560][ T5962] netlink: 'syz.3.8528': attribute type 3 has an invalid length. [ 1075.198655][ T5971] netlink: 'syz.3.8531': attribute type 10 has an invalid length. [ 1075.216665][ T5971] veth0_macvtap: left promiscuous mode [ 1075.231629][ T5971] team0: Device veth0_macvtap failed to register rx_handler [ 1075.503437][ T5978] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20003 [ 1075.817655][ T5989] x_tables: duplicate underflow at hook 2 [ 1076.112654][ T6005] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1076.219841][ T6013] netlink: 'syz.4.8543': attribute type 29 has an invalid length. [ 1076.726780][ T6045] dvmrp0: left allmulticast mode [ 1076.764057][ T6047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1076.773647][ T6046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1076.853570][ T6045] __nla_validate_parse: 19 callbacks suppressed [ 1076.853597][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8551'. [ 1076.932906][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8551'. [ 1077.115726][ T6065] IPVS: length: 155 != 24 [ 1077.527330][ T6091] sch_fq: defrate 0 ignored. [ 1077.749532][ T6104] veth0: entered promiscuous mode [ 1077.758769][ T6104] xt_hashlimit: invalid interval [ 1077.764055][ T6100] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8565'. [ 1077.766033][ T6102] veth0: left promiscuous mode [ 1077.954596][ T6115] netlink: zone id is out of range [ 1077.968590][ T6115] netlink: zone id is out of range [ 1077.989954][ T6115] netlink: zone id is out of range [ 1078.010684][ T6115] netlink: zone id is out of range [ 1078.032509][ T6115] netlink: zone id is out of range [ 1078.054722][ T6115] netlink: zone id is out of range [ 1078.141986][ T6111] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 1078.290693][ T6131] netlink: 'syz.2.8574': attribute type 21 has an invalid length. [ 1078.412795][ T6136] netlink: 'syz.4.8575': attribute type 32 has an invalid length. [ 1078.422318][ T6136] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8575'. [ 1078.539593][ T6121] team0: entered promiscuous mode [ 1078.544936][ T6121] team_slave_1: entered promiscuous mode [ 1078.555184][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8572'. [ 1078.565949][ T6126] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1078.642722][ T6131] bond10: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1078.671210][ T6131] bond10 (unregistering): Released all slaves [ 1078.751445][ T6142] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8577'. [ 1078.861242][ T6154] syzkaller0: entered promiscuous mode [ 1078.874064][ T6157] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1078.879996][ T6157] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1078.890029][ T6154] syzkaller0: entered allmulticast mode [ 1079.464343][ T6191] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8594'. [ 1079.489995][ T6191] netlink: 'syz.2.8594': attribute type 1 has an invalid length. [ 1079.498758][ T6191] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8594'. [ 1079.714794][ T6210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8598'. [ 1079.908942][T21522] IPVS: starting estimator thread 0... [ 1080.039020][ T6222] IPVS: using max 25 ests per chain, 60000 per kthread [ 1080.061866][ T6224] tipc: Failed to remove unknown binding: 66,0,0/1625:2812586203/2812586204 [ 1080.074312][ T6224] tipc: Failed to remove unknown binding: 66,0,0/1625:2812586203/2812586204 [ 1080.088454][ T6228] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8604'. [ 1080.138957][ T6228] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1080.332192][ T6243] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1080.351216][ T6243] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1080.388341][ T6248] netlink: 'syz.2.8611': attribute type 13 has an invalid length. [ 1080.396476][ T6248] netlink: 'syz.2.8611': attribute type 58 has an invalid length. [ 1080.631290][ T6266] net_ratelimit: 500 callbacks suppressed [ 1080.631311][ T6266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1080.682954][ T6268] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1080.901342][ T6281] macvlan0: entered promiscuous mode [ 1080.930238][ T6282] tipc: Enabling not permitted [ 1080.950079][ T6282] tipc: Enabling of bearer rejected, failed to enable media [ 1080.983500][ T6289] netlink: 'syz.3.8622': attribute type 18 has an invalid length. [ 1080.996889][ T6289] netlink: 'syz.3.8622': attribute type 21 has an invalid length. [ 1081.006059][ T6290] veth1_macvtap: left promiscuous mode [ 1081.234513][ T6289] netlink: 'syz.3.8622': attribute type 5 has an invalid length. [ 1081.454563][ T6311] netlink: 'syz.3.8629': attribute type 5 has an invalid length. [ 1081.514192][ T6313] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1081.866932][ T6340] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1082.026999][ T6346] netlink: 'syz.1.8637': attribute type 1 has an invalid length. [ 1082.146281][ T6359] __nla_validate_parse: 9 callbacks suppressed [ 1082.146304][ T6359] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8640'. [ 1082.201117][ T6362] netlink: 112 bytes leftover after parsing attributes in process `syz.0.8642'. [ 1082.263420][ T6346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8637'. [ 1082.332976][ T6354] bond11: (slave geneve5): making interface the new active one [ 1082.404676][ T6354] bond11: (slave geneve5): Enslaving as an active interface with an up link [ 1082.461582][ T6346] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1082.494283][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8643'. [ 1082.561097][T27361] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 1082.630439][T27361] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 1082.681351][T27361] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 1082.712703][T27361] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 1082.865325][ T6390] bond7: entered promiscuous mode [ 1082.871908][ T6390] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1083.078225][ T6408] lo: entered promiscuous mode [ 1083.102194][ T6408] lo: left allmulticast mode [ 1083.125448][ T6408] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1083.181662][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8655'. [ 1083.402029][ T5288] veth1_macvtap: entered promiscuous mode [ 1083.783714][ T6447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8661'. [ 1084.867246][ T6505] validate_nla: 1 callbacks suppressed [ 1084.867264][ T6505] netlink: 'syz.4.8672': attribute type 1 has an invalid length. [ 1084.930784][ T6505] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8672'. [ 1085.001204][ T6505] nbd1: detected capacity change from 0 to 127 [ 1085.010965][ T6507] netlink: 'syz.0.8671': attribute type 1 has an invalid length. [ 1085.032332][ T1624] block nbd1: Dead connection, failed to find a fallback [ 1085.042572][ T6507] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8671'. [ 1085.044767][ T1624] block nbd1: shutting down sockets [ 1085.062648][ T1624] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1085.065235][ T6508] netlink: 'syz.0.8671': attribute type 1 has an invalid length. [ 1085.073263][ T1624] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1085.077352][ T1624] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1085.103371][ T1624] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1085.111483][ T1624] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1085.122105][ T1624] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1085.131275][ T1624] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1085.141141][ T1624] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1085.150290][ T1624] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1085.160016][ T1624] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1085.168079][ T1624] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1085.180194][ T1624] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1085.183810][ T6508] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8671'. [ 1085.188184][ T1624] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1085.188216][ T1624] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1085.188333][ T1624] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1085.225705][ T1624] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1085.235800][ T1624] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1085.246082][ T1624] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1085.258300][ T1624] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1085.268757][ T1624] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1085.286828][ T3370] ldm_validate_partition_table(): Disk read failed. [ 1085.296309][ T3370] Dev nbd1: unable to read RDB block 0 [ 1085.309186][ T3370] nbd1: unable to read partition table [ 1085.324701][ T3370] ldm_validate_partition_table(): Disk read failed. [ 1085.336291][ T3370] Dev nbd1: unable to read RDB block 0 [ 1085.344690][ T3370] nbd1: unable to read partition table [ 1085.446881][ T6524] netlink: 'syz.3.8677': attribute type 10 has an invalid length. [ 1085.456440][ T6524] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8677'. [ 1085.543627][ T6524] team0: Port device geneve1 added [ 1085.578083][T27366] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.589721][T27366] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.605564][T27366] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.630098][T27366] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.683276][ T6530] macvtap1: entered promiscuous mode [ 1085.690116][ T6530] macvtap1: entered allmulticast mode [ 1085.695729][ T6530] veth1_vlan: entered allmulticast mode [ 1085.774162][ T6540] netlink: 'syz.1.8681': attribute type 1 has an invalid length. [ 1085.788980][T28735] Bluetooth: hci2: command 0x0405 tx timeout [ 1085.805909][ T6540] netlink: 'syz.1.8681': attribute type 1 has an invalid length. [ 1086.075892][ T6555] netlink: 'syz.0.8684': attribute type 1 has an invalid length. [ 1086.234720][ T6564] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1086.245651][ T6564] bond9: (slave bond10): making interface the new active one [ 1086.254785][ T6564] bond9: (slave bond10): Enslaving as an active interface with an up link [ 1086.284581][ T6555] bond9: (slave gretap3): Enslaving as a backup interface with an up link [ 1086.301406][ T6564] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1086.507555][ T6582] netlink: 'syz.0.8694': attribute type 3 has an invalid length. [ 1086.558965][ T6585] erspan0: vlans aren't supported yet for dev_uc|mc_add() [ 1087.214898][ T6624] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1087.277564][ T6626] __nla_validate_parse: 12 callbacks suppressed [ 1087.277589][ T6626] netlink: 996 bytes leftover after parsing attributes in process `syz.2.8701'. [ 1087.288318][ T6624] veth0: entered promiscuous mode [ 1087.321113][ T6623] veth0: left promiscuous mode [ 1087.586052][ T6640] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8708'. [ 1087.770525][ T6647] [ 1087.772950][ T6647] ====================================================== [ 1087.780023][ T6647] WARNING: possible circular locking dependency detected [ 1087.787089][ T6647] syzkaller #0 Not tainted [ 1087.791557][ T6647] ------------------------------------------------------ [ 1087.798631][ T6647] syz.3.8711/6647 is trying to acquire lock: [ 1087.804647][ T6647] ffffffff8ec848e0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x15b/0x650 [ 1087.813849][ T6647] [ 1087.813849][ T6647] but task is already holding lock: [ 1087.821248][ T6647] ffff88807cca7678 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 1087.830815][ T6647] [ 1087.830815][ T6647] which lock already depends on the new lock. [ 1087.830815][ T6647] [ 