last executing test programs: 2.909035451s ago: executing program 3 (id=4457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5400000013000500010000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000034001a00060000000200000028000480240008800800010001000000060002"], 0x54}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000013000500010000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000024001a0006000000020000001800048014"], 0x44}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040048) 2.83038182s ago: executing program 4 (id=4458): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfffffffc}, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000001b40)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r2) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r2) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f00000009c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r4, 0x208, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x3}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x11}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xb}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}]}, 0x44}}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf250700000014000200fe80000000000000000000000000004208000400ac1414bb140003"], 0x44}, 0x1, 0x0, 0x0, 0x24080850}, 0xc010) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110780000000000630123000000000095000000000000008f6a138c9e4eb32e71d7754e127d8d87525e8d57dc3c002fa721249c4cdfd87788947190b59b5af99eaaecbf2ba57aa6ffd750ffd3bef751c89264a6a9ec3b188b69dc1b6a12211cbf01e697342cf987ca2161e2a58904"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40800) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r6, 0x6b, 0x3, &(0x7f00000003c0)=0x5, 0x4) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca6dc05}, 0x4008840) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'wg2\x00', 0x6}, 0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001300)={'nat\x00', 0x0, [0x5, 0x88980000, 0x2, 0x7, 0xa]}, &(0x7f0000000140)=0x54) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x1b, 0x5, 0x3d8, 0xf0, 0x298, 0xffffffff, 0xf0, 0xf0, 0x340, 0x340, 0xffffffff, 0x340, 0x340, 0x5, &(0x7f0000000440), {[{{@ip={@multicast1, @private=0xa010100, 0xffffffff, 0xffffff00, 'pim6reg1\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x1d}, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00', 0x19f}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x18, @private=0xa010102, @private=0xa010100, @gre_key=0x7, @port=0x4e22}}}}, {{@ip={@remote, @multicast1, 0xffffffff, 0xff, 'vlan0\x00', 'geneve1\x00', {}, {0xff}, 0x21, 0x1, 0x21}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x8, @multicast1, @local, @gre_key, @icmp_id=0x67}}}}, {{@ip={@local, @local, 0x0, 0xffffffff, 'netdevsim0\x00', 'wlan1\x00', {}, {0xff}, 0x2, 0x0, 0xa}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0xc01, 0x800, 0xc}}, @common=@addrtype={{0x30}, {0x180, 0x10, 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x4, @multicast1, @multicast2, @gre_key=0x6, @gre_key=0x3}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xb}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xff000000, 'veth1_to_team\x00', 'sit0\x00', {}, {0xff}, 0x73, 0x1}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x14, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @icmp_id=0x66, @gre_key=0x344}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) 2.44945251s ago: executing program 0 (id=4463): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)=0x51e, 0x12) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') openat$cgroup(r1, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x34, r5, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xb, 0x1, [0xffffffff, 0xfffffffd]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc01}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x6e8, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x618, 0xffffffff, 0xffffffff, 0x618, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x330, 0x358, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', {0x6}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x748) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)=0x51e, 0x12) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') (async) openat$cgroup(r1, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x34, r5, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xb, 0x1, [0xffffffff, 0xfffffffd]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc01}, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x6e8, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x618, 0xffffffff, 0xffffffff, 0x618, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x330, 0x358, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', {0x6}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x748) (async) 2.334400575s ago: executing program 4 (id=4464): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x2, 0xffff, 0x7a, 0x5, 0x7, 0x101, 0xffffff40, 0xb, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0x7, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xd5, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x100003, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x800, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x1, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x2, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0xd3, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x2, 0x6, 0x3, 0x401, 0x10001, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x8009, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xf7, 0x4, 0x7, 0x5, 0x8, 0x2, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}}, 0x800) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271f, &(0x7f0000000080)=""/102382, &(0x7f0000000040)=0x18fee) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'sit0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x40, 0x20, 0x4, 0x40000000, {{0x17, 0x4, 0x0, 0x6, 0x5c, 0x64, 0x0, 0x7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x26}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x44, 0xd5, 0x3, 0x4, [{@rand_addr=0x64010100, 0x40}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@multicast2, 0xc}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@local, 0xfa}, {@empty, 0x4}, {@loopback, 0xd9}, {@broadcast, 0xfffff36f}]}, @ra={0x94, 0x4}]}}}}}) sendto$packet(r1, &(0x7f00000002c0)="e89b4bc501e79e85ef1df002afa2b8163b6f2740606395eec2cd2951d63a1cec1217d41490bbd1db9672665e1a741a3b235d1ae24fc4f503bc74d1ff2f2f95e5d2427b21e98065e745d9532077105008718ff40ab8cd61ee536c520f5c04717ce6d0aa0ca153eee6f9c605f8acbc7ab9a3f6aff4c4950d640927bb42b54e070e6dbe9a0944a7eadd7507947a6c206620cfdbbc5fafad7262c844da6833bc433a00557bf521424e6104247fcc0ae6d282ede85c02e635175797da7ef474edeabd6bf89633dcd01be377011f326d42a783842254250480d11264ca8d2cabfb25038814076417d0", 0xe6, 0x1, &(0x7f00000004c0)={0x11, 0x7, r2, 0x1, 0x5}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendto$packet(r1, 0xfffffffffffffffd, 0x0, 0x44840, &(0x7f00000000c0)={0x11, 0x9, r3, 0x1, 0x3, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000180)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4d2, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000019080), 0x81, 0x0) ioctl$PPPIOCSMRRU(r8, 0x4004743b, &(0x7f00000190c0)=0x73b) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 2.149749302s ago: executing program 3 (id=4466): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x88}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x88}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, 0x0, &(0x7f0000001080)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000000a1400022dbd7000ffdbdf2508004400", @ANYRES32=r3, @ANYBLOB="08000100000000000900020073797a320000000005005400000000000500540000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 1.768115429s ago: executing program 2 (id=4469): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000600)='ns/net\x00') ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x44, 0x1, 0x70bd29, 0x4, {0x2}, [@nested={0x4, 0x48}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x3, 0x8, 0x5f80c0ea, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x7, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x40458c4) 1.707425115s ago: executing program 0 (id=4470): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000280)={0x1e, 0x2, 0x7, 0xa, 0x0, 0x0, 0x20, 0x0, 0xff, 0x0, 0x3, 0xec, 0x53, 0x31}, 0xe) shutdown(r2, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000500)={r3}, &(0x7f0000000580)=0x8) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000001640)=""/139, 0x0) (async) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000100)=0x8) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x28, r1, 0x1, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) 1.705641579s ago: executing program 4 (id=4471): r0 = socket$inet(0x2, 0x5, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) close(0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) sendmsg$kcm(r2, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000000c0)="a8c316e790c2f939974dd70a4d775dcce5f6f68cbf667d0139f2d173c0f3f9c2a9f8b92d8ef1bde6fcc0c5fe967202a9dbde9980a98cb7d703f016eb6378d23bc87b4fef891b33e175221de5f57882f4eccd431fa94a7c8b882502c469e8086bbfa4ef", 0x63}, {&(0x7f0000000140)="ad", 0x1}, {&(0x7f00000001c0)="5825200b432428f630e918d8390ec72900bc7ff13616d7346de9a3201135adcdf0cff16cff4e2f9b7f4321baa3c5508a2c1074c67dc082aaa481adf572586dddf80a9a56a9de9fc1a1c245e62eb5154ed27959d397e630ec4ee5ae7c78c5835e0e758815a426eb9d32a83754c262285bc89465e4426abedd60b19f809c39cef30731cf61083feeedbc8bce4a76868aa5c3577735eb4bf236ff4094c594ecfbea7f077f5142065084fb4095f4975a8b7af9194b05d3af2a6117f139cd9f9d0383605a25", 0xc3}, {&(0x7f00000002c0)="2135a8d01d40aa17daa9c0246be77825bf4a305cd6c3516e53a70b3cf66f69a95bbefe4095b6c8206f6a29910fe0c3d6a481a70b174dc465de477e7cea456408e49831c86e3ef1d72d59b74d4dd6202e3ac29660348f89b417add6764b6bfd45d3f19c1d8a50c0937cee732184e832960f5582463dacce0f81b22263eff1b521f3c44ce7e89870b0d837ae5c8e8a3df9c5ee3959c6eea852d5401685e9ec4f8e337a92537f06dd1d3996c1b73c0257e27410cf6ccf0c1fe266c47a22831876e3d2daab068631", 0xc6}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="3a081bf23e514a9554d6c632", 0xc}, {&(0x7f0000001400)="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", 0xff}], 0x7, &(0x7f0000001580)=[{0xb8, 0x10a, 0x7, "13be80205ebae9db300c9a220206fda3660e3f44b6f6f87ce5d728445664327af524641f52075e61006abe17d965ff0915e38226802941b071b11267b2630ff4158f6eae10ab1db933d82b6dff4b04a6cadeb45ada53885f5a91198c52daba17da52e008dad0e41e3c9a95d14db9567dadab8905d12f5d33d352e0f972ad0e3fedb028fba9883eb3fe1d3fd05b595220e3aff7ea04bba860a50aeb876f56914d11ce4324"}, {0x38, 0x29, 0x8, "144061dc4f4cead2f7f89fdbe4f6bdf6c1ce3b83f3562fb0343bd12c7be34389683d82312b14"}, {0x58, 0x118, 0x7, "c4bbbcabf917dbe44d0679306521df041f5bea5ab25ee34a86ff9b0bf0462795a83e174ae4acfa08f3ade31ad4fe5d1ee38b045f5107f1f3aaaf484212ca86cd89493e10"}, {0xb8, 0x1, 0x5, "0480dacf837a7e9decfb5d4664f468544e8f0fd02e81268f60894434efc3fca8bc89294143d98e95d707f8cbcafce62c8450b5775611929595644723016075c9a27f5e068d204899a71d539f6130eb59aebe5c97286ab20d31da8abc0dbbea8252344e07534118bcb07d744d86292629a4d58f96788c111452fe6541b2aa837bfcfbaebfe7193f854176f1345a82ec6e23c088d2324808672b3e3ce178eb7a2256f61d87d35f00ed"}, {0x90, 0x107, 0x5, "c93c69a88089e1c05a71447d5eecb99b461fc9580870180f3afca7cd1634a14ae677c7fe669b06ff319e6cd9a3117b86e8be1c2f0056626f3f99123107e22d65623e4b426b2521df0e65c596630661023464702c92b23a4e1d79df2ea728607a0e15cc6c88fb9711e51c444ca67431c67eeb5291d1db085f1c8789"}, {0x110, 0x104, 0x4, "ed50c1e329d7641ee83281f41b859655498b8de02cfb2aa4cb2ed5fa532af2409aa1057f54092048c5beaec8727baa903237738bfb6e20239de562296397c2f02868cd37a825b2962674a87b5a742ce6eb68da5dc0d2cb36d655b7128811c722195626952ecef0543928793d367ebc4eda978972103458e4ecd064350a38fb5ba97529be32e39f7f12feee9cadec609384458920007c2f04cd424be858ed0d7cbf5a5020bc3526df735bb58b4754164a506dfef8d17a50cf61083c5523421085300696ab11c68d144a6c96a3e56f775657d1e2c2e96f0a76794b26bdf00f6a446d97885497a94550862c80d5f8707fca6c451e1081283492cd"}, {0x70, 0x88, 0xd, "79a445e066329c51cbebe0fb702b6cea2ea5b6bccb332b34f4d9f7147c15c5c6d2a84c08a47dcea98f2c95fe4be34872749655ce7ff6f4a239f1bc7ba77abf6ac8df260fa36c3c2658c830619801a40cde1b76291fd26b07c27b50b0fe5f"}, {0x70, 0x108, 0x5, "61c936aac6f75fba4902f8851165a030ca7fb521467fcc1eda37211e6c894c50b80b27ea77445b09c824e78e841439fd75e582abcbd3aa00ab00c9f00ad0712c92be364b857b3f21940233e387be905d7e768fa9e070bdf473"}, {0x50, 0x6, 0x5, "395c0bc07c32afc635d20d8eef0038172c530666cdf630159145864918da5c7dd184fc64c07af1d112f89cf6d61ad16c77bd7d5acb460e53f29821"}, {0xb8, 0x10e, 0x9, "41a70aa81eb1740876edcaef6135c1d0f090a7ea203b5fbee62e27148d5c446cee32235b1e71e957a4273d7b1b902fefe6a65dd3b9d288c57d4251d80230f60691c4ba544ca3313613a889138b7066c2f5109d6b45a569c1514d0831dcf989c514c3ae5007e893e9f402cfb6fecf17a77f08b1c1f78d10316301f2401db49fefbcc0994a82034c3d7820d95e939df6f22f3ccc63e8f9411fe9dec0e06c9e9fe1d600b7dc791c9793"}], 0x588}, 0x4000) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="071f080a400000e8c93bf564bcee54be0e1c2074ed277c6454816781a8", 0x1d) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000180)) 1.577952319s ago: executing program 4 (id=4472): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x840) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x6, 0x23, &(0x7f0000000040)=""/24, &(0x7f0000000080)=0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000500)='GPL\x00', 0x5, 0x11, &(0x7f00000017c0)=""/4098}, 0x90) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) 1.415613s ago: executing program 2 (id=4473): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1}]}, 0x50}, 0x1, 0x7}, 0x0) (async) write$tun(0xffffffffffffffff, &(0x7f0000000840)={@val={0x0, 0x16}, @val={0x2, 0x80, 0x3, 0x5, 0xc131, 0x4}, @ipv4=@generic={{0xc, 0x4, 0x1, 0x7, 0x38, 0x64, 0x0, 0x4, 0x67, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x41}, {[@timestamp_addr={0x44, 0x1c, 0xb9, 0x1, 0x6, [{@broadcast, 0x6d54}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0xd}, 0xffff010d}]}]}}, "ed0ecfe289ecbf0b"}}, 0x46) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000006c0)={r2, &(0x7f0000000300)=',-&\xde:#,]+\x00', 0x200, &(0x7f00000003c0)={@_ha_fsid={[0x3c8, 0xa8]}, {0x9, 0x9, 0x3, 0x37ec5b47}}, 0x7, &(0x7f0000000640), &(0x7f0000000680)=0x80000001}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000800)={r4, &(0x7f00000009c0)="1ee4f1e80d601c7279243a199453df36ff81081ad866c26cfff30fe4c1c9e09d40534000094d84974c68777927b8ba38f9abf5018000005ff2dbf700bb2d3c0adc4b8b8a479a739b0bca4ea17e6d30e1e11134d1aa07000000ee3393171ab5c5a25d8e0a3a2b341e977d5c9513d815576e4e13804b4b1e1c9de63b49b5b68977a21533e08a1f600026cc6f895031fee625816c2c7cb84b51605a08f9f7002ecaf51cbb0c5865eacf10602b850c048e0c0cc2bc854fbda23d31a9779121403efa5e45c7293e845735e7f86649e9b9c5ec09dd56cc395f9f8ec63d321ce8b0604285d454c12b18ed4de440b4dbdc8a95c9", &(0x7f0000000740)=""/189}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0xe3, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x69f, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) (async) r8 = socket$kcm(0x11, 0x3, 0x0) (async) r9 = socket(0x400000000010, 0x3, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065060400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c008cbdd3b4c3b7f28754860c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05ae8a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3cf96f9483ff19a6471bf5abc742d9cbcfb964b11b31034694a6aad86cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df424d1bafe5725c8a404724f8a4f1cda7997b65954f74097560b91da309b887af2485c2d9ab09b523000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb7818000000009dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbef88811dc8c1b27ac7d9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d856177a2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009d81003f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e750339643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2dfae60ab958e9f3ef9b4aaa4e8d6166f636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978a2df2f2a29a387c6f0576b36038f819286eca99a6a434811cf2a117d775fe986a49fb82cf5f15972d5ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e6735305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a54b49e1ae6c5aa620d27e91aa0aa0ed6fcacfc91fbb4c256409e54daefbb107c381fa729ff5f3907d93430da178d685d7730f5e129438a5214f722096d2986334c2576bef69145d3fbd78a9059e454474f92e65828b018174a9f4738b8c71fbdeac26ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a378ed4c6267965af78b861bd025312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68f78215d65f96eb55db8cbcb060008000d988374f85451a694ffe38a1d03916ff10dc82b31c98d42e1a1bda1290de1a499a5a385b31112a48ba3e6d6849914c1788a7aca37177cc341fff44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553e4ece78d4c1501c70f5d81e0725d5b273755c0000000000000000aa4234ff82182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a11993d54f97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a923655800a2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574e6e6aefb7a68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24b8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa753ba528f7ba77e825051ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8e220bb4d83de1e4dc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a409315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f0000000086e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e801015642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f845d1cc9ec4eee79c298fb0ba939b13707044e2e9cc0d350438c1c8c6bb9a38c6ac5ca0d9cf1f3d6915f25cb26edfc28b3079b97df32601240e454db103fb0c4a143673a3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4054605558ab31f339f6a4caf2ee2fd01f34dca3300000000000000000000000000000000f59f8e6e00000000c44130098d833a24000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c595426ae40d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd603fd7f8898c70b5c65f2e28f22e1a79a6af3a54861b07f124642e98389557affbdede09b5566a4a1ee73b20846810030a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae3a9052be8eec1e95f6ad8d41dd34829503ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b0b0770c6a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd25091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a674bd16b8f7e6aed12a305366599f5f029a7b24558c027518c669760500002f1c19d16a6f391906000000cc0bbbfb8c698ecc137d96711100e0108d3bd2afed0b279ebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc784c9f940d9fb0464a6cce635e14b80dc5c1c64e75e6bd5355d84f8df272f18f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f9f8ad16eeb8342278f311cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706b584d8408c9652b3fe68500747f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2ccb600ae7a4b128cae19df160e7c207b89132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af911dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2befd1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bc5348229fa84ae78af8421a22c4b4c17a3d24a4a0104000000000000d77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2c2b5c976dacf3dda7191c757f208000000000000005f7ed983f65723fbb36b9b51abb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a58275dbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193a05008cdef7a98a1671a1918df310dc4bfd61c3db4819ab1c57b348a8ff1ed36364a20fe846f1cd086058d139ce528425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb2514a6ae50dbdd422de0f0f8c670000000000390be79688f80c47314cb1b14afcaa5d23f9032e0ec51f45f447d6a7c798fcf7e60e2180e289410801e4f03a0e140f388f25b92da1025d8409e171a2336ed71cca86eb4658fe06df286e0e20276b0618eeffd05774f15686cd9d3182ca2fec863875f305fed6baf48a594db12582a38cfdffffffffffffff0cf8d920517835fe7d09cfcb624f6931f1cc6f6b71f58de9ddc38e0c43992f6bc57a718d0cfd197b5324b4e05ef1caa96db3ae1f2f2e5791faba2ebbe1a6faf21f2748fb1fb6743c3ca8af4e6b02518c9b7fdc1b5721eb1c3ed98db25536f74ac7861afc94544e52dcb5c60460a05802e3b437ac977bfa26b887a2443e8d559c58187f004eb82b07937df6e96f77ed551926bec4e0188fae10a35d1c5f1768ac6be829bea46f1babc3d74adc31ca71bdab9079e4288881b434484eadde9da6b81802842abd462d546c59d87acc014f81d3414759bda12d2a2c6bc1bfa807bd3101eb227184a61107b6d0618e2a3b842671e084ac3f0ff94dc48b51601247318ab4d1c5106458000000000008000000000000cfee0107e6c2fe8639d926829fdbbd86bf591a8c3c235d8939af9d923f648165881a6c29997234406400b3b1c321cc158dbe17123eace30000000000009ea77cb4d3ca892600000000796de6ae4ae40bdf9a6e8c5dc29562262af9cd54e8e3ecc7e3c8cba0ecc791683496c4e5c1a5729714d9f9031f49b400cd2667b4ea6df54809615a4f973f93e6ccec72f16ff998e29ed99df733680a9d5cea57f99cc139b6ea9014f3000000000000000000000000000000000000feeab45a4046a622b0dceb413e4e39b7317e92cbed46b41ab5115bfb542c933783d750852dfdc6656aaf15e10615a88821f2f1bc53969b52d6852755e7681ad5beda80b38ccd34116b99f50b4fdd967b3f20f260455412b67563e40e323bde9d673fceda0ad6981565c8a183d928903b4f4472dde41b6dcd75314c31e704dfcb222c8359fe88944f852242270c932abfaeece0843d708f5cd25b2a63ae1e79723c1c3c013836b47da0a35d0f34c070000000000000422ae2c148d444dd437a7d2f5e575009bc2d17a199802409329dae8baa58d3de63ad45328a9d4dc1ace543dfe11913c6c6413f8f7a15657d012fea460bb4656a20df1ba26932b0ef49f8ea88d7b4c1289314ba789661640f1b5d7cbae103fa95b0035f1e8e866207d4796eab0992704f9e00be4b1af8dfa9e94ad74e607ea9d7d7a95ed5a15429426abbed8d2c657018305c6f9e5159a5453f958991a908ff4cb2e8cbccb1d3c8daf754e4b01b2edd023e5bfdf293bd28fc1f8885f6edd5a715df4d180247feb08e9e2e5126c48be6098e711f0d86de5d76fdccae34eef9197c32ab4e6fcb52eb9ce18fdb621a75913a97254d783778203ec0bd1a8859683e1d01da4e81fb73bb3b358340a0310bf5ae17b917208da607fd7b125cf99fd3e9056f5184df7570ede94b736ae354b5b8ae2cc473b455f2f86d47c69027676bf1141f316b0f278f1692406572ee82766f8e5ff1cfec2a7a6cab7d0f2582a877c9bd4ca81089373f738d02e6bb4d3df30ac0f041e51ad36e1ff140812baf54b80635cc80963c8f69fa4506f7a30c99d3e538cc0aeafcad86ead38ed949aa3c204aea50e5e0039f01b82595b7dc921a8acc1f76340f060cc9a3acad3451c17dc9b5ca5d10a0cb1708592d1900a046f33761d50895febd9fd58cb132989766cf7c252daac259576ec218e3857e6fa97fe445d1fab51d87302a4bb28a4cfe462ee4849cc6832650188ca187d85509d8beccf9d9cf752368985804195b9fd2faf1aff8248f3981bd55cbbf514cd8365fee72cc7af053e5388ceadadb96a9acd5261df6a90cab13f58f6d563c9ab4ad37297aecffd8446cb2b14ec36a99af8393e3760d5970ba1debdcbccd54012c559ee2797ff962328aa6a252c0756e396ce4d52937546675203bdf1d6b120acac576523f8b1daa922188bf61536312f90dba92fb380c3c6fb5f9883a2c4dd99a1bac9b7cb25ff2ef9bd58ff97ddfdd2d4bcc371ee82245b57cd91a7fa3479cd339f54a5c422b753cd42d441ea881d46e419312db1f0cccced13468a188df7ab4840b9961e2a8b5202c9d9b00ee912572eea15d13abdf3b21ad680c88a513021c1d3a7b30d64960c03a01364b2324966bd89d917b15dcb4f8cbacfe05ddcc213d14189edcd9f8b828ebaaab4f56470d3abef47b6d88dc438c9b0a253c26c386464754e76c0d7bfbc1dfa7248982ec26bd725eb623bb12f96e63eb5d1a0030e58a6653247c986c7ca9f15fd84d5eb1cd5ee35c4f464dc1a789b06c6c7074fc927680eac8546b2aee2f8867d6bf36b88a99ff67c7b2dd68ae3380622653efcad276a0f4b446091b80653014e67629dfde0091c7f090a22b5c427d03ddbc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r10, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="b9180bb76003070c009e40f088471fff31000000330020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7473ce0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002300)=@newtfilter={0x2e94, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x2e64, 0x2, [@TCA_BASIC_EMATCHES={0xec, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3, 0x8, 0x8001}, {0x3, 0x2, 0x2}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x800, 0x8, 0x9}, {0xffffffffffffffff, 0x4, 0x2}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x7, 0x2, 0x9}, {0x1e7d, 0x5, 0x0, "e3db8babfa"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xa, 0x3, 0x6}, {0x8, 0x2, 0x81, 0x2}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x8000, 0x8, 0x9}, {0x2, 0x4}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x1, 0x4, 0xe}}}, @TCF_EM_IPT={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}]}}]}, @TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x48, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xb}, {0x1000, 0x40, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x4, 0x2}, {0x7789, 0x5}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0xa}, {0x3000, 0x0, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x9, 0x2}, {0x4, 0xfd, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xe, 0x4, 0x1}, {0xd, 0x0, 0x2}}}]}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0x2}}, @TCA_BASIC_POLICE={0xc1c, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0xada, 0x7, 0x2e9, 0x2, 0x4, 0xfff, 0x3, 0x9ae2, 0x3, 0x2, 0xdce4, 0x6, 0x5, 0x2, 0x83, 0x0, 0x1, 0x7, 0x1, 0x7, 0x8, 0x2, 0x10, 0x5, 0x3, 0x2, 0x400, 0x2, 0x10000, 0x4, 0x5, 0x3, 0xf, 0x7, 0x5, 0x6, 0x3ff, 0xf7, 0x7, 0x6, 0x9174, 0x10000, 0x100, 0x0, 0x6, 0x80, 0x8, 0x4df0dc9f, 0x10, 0x132e, 0x1, 0x80000001, 0x6397, 0x8, 0x400, 0x2, 0x800, 0x10, 0x0, 0x5, 0x10000, 0x2e16, 0x8, 0x1, 0x5, 0xffffffff, 0x8, 0x1, 0x1ffc00, 0xfffffffb, 0x401, 0x7, 0x6, 0x1000, 0x6, 0x8, 0x5a, 0xffffffff, 0x5, 0x0, 0x8, 0x3, 0x101, 0x2, 0x2, 0x7f, 0x9, 0x9, 0x9, 0xdcc0, 0x9, 0x0, 0x2, 0x8, 0x9, 0x18, 0x8000, 0x2, 0x5, 0x8, 0xb, 0x3, 0x6, 0x7b4, 0x200, 0x4, 0x8, 0x9, 0x3, 0xbc, 0x3ff, 0x200, 0x27, 0xd326, 0x1000, 0x8, 0x6d6b, 0x2, 0x3ff, 0x1000, 0xfd8, 0xffffff01, 0x5, 0xbb, 0x60, 0x401, 0x18, 0x4, 0x4, 0x1e7d, 0xfffffffc, 0x5, 0xffffffff, 0xffff, 0x5, 0x4, 0x7, 0x4, 0xb57e, 0x4, 0x7, 0x8, 0x7, 0x8, 0x9, 0x7, 0x1, 0x6, 0x5, 0x0, 0x2, 0x5, 0xc000, 0x1, 0x7, 0x9, 0xfffffff7, 0x5, 0xfffffffc, 0xf, 0x1, 0x9, 0x81, 0x1, 0x9, 0x28, 0x7, 0x1, 0x6, 0xea, 0x0, 0x80000000, 0x9, 0x9, 0x0, 0x0, 0x5, 0x8, 0x9, 0x4000, 0x76, 0x3, 0x0, 0x7, 0x3, 0x7fff, 0x4, 0x5, 0x2, 0x7, 0x49, 0x5, 0x7, 0xfffffff9, 0x6, 0x4, 0x6, 0x23, 0x2, 0x70, 0x7, 0x7, 0x7, 0x4, 0x5, 0x0, 0x3397, 0x8, 0x0, 0x0, 0x5, 0x6, 0xcd, 0x6, 0x1, 0x7, 0x7ccd, 0x9, 0x803, 0x9f, 0xfd700, 0xfffffc00, 0x8, 0x1ff, 0x5, 0x1, 0x2, 0x8, 0x1ff, 0x400, 0x8, 0x8, 0x2, 0x7fffffff, 0x5, 0x75c, 0x4, 0x2, 0x6, 0x2, 0x7f, 0x8, 0xff, 0xfffffffc, 0x0, 0xfffffe01, 0x4, 0x6, 0x1c4d, 0x4, 0x3, 0x4, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fff}, @TCA_POLICE_RATE={0x404, 0x2, [0xa, 0x1, 0xc1, 0x0, 0x7fffffff, 0x1, 0xb3cc, 0x8, 0x3, 0x3, 0x2, 0x10000, 0x2, 0x4853, 0x8000, 0x8, 0x1, 0x4, 0x80000001, 0x0, 0x1, 0x5, 0x0, 0xfa91, 0x1000, 0x4, 0xffffffff, 0x10000000, 0x7, 0x1, 0xfffffffe, 0x0, 0x9, 0x8, 0x40000, 0x10, 0x0, 0xfff, 0x1d4a, 0xe4, 0x2, 0x8, 0xfffffff7, 0x5, 0x800, 0x0, 0x546, 0x9, 0x100, 0x50, 0x1, 0xfffffffb, 0x4, 0x9, 0xc0000000, 0x3, 0x6, 0x6, 0xc, 0x3, 0x5, 0x3, 0xd, 0x9, 0x1, 0x3, 0x40, 0xdf5, 0xb3, 0x8, 0x10000, 0x1, 0x7, 0x9, 0xc84, 0x7, 0x0, 0x7, 0x5, 0x5, 0x5, 0x3f6b, 0x400, 0x3, 0x2, 0x2, 0x400, 0x1, 0x7, 0x8001, 0x2, 0x80000000, 0x5, 0x6, 0x3, 0x5, 0x2, 0x0, 0x1, 0xfffffff7, 0x4, 0x7, 0x5, 0xfffffffd, 0x56c, 0x5, 0x0, 0xb253, 0x800, 0x1, 0xfffffffd, 0xf, 0x8, 0x0, 0xe7f, 0x4, 0x1000, 0x0, 0x7, 0x6, 0x8, 0x101, 0xbd51, 0x5, 0x0, 0x2, 0x0, 0x1, 0x8001, 0x1000, 0x0, 0xfffffffa, 0x5, 0x3, 0x1, 0x7, 0x6, 0xfffffff7, 0x1, 0x1000, 0x8000, 0x8, 0x101, 0x7fff, 0xb, 0xffe00000, 0x3195, 0x101, 0xfffffffa, 0x9, 0x3072, 0x5b5, 0x2, 0x1, 0x1, 0x3, 0x7ff, 0x4, 0xd0, 0x5, 0x9, 0x778f, 0x40, 0x5, 0x5, 0x2, 0xfffff774, 0x7, 0xfffffff8, 0xb, 0x0, 0x3c, 0x0, 0x7, 0xc, 0x10001, 0x2, 0xfffffff9, 0x7ff, 0xfffffffa, 0x9, 0x7fff, 0x7, 0x8000, 0x4, 0x1, 0x9c, 0x1, 0xffffffff, 0x2, 0x7, 0x9, 0x8, 0x7, 0x4, 0x200, 0x0, 0x0, 0x1, 0x1, 0x9, 0x401, 0x3f, 0x8a70, 0x3, 0x80000000, 0x2, 0xe1c3, 0x9, 0x800, 0x3, 0x1, 0x10001, 0x4, 0x8, 0x2, 0xffffffff, 0x2, 0x8, 0x6, 0xe, 0x3, 0x81, 0x4, 0x60a5, 0x4, 0x7fff, 0x8, 0x6, 0x3, 0x1, 0x9, 0x4, 0x4, 0x100, 0x1, 0xb, 0x6, 0xc, 0x7, 0x7ff, 0x3, 0x1, 0x800, 0xfffffe01, 0x5, 0x19f, 0xf, 0x7, 0xfffffffc, 0x9, 0x2, 0x9, 0x23fd000, 0x6, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x42, 0x8, 0x5, 0x5, 0xa94, 0x10d, 0x1000, 0xffffffff, 0x1, 0x8000, 0x8aa479dc, 0xa, 0x1, 0xde0, 0x6, 0xff, 0xff, 0x3, 0x400, 0x1ff, 0x7, 0x4, 0x6, 0x9, 0x3, 0xdf, 0x4, 0x1, 0x6, 0x800, 0x6, 0x8000, 0xaf, 0x23320187, 0x5, 0x6, 0x8, 0x2, 0xbc8, 0x0, 0x1aa4dad3, 0xa8, 0x347, 0x800, 0x99f5fc1, 0x8, 0x7ff, 0x3, 0xc7, 0x9, 0x8, 0x658f, 0x7, 0x3, 0x58e2, 0xe, 0x0, 0x13f, 0x6, 0x8, 0x9, 0x9, 0x7fff, 0x9, 0xdcd, 0x1, 0x9, 0x5, 0x5, 0x1, 0xb, 0x7, 0x257a, 0x0, 0x10000, 0x27c3, 0x83, 0x2, 0x7, 0x1, 0x5, 0x6, 0xc777, 0x9, 0x6475, 0xa, 0x3, 0x7fffffff, 0x0, 0x1000, 0x241c, 0x7, 0xe, 0x100, 0x9, 0x8, 0x5, 0x80000001, 0x401, 0x1ff, 0x4, 0x4, 0x9, 0x1, 0x4, 0x4, 0x885, 0xd79, 0x2, 0x7f, 0x6, 0x80000001, 0x6d, 0x2, 0x1, 0x1, 0x1, 0x0, 0x6, 0xfffffff7, 0x2, 0x9, 0x5, 0x1000, 0xc, 0xfffffff9, 0x5, 0xfffffffd, 0x5, 0x8f0, 0x42, 0xaa77, 0x4, 0xf, 0x1ff, 0x2, 0x5f34, 0x1, 0xffff, 0x3, 0x7, 0x60000, 0x3, 0xc, 0xa4, 0x8, 0x2, 0x1, 0x8000, 0x4, 0x7, 0x4, 0x22b6ea94, 0xc, 0x5, 0x88, 0x6, 0x8, 0xe4da, 0xf7e, 0x8, 0x7, 0x7ff, 0xffffffa5, 0x6, 0x0, 0x4, 0x1, 0x2, 0x3, 0x7, 0x7ff, 0x9, 0xf, 0x7aff, 0xb36, 0x3, 0x337dcc2e, 0x5, 0xc, 0x7, 0x1, 0x6, 0x3ff, 0x80000001, 0xb3e6, 0xfffffffc, 0x1, 0x4, 0x5, 0x200, 0x1, 0x0, 0x5, 0x4, 0xc, 0x4, 0x3d4, 0x3, 0x2, 0x2, 0xfb2, 0x0, 0x40, 0x4, 0xfffffc01, 0x8, 0x80, 0x321, 0x200, 0x1, 0x80000001, 0xb, 0x8, 0x87a, 0x1, 0x0, 0x5, 0x2, 0x15b, 0x6, 0x4, 0xa2d, 0x0, 0x7, 0x4, 0xff59, 0xffff70ad, 0x1, 0x6, 0x4, 0x400, 0x8, 0x252daaea, 0x5, 0x40, 0x9, 0x0, 0x3aa, 0x9, 0x200, 0x400, 0x4d, 0x0, 0xd, 0x2, 0xc71, 0x2, 0x7db3, 0x2, 0x3, 0x44, 0x10000, 0x6, 0x2, 0x3]}]}, @TCA_BASIC_ACT={0x3e0, 0x3, [@m_ife={0x110, 0x13, 0x0, 0x0, {{0x8}, {0x80, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x9, 0x5, 0x7, 0x1}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_SMAC={0xa, 0x4, @random="c8becef2bd6f"}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xdd, 0x5, 0x1, 0x6, 0x8}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1ff, 0x4ce, 0x4, 0xa0000000, 0x9}}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0x6b, 0x6, "333468f837fc07f32fb0f2d7a52afb1a85d26f36a8b78be5650f850790db6484ac3dfe5173707793ddc2979189008424696c12c144db4f27292718f2fe9727843c805dc49da46684057e1d1ac866c634d8c1be1a0fb350b5cd2e87cc636b4576916319e4970b09"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1863a1b246c28e7}}}}, @m_csum={0x168, 0x5, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xf01, 0x6, 0x2, 0x5}, 0x2}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x40, 0x5, 0x1, 0x6}, 0x80}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x2, 0x8b2, 0x6}, 0x56}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x1, 0x5, 0x6b65be9a}, 0x38}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xff, 0xc759, 0x2000000c, 0x5, 0x2}, 0x5f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xc19c, 0x4, 0x1, 0x81, 0x1}, 0x55}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x35, 0x10000000, 0x7, 0x7}, 0x15}}]}, {0x77, 0x6, "650869a15d5b92e248cbb4cf8e8677e2454cd74b573e9425491a2ba054d1857f4dbe38f89465a7fa24ffb5d88dcd2df3850c40b37de87ab94902ff0b98444288102571e1bb1cf43ad25fc2350ace4ed9f4a83f3160cbe5e0b3be8d0fb1b4fa7f34b4de75b8217d131ecba4b67b616e50aae268"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mpls={0xd8, 0x8, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x10}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x9c, 0x6, "f08ce0271a1102ce93514215d80f721ae60d49c4223d0ddac60d7d3492d5cbfeb498b04dbf001fa6c5cf016cbe09e7e86d1e41a39b13f29364138a2d5498cae9f76c8285f4669bf23f15ff474191199b6148cc6ce0ea09bbcd6cf593122a3e9ada890d19cb877ae1b48dcf6f1b24f33144f86dd70428405fb3e453ccb033004b87141c789b44e95762ab82d59d60a493257977ef27ccc6a3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x8c, 0x2, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x28, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x2}, @IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x4}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0xfffe}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7f1, 0x1, 0x10000000, 0x6, 0x9}}}]}, {0x18, 0x6, "e6b82b7b21134fb62e17823077a6641f0dfc4880"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BASIC_ACT={0x1d70, 0x3, [@m_nat={0x140, 0x20, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x9, 0x6, 0x7, 0xfffffffd}, @rand_addr=0x64010101, @remote, 0xff000080, 0x1}}]}, {0xf0, 0x6, "e7049ff578f2946f1bc36588777cccf3536e79cf659c6117c1fb3daa823320d3fbb54fe97f37c04f1804de1692df7de1b0b3d77cde01d839d199463baab879da3b1c7ef1bd11487e91dbc5e2695f49fe2dbb8c589fb0ce7d5337d7079eb9a27d2bf7d33ea43cdf94300237949197dd67b42fdb58f7ab30c8a58a1f06e8851a93180733ff2ad9c03ae27159a08abf5072c476579b96e416c91c00598576320aeb5c2a2501cba4acf42e3413fdb17cdfd93b1ea653f5c71b29486d366e4cfc9d43920a028c58ee9db16b6bf2950d9bc773417d78b8276ff57020e06c752438ec4229181b0e8f7536ae66dea670"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x18c, 0x17, 0x0, 0x0, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x7fff, 0x1, 0x4, 0x8}}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x1, 0x2, 0x1, 0xf9}, {0xb, 0x9, 0x7, 0x6c0c}, {0x1, 0x4, 0x6, 0x5}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x9, 0x20000000, 0x7ff, 0x8}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x7ff, 0x4d, 0x4, 0x800}, {0x1, 0x3, 0x4, 0x7}, {0xd, 0x73, 0x1, 0x8}, {0x1000, 0x4, 0xe6, 0x1}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x80000000, 0x2, 0xab3}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x7, 0xffffffffffffffff, 0xc, 0x57}}]}, {0xac, 0x6, "12213dcff6b95526a10022661e60539159c8bf70b6c2e268bb5f55391318d1bed6dc7b123be2c0430a4e028ce2a20170a9696780a244499777380194b12de641fd15eb42229ae53f4fa0eee667944d72da9fde664ee735e0ee596665f994045a5d6062ae8ab2efd13ae6a50b5c36e95cfbb9184c074e79f656d63354a44c155c26ca002ebe7b0dd8a61a94770df2225ac224c867b0d7e42efc215a1771553a0244e82a8bb484845f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x114, 0x1d, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}]}, {0xd0, 0x6, "def7146f57e32380ab33079a8356a63f79f363f4fec54df6db7183d292a5565696258f095a49502c11d80d13c61eb754e20a3208ac3d19261946b13c5986cbf296aa591c31767afe4efcaec3a48dc428161ebe92a9466d6f214f347792659eb57d624ddb3dd33098c655bc3b7ac05ea250c748b87dd3be9c06792f09eec9c0e5fe7aabe2c749d3f6124e8fa19f0e7f90ef125ff680d9f1b4450397e9baea58d9df7582e1046d9ee4939e9ae4f4abfdab4ff5b183b281c6c8c086dd6d761eb653024be838856817db2b7b8d93"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x198c, 0x15, 0x0, 0x0, {{0xb}, {0x18c4, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x1ff}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x81, 0x2, 0x0, 0x4, 0x0, 0xfffffff8, 0x3, 0x7f, 0xd6, 0x3, 0x4, 0x3ff, 0x2ccc, 0xe29, 0x7, 0x5, 0x2, 0x0, 0x317, 0x5, 0x101, 0x9, 0x7fff, 0x6, 0x7, 0x50, 0xd, 0x9, 0x401, 0x7fff, 0x1, 0x200, 0x3, 0x1, 0x9, 0x7, 0x76d8, 0x4, 0x7fffffff, 0x9, 0x4749883c, 0x9c3, 0x280000, 0x7, 0x10000, 0x2f2, 0x40, 0x1000, 0x5a, 0x8, 0x5b65facc, 0x694, 0xfffffff2, 0x4, 0x6, 0x3ff, 0x800, 0x8, 0xd2, 0x52b, 0xfffffffc, 0x8001, 0x1b, 0x3, 0x7fff, 0x100, 0xd, 0xa5de, 0x0, 0x401, 0x6, 0x9, 0x5, 0x0, 0x0, 0x7, 0x4e16eba9, 0x8001, 0x1000, 0x8, 0x3ff, 0x4e9, 0x1, 0xfffffff7, 0x3, 0xfff, 0x8, 0x8, 0x7f, 0xfffffffc, 0x17, 0x1, 0x0, 0x800, 0x400, 0x1, 0x6, 0x9, 0x5, 0xfffffff8, 0x3, 0x1, 0x200, 0x6, 0x6, 0x9, 0xf98f28f, 0x6, 0xc000, 0x0, 0x88, 0xfffffff2, 0x4, 0xe3, 0x2, 0xc8, 0x1, 0x7, 0x100, 0x10, 0x5, 0x0, 0x7a, 0x4b, 0x7, 0xd968, 0x89a1, 0x4ef0, 0x90, 0x81, 0x101, 0x3, 0x3, 0x7, 0x38, 0x2, 0x0, 0x81, 0x2, 0x9, 0xcc34, 0xa, 0x8, 0xe, 0x40, 0x3ff, 0x4, 0x3ff, 0x28c1, 0xe, 0x3, 0x3, 0x6, 0x2, 0xfffffffa, 0x8, 0x101, 0x9dca, 0x0, 0x400, 0x2, 0x10, 0xc, 0x8000000, 0x4, 0x5, 0x0, 0xf2600000, 0xf6, 0x3ff, 0x2, 0xfff, 0x1000, 0x6, 0x3ff, 0x6, 0x8, 0xd, 0x0, 0x4, 0xffff6b7e, 0x7fff, 0x9, 0x4, 0xb, 0x9, 0xff, 0x3, 0xb, 0x3228, 0x401, 0x5, 0x0, 0xa2c, 0x9, 0xe, 0x401, 0xd30, 0x7fff, 0x2, 0x8001, 0x7, 0x7, 0x2, 0xd, 0x10, 0x8000, 0x6, 0x0, 0x6, 0x6735b726, 0x7, 0x1, 0x9, 0x5, 0xbe60, 0x0, 0x9fb, 0x1, 0x101, 0x76e, 0xdbf, 0x1, 0x40, 0x2, 0xe66, 0x8, 0x6, 0x0, 0x401, 0x2, 0x3, 0x209, 0x8, 0x7, 0x3ff, 0x0, 0x5, 0x200, 0x5, 0x100, 0x4d90abff, 0x7, 0x1, 0x2, 0x10001, 0xfffffffe, 0x4, 0x4, 0x10, 0xffffffff, 0x6, 0x8, 0x800, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffff1b1, 0x2, 0x7c7, 0x6, 0x5, 0x7, 0x81, 0x714, 0x6, 0x2, 0x0, 0x710a, 0x9, 0x4, 0xe, 0xffff, 0x29b4, 0x9, 0x8, 0x3, 0xb, 0x9, 0x0, 0x7, 0x8, 0x100, 0xe, 0x6, 0x7a28, 0x5, 0x0, 0x4, 0x6, 0x401, 0xfffffffa, 0x9, 0x4, 0x5, 0x2, 0x10, 0x6, 0x19facac0, 0x11, 0x5, 0xffffff6f, 0xc, 0x8001, 0x1, 0x8, 0x4, 0x9, 0x1, 0x6, 0x72, 0x6, 0x11, 0x7, 0xa, 0x1, 0x3, 0x5, 0x2, 0x1, 0x8, 0xfffffbff, 0x49, 0x1, 0xdaf7, 0x5e0, 0xc, 0x1ff, 0x0, 0x800, 0x5, 0x400, 0x0, 0x9, 0x2, 0x8, 0x2, 0x3ce9, 0x4, 0x4, 0x2, 0x2, 0x5, 0x8c96, 0x1, 0x6, 0x461, 0x100, 0x9, 0x7, 0x1, 0xaab, 0x7, 0x6bc, 0xd8, 0xc000000, 0x70, 0xd, 0x6, 0x8, 0x3, 0x10000, 0x3, 0x5, 0x4, 0x6, 0x2, 0x2, 0x4, 0x2, 0xa4, 0xc8, 0x5, 0x1b8, 0x1, 0xa, 0x5dfc, 0x54ce, 0x8, 0x341, 0x6c58, 0x9, 0x4899, 0x9, 0x6, 0x80000001, 0x8, 0x2, 0x3, 0x4, 0x1, 0x575, 0x10, 0x1ff, 0x200, 0x400, 0x2, 0x10, 0x7fff, 0x2, 0x1, 0x78, 0x1, 0x5, 0x4, 0x5, 0x10000, 0x7, 0xfffffff8, 0x1, 0x5, 0x4, 0x7f, 0x6, 0x8, 0x13, 0x0, 0x200, 0xa, 0xa, 0xf, 0x7, 0x5d6, 0xc651, 0x3, 0x800, 0x9, 0xffffff11, 0x7f, 0x9, 0x0, 0xfffffe51, 0x4, 0x100, 0x7ff, 0x3, 0x500, 0xffffffff, 0xffff, 0x10000, 0xc, 0x5, 0x0, 0x2, 0x8, 0x5, 0xbfe1, 0x7, 0x4, 0x5b, 0x1, 0xf6d, 0x1, 0x1, 0x1, 0x40, 0x6, 0x8, 0x10, 0x4, 0x9, 0xfff, 0xfe7, 0x0, 0x7f, 0x7, 0x3, 0xabd, 0x5, 0x10001, 0x7, 0x80, 0x9, 0x7, 0x9, 0x0, 0x5, 0x6, 0x80000001, 0x5, 0x1, 0xfff, 0x9, 0x80, 0x1, 0x1, 0xfffffffa, 0xa11, 0x6, 0x5, 0x0, 0x80000001, 0x3, 0x6, 0x1, 0xfff, 0x8, 0x15, 0x6, 0x6, 0x4, 0x38b7, 0x225a, 0xc, 0x8, 0x1, 0x7fffffff, 0x78, 0x6, 0x1000, 0x1, 0x4, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x3, 0xc1, 0xb, 0x8, {0x7f, 0x2, 0xa, 0x0, 0x3, 0x4}, {0x7, 0x2, 0x2, 0x5, 0x762b, 0xffffff85}, 0x9, 0x168, 0xffff}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x401, 0x0, 0x8, 0x3e3a, 0x0, 0xfffffffd, 0x610, 0x7f, 0x80000001, 0x1, 0x7fffffff, 0x1, 0x8, 0x7, 0x7, 0x0, 0x81, 0x6, 0x3, 0x2, 0x200, 0x7, 0x9b, 0x5, 0x1, 0xa, 0x3, 0x6, 0x6, 0x8000, 0x0, 0x8, 0x1, 0x81, 0x0, 0x101, 0x1, 0xb, 0x8, 0x5, 0x3, 0xe, 0x7, 0x8febf1f, 0x6df8, 0x6, 0x80000001, 0x5, 0x336c, 0x0, 0x9, 0x7f, 0x80000000, 0x2, 0x6, 0x8, 0x4, 0x0, 0x8, 0x7, 0xffffdb0c, 0x5, 0x2, 0x10, 0x2, 0xd8e, 0x8000, 0xf3e0, 0x180, 0x10, 0x7, 0xd4c, 0x6c5d, 0x40, 0x80000000, 0x8, 0xfa, 0x7fffffff, 0xf, 0x6, 0x6, 0x6, 0x4678, 0x8, 0xffffffff, 0x1, 0x8001, 0x3, 0x80, 0xb5a80000, 0x8, 0x8, 0x7, 0xa, 0x2, 0xdc5, 0x5, 0x3, 0x2, 0x2, 0x2, 0x9, 0xa, 0xa, 0xa, 0x6353, 0x4, 0x6, 0xb0e, 0x3, 0x1, 0x5, 0x9, 0x3, 0x8, 0xbc, 0x4, 0x0, 0x40, 0xb, 0x5, 0x3, 0x0, 0x3, 0x3, 0x816, 0x7, 0x3, 0x6472, 0x1, 0x401, 0x2, 0x9, 0x3ff, 0x8, 0x800, 0x9, 0x401, 0x5, 0x5, 0x9, 0x1, 0x726, 0xffffffdc, 0xc6, 0x1ff, 0x7f, 0xfffffff8, 0x7, 0x8, 0x24, 0x9, 0xcaf3, 0x8, 0xfffffff8, 0x0, 0x6, 0x6, 0x998, 0x101, 0x1, 0x87, 0x2, 0x9, 0x0, 0x7, 0xc85c, 0x2, 0x8, 0x0, 0x7f, 0x400, 0xd79c, 0x3, 0x4, 0x7f, 0x3, 0xf, 0x3, 0x6, 0x6, 0x9, 0x2, 0x3, 0x8001, 0x7, 0x0, 0xfffff801, 0x3, 0x5, 0x4, 0xff, 0x7ff, 0xdfd, 0x8000, 0x2, 0x2000, 0x5, 0x2, 0x1, 0xd, 0x6, 0x6, 0x5, 0x6, 0x8000, 0x9, 0x1, 0x69, 0x5, 0x1, 0x9, 0x100, 0x8d68, 0x1000, 0x2, 0x5, 0x3ff, 0x8, 0x6, 0x40, 0x8, 0x58000000, 0xc, 0x8, 0xfffffffd, 0xf81a, 0x0, 0x8, 0xf5, 0x6, 0x9, 0x7, 0x5, 0xbda, 0x2, 0x800, 0xed61, 0x5, 0x4, 0x1, 0x7, 0xfff, 0xcbee, 0x4, 0x7fffffff, 0xfffff80c, 0xfff, 0x8, 0x6, 0x6, 0xfffffeff, 0x41490f21, 0x10000, 0x8, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0xffffffffffffffff, 0xffffffff, 0x9, 0x7, {0xfa, 0x2, 0x7, 0x400, 0x8000, 0xff}, {0x18, 0x0, 0x6, 0x5, 0x41b, 0x9}, 0x5, 0x8ae7, 0x7fffffff}}, @TCA_POLICE_RESULT={0x8}], [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xffff, 0x9, 0x2, 0x2, 0x0, 0x8, 0x0, 0x8001, 0x9192, 0x31, 0x0, 0x1c600, 0x3376, 0x8c, 0x35, 0x1, 0x80, 0xbe0, 0x0, 0x6845, 0x5, 0x8, 0xea, 0x7, 0x4, 0x1, 0x8c6, 0xffffffff, 0xde, 0x507d, 0x1, 0x2, 0x4, 0x4, 0x4, 0x4e17a0b3, 0x8000, 0x3, 0x101, 0x0, 0x66, 0x3ff, 0x0, 0x8, 0x7, 0x401, 0x7, 0x69a, 0x9, 0x3ff, 0xa3, 0x3, 0x7, 0x80000001, 0xfff, 0x3, 0x8, 0xb60b, 0x7, 0x4, 0x0, 0x6, 0x6, 0x8, 0x9, 0x81, 0x3800000, 0x2, 0x9, 0x9, 0x7, 0x0, 0x0, 0x91fd, 0x4, 0x200, 0x2, 0x7, 0xa, 0x8, 0x4, 0x4, 0xfffffff7, 0x2, 0x6, 0x9, 0x3, 0x5, 0xa6d1, 0x1, 0x5, 0x8, 0x8b, 0x2da, 0x6, 0x40, 0x8, 0xb3df, 0xfffffff7, 0x5, 0xfffe000, 0x10001, 0x6, 0x56e4, 0xdd50, 0x832e, 0x47, 0x2, 0x800000, 0x80, 0x2, 0x3, 0x60ce7893, 0x63, 0x7ffbffff, 0xfffffffd, 0x5992, 0x8, 0x9, 0x100, 0x9, 0x4, 0x0, 0x5, 0x8, 0x176, 0x0, 0x6, 0x0, 0x360000, 0x2, 0x1, 0x9, 0x5, 0x8, 0x8, 0xffff, 0x5, 0x9, 0x214aa198, 0x4, 0x0, 0x1, 0xd8, 0x6, 0xb94, 0xfff, 0xfffffff7, 0x4fb3226c, 0x6, 0xf6, 0x7fffffff, 0x7, 0x80000001, 0x9, 0xf, 0x38, 0x10001, 0x10000, 0x9, 0x1, 0x7fffffff, 0x400, 0x4, 0x3, 0x741, 0x4, 0x2, 0x5, 0x2, 0x5, 0x775a50d6, 0x8, 0x2, 0xc, 0x4, 0x5, 0x800, 0x4, 0x4, 0x2, 0x5, 0x1, 0x761, 0x7, 0x0, 0x8001, 0x2, 0x7, 0x82a, 0x9, 0xfffffff7, 0x1, 0x0, 0x4, 0x101, 0x5, 0xb, 0xfffffff7, 0x80, 0x79ff, 0x7, 0x1f6, 0xfffffffe, 0x5, 0x0, 0x8, 0x5, 0x44, 0xfff, 