1087.841247][ T6647] [ 1087.841247][ T6647] the existing dependency chain (in reverse order) is: [ 1087.850295][ T6647] [ 1087.850295][ T6647] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 1087.857903][ T6647] __might_fault+0xcb/0x130 [ 1087.862976][ T6647] _copy_from_iter+0x100/0x1660 [ 1087.868410][ T6647] tcp_sendmsg_locked+0x2620/0x55c0 [ 1087.874172][ T6647] tcp_sendmsg+0x2f/0x50 [ 1087.878995][ T6647] sock_sendmsg_nosec+0x10e/0x180 [ 1087.884597][ T6647] sock_write_iter+0x2de/0x3e0 [ 1087.889922][ T6647] vfs_write+0x612/0xba0 [ 1087.894716][ T6647] ksys_write+0x150/0x270 [ 1087.899603][ T6647] do_syscall_64+0x174/0x580 [ 1087.904761][ T6647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.911217][ T6647] [ 1087.911217][ T6647] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 1087.918909][ T6647] lock_sock_nested+0x41/0x100 [ 1087.924245][ T6647] inet_shutdown+0x6a/0x390 [ 1087.929398][ T6647] nbd_mark_nsock_dead+0x2cb/0x550 [ 1087.935156][ T6647] recv_work+0x1cee/0x1e10 [ 1087.940135][ T6647] process_scheduled_works+0xa8e/0x14e0 [ 1087.946244][ T6647] worker_thread+0xa47/0xfb0 [ 1087.951402][ T6647] kthread+0x388/0x470 [ 1087.956055][ T6647] ret_from_fork+0x514/0xb70 [ 1087.961211][ T6647] ret_from_fork_asm+0x1a/0x30 [ 1087.966533][ T6647] [ 1087.966533][ T6647] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1087.974233][ T6647] __mutex_lock+0x19d/0x1550 [ 1087.979399][ T6647] nbd_queue_rq+0x373/0x1150 [ 1087.984552][ T6647] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1087.990777][ T6647] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1087.997727][ T6647] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1088.004291][ T6647] blk_mq_run_work_fn+0x16c/0x300 [ 1088.009882][ T6647] process_scheduled_works+0xa8e/0x14e0 [ 1088.015990][ T6647] worker_thread+0xa47/0xfb0 [ 1088.021142][ T6647] kthread+0x388/0x470 [ 1088.025776][ T6647] ret_from_fork+0x514/0xb70 [ 1088.030934][ T6647] ret_from_fork_asm+0x1a/0x30 [ 1088.036249][ T6647] [ 1088.036249][ T6647] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1088.043505][ T6647] __mutex_lock+0x19d/0x1550 [ 1088.048669][ T6647] nbd_queue_rq+0xc1/0x1150 [ 1088.053731][ T6647] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1088.059852][ T6647] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1088.066789][ T6647] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1088.073339][ T6647] blk_mq_run_work_fn+0x16c/0x300 [ 1088.078928][ T6647] process_scheduled_works+0xa8e/0x14e0 [ 1088.085028][ T6647] worker_thread+0xa47/0xfb0 [ 1088.090161][ T6647] kthread+0x388/0x470 [ 1088.094777][ T6647] ret_from_fork+0x514/0xb70 [ 1088.099909][ T6647] ret_from_fork_asm+0x1a/0x30 [ 1088.105212][ T6647] [ 1088.105212][ T6647] -> #3 (set->srcu){.+.+}-{0:0}: [ 1088.112355][ T6647] __synchronize_srcu+0xc9/0x2f0 [ 1088.117836][ T6647] elevator_switch+0x1e8/0x7b0 [ 1088.123236][ T6647] elevator_change+0x2fa/0x480 [ 1088.128550][ T6647] elevator_set_default+0x375/0x440 [ 1088.134305][ T6647] blk_register_queue+0x3f3/0x4e0 [ 1088.139921][ T6647] __add_disk+0x6cb/0xe30 [ 1088.144828][ T6647] add_disk_fwnode+0x100/0x3a0 [ 1088.150120][ T6647] nbd_dev_add+0x733/0xb60 [ 1088.155077][ T6647] nbd_init+0x15f/0x1e0 [ 1088.159774][ T6647] do_one_initcall+0x250/0x870 [ 1088.165087][ T6647] do_initcall_level+0x10a/0x1a0 [ 1088.170563][ T6647] do_initcalls+0x59/0xa0 [ 1088.175441][ T6647] kernel_init_freeable+0x29d/0x3e0 [ 1088.181209][ T6647] kernel_init+0x1d/0x1d0 [ 1088.186113][ T6647] ret_from_fork+0x514/0xb70 [ 1088.191250][ T6647] ret_from_fork_asm+0x1a/0x30 [ 1088.196550][ T6647] [ 1088.196550][ T6647] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1088.204392][ T6647] __mutex_lock+0x19d/0x1550 [ 1088.209532][ T6647] elevator_change+0x1af/0x480 [ 1088.214840][ T6647] elevator_set_none+0xb5/0x140 [ 1088.220234][ T6647] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1088.226589][ T6647] nbd_start_device+0x189/0xb30 [ 1088.231972][ T6647] nbd_genl_connect+0x1597/0x1c10 [ 1088.237534][ T6647] genl_family_rcv_msg_doit+0x233/0x340 [ 1088.243658][ T6647] genl_rcv_msg+0x614/0x7a0 [ 1088.248708][ T6647] netlink_rcv_skb+0x226/0x4a0 [ 1088.254012][ T6647] genl_rcv+0x28/0x40 [ 1088.258534][ T6647] netlink_unicast+0x7bb/0x940 [ 1088.263843][ T6647] netlink_sendmsg+0x813/0xb40 [ 1088.269141][ T6647] sock_sendmsg_nosec+0x13a/0x180 [ 1088.274706][ T6647] ____sys_sendmsg+0x54e/0x850 [ 1088.280055][ T6647] ___sys_sendmsg+0x2a5/0x360 [ 1088.285273][ T6647] __x64_sys_sendmsg+0x1b1/0x290 [ 1088.290753][ T6647] do_syscall_64+0x174/0x580 [ 1088.295890][ T6647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.302322][ T6647] [ 1088.302322][ T6647] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 1088.310953][ T6647] blk_alloc_queue+0x544/0x690 [ 1088.316271][ T6647] __blk_mq_alloc_disk+0x194/0x390 [ 1088.321927][ T6647] nbd_dev_add+0x494/0xb60 [ 1088.326885][ T6647] nbd_init+0x15f/0x1e0 [ 1088.331582][ T6647] do_one_initcall+0x250/0x870 [ 1088.336899][ T6647] do_initcall_level+0x10a/0x1a0 [ 1088.342392][ T6647] do_initcalls+0x59/0xa0 [ 1088.347256][ T6647] kernel_init_freeable+0x29d/0x3e0 [ 1088.353004][ T6647] kernel_init+0x1d/0x1d0 [ 1088.357877][ T6647] ret_from_fork+0x514/0xb70 [ 1088.363015][ T6647] ret_from_fork_asm+0x1a/0x30 [ 1088.368314][ T6647] [ 1088.368314][ T6647] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1088.375546][ T6647] __lock_acquire+0x1520/0x2cf0 [ 1088.380943][ T6647] lock_acquire+0x106/0x350 [ 1088.385990][ T6647] fs_reclaim_acquire+0x71/0x100 [ 1088.391467][ T6647] prepare_alloc_pages+0x15b/0x650 [ 1088.397153][ T6647] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1088.403507][ T6647] alloc_pages_mpol+0x212/0x380 [ 1088.408904][ T6647] alloc_pages_noprof+0xac/0x2a0 [ 1088.414374][ T6647] pte_alloc_one+0x22/0x370 [ 1088.419408][ T6647] do_pte_missing+0x13c8/0x34b0 [ 1088.424818][ T6647] handle_mm_fault+0x1b36/0x3080 [ 1088.430296][ T6647] do_user_addr_fault+0x744/0x1340 [ 1088.435955][ T6647] exc_page_fault+0x6a/0xc0 [ 1088.441021][ T6647] asm_exc_page_fault+0x26/0x30 [ 1088.446410][ T6647] rep_movs_alternative+0x30/0xa0 [ 1088.451981][ T6647] _copy_from_user+0x7a/0xb0 [ 1088.457186][ T6647] copy_from_sockptr+0x48/0x70 [ 1088.462496][ T6647] raw_setsockopt+0x5e7/0x1440 [ 1088.467794][ T6647] do_sock_setsockopt+0x17c/0x1b0 [ 1088.473365][ T6647] __x64_sys_setsockopt+0x13d/0x1b0 [ 1088.479098][ T6647] do_syscall_64+0x174/0x580 [ 1088.484230][ T6647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.490663][ T6647] [ 1088.490663][ T6647] other info that might help us debug this: [ 1088.490663][ T6647] [ 1088.500904][ T6647] Chain exists of: [ 1088.500904][ T6647] fs_reclaim --> sk_lock-AF_INET --> &mm->mmap_lock [ 1088.500904][ T6647] [ 1088.513474][ T6647] Possible unsafe locking scenario: [ 1088.513474][ T6647] [ 1088.520940][ T6647] CPU0 CPU1 [ 1088.526313][ T6647] ---- ---- [ 1088.531683][ T6647] rlock(&mm->mmap_lock); [ 1088.536110][ T6647] lock(sk_lock-AF_INET); [ 1088.543065][ T6647] lock(&mm->mmap_lock); [ 1088.549929][ T6647] lock(fs_reclaim); [ 1088.553949][ T6647] [ 1088.553949][ T6647] *** DEADLOCK *** [ 1088.553949][ T6647] [ 1088.562105][ T6647] 3 locks held by syz.3.8711/6647: [ 1088.567226][ T6647] #0: ffffffff9002dac0 (rtnl_mutex){+.+.}-{4:4}, at: raw_setsockopt+0xcb/0x1440 [ 1088.576384][ T6647] #1: ffff888029de0260 (sk_lock-AF_CAN){+.+.}-{0:0}, at: raw_setsockopt+0xda/0x1440 [ 1088.585907][ T6647] #2: ffff88807cca7678 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 1088.595879][ T6647] [ 1088.595879][ T6647] stack backtrace: [ 1088.601781][ T6647] CPU: 0 UID: 0 PID: 6647 Comm: syz.3.8711 Not tainted syzkaller #0 PREEMPT(full) [ 1088.601810][ T6647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1088.601825][ T6647] Call Trace: [ 1088.601833][ T6647] [ 1088.601840][ T6647] dump_stack_lvl+0xe8/0x150 [ 1088.601887][ T6647] print_circular_bug+0x2e1/0x300 [ 1088.601908][ T6647] check_noncircular+0x12e/0x150 [ 1088.601930][ T6647] __lock_acquire+0x1520/0x2cf0 [ 1088.601960][ T6647] ? __css_rstat_updated+0x235/0x540 [ 1088.601988][ T6647] ? __lock_acquire+0x683/0x2cf0 [ 1088.602016][ T6647] ? prepare_alloc_pages+0x15b/0x650 [ 1088.602041][ T6647] lock_acquire+0x106/0x350 [ 1088.602065][ T6647] ? prepare_alloc_pages+0x15b/0x650 [ 1088.602096][ T6647] fs_reclaim_acquire+0x71/0x100 [ 1088.602119][ T6647] ? prepare_alloc_pages+0x15b/0x650 [ 1088.602144][ T6647] prepare_alloc_pages+0x15b/0x650 [ 1088.602172][ T6647] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1088.602202][ T6647] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1088.602231][ T6647] ? __pfx_policy_nodemask+0x10/0x10 [ 1088.602263][ T6647] alloc_pages_mpol+0x212/0x380 [ 1088.602294][ T6647] alloc_pages_noprof+0xac/0x2a0 [ 1088.602311][ T6647] pte_alloc_one+0x22/0x370 [ 1088.602331][ T6647] do_pte_missing+0x13c8/0x34b0 [ 1088.602358][ T6647] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 1088.602388][ T6647] handle_mm_fault+0x1b36/0x3080 [ 1088.602414][ T6647] ? handle_mm_fault+0xec/0x3080 [ 1088.602444][ T6647] ? __pfx_handle_mm_fault+0x10/0x10 [ 1088.602469][ T6647] ? __lock_acquire+0x683/0x2cf0 [ 1088.602497][ T6647] ? lock_mm_and_find_vma+0xa7/0x340 [ 1088.602521][ T6647] do_user_addr_fault+0x744/0x1340 [ 1088.602556][ T6647] exc_page_fault+0x6a/0xc0 [ 1088.602578][ T6647] asm_exc_page_fault+0x26/0x30 [ 1088.602596][ T6647] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 1088.602626][ T6647] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 63 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1088.602642][ T6647] RSP: 0018:ffffc90005957cf0 EFLAGS: 00050246 [ 1088.602658][ T6647] RAX: 00007ffffffff001 RBX: 0000000000000008 RCX: 0000000000000008 [ 1088.602670][ T6647] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: ffffc90005957dc0 [ 1088.602683][ T6647] RBP: 0000000000000000 R08: ffffc90005957dc7 R09: 1ffff92000b2afb8 [ 1088.602696][ T6647] R10: dffffc0000000000 R11: fffff52000b2afb9 R12: 0000000000000000 [ 1088.602709][ T6647] R13: dffffc0000000000 R14: ffffc90005957dc0 R15: 00002000000002c0 [ 1088.602730][ T6647] _copy_from_user+0x7a/0xb0 [ 1088.602748][ T6647] copy_from_sockptr+0x48/0x70 [ 1088.602767][ T6647] raw_setsockopt+0x5e7/0x1440 [ 1088.602795][ T6647] ? __fget_files+0x2a/0x420 [ 1088.602822][ T6647] ? __pfx_aa_sk_perm+0x10/0x10 [ 1088.602903][ T6647] ? __pfx_raw_setsockopt+0x10/0x10 [ 1088.602919][ T6647] ? __fget_files+0x2a/0x420 [ 1088.602943][ T6647] ? aa_sock_opt_perm+0xff/0x1a0 [ 1088.602985][ T6647] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1088.603005][ T6647] ? __pfx_raw_setsockopt+0x10/0x10 [ 1088.603021][ T6647] do_sock_setsockopt+0x17c/0x1b0 [ 1088.603042][ T6647] __x64_sys_setsockopt+0x13d/0x1b0 [ 1088.603062][ T6647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.603081][ T6647] do_syscall_64+0x174/0x580 [ 1088.603101][ T6647] ? trace_irq_disable+0x3b/0x140 [ 1088.603125][ T6647] ? clear_bhb_loop+0x40/0x90 [ 1088.603145][ T6647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.603162][ T6647] RIP: 0033:0x7f3c8cf9e019 [ 1088.603178][ T6647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1088.603194][ T6647] RSP: 002b:00007f3c8df23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1088.603211][ T6647] RAX: ffffffffffffffda RBX: 00007f3c8d225fa0 RCX: 00007f3c8cf9e019 [ 1088.603224][ T6647] RDX: 0000000000000001 RSI: 0000000000000065 RDI: 0000000000000005 [ 1088.603235][ T6647] RBP: 00007f3c8d03500c R08: 0000000000000008 R09: 0000000000000000 [ 1088.603246][ T6647] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 1088.603258][ T6647] R13: 00007f3c8d226038 R14: 00007f3c8d225fa0 R15: 00007ffda3a25368 [ 1088.603278][ T6647] [ 1089.019529][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8712'. [ 1089.028519][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8712'.