0x1, 0x3e87, 0xc9, 0x8, 0x1ff, 0x5, 0x3, 0x83a, 0x8e67, 0xfff, 0x1, 0x0, 0x1, 0x9, 0x5, 0x7fffffff, 0x1ec7, 0x7, 0x8, 0x0, 0x41, 0x8, 0x6, 0x6, 0xdf1, 0x4, 0x3db, 0x101, 0x4, 0x4, 0xeb0, 0x6a, 0x1, 0x4, 0xf, 0x0, 0x2, 0x1000, 0x12b4, 0x6, 0xb, 0x6, 0x800, 0x4, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x9, 0x8, 0x0, 0x81, 0x1e51, 0x4, 0x3ff, 0x63ab, 0x7, 0x1, 0x6, 0x6958, 0x9a32, 0x4, 0x6, 0x0, 0x80, 0x101, 0x1, 0x6, 0x5, 0x4f16, 0x82d, 0x51, 0x6, 0x0, 0x84, 0x0, 0x4, 0x3ff, 0x9, 0x5, 0x1, 0x7, 0xce, 0x1, 0x5, 0xffffe944, 0x7, 0x6, 0xf, 0x8, 0xffffffff, 0x10001, 0x7, 0x7, 0x4, 0x8, 0x4, 0x5, 0x40, 0x80000000, 0x8000, 0xd, 0xffffffff, 0x5, 0xffff, 0x26, 0x8000, 0x4, 0x4bc26ef8, 0xc3e, 0x2, 0x18f, 0x3, 0xe, 0x800, 0x80000001, 0xfffffffc, 0x1, 0x6, 0x2, 0x4, 0x7fffffff, 0xffffffff, 0x7f, 0x6d7a, 0x4, 0x8, 0x7ff, 0x0, 0x401, 0x6690, 0xc, 0x1, 0x5, 0x8, 0x7, 0x0, 0x8, 0x0, 0x74ce, 0x1, 0x5, 0xffff0ce2, 0x80000001, 0x1, 0x3, 0xffffffff, 0x1d720cae, 0x9, 0x6, 0x4, 0x5, 0x5, 0x400, 0x6, 0x0, 0xd, 0x6, 0x40, 0x8, 0x8, 0xffffffff, 0x7fff, 0x1, 0x1, 0xd, 0xad, 0xffff6898, 0x40, 0x5f, 0x0, 0x100, 0x1, 0x9, 0x7, 0x6, 0x80000000, 0xfffffffc, 0xf48, 0x70, 0x2, 0x9, 0x7, 0x80000001, 0x130, 0x0, 0x6, 0x7, 0x5, 0x4, 0x41052895, 0x6, 0x2, 0x10, 0x1000, 0x6, 0xb, 0x4, 0x2, 0x0, 0x299, 0xa2c4, 0x0, 0x7809, 0x3, 0x80, 0xf, 0x4, 0x2, 0x9a000000, 0x5, 0x4, 0x2, 0x10, 0x9, 0x7, 0x2, 0x1, 0x6ad4143a, 0x3, 0xe, 0x6, 0x9, 0x35, 0x7, 0x2, 0x9, 0x9, 0xffff38ce, 0xff, 0x7ff, 0x1, 0xfbc914c, 0x0, 0x8, 0x5, 0x0, 0x5, 0xb, 0x1, 0x200, 0x6, 0x4, 0x4, 0x3, 0x6, 0xffff0001, 0x0, 0x1, 0x8, 0xe, 0x3, 0x14, 0x3, 0x3, 0x31, 0x800, 0x4, 0xffffffff, 0x3, 0x8, 0x169d, 0x54da, 0x4, 0x0, 0x0, 0x2, 0x443, 0x6, 0x2, 0xf, 0xffffffff, 0x8, 0xb87, 0x6, 0x0, 0xfffffffc, 0x0, 0x3, 0x1000, 0x10000, 0x9, 0x7, 0x900e, 0x191138df, 0x3, 0x19, 0x0, 0x8001, 0xe570, 0x2, 0x9, 0x7b07, 0x8, 0x1, 0x0, 0x0, 0xffff7fff, 0x10000, 0x878e, 0xffffffff, 0xb, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x3ff, 0xfffffffa, 0xe2, 0xd, 0x630a, 0x3, 0x80, 0x1ff, 0x9, 0x7fff, 0x200, 0x7, 0x6, 0x6, 0x9, 0xc65, 0x81, 0x3b, 0x3, 0x9, 0x4000000, 0x3, 0x5, 0x6, 0x3690, 0x6, 0x8, 0xeee7, 0x30, 0x7, 0x200, 0xc6, 0x10001, 0x401, 0x8, 0x98, 0xfff, 0x6, 0x8, 0x9, 0x7, 0xff, 0xa890, 0x2, 0x5, 0x9, 0xfffffff9, 0x6, 0xfffffda4, 0x5000, 0xa3e, 0x2b3c, 0x8, 0x9, 0x2, 0x6c, 0x5, 0x100, 0x6, 0x4, 0xfffffffd, 0x8, 0xe72, 0x9, 0x35, 0x4, 0x401, 0x3ff, 0x1, 0x0, 0x3, 0x7, 0x0, 0x13, 0xff, 0x2, 0x80000000, 0x8, 0x3ff, 0x5, 0x1, 0x1, 0x81, 0x10, 0x5, 0x6, 0x81, 0x2, 0xffffffff, 0xb65a, 0x1000, 0x80000001, 0x1, 0x0, 0x6, 0x6, 0xd, 0x7ff, 0x4, 0x3a85, 0x0, 0x1, 0x5, 0x8, 0x5, 0x6, 0xfffffff2, 0xbac1, 0x0, 0x3, 0x7, 0x5, 0x81, 0x1, 0x0, 0x6, 0x0, 0x4, 0x7fffffff, 0x0, 0x7, 0x4, 0x4, 0x80, 0x57, 0x2, 0x8001, 0x4, 0x4, 0x7fffffff, 0x64, 0x80000001, 0x400, 0x8, 0x1, 0x8, 0x9, 0x101, 0x4, 0x6c4b, 0x7, 0x4, 0x5, 0x2, 0x5, 0x0, 0xb9f646c, 0x8, 0x0, 0x5, 0x7a27, 0x9, 0x5758, 0xfffffffd, 0xd92, 0x0, 0x1, 0x2d7, 0x772e, 0x100, 0x9, 0x6, 0x1ff, 0xa9, 0xfffff800, 0x1, 0x1, 0xfff, 0x5, 0x7, 0x40, 0x4000, 0x7, 0x5b, 0x2, 0x4, 0x1000, 0xfffffffd, 0x0, 0x8, 0x5, 0x2, 0x6362, 0x0, 0x2ba9, 0x0, 0x7, 0x1, 0x1, 0x80000000, 0x263, 0x12, 0x6394, 0x4, 0x8, 0x3, 0x5, 0xfff, 0x80000000, 0x8000, 0x4, 0xd, 0x287, 0x0, 0x10, 0x6, 0x5, 0x4, 0x5, 0x3, 0x1, 0x8, 0x5dc7, 0x2, 0x1ff, 0x2, 0x26, 0x0, 0x1, 0x3, 0xe40, 0x8, 0x2, 0x4, 0x81, 0x0, 0x100, 0x7, 0x1000, 0xc, 0x3ff, 0x51b9, 0x1, 0xca5, 0x8, 0x80, 0xffff3f34, 0x6, 0x7, 0x2, 0xc57, 0x1, 0x5, 0x932, 0x6, 0x8, 0x5, 0x1, 0x924, 0x77c, 0x94bb, 0x3, 0x1, 0x2, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x254}]]}, {0x9e, 0x6, "68fea2c14c8b9a46bb3a194619e2722ab667eb6a62b0c82b04d0fe8e015454b6a66cd3b0860ecfa6e3ac4d2e558c6b07df360bc1ca14e5929e4add7a7d41f9c75438cb7c20bb52b8c8d70f5064371fce884bbf563fff3d072ab39ac6bd2a1137a128e8fd699b85158adce87dc14a7be31740134c36142e532785d2b0e2e9031909944817ec759574e5eb2cf94257a941afc7a432d1d78142b53d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x2e94}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) r12 = socket$l2tp(0x2, 0x2, 0x73) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002340), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000002380)={'wlan0\x00', 0x0}) (async) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r15, &(0x7f0000007600)={0x0, 0x0, &(0x7f00000075c0)={&(0x7f0000003f40)={0x1c, r13, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r14}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x80) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x9c, r11, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x43, 0xac, "e2f2f631e65736af194f7b794dd544585cdcf7379fc5667d1a895ff48dab8aeecdede73d9f965ab8ca237e0bbe637ad1cc13f6b5f3eff3d0fc8f6dfd1c2f31"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x10, 0x13, [{0xc}, {0xc, 0x1}, {0x6c}, {0x3}, {0x4}, {0x40f26dd3d779c86f, 0x1}, {0x36, 0x1}, {0x4}, {0x1}, {0x12}, {0x60, 0x1}, {0x3, 0x1}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4040007}, 0x80) (async) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 1.347500813s ago: executing program 0 (id=4474): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0xfffd, @random="c0c13c2baeb6", 'macvlan1\x00'}}, 0x1e) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) 1.344152607s ago: executing program 4 (id=4475): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0001020000000000000007000000080001005300000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000640000000a0018000303030303030002e2d928ffffff00000a001800030303030303000000000000"], 0x54}}, 0x884) 1.239338349s ago: executing program 3 (id=4476): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000002b40)=[{{&(0x7f00000000c0)={0xa, 0x4e33, 0x4, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x7, @local, 0x3a1}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@hoplimit={{0x14, 0x29, 0x34, 0x537}}], 0x18}}], 0x2, 0x24000800) 1.175553023s ago: executing program 0 (id=4477): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0xfc, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000004280)={0x0, 0x0, &(0x7f0000004240)={&(0x7f0000000100)={0x28, r2, 0x13a8a16702787d01, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x2008800) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000090) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0xfc, 0x4) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000004280)={0x0, 0x0, &(0x7f0000004240)={&(0x7f0000000100)={0x28, r2, 0x13a8a16702787d01, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x2008800) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000090) (async) 1.111364635s ago: executing program 4 (id=4478): readv(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB='\t\r'], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_80211_inject_frame(&(0x7f0000000840), &(0x7f0000000880)=@ctrl_frame=@cf_end_cf_ack={{}, {0xd}, @device_a, @broadcast}, 0x10) clock_gettime(0x0, &(0x7f00000013c0)={0x0, 0x0}) nanosleep(&(0x7f0000001400)={r2, r3+60000000}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x36, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) syz_80211_inject_frame(&(0x7f0000001480)=@device_b, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001f40)) (async) clock_gettime(0x0, &(0x7f0000001f40)={0x0, 0x0}) nanosleep(&(0x7f0000001f80)={r5, r6+60000000}, 0x0) syz_80211_inject_frame(&(0x7f0000002000)=@broadcast, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000002000)=@broadcast, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000022c0)={0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000005a94c3715c9b3accfcacd769000000000000007919b000"], &(0x7f0000000040)='GPL\x00'}, 0x90) nanosleep(&(0x7f0000002300)={r7, r8+10000000}, 0x0) syz_80211_inject_frame(&(0x7f0000002380)=@broadcast, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000002380)=@broadcast, 0x0, 0x0) 1.110543734s ago: executing program 2 (id=4479): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0xffffffff) (async) listen(r4, 0xffffffff) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x1ff, 0x4, 0x2, 0x2}, &(0x7f0000000040)=0x10) sendmsg$kcm(r3, &(0x7f0000000940)={&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x3, 0x3, 0x3, 0x0, {0xa, 0x4e20, 0xbeb3, @remote, 0x7}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000540)="9ed82a0a944786ed66e5f3f11eba46bdbcd7283179b6890ea2f2c3392a9bdfb2851b95367feec76b33f1a43e4b3177219a27b6a26a1019388b9907af8a3aca17e4e748c42fdc4f8fe5d1615541f33752ae02264726af278d6b568a8a0c93c0ae00960885d87575ead6563b585791751dbe9312f3afb993325fd89e7ae0766fec052e35512ceb7e6bb546918a1629aa1261b670e99a01377db3e1c1fb56311b1dbdb3c9ca965e648e7bb2d625c1e0bb5d3e8c7a6474690739d3b7662cc29c16f6fc0c1c0d3b1660da", 0xc8}, {&(0x7f0000000640)="743c0ddebd", 0x5}, {&(0x7f0000000680)="f7bd7a665329e4324d9adcb0111c01eaac795fbb662010a30b4f3eef66c2acb836b556550bd0b59b925b459fae406774f0ed", 0x32}, {&(0x7f00000006c0)="779a22358a05248ee7a926bb6f3ab4804579", 0x12}], 0x4, &(0x7f0000000740)=[{0x68, 0xff, 0x6, "f7e92202adaf7e6e5d3ddbb640e91f86b504373d153ab9c1578325f15af1c0098c7d049804d42f60d29f81834866aaf0344e30b22f6374348fee7e19793b8574d43b08357d066ac1d8ddf15e413db323d92a9d7f58d7"}, {0xf8, 0x103, 0xc20, "aad4f8b3356f34e98330397a512f216957d43b37b4c1bd5be4c8a43a7841018926d158314732990e46091a605bfe984256429728190e6d57253385ce13758b595fa0a1f55c3c513898f38300e18fcc5fda2a01e75e704e7db3a139d39d9c92b440d835653f1d494d51482174789f85c01de24b592192443fdfc2b9efa6631aa6f7ef1760d2ddae56c0e33514dd907a1f8c778524fa72fc93734dd3e36b0c99ef144fa2783f7e1cc2d3580fb5b6e25143e610f055427473a38d8d33b5b8b210d78147366b461502aed226289c545fc814c5002abdf8feabca8b1890ed97571a4221d0e9a9"}, {0x68, 0xc, 0xfffffffa, "cbcfdbca8a4e74586b967f878966c5aace6b93340ec3ca19577caeb20c8809360082bf98c8728a62c3e4a30a78ccc8e3988c13326419e047c8a1941e7e904b3155d39baed40d46d7a17f4bd4ec1900734e29d4401711"}], 0x1c8}, 0x20000000) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0xffffff, 0x0, 0x0, 0x4}, 0x10) write(r3, &(0x7f0000000240)="265b3c8c240000001a00590214f9d40700000000000000000000080004000100000000008c932ccdc11eca665add65a13185d1357dd2beff48e354fae74e663fb6b4000000000000258dab50929156a26f411622353e8b5ba6e8ca62", 0xfffffffffffffd00) (async) write(r3, &(0x7f0000000240)="265b3c8c240000001a00590214f9d40700000000000000000000080004000100000000008c932ccdc11eca665add65a13185d1357dd2beff48e354fae74e663fb6b4000000000000258dab50929156a26f411622353e8b5ba6e8ca62", 0xfffffffffffffd00) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x52}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x52}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x200, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc080) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1}, 0x3}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x2c, r1, 0x1, 0x70bd2a, 0x35dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x2c}}, 0xc00) (async) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x2c, r1, 0x1, 0x70bd2a, 0x35dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x2c}}, 0xc00) 1.056304646s ago: executing program 1 (id=4480): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x7fff, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4, 0x1, {0xa, 0x4e24, 0x14a, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xffffff48}}}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x18}}], 0x2, 0x0) accept4(r1, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000000280)=0x80, 0x800) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="33e89be4437d22660eed411445"], 0x2a8}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = socket$netlink(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) writev(r10, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x13}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_xfrm(r4, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="380100001000130704000400133c52a2b6e58217707c2846c10000000006000000000000000001ac1e00090000006d00"/65, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0100000000000000000000000000010000000032000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000200000000000000000000000a00050b0000000000000000480002006563622d73657270656e742d61767800"/240], 0x138}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = openat$cgroup_int(r13, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r14, &(0x7f0000000100)=ANY=[@ANYBLOB='-7'], 0x9) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0xc, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="6eaa00000000000079108200000000009500000000000000fb3daaba"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfee6}, 0x94) 1.03928124s ago: executing program 2 (id=4481): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000000000007910480001000000630000000000000095007400000000000efc349cd7214f167b08bce24ad8e5"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r4, 0x1, 0x3d, &(0x7f0000000240)={0x1, 0x2}, 0x8) sendmmsg$sock(r4, &(0x7f00000011c0)=[{{&(0x7f00000005c0)=@rc={0x1f, @none, 0x5}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000640)="06a077e6815927113e4cb42f83f0ac71f7c713d03dbcef", 0x17}, {&(0x7f0000000680)="7c2ac0b38934ae5a39b02b41bf47354e4a0758ad7f7fc5b0be55ec74af50dbca8b3a2d9e7d985fac46995091eb5fb5fa5f997d8975e58841a6ee9e0efff94b48267c12507e8fbed434af6332", 0x4c}, {&(0x7f0000000800)="5dea10869a1f83aa32becca89f633e1f3d4fce3e67c978915ac1c884c1ab449d3ef90453b87b4b9902790c78a6197a96387d6759af3b7d5ad83d9ca1f2eb95059f2d78f9bc28e07c8e2e50e2300b0e4dc7186b653ed76c7ff64aba4c0c5dd6842f795aa7872d5e02f9e6f7b0a7be321de8be80e16d6a513b86ea2211769e05f0c2307cf496d2c3e69f5738282385d97b8c5838ee0282a293d71d55077f78d08af40f4430cebfd14e93", 0xa9}, {&(0x7f00000008c0)="5bf220a6b01c21e8393bd93fea7b08376a6154f7bd6031692ae6722e867f0c33ef8a6c9381732aff0dbb8548e5e15d283031c433d047590f5d3ec1a660d9929a027f3442a2910596d266e856d5e5129f100f783bfc16b1eb793094354e8bbe77a3ebdd90e7558ee363116bca49e5dda02372030ce184a354a300101abac5f29647bfa94fae462e16bc5bee592bba4c9e635ce34fa59f2c9efb9e671631d83a6921d8fc4647f22fc3cde18e034b5b0637149bfea1cc5b4950a45590ab4055efee227a5417a78800dc12e236fc5f814f3d02c6f1d413a2a2", 0xd7}], 0x4, &(0x7f0000000a00)=[@mark={{0x14, 0x1, 0x24, 0x18354dc5}}, @timestamping={{0x14, 0x1, 0x25, 0xb4f}}, @mark={{0x14, 0x1, 0x24, 0xab4b}}, @timestamping={{0x14, 0x1, 0x25, 0x4cc1}}, @mark={{0x14, 0x1, 0x24, 0x91}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x90}}, {{&(0x7f0000000ac0)=@nfc={0x27, 0x0, 0x1, 0x2}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000b40)="b0c9526dd4df381da03471737dc5e29f917a", 0x12}], 0x1, &(0x7f0000000bc0)=[@mark={{0x14}}, @txtime={{0xfffffffffffffd92, 0x1, 0x3d, 0x800000000000007}}, @txtime={{0x18}}], 0x48}}, {{&(0x7f0000000c40)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000e00)="c213bd81f7d214f642435db06aa622ce8ef5a5c4b726d76575aedfef6effb70037eb202bdaefad3b62e3d71c899fd2524f744dcd981bb141d23c60bd6153158482a774a4ae48c3b78ca2e330ff1a585a9e5da72b7621b27c1d8a5d3b4be13b6c139c8259315779cae2508bc0c21803a69a53ba3cf09b9ab1191de7ea6d09dab09a66189310abdcb9585e7b39766cfaf6577c5c2a527afc513a3fbe54d1ec3c0147819f9c3781daef2ecdd01519a6c7645c382e8dfe438009d315b9997d25142a4a17f6b028f2b76a01c39877c2c03684a4dbc8b93e86f41d33a3a85ac95a2e16d276633ff65e93274da7ab", 0xeb}, {&(0x7f0000000f00)="f336e9378d8cb78d1c798558af9b6a3c3a9dc49e58b1f0ac76753261c3d79f191eb6dee3ba6e9d18bb4e311b83482c72dd8c30e3ed6224e890014be8dc656e7b33a68aa37ea29f05efbbf7e82cbcfde7c7028314a71e15f1", 0x58}, {&(0x7f0000000f80)="93e3c197f3ee1803b6ea1735b4de961d74f8b91511b9696a1698a442270c2badb2c0acc60958df57f12c6aafbf3bdcdc4e1bd5a5a0b826189e5f9bc094ef3eb22a38a1af5f9f226f44b6c6d93ec1981547b7a6f3c20a5d523acc01ca7e19f7f0a156f02c0b555eda43c8e68f6744a8d1bcd01c7020dddb005bd9fbe84793255f", 0x80}, {&(0x7f0000001000)="ef6c1437a59f2e9d3928cfca4c38c0f7f912fe384a96b0dc5ce086b682af38f8f6d9b619b0d0806b212964807cd49301cda2aa1e17af1c65a78289c5b2288b1a6389297b10454cf0c0d281db0bb03d8c5d7cffc762b062c1804ee20dbb05fbbc65cca64effaea8cf01b66274c695fffc3081df91b88a02d4d01508a4d6bb3613ef1b3395d040f51064bc63bb83c4f50108f2dfb02cc137e1ea4aaa21d97a25635f37e0485f10db4fcb198c82d98ca12eab7e098fca781c07595dfb9dc0b36ba57477f2089a666bf7b772d5c27a12e799f5c5e422c9e4e8640f9df54d3bf978b6c14c1da8bafa6642237cfb37824edda1d1687769fa5d9df93e", 0xf9}, {&(0x7f0000000cc0)="5ddb6cc1083f78b3749207f675e2783d829fa328ff4d9401a3a32b6aa048756c15b16460c51693e279c563ed9f2e95deb01c717e6e5524b7c9c84516ba62ed8f8dfd8557a05029b9f73329f1e5bdda31951c469c941a27a9bd94e72fd5faa598db3d5dc251d53dc4112b4c72ff385b1ad86ab6f110aadf249333491abb0c4818f386ec70688c3b7a761d4284", 0x8c}], 0x5, &(0x7f0000001140)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x7bf}}, @timestamping={{0x0, 0x1, 0x25, 0x81}}, @timestamping={{0x14}}], 0x60}}], 0x40000000000001f, 0x24040805) accept(r3, 0x0, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x5, 0x100010, 0xffffffffffffffff, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r6, 0x0, 0xd0, 0x0, &(0x7f0000000700)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r9, 0x1, 0x1a, 0x0, &(0x7f0000000dc0)) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r10, 0x0, 0x41, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRESHEX, @ANYRES32=r1], &(0x7f0000000080)=0x2c) setsockopt(r1, 0x61da9abc, 0x2, &(0x7f0000000500)="40a6d06db87ef8142b6a33bb4ac3bed328063c1122fb60a9c3ca9abd2ed091ae72862fc7067d05ea6f38f3a94c0245931379949a04edbf931b4afebf4c6dff8ef64a561e94e8445ba7527d411a933e22d83c98f816130194bb1a7f97075c1a760e06986d960a459993f86fea73857c97fdc97861e528894b9a6790c3ff2f0f5bdf3d3c21f0f96b9c6e18d5ffaba1d6f482e6c9d093b2bc21bc", 0x99) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e20, 0xa00, @remote, 0x9}}, 0x0, 0x0, 0x2e, 0x0, "42d9a44bd2d573391d28088369d56250d1fb530d2fcaa1383c873e0462da9e4a0cca0568ed0ce16e896ba3112269d762c3a795d6141ba00b89ae20e0022b4b1503ac1f386d07387ab5de88e9a82133bd"}, 0xd8) ioctl$XFS_IOC_COMMIT_RANGE(r8, 0x40585883, &(0x7f0000000040)={r5, 0x0, 0x8e, 0xfffffffffffffff7, 0x100, 0x1, [0xee56, 0x2, 0x3, 0x0, 0x2, 0x6]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r11 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) writev(r11, &(0x7f0000000000)=[{&(0x7f0000000140)=':', 0x1}], 0x1) ppoll(&(0x7f00000000c0)=[{r11, 0x8080}], 0x1, &(0x7f0000000180), 0x0, 0x0) r12 = socket$inet6(0xa, 0xa, 0x4) accept$inet6(r12, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x1c) ioctl$SIOCX25SENDCALLACCPT(r2, 0x89e9) 947.415993ms ago: executing program 3 (id=4482): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "ca191b2a0104b6a9", "404322cba02335d4c6d2d4fb43583cbce8ed367085d85317964322238ef204b2", "0ecc07cb", "4e0eac216e798a00"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x2, @mcast1, 0xc}}, 0x0, 0x0, 0x3d, 0x0, "8075fceebb0757a8f24d57e77b227e7b69ad65ce4af56d0ce57353d5538f700cd44d8bcbc065c9b07087bdea2780cc3e085fe48fcdc30d0392e600457034933a4208163d676722d0719412f3f358e1d9"}, 0xd8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, 0x0, &(0x7f00000024c0)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) r2 = socket(0x3, 0x800, 0x5c) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) shutdown(r0, 0x0) 819.295053ms ago: executing program 1 (id=4483): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="f4000000290001000000000000000000fc020000000000000000000000000001fe8000000000000000000000000000200000000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="be6b6e000000000050001100ac1414aa000000000000000000000000ffffffff0000000000000000fc020000000000000000000000000001ff0200000000000000000000000000013c040000080000000a000a00280020"], 0xf4}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xc}, &(0x7f00000000c0)=0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000005245000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xffffff1f, 0x2000000}}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r4}, 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000680)=[{0x1, 0x4, 0xf, 0xa}, {0x3, 0x1, 0x2, 0x6}, {0x0, 0x1, 0xb, 0xd}, {0x0, 0x1, 0xa, 0xa}], 0x10, 0x1ff}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r6) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000002f010000100001800a000200626f6e6430000000140002800800010000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110780000000000630122000000000095000000000000008f6a138c9e4eb32e71d7754e127d8d87525e8d57dc3c002fa721249c4cdfd87788947190b59b5af99eaaecbf2ba57aa6ffd750ffd3bef751c89264a6a9ec3b188b69dc1b6a12211cbf01e697342cf987ca2161e2a58904"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 701.569426ms ago: executing program 2 (id=4484): ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000000)={0x2, 0x0, {0x25, @usage=0x9, 0x0, 0x3, 0x44be, 0xffffffffffff1a75, 0xffff, 0x7, 0x0, @struct={0xc, 0x98}, 0x9, 0x7, [0x3, 0x80, 0x8, 0x0, 0x6, 0x80f]}, {0x4, @struct={0x7, 0x1}, 0x0, 0x5, 0xe, 0xc0000000000000, 0x1, 0x800, 0x88, @usage=0xa, 0x4, 0x2, [0x89a6, 0x7f, 0x3, 0x9, 0xfffffffffffffff8, 0x89]}, {0x0, @struct={0xffffffff, 0x3}, 0x0, 0xfd5f, 0x9, 0x9, 0x6, 0x8, 0x4, @usage=0xd817, 0x2, 0x5ee6fa43, [0xa313, 0x440c, 0x800, 0xb, 0x0, 0x5]}, {0x0, 0xd, 0x8000000000000000}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000800)={0x5, 0x0, {0x13d6, @usage=0xfffffffffffff685, 0x0, 0xff, 0x7, 0x1f0, 0x397, 0xfffffffffffffffc, 0x0, @usage=0xb, 0x2, 0x200, [0x3, 0xfffffffffffffffa, 0x3, 0x6, 0x1668, 0x8000000000000001]}, {0x6, @struct={0x6, 0xffffffff}, 0x0, 0x47, 0x7, 0x9, 0x7, 0x4, 0x8, @usage=0x7, 0x2, 0x1, [0x8, 0xa3e5, 0x400, 0x9df, 0x1, 0x400]}, {0x0, @usage=0x6, 0x0, 0x9, 0x2, 0x3, 0x9, 0x2, 0x9c, @usage=0xf20, 0x1, 0xfffffffc, [0xffffffff, 0x6, 0x8001, 0x4, 0xefe, 0x6]}, {0x10, 0x2, 0x1}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000c00)={0x2, 0x5, {0x8000, @usage=0x2, r0, 0x0, 0x3, 0x9, 0xd, 0x2, 0x80, @struct={0x5, 0x4}, 0x10000, 0x9, [0x1, 0x5, 0x1, 0xc0b, 0x7fffffff, 0x8]}, {0xd8e, @struct={0x3}, r2, 0x7, 0x9, 0xffffffffffff0001, 0x3, 0x5dd, 0x4, @struct={0x4, 0x8}, 0xffffffff, 0xa, [0x7, 0x1, 0x1, 0xfff, 0x7]}, {0xbb6, @usage=0x5, r3, 0xf4, 0x17, 0x3, 0x7, 0xfffffffffffffff9, 0x425, @usage=0x7, 0x6, 0xfff, [0x8, 0x0, 0x9511, 0x1, 0x3]}, {0x1, 0x80, 0x4}}) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000001000)={0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001080)={r1, 0x80, 0x1, [0x6, 0xc, 0x2, 0x0, 0x910], [0x27, 0x1, 0x8, 0x0, 0xd, 0x4, 0x2, 0x6, 0x0, 0x0, 0x1, 0x1, 0xfffffffffffffff9, 0x0, 0x3, 0x40, 0x4b, 0x6, 0x0, 0xe90, 0x0, 0x9, 0x7, 0x200, 0x9, 0x8000000000000000, 0x100000001, 0x0, 0x3, 0x3, 0x3, 0xe, 0x5, 0x3, 0x0, 0x2, 0xfffffffffffffff8, 0x3, 0x942c0000000, 0x100000001, 0x8, 0x1, 0x80000000, 0x2, 0x3, 0x100, 0x4, 0x8, 0x8f, 0x7, 0x200, 0x3, 0x80, 0x8000000000000000, 0x5, 0x3, 0xe374, 0xffff, 0x20, 0xceb, 0xd39, 0x2, 0x4, 0x2de7, 0x2, 0x200, 0xffffffffffffffff, 0x61, 0x7fffffff, 0x400, 0x3ff, 0x4, 0x800, 0x9, 0x7, 0x2c, 0x1, 0x8, 0x400, 0x9, 0x8, 0x3ff, 0x9, 0xc, 0x9, 0x7, 0x77, 0x8000000000000001, 0x7ff, 0x182e, 0x4, 0x8001, 0xfffffffffffffffa, 0x7, 0x7, 0x7, 0x4, 0x3, 0x7, 0x7, 0xd, 0x3, 0x8, 0x8e5f, 0x7ff, 0x30e, 0x0, 0x6, 0x100000000, 0x1000, 0x8, 0xffffffffffffff01, 0x10000, 0x8, 0xb2, 0x400, 0x3, 0x1, 0x4, 0x80, 0x4]}) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f00000014c0)={0x0, 0x4, {0x6175, @struct={0x7, 0x838}, r7, 0xfd, 0x45, 0xf, 0xfd, 0x7, 0x1, @usage=0x1, 0x400, 0x8, [0x0, 0x56, 0xef9, 0x200, 0x9, 0x40]}, {0x7, @usage=0x9, r4, 0x4, 0x1, 0x8000000000000000, 0xb2c, 0x8, 0x403, @usage=0x2, 0x1000, 0x51a, [0x0, 0x7ff, 0x101, 0x9, 0x8, 0x10001]}, {0x3, @struct={0x2be7, 0x10000000}, r5, 0x5, 0x3ff, 0x8586, 0x4, 0x100000001, 0x423, @usage, 0xd11, 0x0, [0xf8e, 0x8, 0x10001, 0x5a4, 0x8, 0x7fff]}, {0x80000001, 0x1000, 0x6}}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), r6) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000001cc0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001940)={0x324, r8, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6f}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x1a3, 0x2a, [@random={0x3, 0xdd, "8d7f59fa675bf6ba54b5580dcecf28ef0240477030870a0cd0e348692bd08da5d40ddb62ac352d7c06698603030a072a87bcc7587a66a6cbd80dc211787230936d38e69f341c70e3536b994a05994c823b3b88af8da8734003f11e6bbb530627149ecf2f563629fe3bd882731932589884cb5811e4f532b62bfa89da572d56d8ebbea3e4ede374c83951be6ff69390290ffcdf7faf93d7b41a43f520949e8ee4ae77f456870ae833f99dbad813bba7ffc7f4d163bb042a5c79c2e87e2717c5eb60fdac7c515958f3755a774b306207207c9b358e205c634d1667864823"}, @cf={0x4, 0x6, {0x3, 0x9, 0x5a, 0x9}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0x70, 0x4}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @dsss={0x3, 0x1, 0xaf}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @chsw_timing={0x68, 0x4, {0x0, 0x5}}, @perr={0x84, 0xa1, {0x7b, 0x9, [{{}, @device_b, 0x5, @void, 0x5}, {{0x0, 0x1}, @device_a, 0x0, @value=@device_b, 0x8}, {{}, @broadcast, 0x5, @void, 0x32}, {{0x0, 0x1}, @device_b, 0xffff, @value=@device_b, 0x12}, {{0x0, 0x1}, @device_b, 0xe06d, @value=@device_b, 0x15}, {{0x0, 0x1}, @broadcast, 0x3, @value=@device_b, 0x36}, {{0x0, 0x1}, @broadcast, 0xfcd, @value=@broadcast, 0x1e}, {{0x0, 0x1}, @broadcast, 0x1ff, @value=@device_b, 0xd}, {{0x0, 0x1}, @broadcast, 0x5, @value, 0x1b}]}}]}, @NL80211_ATTR_IE={0x135, 0x2a, [@random={0x1b, 0x50, "541ff13b1ffdf3e316bf66e637d02df07fbc8b71f315c3a59c627bb1d2529a37d321a88587b0c82fc5b2de7a4c430093511ee600c6f9ddfd0fc2e6e7dbd3371bb2b3608b4bcf9343a0bc1f6e4004841a"}, @rann={0x7e, 0x15, {{0x0, 0x6c}, 0x2b, 0x37, @broadcast, 0x1, 0x1, 0x6}}, @dsss={0x3, 0x1, 0xaf}, @mesh_chsw={0x76, 0x6, {0x10, 0xd6, 0xd, 0x8}}, @measure_req={0x26, 0xbb, {0x1, 0x5a, 0x6, "ce3326a6cc53a891ddb25d533aefd1ba210026aef2815e12964f18908b592c3e807df85ee6e304a184d19c2c697e957efb533f53e111a0e2715b40b9e713a8cb27639ee1ecf6615eef791888d35bbb538044a108fe3529b3dd73dc772a0c2e45d64fd81bc78e74b390ca03ab6bd86d4770ce6acacaab57d04618f3dcb776001d80dc2fcb5c205249bf4a7211c6db420337d240b95a0b9d4f4808e77679329ee3424b29e99fa1fbd697924ce36c202fc734c32a6ee2fd2ba0"}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x324}, 0x1, 0x0, 0x0, 0x20000001}, 0x2000a090) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000001d00)={'batadv_slave_0\x00'}) ioctl$INCFS_IOC_CREATE_FILE(r6, 0xc058671e, &(0x7f0000002000)={{}, {0x7}, 0xc, 0x0, 0x0, &(0x7f0000001d40)='./file0\x00', &(0x7f0000001d80)='./file0\x00', &(0x7f0000001dc0)="49c72c639b59a4ecffa8faace631d5502a339b2b53331c247b3525f52230780561e329d57b21ba59604c96dccb891c0b322c4932c3adf4dbe437fd32459cb4adbe4029a895b310949d978888d7f9f793ea59787b34ad729ea8310536ce9c5263e175895c5f2ae82b7812dc067fb77217568102b03613240f75170643cfc13dbe9337f6948630fa2b8616fe04f11bee9e889c946be634f73d43873d6d24cb2d2991d8cb749122ae0c2edb6aa93c680bc301795c8db9dc3f05c6f34c40fab90476849039aa711d62f3da10b843a2ea68", 0xcf, 0x0, &(0x7f0000001ec0)={0x2, 0x7e, {0x1, 0xc, 0x12, "eaaf077b8cf50ae76b392996abff8020ea9d", 0x5f, "38f87175a703c6ba8d2fff0f9084d5f7f949bf7c7d400b6d361c48300c760e9d4a0db9b444a6de81165d1771f17e1bb5e8f264e3aa5bc24dce806e08edd7dd49684b9cef8320973f958628b6118b14824cbc8bbd0a7a1ec97b62c24f07201a"}, 0xb5, "f6902c7fb94e4312c5d4fe32a51398eac7dcb90a97765bb4b9351bc11b6acf95a418ba93b4c2d0eea1e53385a47ff8567d0f7eed9bca33f5de27612053554c66de5e974fb1712301fa3ff1086772f7e569cfbbc7456ecfb587489eabf75bc3636d3880eb807251223d8558fdf01066adaa639673a9124a814403320fdee8093f752a995b004c1c22868ede3d92ba0fd4e3b284e8940e0638872454dac01a2306204f11d0be7ded5f9ee8da704bbbef9b0db215901f"}, 0x13f}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000002300)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002140)={0x168, r9, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "313e381b518d043e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="807aa7ad1f79ea314d0d44d1f9b10935"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="508fc5b8d490c0f598eba56ac39f8ce5"}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7b12440ef29acb96"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="62c64fb29fe74be935bb3d532961fa31"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="686e847503ed6d2d62d5aec92a14fab858284185f5ef4c0e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a8b68809c4a8b814"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "721fbc1b921d4758"}]}, @NL80211_ATTR_REKEY_DATA={0x74, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="9f262599d875bed89299f6e74f499e47b48f4183b4519ff9"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c5bfa6915d04b24e77209072580c31c7cb42eceb1766b1bb"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7ff}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ef82082c5fbce107675a814c5e0313dc2148d410b505584b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e73600a9b4a40dcb"}]}, @NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="57b157352d72ce20d42aa0673dd260df11a6a8e943762908"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d7fbcc92520460a0"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="766d5dc60e54a08105f6d6a723be0512"}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x8040}, 0xd1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000002340)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r6, &(0x7f0000002380)={0x90000008}) r11 = socket$inet6(0xa, 0x1, 0x4) ioctl$FS_IOC_FSGETXATTR(r11, 0x801c581f, &(0x7f00000023c0)={0x8, 0x0, 0x1, 0xb0e2, 0x2}) setsockopt$inet6_MCAST_MSFILTER(r11, 0x29, 0x30, &(0x7f0000002400)={0x8, {{0xa, 0x4e22, 0xb4, @remote, 0x7}}, 0x80e81cec44ab52d, 0x2, [{{0xa, 0x4e20, 0x4, @local, 0x8}}, {{0xa, 0x4e20, 0x4, @mcast2, 0xa101}}]}, 0x190) r12 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl(r12, 0x80000001, &(0x7f00000025c0)="1391859cba6f51c54c0df9b180197f1143a782bbbc0e7fa229d8955c8dd346322637e877daa2ac93d792434e613342d30319437b71a7356e398d64d97f3d557d06ea510849bdea950b65dcceea402064ef783c4a84a9d07885798cd05e75faba3c4fdbdbcf5490a4f1aa623bee55cd358ae4730132d11db39200d7d39213c3de721f09dded15a69ad789f1dda5a9a5307ce5e85888e3045d78fef078d3b23f04393a7f74f8b7649a0681b85c7cf17ff35d4c13fbda613553285bb6acf4cdf1688cd2243ed8bd84f1f5545a10a57972fccc98") ioctl$int_out(r6, 0x0, &(0x7f00000026c0)) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002740), r6) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000002880)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002840)={&(0x7f0000002780)={0x9c, r13, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x40}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x4}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x18}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24000000}, 0x51) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x40180200}, 0xc, &(0x7f0000002980)={&(0x7f0000002900)={0x44, r9, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1bc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xea}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0xc040) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002a00)={'wlan0\x00'}) socketpair(0x2, 0x800, 0xd4, &(0x7f0000002a40)={0xffffffffffffffff}) ioctl$XFS_IOC_FSBULKSTAT(r14, 0xc0205865, &(0x7f0000002e00)={&(0x7f0000002a80)=0x3ff, 0x2, &(0x7f0000002ac0)=[{}, {}, {}, {}], &(0x7f0000002dc0)}) sendmmsg$alg(r6, &(0x7f0000003040)=[{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000002e40)="a6bcb0fbf7f47371035a6c324fe188775b21071628b5f22cbd41303976e7332033532408e8235041c983b9b8ab18d98b0260bdb319bb70877bb91ad849db9aee70a16fead200978711a12ca7dc0734b8cbb44f353fc2a0c72ee7d0446e38c7d8ecd8b8165bf314df0043723ab2af14d211431dbe", 0x74}], 0x1, &(0x7f0000002f00)=[@assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x58, 0x117, 0x2, 0x3e, "c49d353e655e7b7c1ef1e27db4f8ca693fc254c06994ec7b235e8d1aa347b519a4e264051b87f1fd0f94c417c78e5d46da1aba719990d8a868d5f4095104"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xb8, 0x117, 0x2, 0xa4, "0ede7f3f52ec119161e377c870cf9892e08816eaacd68cb943e4bf48f827a26d86b2ef6fdc7864b77bfbebf14a9b05427b58536c61d6c3157e7d414d292a3804db6bd3d3fbd1ae873c31e9b67c05a6ecd45c4415e6a95cdfd0241f280d14010333444cde8d2fe4bceb17a4cc431a05804dbd722ed38a8592fae17029618868e954809d6d5fb963f9198fac3c30aa0e8f0e780d8142bd3c13a0d055e80e4af0648d0dc2ed"}], 0x140, 0x40080}], 0x1, 0x40000) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r14, &(0x7f00000031c0)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003180)={&(0x7f0000003100)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) 570.728457ms ago: executing program 1 (id=4485): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0xdb, 0x40, 0x100, 0x800c, 0x1, 0x101, '\x00', 0x0, r0, 0xf, 0x0, 0x5, 0xf, @value=r0}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x74}}, 0x0) 562.208904ms ago: executing program 1 (id=4486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x38}}, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xa, 0xe, [@ext_channel_switch={0x1c, 0x4, {0x1, 0x0, 0x9d, 0x7}}]}]}, 0x20}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r4, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x2b}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7203, 0x5}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xfffffffffffffff4}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) sendto$inet(r2, &(0x7f0000000200)="11223344", 0x4, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) 550.330464ms ago: executing program 0 (id=4487): r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @remote}, &(0x7f00000000c0)=0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000200)={0xffffffffffffffff}) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@RTM_GETNSID={0x4c, 0x5a, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8, 0x2, r2}, @NETNSA_FD={0x8}, @NETNSA_FD={0x8, 0x3, r3}, @NETNSA_NSID={0x8}, @NETNSA_NSID={0x8}, @NETNSA_FD={0x8, 0x3, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040040) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv6_newaddrlabel={0x5c, 0x48, 0x400, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x78, 0x0, r1}, [@IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x5c}}, 0x0) 410.780332ms ago: executing program 1 (id=4488): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000006c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 409.905502ms ago: executing program 0 (id=4489): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYRES64=r1], 0x44}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x30, r10, 0x1, 0x70bd2a, 0x40000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x1}}}}, 0x30}}, 0x4) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x30, r10, 0x1, 0x70bd2a, 0x40000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x1}}}}, 0x30}}, 0x4) sendmsg$TIPC_CMD_SET_NETID(r8, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x24, r10, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x79}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24000844) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000000)=0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) (async) bind$alg(r11, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0) r12 = accept4(r11, 0x0, 0x0, 0x800) sendmsg$nl_generic(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0xd80}}, 0x2004c880) (async) sendmsg$nl_generic(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0xd80}}, 0x2004c880) accept4$tipc(r12, 0x0, 0x0, 0x800) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6, 0xfc}]}) (async) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6, 0xfc}]}) write(r7, &(0x7f0000000280)="4591", 0x2) socket$kcm(0xa, 0x5, 0x0) (async) r13 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x8936, &(0x7f0000000000)) (async) ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x8936, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1e, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r0, @ANYRES32=r6, @ANYRESHEX=r14], 0x3c}, 0x1, 0x0, 0x0, 0x4048881}, 0x40000) r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x13, &(0x7f00000009c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b703000000002e3988d91460da93090000000000005509010000000000950000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000181b0000", @ANYRES32=0x1, @ANYRESHEX=r6], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000340)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x2, 0x3, 0xe, 0x9}, {0x0, 0x4, 0xa, 0xb}, {0x5, 0x4, 0xe, 0xb}, {0x4, 0x5, 0x8, 0x5}, {0x0, 0x3, 0xd}, {0x0, 0x2, 0x3, 0x2}, {0xf, 0x2, 0xc, 0x2}, {0x5, 0x4, 0xfffffffe}, {0xfffffffd, 0x4, 0x3, 0x9}, {0x3, 0x5, 0xb, 0x3}]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="1802000000080000000000000400000085000000bc0000009500000000000000b10178d5e96440cad395c65a0259573f5fee771a4ff2008af109a27e248174e4f6d1be6b44c9ac0368126900cb723ea8b5e6198618b44437e415c5f5929a32cebc2f1bc367eea90ca336547fb2be7f121ad012683502731b94712a88c4ddd0a60e3b116124aa0869c67d3f9365ea32e7eacb57cdf746990d41eb2472301201fe2e7986c518d3b5154586c7eacccdfac2ec4c3b0616e70ea99ce773e6339395f71234313cbe208927ca316c81"], &(0x7f0000000000)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r15}, 0x94) 363.688603ms ago: executing program 3 (id=4490): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000010000000003000000030000000220000000000000001000084ffffbaef0000000003000000040000000000000000000002000000000000000000000010020000000000"], 0x0, 0x4a}, 0x20) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030001000000050003335a0000000500030000000000050003008000000005000300020000000800020003"], 0x50}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000000000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe88000000000000000000000000000100000000000000000100180004000083"], 0x88}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd70200000000001000000100007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c000200fc7f000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f00000002c0)={0x364, r7, 0x900, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x1bc, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a30763d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfffff9ff}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e472b58}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a82ce5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5019441}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ae655b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a976c33}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x652343f9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c4758c2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f604a23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7348beb0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14f9badb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21d93fb9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa2d8251}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3bb76a47}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14f5bdcd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3257d2f7}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x125660e6}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42bb465f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x84, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18e18491}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e7fca48}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b113513}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2eb6c8d6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x645954c2}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55880b18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x613a893d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x108, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2534d025}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2805df90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5661ba7e}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c08ef30}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d71b093}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16e5299e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b25384}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x121cddfb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x209a1ec}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6aa5c32e}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x20506b16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa9967c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f9f0016}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7bb9119}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5150c9f}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6535fa7f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d4ad9d2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76cef311}]}]}]}, 0x364}, 0x1, 0x0, 0x0, 0x8010}, 0x20000001) 181.466222ms ago: executing program 1 (id=4491): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2, 0x5}, {0xfff2, 0xfff3}, {0xa}}}, 0x24}}, 0x0) 83.401191ms ago: executing program 2 (id=4492): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000180)={0x1, 0x8, 0x0, 0x2, @vifc_lcl_ifindex, @multicast1}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000340)="07000000010000", 0x7) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f00000000c0)={0xa1a, [0x4, 0x5], 0x6}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) 0s ago: executing program 3 (id=4493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r1, 0x303, 0x70bd2b, 0x1, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20044084}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001800010300000000000000000a0000000003"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@vsock={0x28, 0x0, 0x2711}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000180)="8a3c1803e965baca2dd675f26a07498cdf357c79bb", 0x15}, {&(0x7f00000004c0)="f2000176491f30c090cff8b91f89308bb4c2ff0ffb0ec267aa31cbc9fc6d53dbd945ab2d59a661af0dc1b69a465147c0c7782436c824a103a76b750b5c179285f3b7433445c7795862182d744fed5d77a4255a457a7c0dc1523d2fd8c3a939ca957e76f9d7a29d61bfec28d0975dfc8af3064580103608df61d5526b24b4ef11e86673bb5a83e820c9b64ef0013cbe9be0ba8615c1088f8ed018410606c845d5f26847deb88395cd0ec930292ab51d88693f496492ca02404667ec67cb6edc99d2d2a70e817e0d5b2eceacb10ab691f2d320842c957d8043860c6dce4d1a5dc5cf4f3e938e9bfdf267758de57480750a3c7ae61d61968adca7f995b7c0", 0xfd}, {&(0x7f00000005c0)="a1eb0944ed29ac24bb1be6eb778f567f7760763308df40f54a746c543bc55041cb15f8271eef", 0x26}, {&(0x7f0000000680)="406e4e3b8f8b00451b0e366d93609b0295967dd17560214046f61e02a50ea7ffc265bae2b611516f91462013bf2090894ed38598629c699b35d3f1b3d20e5b47be952ede1ea9d13573d5e6837b05f56ae1e55f9549fa43fe752181982ff04fb14824af84", 0x64}, {&(0x7f0000000700)="5db4ccf978d82e9ebbc6cb2e5b4ab47c66f2292ec28c6d0380f4f32ee69da0f3fa44886a4e7c853a2ccee49045ad9924b9da4f5d5e656b98de0ff20178b9d78b961f8ff6668344b8c3bbcf1ef8917f00a31cdd269eb14bb3ce8fc3a240f94bdf101fc1613d46d1e08db4bd83ac4d653709addfcfaf49e0", 0x77}, {&(0x7f0000000780)="80b52931260650c93491fd9cdf4aa23b9a081990e77b2d069b8d58951dcdc7d5eef00588d9307aec964f49b51449d4cff601a6d8e89c426390f27e4da8ead81b", 0x40}, {&(0x7f0000000880)="8c408ef8b53961254b32eddc7b3c214425b403527107903f437fb15f8107f20fc9ee512c9b44ce007639b88d1287919b32fa8316e0a12f8de52b12b6217c2cb0dd09c2bb23abe9a63a3397bb275481c7176e372ea0e912c0f13090b7e93b1a1cb9c259a1c138a4aad04ec040afcdb6d720683671713d600cebde4527549f7cee41388d2bfe5b5f936745cc6e307a17b567cabff10adbea7a4ea30e6f12acd15ab62c60ba2a319e2f2d3f1bcb1095ca6b86ce3e4857fd79e4d313e0aabddee739c9d6cf775212729ab28926bff9a74b2305caf9d9f8d8b50f0af70d194eeda5beaa83", 0xe2}], 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="780000000000acd481f19da900000f010000f70000004ea97fb98024eb47a77bbe61b56b811be224162980f288092950e46dd359f7b1b2e17901fa278ad270ed08c267b4b09aa42c64c9a5106f7f38ca26ffd643b75f0ab96724c263be5aad9ef9fb61c22026333f9f24170fc2ed802ea84d9e4da111fe2b000000000000"], 0x78}}], 0x1, 0x20004005) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000022"], 0x1c}], 0x1}, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280)="b7", 0x1) getsockopt$bt_hci(r6, 0x84, 0x1, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) socket$netlink(0x10, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000040), 0x100000000000026a, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0xa8, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x6040848}, 0x20000040) kernel console output (not intermixed with test programs): op+0x70/0xc0 [ 410.470341][T17587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.470359][T17587] RIP: 0033:0x7ff560d5e98e [ 410.470377][T17587] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 410.470392][T17587] RSP: 002b:00007ff561c10fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 410.470411][T17587] RAX: ffffffffffffffda RBX: 00007ff561c116c0 RCX: 00007ff560d5e98e [ 410.470425][T17587] RDX: 000000000000000f RSI: 00007ff561c110a0 RDI: 0000000000000004 [ 410.470437][T17587] RBP: 00007ff561c11090 R08: 0000000000000000 R09: 0000000000000000 [ 410.470448][T17587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.470459][T17587] R13: 00007ff561026038 R14: 00007ff561025fa0 R15: 00007ffd0f223268 [ 410.470491][T17587] [ 410.729154][T17360] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.729186][T17360] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.853399][T17360] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.853431][T17360] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.985829][T17596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2972'. [ 411.018096][T17602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2973'. [ 411.088490][T17360] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.088510][T17360] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.109063][T17602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2973'. [ 411.109430][T17602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2973'. [ 411.184555][ T5616] Bluetooth: hci5: command tx timeout [ 411.294784][T17360] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.294809][T17360] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.786617][T17628] bond15: Invalid ad_actor_system MAC address. [ 411.786638][T17628] bond15: option ad_actor_system: invalid value (1) [ 411.790076][T17628] bond15 (unregistering): Released all slaves [ 412.107437][T17360] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 412.170872][T17360] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 412.173190][T17360] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 412.222571][T17360] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 412.227135][T17360] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 412.248013][T17360] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 412.275620][T17360] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 412.293441][T17360] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 412.406825][T17360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.447271][T17360] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.472568][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.472666][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.508726][T10919] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.508802][T10919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.024500][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 413.265441][ T5616] Bluetooth: hci5: command tx timeout [ 413.777092][T17717] x_tables: duplicate underflow at hook 1 [ 413.851082][T17720] validate_nla: 1 callbacks suppressed [ 413.851100][T17720] netlink: 'syz.0.3005': attribute type 1 has an invalid length. [ 413.937557][T17360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.018333][T17360] veth0_vlan: entered promiscuous mode [ 414.031428][T17724] Unsupported ieee802154 address type: 0 [ 414.046190][T17360] veth1_vlan: entered promiscuous mode [ 414.118663][T17360] veth0_macvtap: entered promiscuous mode [ 414.123678][T17360] veth1_macvtap: entered promiscuous mode [ 414.156044][T17360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.202106][T17360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.348864][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.349114][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.349342][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.364351][T10919] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.491798][T10919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.491814][T10919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.536243][T10919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.536254][T10919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.682783][T17741] netlink: 'syz.2.2908': attribute type 83 has an invalid length. [ 414.780851][T17744] netlink: 'syz.1.3011': attribute type 17 has an invalid length. [ 414.780871][T17744] __nla_validate_parse: 10 callbacks suppressed [ 414.780880][T17744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3011'. [ 414.780909][T17744] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3011'. [ 414.800057][T17744] syz_tun: entered promiscuous mode [ 414.827832][T17744] syz_tun: left promiscuous mode [ 414.941968][T17744] netlink: 'syz.1.3011': attribute type 17 has an invalid length. [ 414.941985][T17744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3011'. [ 414.942006][T17744] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3011'. [ 414.978600][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 414.980872][ T5620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 414.990106][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 415.000226][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 415.000820][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 415.062158][T17744] syz_tun: entered promiscuous mode [ 415.082551][T17744] syz_tun: left promiscuous mode [ 415.168780][T17744] netlink: 'syz.1.3011': attribute type 17 has an invalid length. [ 415.168796][T17744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3011'. [ 415.168828][T17744] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3011'. [ 415.168849][T17761] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3016'. [ 415.168869][T17761] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3016'. [ 415.172316][T17744] syz_tun: entered promiscuous mode [ 415.208681][T17744] syz_tun: left promiscuous mode [ 415.266539][T17763] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 415.289874][T17761] gretap0: entered promiscuous mode [ 415.292272][T17761] gretap0: left promiscuous mode [ 415.304857][T17744] netlink: 'syz.1.3011': attribute type 17 has an invalid length. [ 415.304873][T17744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3011'. [ 415.304895][T17744] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3011'. [ 415.357868][T17744] syz_tun: entered promiscuous mode [ 415.375395][T17744] syz_tun: left promiscuous mode [ 415.458355][T17744] netlink: 'syz.1.3011': attribute type 17 has an invalid length. [ 415.525457][T17744] syz_tun: entered promiscuous mode [ 415.549234][T17744] syz_tun: left promiscuous mode [ 415.778715][T17779] netlink: NAT attribute has 8 unknown bytes [ 415.778747][T17779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.801451][ T5620] Bluetooth: hci5: Malformed HCI Event [ 416.323558][ T1463] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 416.323591][ T1463] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.527864][ T1463] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 416.527897][ T1463] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.937235][ T1463] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 416.937265][ T1463] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.104521][ T5620] Bluetooth: hci1: command tx timeout [ 417.521407][T17753] lo speed is unknown, defaulting to 1000 [ 417.728448][ T1463] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 418.187308][T17834] pimreg: left allmulticast mode [ 418.242378][T17849] sctp: [Deprecated]: syz.3.3038 (pid 17849) Use of int in maxseg socket option. [ 418.242378][T17849] Use struct sctp_assoc_value instead [ 418.279138][T17838] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 418.386242][T17843] bond1: entered promiscuous mode [ 418.386264][T17843] bond1: entered allmulticast mode [ 418.386609][T17843] 8021q: adding VLAN 0 to HW filter on device bond1 [ 418.501100][T17852] bond5: option all_slaves_active: invalid value (179) [ 418.503127][T17852] bond5 (unregistering): Released all slaves [ 418.614794][ T1463] bridge_slave_1: left allmulticast mode [ 418.614829][ T1463] bridge_slave_1: left promiscuous mode [ 418.616560][ T1463] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.681685][ T1463] pim6reg: left allmulticast mode [ 419.002342][ T1463] bond7 (unregistering): (slave ip6gre1): Releasing backup interface [ 419.002377][ T1463] ip6gre1 (unregistering): left promiscuous mode [ 419.168839][ T1463] bond4 (unregistering): (slave geneve3): Releasing active interface [ 419.184235][ T5620] Bluetooth: hci1: command tx timeout [ 419.271050][ T1463] bond11 (unregistering): (slave bridge5): Releasing backup interface [ 419.271074][ T1463] bridge5 (unregistering): left promiscuous mode [ 419.289183][ T1463] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.291610][ T1463] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.293118][ T1463] .` (unregistering): Released all slaves [ 419.300356][ T1463] bond1 (unregistering): Released all slaves [ 419.316137][ T1463] bond2 (unregistering): Released all slaves [ 419.331213][ T1463] bond3 (unregistering): Released all slaves [ 419.370010][ T1463] bond4 (unregistering): Released all slaves [ 419.420649][ T1463] bond5 (unregistering): Released all slaves [ 419.476586][ T1463] bond6 (unregistering): Released all slaves [ 419.495743][ T1463] bond7 (unregistering): Released all slaves [ 419.533467][ T1463] bond8 (unregistering): Released all slaves [ 419.577584][ T1463] bond9 (unregistering): Released all slaves [ 419.602647][ T1463] bond0 (unregistering): Released all slaves [ 419.639937][ T1463] bond10 (unregistering): Released all slaves [ 419.680863][ T1463] bond11 (unregistering): Released all slaves [ 419.715260][ T1463] bond12 (unregistering): Released all slaves [ 419.760968][ T1463] bond13 (unregistering): Released all slaves [ 419.774480][ T1463] bond14 (unregistering): Released all slaves [ 419.803099][T17859] bond5: option all_slaves_active: invalid value (179) [ 419.811586][T17859] bond5 (unregistering): Released all slaves [ 419.921256][T17873] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 420.034696][ T1463] tipc: Left network mode [ 420.476217][T17915] __nla_validate_parse: 8 callbacks suppressed [ 420.476235][T17915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3049'. [ 421.264468][ T5620] Bluetooth: hci1: command tx timeout [ 421.562263][T17753] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.562445][T17753] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.562567][T17753] bridge_slave_0: entered allmulticast mode [ 421.569714][T17753] bridge_slave_0: entered promiscuous mode [ 421.576405][T17753] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.581165][T17753] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.581289][T17753] bridge_slave_1: entered allmulticast mode [ 421.588961][T17753] bridge_slave_1: entered promiscuous mode [ 421.871178][T17753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.873811][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 422.140474][T17753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.356560][T18005] netlink: 75 bytes leftover after parsing attributes in process `syz.1.3065'. [ 422.413130][T17753] team0: Port device team_slave_0 added [ 422.459200][T17753] team0: Port device team_slave_1 added [ 422.578982][T18006] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 422.583656][T18017] netlink: 'syz.1.3068': attribute type 3 has an invalid length. [ 422.601755][T17753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.601767][T17753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.601790][T17753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.604406][T17753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.604418][T17753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.604440][T17753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.657172][T18017] netlink: 'syz.1.3068': attribute type 7 has an invalid length. [ 422.657480][T18017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3068'. [ 422.828347][T17753] hsr_slave_0: entered promiscuous mode [ 422.845936][T17753] hsr_slave_1: entered promiscuous mode [ 422.867364][T17753] debugfs: 'hsr0' already exists in 'hsr' [ 422.867384][T17753] Cannot create hsr debugfs directory [ 422.922750][T18025] openvswitch: netlink: EtherType 2 is less than min 600 [ 422.991388][ T1463] hsr_slave_0: left promiscuous mode [ 422.993294][ T1463] hsr_slave_1: left promiscuous mode [ 423.180324][ T1463] vlan0: left allmulticast mode [ 423.180343][ T1463] veth0_vlan: left allmulticast mode [ 423.180443][ T1463] vlan0: left promiscuous mode [ 423.182200][ T1463] veth0_macvtap: left promiscuous mode [ 423.182323][ T1463] veth1_vlan: left promiscuous mode [ 423.182423][ T1463] veth0_vlan: left promiscuous mode [ 423.354247][ T5620] Bluetooth: hci1: command tx timeout [ 424.217349][T18041] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 424.226549][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 424.479825][T18064] netlink: 'syz.3.3075': attribute type 10 has an invalid length. [ 424.534604][T18064] bond1: (slave dummy0): Releasing active interface [ 424.595739][T18064] team0: Port device dummy0 added [ 424.612912][T18068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3076'. [ 424.662145][T18067] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3074'. [ 424.702508][T18074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3077'. [ 424.771887][T18077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3077'. [ 424.931142][T18074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3077'. [ 425.053462][ T1463] IPVS: stop unused estimator thread 0... [ 425.118550][T18089] openvswitch: netlink: IP tunnel dst address not specified [ 425.118581][T18089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.583301][T17753] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 426.638441][T17753] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 426.640442][T17753] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 426.682385][T17753] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 426.687459][T17753] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 426.692143][T18151] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3093'. [ 426.760354][T17753] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 426.770548][T17753] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 426.802560][T17753] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 426.969642][T18154] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3094'. [ 427.331892][T18186] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3097'. [ 427.331921][T18186] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 427.408255][T17753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.515373][T17753] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.580351][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.580453][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.700647][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.700749][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.712275][T18195] tipc: Failed to remove unknown binding: 66,1,1/2437921886:818078520/818078522 [ 427.942416][T18210] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3102'. [ 427.982719][ T5620] Bluetooth: hci5: connection err: -111 [ 428.284946][T18229] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3104'. [ 428.297409][T18229] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3104'. [ 428.392899][T18233] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3104'. [ 428.392934][T18233] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3104'. [ 428.592748][T18232] bond16: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 428.612448][T18232] bond16 (unregistering): Released all slaves [ 429.485461][T18280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.586008][T17753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.664172][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 429.672342][T17753] veth0_vlan: entered promiscuous mode [ 429.700279][T17753] veth1_vlan: entered promiscuous mode [ 429.748957][T17753] veth0_macvtap: entered promiscuous mode [ 429.763478][T17753] veth1_macvtap: entered promiscuous mode [ 429.850377][T18290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3114'. [ 430.127166][T17753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.170481][T17753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.274220][T18204] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.274259][T18204] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.274288][T18204] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.274317][T18204] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.454748][T18309] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 430.454883][T18309] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 430.578145][T10922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.578163][T10922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.637927][T10916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.637944][T10916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.685507][T18330] netlink: 'syz.3.3121': attribute type 1 has an invalid length. [ 430.715653][ T5616] Bluetooth: hci1: command 0x0405 tx timeout [ 430.940166][T18330] bond6: entered promiscuous mode [ 430.940589][T18330] 8021q: adding VLAN 0 to HW filter on device bond6 [ 431.532267][T18361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3125'. [ 431.695765][T18361] team0 (unregistering): Port device team_slave_0 removed [ 431.750455][T18361] team0 (unregistering): Port device team_slave_1 removed [ 431.786528][T18365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3127'. [ 431.803289][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 431.812939][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 431.814250][ T5620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 431.828800][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 431.831867][ T5620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 431.872342][T18369] netlink: 'syz.3.3128': attribute type 10 has an invalid length. [ 432.331553][T18387] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3132'. [ 432.331584][T18387] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3132'. [ 432.508199][T18393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3135'. [ 432.508219][T18393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3135'. [ 432.541009][T18393] netlink: 'syz.4.3135': attribute type 4 has an invalid length. [ 432.541028][T18393] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3135'. [ 432.899936][T18415] bond16: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 432.918686][T18415] bond16 (unregistering): Released all slaves [ 433.151815][T18420] bond7: option resend_igmp: invalid value (32767) [ 433.151837][T18420] bond7: option resend_igmp: allowed values 0 - 255 [ 433.162364][T18420] bond7 (unregistering): Released all slaves [ 433.398232][T18366] lo speed is unknown, defaulting to 1000 [ 433.652147][T18449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3144'. [ 433.652171][T18449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3144'. [ 433.652185][T18449] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3144'. [ 433.828813][T18456] syzkaller0: entered promiscuous mode [ 433.828833][T18456] syzkaller0: entered allmulticast mode [ 433.836953][T18455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3146'. [ 433.904930][ T5620] Bluetooth: hci3: command tx timeout [ 434.422714][T18489] macvlan2: entered promiscuous mode [ 434.422734][T18489] macvlan2: entered allmulticast mode [ 434.526559][T18486] veth1_to_bond: entered allmulticast mode [ 434.553812][T18495] bond0: option miimon: invalid value (18446744071829782528) [ 434.553833][T18495] bond0: option miimon: allowed values 0 - 2147483647 [ 434.706930][T18485] veth1_to_bond: left allmulticast mode [ 434.885568][T18366] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.885736][T18366] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.885876][T18366] bridge_slave_0: entered allmulticast mode [ 434.887617][T18366] bridge_slave_0: entered promiscuous mode [ 434.899828][T18366] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.899926][T18366] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.900056][T18366] bridge_slave_1: entered allmulticast mode [ 434.908037][T18366] bridge_slave_1: entered promiscuous mode [ 435.036840][T18366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.049900][T18366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.105712][T18366] team0: Port device team_slave_0 added [ 435.108505][T18366] team0: Port device team_slave_1 added [ 435.224121][T18366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.224137][T18366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.224159][T18366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.226194][T18366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.226207][T18366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.226229][T18366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.517058][T18366] hsr_slave_0: entered promiscuous mode [ 435.518143][T18366] hsr_slave_1: entered promiscuous mode [ 435.518836][T18366] debugfs: 'hsr0' already exists in 'hsr' [ 435.518855][T18366] Cannot create hsr debugfs directory [ 435.729458][T18537] lo speed is unknown, defaulting to 1000 [ 435.948752][T18538] bond2: entered allmulticast mode [ 435.984499][ T5620] Bluetooth: hci3: command tx timeout [ 436.019336][T18366] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.019367][T18366] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.019384][T18366] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 436.125207][T18366] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.125236][T18366] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.125261][T18366] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 436.272685][T18366] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.272705][T18366] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.272718][T18366] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 436.401280][T18366] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.401314][T18366] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.401338][T18366] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 436.775789][T18573] erspan0: vlans aren't supported yet for dev_uc|mc_add() [ 436.940405][T18366] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 437.007512][T18366] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 437.013038][T18366] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 437.042243][T18366] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 437.049688][T18366] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 437.088206][T18366] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 437.105273][T18596] netlink: 'syz.4.3181': attribute type 6 has an invalid length. [ 437.129554][T18366] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 437.146047][T18366] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 437.258877][T18609] ip6tnl0: Caught tx_queue_len zero misconfig [ 437.271857][T18609] geneve3: entered promiscuous mode [ 437.271875][T18609] geneve3: entered allmulticast mode [ 437.472888][T18366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.508981][T18366] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.599384][T10920] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.599492][T10920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.620339][T10919] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.620440][T10919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.646108][T18619] __nla_validate_parse: 10 callbacks suppressed [ 437.646122][T18619] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.3187'. [ 437.646197][T18619] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.3187'. [ 437.775890][T18622] Bluetooth: hci0: invalid length 0, exp 1 for type 31 [ 437.802958][T18627] netlink: 'syz.4.3190': attribute type 10 has an invalid length. [ 437.823339][T18625] netlink: 'syz.2.3189': attribute type 24 has an invalid length. [ 438.067077][ T5620] Bluetooth: hci3: command tx timeout [ 438.151830][T18640] netlink: 'syz.0.3195': attribute type 2 has an invalid length. [ 438.152903][T18644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3196'. [ 438.297767][T18644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3196'. [ 438.362938][T18654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3196'. [ 438.380518][T18656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3196'. [ 439.101511][T18694] xt_IDLETIMER: label is empty or not nul-terminated [ 439.370219][T18712] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3209'. [ 439.401029][T18705] batman_adv: batadv0: Adding interface: syzkaller0 [ 439.401044][T18705] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.401066][T18705] batman_adv: batadv0: Interface activated: syzkaller0 [ 439.468448][T18714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3210'. [ 439.755277][T18725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3210'. [ 439.798017][T18726] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3211'. [ 439.798900][T18726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.799589][T18726] netlink: 'syz.0.3211': attribute type 4 has an invalid length. [ 440.011498][T18366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.145502][ T5620] Bluetooth: hci3: command tx timeout [ 440.163330][T18702] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 440.219340][T18702] batman_adv: batadv0: Removing interface: syzkaller0 [ 440.257975][T18746] hsr0: entered allmulticast mode [ 440.257993][T18746] hsr_slave_0: entered allmulticast mode [ 440.258007][T18746] hsr_slave_1: entered allmulticast mode [ 440.280660][T18746] hsr_slave_0: left promiscuous mode [ 440.297764][T18746] hsr_slave_1: left promiscuous mode [ 440.379273][T18746] hsr0 (unregistering): left allmulticast mode [ 440.408434][T18366] veth0_vlan: entered promiscuous mode [ 440.429247][ T5282] veth1_vlan: left promiscuous mode [ 440.650019][T18366] veth1_vlan: entered promiscuous mode [ 440.739323][T18778] Bluetooth: MGMT ver 1.23 [ 440.827514][T18366] veth0_macvtap: entered promiscuous mode [ 440.850375][T18366] veth1_macvtap: entered promiscuous mode [ 440.918507][T18366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.941645][T18366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.105021][T10916] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.105273][T18203] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.105323][T18203] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.105357][T18203] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.460126][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.460147][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.640521][T18203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.640540][T18203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.650053][T18820] ipvlan0: Caught tx_queue_len zero misconfig [ 441.824619][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 442.074464][T18836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.115324][T18827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 442.119918][T18835] veth0_to_bond: entered allmulticast mode [ 442.491947][T18850] netlink: 'syz.2.3233': attribute type 29 has an invalid length. [ 442.781978][ T5616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 442.795746][ T5616] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 442.797775][ T5616] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 442.798636][ T5616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 442.799231][ T5616] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 443.124728][T18870] netlink: 'syz.1.3238': attribute type 1 has an invalid length. [ 443.129602][T18870] netlink: 'syz.1.3238': attribute type 1 has an invalid length. [ 443.407319][T18880] syzkaller0: entered promiscuous mode [ 443.407342][T18880] syzkaller0: entered allmulticast mode [ 443.444280][T10918] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.444414][T10918] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.444529][T10918] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.444561][T10918] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.702309][T18890] __nla_validate_parse: 15 callbacks suppressed [ 443.702327][T18890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3243'. [ 443.805031][T18890] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3243'. [ 443.948607][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.948641][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.286789][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.286829][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.468602][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.468635][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.533102][T18854] lo speed is unknown, defaulting to 1000 [ 444.609922][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.609954][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.865233][ T5616] Bluetooth: hci4: command tx timeout [ 444.876018][T18946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3248'. [ 444.893059][T18946] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3248'. [ 445.347314][T18976] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3251'. [ 445.347344][T18976] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 445.417790][ T50] bridge_slave_1: left allmulticast mode [ 445.417814][ T50] bridge_slave_1: left promiscuous mode [ 445.418017][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.485819][ T50] bridge_slave_0: left allmulticast mode [ 445.485842][ T50] bridge_slave_0: left promiscuous mode [ 445.486035][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.632467][T19006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3255'. [ 445.658283][T19007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3253'. [ 445.658305][T19007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3253'. [ 446.117298][T18917] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 446.726098][ T50] bond9 (unregistering): (slave geneve2): Releasing active interface [ 446.923791][ T50] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.950307][ T50] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.957018][ T5616] Bluetooth: hci4: command tx timeout [ 446.980762][ T50] .` (unregistering): Released all slaves [ 446.998351][ T50] bond1 (unregistering): Released all slaves [ 447.021808][ T50] bond2 (unregistering): Released all slaves [ 447.061684][ T50] bond0 (unregistering): Released all slaves [ 447.080463][ T50] bond3 (unregistering): Released all slaves [ 447.131008][ T50] bond4 (unregistering): Released all slaves [ 447.154557][ T50] bond5 (unregistering): Released all slaves [ 447.167456][ T50] bond6 (unregistering): Released all slaves [ 447.180778][ T50] bond7 (unregistering): Released all slaves [ 447.200090][ T50] bond8 (unregistering): Released all slaves [ 447.225284][ T50] bond9 (unregistering): Released all slaves [ 447.232470][ T50] bond10 (unregistering): Released all slaves [ 447.244064][ T50] bond11 (unregistering): Released all slaves [ 447.257411][ T50] bond12 (unregistering): Released all slaves [ 447.271190][ T50] bond13 (unregistering): (slave bond14): Releasing backup interface [ 447.271959][ T50] bond13 (unregistering): Released all slaves [ 447.298160][ T50] bond14 (unregistering): Released all slaves [ 447.306682][ T50] bond15 (unregistering): Released all slaves [ 447.468344][T19035] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 447.750914][ T50] tipc: Left network mode [ 447.811803][T19080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3261'. [ 447.945540][T19087] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3262'. [ 448.913141][T19128] IPv6: NLM_F_CREATE should be specified when creating new route [ 448.913232][T19128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3269'. [ 449.025268][ T5616] Bluetooth: hci4: command tx timeout [ 449.113901][T19142] openvswitch: netlink: IPv4 tun info is not correct [ 449.252094][T19125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3268'. [ 449.252320][T19125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3268'. [ 449.282760][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 449.498024][T18854] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.498590][T18854] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.498716][T18854] bridge_slave_0: entered allmulticast mode [ 449.528549][T18854] bridge_slave_0: entered promiscuous mode [ 449.532714][T18854] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.532811][T18854] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.534471][T18854] bridge_slave_1: entered allmulticast mode [ 449.538063][T18854] bridge_slave_1: entered promiscuous mode [ 449.606330][T19153] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 449.664274][T18854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.685169][T18854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.770231][T18854] team0: Port device team_slave_0 added [ 449.773531][T18854] team0: Port device team_slave_1 added [ 450.043878][ T50] hsr_slave_0: left promiscuous mode [ 450.049956][ T50] hsr_slave_1: left promiscuous mode [ 450.050555][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.050585][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.077705][ T50] veth0_vlan: left promiscuous mode [ 450.672736][T18854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.672752][T18854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.672775][T18854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.686192][T18854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.686205][T18854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.686227][T18854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.731871][T18854] hsr_slave_0: entered promiscuous mode [ 450.732919][T18854] hsr_slave_1: entered promiscuous mode [ 450.733658][T18854] debugfs: 'hsr0' already exists in 'hsr' [ 450.733674][T18854] Cannot create hsr debugfs directory [ 450.990059][ T50] IPVS: stop unused estimator thread 0... [ 451.106056][ T5616] Bluetooth: hci4: command tx timeout [ 451.662601][T19121] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 451.678635][T18854] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 451.713554][T18854] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 451.724834][T18854] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 451.755092][T18854] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 451.763210][T18854] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 451.787177][T18854] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 451.789633][T18854] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 451.857059][T19161] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 451.858430][T19161] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3274'. [ 451.859805][T18854] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 451.886377][T19161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3274'. [ 451.972244][T19175] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3275'. [ 452.092559][T19181] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3278'. [ 452.258290][T19190] syz_tun: entered allmulticast mode [ 452.300933][T19190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3279'. [ 452.375728][T19190] macvtap1: entered promiscuous mode [ 452.375749][T19190] vlan0: entered promiscuous mode [ 452.376159][T19190] macvtap1: entered allmulticast mode [ 452.376172][T19190] vlan0: entered allmulticast mode [ 452.376184][T19190] veth0_vlan: entered allmulticast mode [ 452.406644][T18854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.621355][T18854] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.647767][ T1425] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.647868][ T1425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.693339][T18203] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.693442][T18203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.748444][T19211] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 452.807969][T19211] netlink: 'syz.0.3283': attribute type 10 has an invalid length. [ 452.822932][T19214] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3284'. [ 452.939269][T19198] syzkaller1: entered promiscuous mode [ 452.939288][T19198] syzkaller1: entered allmulticast mode [ 453.031604][T19225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3287'. [ 453.260248][T19221] syzkaller0: entered promiscuous mode [ 453.260270][T19221] syzkaller0: entered allmulticast mode [ 453.321824][T19237] openvswitch: netlink: Key type 12295 is out of range max 32 [ 453.517966][T19245] netlink: 'syz.3.3291': attribute type 1 has an invalid length. [ 453.659310][T19258] netlink: 'syz.2.3294': attribute type 1 has an invalid length. [ 453.689392][T19247] team0: Port device dummy0 removed [ 453.705688][T19258] netlink: 'syz.2.3294': attribute type 1 has an invalid length. [ 453.705898][T19258] netlink: 'syz.2.3294': attribute type 1 has an invalid length. [ 453.706094][T19258] netlink: 'syz.2.3294': attribute type 1 has an invalid length. [ 453.706315][T19258] netlink: 'syz.2.3294': attribute type 1 has an invalid length. [ 453.706516][T19258] netlink: 'syz.2.3294': attribute type 1 has an invalid length. [ 453.706751][T19258] netlink: 'syz.2.3294': attribute type 1 has an invalid length. [ 453.710486][T19258] netlink: 'syz.2.3294': attribute type 1 has an invalid length. [ 453.926829][T19271] __nla_validate_parse: 4 callbacks suppressed [ 453.926848][T19271] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3296'. [ 454.064261][T19276] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3298'. [ 454.064290][T19276] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3298'. [ 454.305090][T19286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3299'. [ 454.792205][T19307] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 454.860518][T18854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.076109][T19317] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3307'. [ 455.511650][T19347] x_tables: duplicate underflow at hook 1 [ 455.848546][T19361] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20000 [ 455.861816][T18854] veth0_vlan: entered promiscuous mode [ 455.880110][T18854] veth1_vlan: entered promiscuous mode [ 456.021151][T18854] veth0_macvtap: entered promiscuous mode [ 456.043629][T18854] veth1_macvtap: entered promiscuous mode [ 456.107035][T18854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.132069][T18854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.179674][T19376] smbdirect: ib_dev[syz_device_name_32_chars_1234567] renamed to [syz2] [ 456.194863][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.195847][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.274640][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.275620][ T152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.280416][T19380] tipc: Started in network mode [ 456.280450][T19380] tipc: Node identity ac14140f, cluster identity 4711 [ 456.280652][T19380] tipc: New replicast peer: 255.255.255.255 [ 456.284620][T19380] tipc: Enabled bearer , priority 10 [ 456.582550][T10919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.582569][T10919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.673701][T19395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3321'. [ 456.816727][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.816746][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.123113][T19414] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3325'. [ 457.127380][T19414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3325'. [ 457.127404][T19414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3325'. [ 457.169681][T19417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3232'. [ 457.394469][ T25] tipc: Node number set to 2886997007 [ 457.489539][T19439] ipt_ah: unknown flags FF [ 457.852257][T19458] IPv6: NLM_F_CREATE should be specified when creating new route [ 457.852362][T19458] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 457.852373][T19458] IPv6: NLM_F_CREATE should be set when creating new route [ 457.875544][T19450] team0 (unregistering): Port device team_slave_0 removed [ 457.917476][T19450] team0 (unregistering): Port device team_slave_1 removed [ 458.103824][T19449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.219110][ T5620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 458.220906][ T5620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 458.240973][ T5620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 458.252058][ T5620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 458.259178][ T5620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 459.128803][T19468] lo speed is unknown, defaulting to 1000 [ 459.178182][T19501] sctp: [Deprecated]: syz.0.3338 (pid 19501) Use of struct sctp_assoc_value in delayed_ack socket option. [ 459.178182][T19501] Use struct sctp_sack_info instead [ 459.213700][T19514] __nla_validate_parse: 5 callbacks suppressed [ 459.213717][T19514] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3340'. [ 460.053219][T19468] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.053324][T19468] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.053455][T19468] bridge_slave_0: entered allmulticast mode [ 460.078102][T19468] bridge_slave_0: entered promiscuous mode [ 460.091918][T19468] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.093018][T19468] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.093150][T19468] bridge_slave_1: entered allmulticast mode [ 460.106416][T19468] bridge_slave_1: entered promiscuous mode [ 460.130080][T19546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3342'. [ 460.130107][T19546] validate_nla: 2 callbacks suppressed [ 460.130118][T19546] netlink: 'syz.0.3342': attribute type 10 has an invalid length. [ 460.130131][T19546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3342'. [ 460.191049][T19468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.207122][T19468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.294182][T19468] team0: Port device team_slave_0 added [ 460.298367][T19468] team0: Port device team_slave_1 added [ 460.340279][T19468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.340293][T19468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.340315][T19468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.342205][T19468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.342217][T19468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.342238][T19468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.389307][ T5620] Bluetooth: hci2: command tx timeout [ 460.470715][T19468] hsr_slave_0: entered promiscuous mode [ 460.471695][T19468] hsr_slave_1: entered promiscuous mode [ 460.472400][T19468] debugfs: 'hsr0' already exists in 'hsr' [ 460.472418][T19468] Cannot create hsr debugfs directory [ 460.700519][T19468] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.700552][T19468] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.765534][T19453] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 460.767340][T19468] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.767370][T19468] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.976318][T19468] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.976349][T19468] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.100154][T19571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.111593][T19573] sctp: [Deprecated]: syz.4.3347 (pid 19573) Use of int in max_burst socket option. [ 461.111593][T19573] Use struct sctp_assoc_value instead [ 461.175864][T19582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3348'. [ 461.179152][T19468] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.179171][T19468] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.231807][T19582] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 461.440076][T19591] syzkaller1: entered promiscuous mode [ 461.440096][T19591] syzkaller1: entered allmulticast mode [ 461.457932][T19595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3349'. [ 461.457949][T19595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3349'. [ 461.622957][T19604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3352'. [ 461.682182][T19468] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 461.695793][T19468] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 461.696852][T19468] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 461.700728][T19468] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 461.701852][T19468] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 461.734032][T19468] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 461.734773][T19468] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 461.737505][T19468] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 461.742831][T19604] veth1_to_bond: entered allmulticast mode [ 461.752821][T19604] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3352'. [ 461.773796][T19603] veth1_to_bond: left allmulticast mode [ 462.020799][T19624] netlink: 'syz.1.3355': attribute type 7 has an invalid length. [ 462.020819][T19624] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3355'. [ 462.148220][T19634] xt_ecn: cannot match TCP bits for non-tcp packets [ 462.182515][T19634] ip_tables: iptables: counters copy to user failed while replacing table [ 462.284872][T19640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3358'. [ 462.340771][T19616] syzkaller0: entered promiscuous mode [ 462.340784][T19616] syzkaller0: entered allmulticast mode [ 462.484716][ T5620] Bluetooth: hci2: command tx timeout [ 462.543370][T19641] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 462.556650][T19641] bond1 (unregistering): Released all slaves [ 463.331572][T19660] No such timeout policy "s" [ 463.331683][T19660] netlink: Failed to associated timeout policy 's' [ 463.523052][T19671] netlink: 'syz.4.3364': attribute type 29 has an invalid length. [ 464.549641][ T5620] Bluetooth: hci2: command tx timeout [ 464.712246][T19468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.767809][T19468] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.800461][T10918] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.800565][T10918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.838253][ T1425] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.838371][ T1425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.380918][T19726] __nla_validate_parse: 1 callbacks suppressed [ 465.380937][T19726] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3371'. [ 465.716546][T19677] workqueue: Failed to create a rescuer kthread for wq "nfc25_nci_rx_wq": -EINTR [ 465.777912][T19787] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3375'. [ 465.777946][T19787] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3375'. [ 465.843278][T19784] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3373'. [ 466.090011][T19798] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3378'. [ 466.357957][T19468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.503879][T19468] veth0_vlan: entered promiscuous mode [ 466.519731][T19468] veth1_vlan: entered promiscuous mode [ 466.591427][T19468] veth0_macvtap: entered promiscuous mode [ 466.603385][T19468] veth1_macvtap: entered promiscuous mode [ 466.624757][ T5620] Bluetooth: hci2: command tx timeout [ 466.698597][T19468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.722232][T19468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.764527][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.765057][T10922] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.765091][T10922] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.765122][T10922] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.021997][T19823] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3383'. [ 467.050551][T19823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3383'. [ 467.150553][T19825] xt_SECMARK: invalid mode: 9 [ 469.506174][T19811] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 469.580477][ T1425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.580495][ T1425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.790293][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.790314][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.797211][T19837] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 469.900987][T19842] vlan2: entered promiscuous mode [ 469.901005][T19842] geneve1: entered promiscuous mode [ 469.901187][T19842] vlan2: entered allmulticast mode [ 469.901200][T19842] geneve1: entered allmulticast mode [ 470.099140][T19847] netlink: 'syz.4.3391': attribute type 34 has an invalid length. [ 470.099158][T19847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3391'. [ 470.154304][T19853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3392'. [ 470.455395][T19865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3397'. [ 470.478357][T19860] tc action pedit offset 132 out of bounds [ 470.618809][T19870] nbd: must specify at least one socket [ 470.734989][T19874] xt_IDLETIMER: timeout value is zero [ 470.908943][T19879] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 470.908980][T19879] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 470.909019][T19879] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 471.499399][T19900] sctp: [Deprecated]: syz.0.3407 (pid 19900) Use of int in max_burst socket option. [ 471.499399][T19900] Use struct sctp_assoc_value instead [ 471.649595][T19904] TCP: TCP_TX_DELAY enabled [ 472.051072][T19927] xt_CT: You must specify a L4 protocol and not use inversions on it [ 472.107871][T19931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3417'. [ 472.107891][T19931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3417'. [ 472.181010][T19932] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3416'. [ 472.208192][T19932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.256542][T19938] lo speed is unknown, defaulting to 1000 [ 472.483125][T19942] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3420'. [ 472.483175][T19942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3420'. [ 472.821111][T19957] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 472.973191][T19961] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3428'. [ 473.038221][T19966] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3430'. [ 473.218960][T19970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3431'. [ 473.336094][T19975] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 473.345809][T19969] batadv_slave_1: entered promiscuous mode [ 473.346101][T19970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.372338][T19970] batadv_slave_1 (unregistering): left promiscuous mode [ 473.372394][T19970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.459850][T19974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3433'. [ 473.526997][ T1014] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.539575][T18204] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.541542][ T1014] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.541578][ T1014] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.581076][T20033] ip_tables: iptables: counters copy to user failed while replacing table [ 474.594249][T20033] netlink: 'syz.4.3451': attribute type 4 has an invalid length. [ 474.669047][T20038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 474.819770][T20049] x_tables: duplicate underflow at hook 1 [ 475.072301][T20062] netlink: 'syz.3.3462': attribute type 1 has an invalid length. [ 475.384196][T20074] ip_tunnel: non-ECT from 172.30.1.4 with TOS=0x3 [ 475.503375][T20079] __nla_validate_parse: 5 callbacks suppressed [ 475.503392][T20079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3468'. [ 475.503418][T20079] netlink: 'syz.0.3468': attribute type 10 has an invalid length. [ 475.503432][T20079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3468'. [ 475.740266][T20086] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3472'. [ 475.740287][T20086] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3472'. [ 476.261976][T20114] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3479'. [ 476.281034][T20114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3479'. [ 476.414231][T20115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3478'. [ 477.312182][T20117] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.312217][T20117] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.390183][T20153] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 477.390217][T20153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.611676][T20174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3489'. [ 477.782307][T20117] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.782341][T20117] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.859397][T20174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3489'. [ 477.891427][T20183] netlink: 'syz.3.3492': attribute type 1 has an invalid length. [ 477.891446][T20183] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3492'. [ 477.891459][T20183] netlink: 'syz.3.3492': attribute type 1 has an invalid length. [ 477.968530][T20187] netlink: 'syz.3.3494': attribute type 1 has an invalid length. [ 478.001446][T20117] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.007877][T20117] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.069641][T20191] xt_TPROXY: Can be used only with -p tcp or -p udp [ 478.120883][T20187] macvlan2: entered promiscuous mode [ 478.120900][T20187] macvlan2: entered allmulticast mode [ 478.320160][T20117] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.320194][T20117] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.540997][T20207] geneve2: entered promiscuous mode [ 478.902475][T20226] tunl0: entered promiscuous mode [ 478.906692][T20226] netlink: 'syz.4.3506': attribute type 3 has an invalid length. [ 478.917969][T20228] gretap0: entered promiscuous mode [ 479.074115][T18205] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.074145][T18205] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.074242][T18205] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.074264][T18205] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.075785][ T1463] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.075813][ T1463] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.128664][T18205] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.128691][T18205] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.492281][T20248] netlink: 'syz.4.3510': attribute type 1 has an invalid length. [ 479.606955][T20249] netlink: 'syz.4.3510': attribute type 83 has an invalid length. [ 479.944416][T20279] tap0: tun_chr_ioctl cmd 1074025676 [ 479.944436][T20279] tap0: owner set to 0 [ 479.945409][T20279] tap0: tun_chr_ioctl cmd 1074025673 [ 479.992976][T20286] tap0: tun_chr_ioctl cmd 1074025676 [ 479.992993][T20286] tap0: owner set to 0 [ 480.217117][T20298] pim6reg527: entered allmulticast mode [ 480.219732][T20297] syzkaller0: left promiscuous mode [ 480.219749][T20297] syzkaller0: left allmulticast mode [ 480.365933][T20297] dvmrp6: entered allmulticast mode [ 480.468885][T20308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.553444][T20324] __nla_validate_parse: 71 callbacks suppressed [ 480.553461][T20324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3534'. [ 480.602470][T20323] 8021q: VLANs not supported on ip_vti0 [ 481.459661][T20358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3543'. [ 481.473249][T20354] syzkaller0: entered promiscuous mode [ 481.473268][T20354] syzkaller0: entered allmulticast mode [ 481.792705][T20373] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3548'. [ 481.793645][T20377] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 481.875093][T20382] bridge_slave_0: left allmulticast mode [ 481.875117][T20382] bridge_slave_0: left promiscuous mode [ 481.875342][T20382] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.912188][T20382] bridge_slave_1: left allmulticast mode [ 481.912209][T20382] bridge_slave_1: left promiscuous mode [ 481.912418][T20382] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.959634][T20382] bond0: (slave bond_slave_0): Releasing backup interface [ 481.996673][T20382] bond0: (slave bond_slave_1): Releasing backup interface [ 482.043508][T20382] team0: Port device team_slave_0 removed [ 482.067029][T20382] team0: Port device team_slave_1 removed [ 482.067797][T20382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.067817][T20382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.094261][T20393] netlink: 'syz.0.3549': attribute type 83 has an invalid length. [ 482.110504][T20382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.110523][T20382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.137168][T20382] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 482.267900][T20386] syzkaller1: entered promiscuous mode [ 482.267921][T20386] syzkaller1: entered allmulticast mode [ 482.272081][T20389] syzkaller1: entered promiscuous mode [ 482.272098][T20389] syzkaller1: entered allmulticast mode [ 482.847548][T20422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3558'. [ 482.918888][T20430] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3561'. [ 482.944324][T20427] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3558'. [ 483.045783][T20424] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3558'. [ 483.091872][T20434] netlink: 'syz.1.3563': attribute type 1 has an invalid length. [ 483.167183][T20434] netlink: 'syz.1.3563': attribute type 13 has an invalid length. [ 483.169118][T20442] tunl0: left promiscuous mode [ 483.175206][T20434] netlink: 'syz.1.3563': attribute type 1 has an invalid length. [ 483.690027][T20475] netlink: 'syz.4.3572': attribute type 3 has an invalid length. [ 483.690052][T20475] netlink: 'syz.4.3572': attribute type 1 has an invalid length. [ 483.695950][T20475] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3572'. [ 483.742989][T20482] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3573'. [ 483.851881][T20485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3575'. [ 483.876387][T10917] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.877489][ T1014] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.877525][ T1014] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.877554][ T1014] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.085449][T20493] netlink: 'syz.0.3578': attribute type 11 has an invalid length. [ 485.005865][T20534] bridge_slave_0: left allmulticast mode [ 485.005890][T20534] bridge_slave_0: left promiscuous mode [ 485.006145][T20534] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.012805][T20534] bridge_slave_1: left allmulticast mode [ 485.012826][T20534] bridge_slave_1: left promiscuous mode [ 485.013036][T20534] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.069405][T20534] bond0: (slave bond_slave_0): Releasing backup interface [ 485.091895][T20534] bond0: (slave bond_slave_1): Releasing backup interface [ 485.099192][T20543] ip_tables: iptables: counters copy to user failed while replacing table [ 485.120542][T20534] team0: Port device team_slave_0 removed [ 485.133046][T20534] team0: Port device team_slave_1 removed [ 485.140886][T20534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.140904][T20534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.165278][T20534] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 485.721555][T20571] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 485.868868][T20580] openvswitch: netlink: Missing key (keys=40, expected=100) [ 486.078506][T20582] __nla_validate_parse: 43 callbacks suppressed [ 486.078522][T20582] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3607'. [ 486.079716][T20582] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 486.544560][T20594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3610'. [ 486.608245][T20598] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 486.821170][T20604] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3612'. [ 486.883670][T20607] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3613'. [ 486.895960][T20607] macvlan0: entered promiscuous mode [ 487.053412][T20615] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 487.111631][T20617] macvtap1: entered promiscuous mode [ 487.111764][T20617] macvtap1: entered allmulticast mode [ 487.111772][T20617] veth1_vlan: entered allmulticast mode [ 487.127077][T20618] macvtap2: entered promiscuous mode [ 487.127094][T20618] macvtap2: entered allmulticast mode [ 488.521179][T20559] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 488.683401][T20627] xt_CONNSECMARK: invalid mode: 0 [ 488.683675][T20626] xt_CONNSECMARK: invalid mode: 0 [ 488.901631][T20641] netlink: 'syz.3.3624': attribute type 3 has an invalid length. [ 489.249237][T20651] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 489.446539][T20664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3631'. [ 489.446572][T20664] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3631'. [ 489.446583][T20664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3631'. [ 489.636594][T20675] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3631'. [ 489.669937][T20677] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3633'. [ 489.669990][T20677] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3633'. [ 489.758947][T20633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 489.833913][T20678] bond1 (unregistering): Released all slaves [ 489.888197][T20686] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 6, id = 0 [ 490.372066][T20704] netlink: 'syz.2.3640': attribute type 32 has an invalid length. [ 490.590479][T20716] xt_CT: No such helper "snmp_trap" [ 490.905734][T20736] openvswitch: netlink: Invalid VLAN frame [ 490.975581][T20738] openvswitch: netlink: Flow key attr not present in new flow. [ 491.014611][T20745] netlink: 'syz.2.3649': attribute type 1 has an invalid length. [ 491.014714][T20745] netlink: 'syz.2.3649': attribute type 1 has an invalid length. [ 491.359953][T20755] netlink: 'syz.0.3653': attribute type 1 has an invalid length. [ 491.362505][T20755] netlink: 'syz.0.3653': attribute type 1 has an invalid length. [ 491.486240][T20759] xt_hashlimit: size too large, truncated to 1048576 [ 491.598823][T20761] __nla_validate_parse: 1 callbacks suppressed [ 491.598841][T20761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3654'. [ 491.776406][T20766] netdevsim netdevsim1 : renamed from netdevsim0 [ 491.854790][T20772] gretap2: entered promiscuous mode [ 491.855629][T20772] batman_adv: batadv0: Adding interface: gretap2 [ 491.855644][T20772] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.855669][T20772] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 492.222831][T20786] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3660'. [ 493.138889][T20831] netlink: 'syz.1.3672': attribute type 17 has an invalid length. [ 493.138917][T20831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3672'. [ 493.138940][T20831] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3672'. [ 493.207728][T20838] netlink: 'syz.1.3672': attribute type 17 has an invalid length. [ 493.207746][T20838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3672'. [ 493.207768][T20838] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3672'. [ 493.220489][T20831] gretap0: entered promiscuous mode [ 493.247210][T20831] gretap0: left promiscuous mode [ 493.258786][T20843] ecn_tg_check: 17 callbacks suppressed [ 493.258880][T20843] ipt_ECN: cannot use operation on non-tcp rule [ 493.309502][T20838] gretap0: entered promiscuous mode [ 493.319453][T20838] gretap0: left promiscuous mode [ 493.605456][T20859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3679'. [ 493.605492][T20859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.741141][T20863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3681'. [ 493.741166][T20863] block nbd2: Unsupported socket: should be TCP or UNIX. [ 493.791290][T20876] netlink: 'syz.1.3684': attribute type 2 has an invalid length. [ 493.791309][T20876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3684'. [ 493.792669][T20863] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3681'. [ 493.805584][ T5620] block nbd0: Receive control failed (result -107) [ 493.813724][T20863] block nbd0: reconnected socket [ 493.904264][T20880] ip_tables: iptables: counters copy to user failed while replacing table [ 494.398245][T20904] syzkaller0: entered promiscuous mode [ 494.398266][T20904] syzkaller0: entered allmulticast mode [ 494.510665][T20871] Cannot find del_set index 4 as target [ 494.622366][T20920] ip_tables: iptables: counters copy to user failed while replacing table [ 494.823492][T20928] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 494.828630][T20929] netlink: 'syz.4.3700': attribute type 10 has an invalid length. [ 494.837359][T20929] veth0_vlan: entered allmulticast mode [ 494.918641][ T1463] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.970028][T20937] netlink: 'syz.2.3703': attribute type 4 has an invalid length. [ 495.198533][T20946] block nbd2: server does not support multiple connections per device. [ 495.198863][T20946] block nbd2: shutting down sockets [ 495.219662][T20941] nbd: must specify a device to reconfigure [ 495.247120][T20945] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 495.247155][T20945] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 495.247171][T20945] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 495.402809][T20954] netlink: 'syz.0.3708': attribute type 7 has an invalid length. [ 495.402828][T20954] netlink: 'syz.0.3708': attribute type 8 has an invalid length. [ 495.460642][T20954] erspan0: entered promiscuous mode [ 495.491965][T20954] erspan0: left promiscuous mode [ 495.573184][T20968] x_tables: duplicate entry at hook 3 [ 497.457930][T20913] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 497.608034][T20992] sctp: [Deprecated]: syz.2.3719 (pid 20992) Use of int in maxseg socket option. [ 497.608034][T20992] Use struct sctp_assoc_value instead [ 497.760756][T20995] netlink: 'syz.0.3716': attribute type 5 has an invalid length. [ 498.032794][T21010] __nla_validate_parse: 12 callbacks suppressed [ 498.032813][T21010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3725'. [ 498.067481][T21012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3725'. [ 498.085407][T21011] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3724'. [ 499.071447][T21066] xt_CT: You must specify a L4 protocol and not use inversions on it [ 499.078781][T21066] netlink: NAT attribute has 4 unknown bytes [ 499.078814][T21066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 499.506067][T21086] netlink: 'syz.3.3746': attribute type 21 has an invalid length. [ 499.506087][T21086] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3746'. [ 499.506145][T21086] netlink: 'syz.3.3746': attribute type 5 has an invalid length. [ 499.506155][T21086] netlink: 'syz.3.3746': attribute type 6 has an invalid length. [ 499.506164][T21086] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3746'. [ 499.526427][T21095] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3745'. [ 499.535988][T21096] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3745'. [ 499.680654][T21104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3748'. [ 499.849483][T21110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3750'. [ 499.956400][T21113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3751'. [ 499.956432][T21113] netlink: 'syz.3.3751': attribute type 10 has an invalid length. [ 500.049511][T21113] geneve3: entered promiscuous mode [ 500.049532][T21113] geneve3: entered allmulticast mode [ 500.857192][T21156] syzkaller0: entered promiscuous mode [ 500.857214][T21156] syzkaller0: entered allmulticast mode [ 501.054298][T21176] netlink: 'syz.0.3770': attribute type 5 has an invalid length. [ 501.329678][T21194] netlink: 'syz.0.3777': attribute type 1 has an invalid length. [ 501.344242][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 501.347448][ T1309] ieee802154 phy2 wpan0: encryption failed: -22 [ 501.507034][T21194] bond1: (slave bridge2): making interface the new active one [ 501.507490][T21194] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 501.610689][T21209] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 501.809618][T21223] netlink: 'syz.2.3785': attribute type 21 has an invalid length. [ 501.809642][T21223] IPv6: NLM_F_CREATE should be specified when creating new route [ 501.934698][T21225] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 502.600882][T21264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.693339][T21269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.795980][T21280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.801919][T21274] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.801950][T21274] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.881216][T21266] netlink: 'syz.2.3797': attribute type 10 has an invalid length. [ 502.881477][T21266] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.882078][T21266] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.954916][T21266] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.955036][T21266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.955318][T21266] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.955467][T21266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.958844][T21280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.985763][T21280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.989630][T21266] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 503.050845][T21287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.055790][T21280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.101658][T21293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.227504][T21285] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 503.348581][T10912] IPVS: starting estimator thread 0... [ 503.360140][T21307] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 503.411164][T21310] vlan2: entered allmulticast mode [ 503.411182][T21310] bond0: entered allmulticast mode [ 503.411193][T21310] syz_tun: entered allmulticast mode [ 503.434154][T21308] IPVS: using max 29 ests per chain, 69600 per kthread [ 503.917684][T21325] __nla_validate_parse: 13 callbacks suppressed [ 503.917703][T21325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3811'. [ 503.917727][T21325] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3811'. [ 504.283315][T21364] netlink: 'syz.0.3816': attribute type 15 has an invalid length. [ 504.297772][T21362] veth1_to_bond: entered allmulticast mode [ 504.299033][T21362] veth1_to_bond: left allmulticast mode [ 504.485637][T21373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3818'. [ 504.677642][T21395] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3820'. [ 504.689800][T21373] 8021q: adding VLAN 0 to HW filter on device team1 [ 504.696151][T21396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.704570][T21396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.871193][ T5282] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 504.887406][T21399] netlink: 'syz.1.3823': attribute type 83 has an invalid length. [ 504.888376][T21400] netlink: 'syz.1.3823': attribute type 83 has an invalid length. [ 504.906233][T21399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3823'. [ 504.976125][T21405] batman_adv: batadv0: Adding interface: gretap1 [ 504.976138][T21405] batman_adv: batadv0: The MTU of interface gretap1 is too small (1424) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.976161][T21405] batman_adv: batadv0: Interface activated: gretap1 [ 504.982966][T21402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3822'. [ 505.129177][T21410] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20001 [ 505.381025][T21424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.441267][T21426] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3832'. [ 505.490449][ T7621] hid-generic 0005:0B57:0002.0001: unknown main item tag 0x0 [ 505.578848][ T7621] hid-generic 0005:0B57:0002.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 505.972725][T21445] bond1: invalid ARP target 0.0.0.0 specified for addition [ 505.972759][T21445] bond1: option arp_ip_target: invalid value (0) [ 506.007279][T21445] bond1 (unregistering): Released all slaves [ 506.227144][T21457] ip_tables: iptables: counters copy to user failed while replacing table [ 506.456363][T21464] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 506.458061][T21464] netlink: 'syz.3.3840': attribute type 16 has an invalid length. [ 506.458078][T21464] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3840'. [ 507.849130][T21448] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.098363][T21457] veth3: entered allmulticast mode [ 509.347449][T21448] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.388399][T21469] bond0: (slave syz_tun): Releasing backup interface [ 509.393106][T21469] syz_tun: left allmulticast mode [ 509.488032][T21469] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 509.601098][T21448] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.618410][T21474] tipc: Started in network mode [ 509.618436][T21474] tipc: Node identity aaaaaaaaaa1a, cluster identity 1518 [ 509.618568][T21474] tipc: Enabled bearer , priority 0 [ 509.729435][T21448] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.858776][T21492] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3847'. [ 509.859738][T21497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3849'. [ 509.891167][T21497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3849'. [ 509.891184][T21497] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3849'. [ 509.970374][T21507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3849'. [ 509.985459][T21505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3849'. [ 509.985477][T21505] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3849'. [ 510.051507][T21511] netlink: 'syz.2.3851': attribute type 1 has an invalid length. [ 510.051525][T21511] netlink: 'syz.2.3851': attribute type 4 has an invalid length. [ 510.051536][T21511] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3851'. [ 510.052002][T21511] netlink: 'syz.2.3851': attribute type 1 has an invalid length. [ 510.052016][T21511] netlink: 'syz.2.3851': attribute type 4 has an invalid length. [ 510.052027][T21511] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3851'. [ 510.484660][ T1440] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.574063][T10917] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.574114][T10917] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.574146][T10917] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.736177][ T25] tipc: Node number set to 11578026 [ 510.799912][T21540] batman_adv: batadv0: Adding interface: dummy0 [ 510.799926][T21540] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.817125][T21540] batman_adv: batadv0: Interface activated: dummy0 [ 510.902996][T21540] batadv0: mtu less than device minimum [ 510.905161][T21540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 510.906556][T21540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 510.908558][T21540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 510.909973][T21540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 510.911380][T21540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 510.912772][T21540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 510.914230][T21540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 510.915608][T21540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 510.916986][T21540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 511.128874][T21551] tipc: Started in network mode [ 511.128891][T21551] tipc: Node identity 023ddc7b0ad, cluster identity 4711 [ 511.129017][T21551] tipc: Enabled bearer , priority 0 [ 511.226705][T21539] tipc: Disabling bearer [ 511.396599][T21575] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3862'. [ 511.552490][ T1440] IPVS: starting estimator thread 0... [ 511.665912][T21587] IPVS: using max 29 ests per chain, 69600 per kthread [ 511.763011][T21593] IPVS: set_ctl: invalid protocol: 255 172.20.20.66:20000 [ 511.938966][T21596] netlink: 'syz.3.3870': attribute type 62 has an invalid length. [ 512.121371][T21613] wlan0 speed is unknown, defaulting to 1000 [ 512.121464][T21613] wlan0 speed is unknown, defaulting to 1000 [ 512.122248][T21613] wlan0 speed is unknown, defaulting to 1000 [ 512.162517][T21613] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 512.162550][T21613] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 512.162587][T21613] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 512.218271][T21613] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 512.237716][T21613] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 512.283593][T21613] wlan0 speed is unknown, defaulting to 1000 [ 512.292101][T21613] wlan0 speed is unknown, defaulting to 1000 [ 512.300608][T21613] wlan0 speed is unknown, defaulting to 1000 [ 512.302681][T21613] wlan0 speed is unknown, defaulting to 1000 [ 512.317692][T21613] wlan0 speed is unknown, defaulting to 1000 [ 512.319593][T21613] wlan0 speed is unknown, defaulting to 1000 [ 512.321853][T21613] wlan0 speed is unknown, defaulting to 1000 [ 512.323880][T21613] wlan0 speed is unknown, defaulting to 1000 [ 512.542597][T21624] netlink: 'syz.3.3875': attribute type 2 has an invalid length. [ 512.568142][T21620] netlink: 'syz.4.3877': attribute type 1 has an invalid length. [ 512.669318][T21620] 8021q: adding VLAN 0 to HW filter on device bond5 [ 512.737499][T21632] bond5: (slave gretap2): making interface the new active one [ 512.743471][T21632] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 512.943094][T21645] netlink: 'syz.2.3882': attribute type 33 has an invalid length. [ 513.004506][T21650] netlink: 'syz.2.3882': attribute type 33 has an invalid length. [ 513.091092][T21645] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 513.110473][T21645] bond3 (unregistering): Released all slaves [ 513.157548][T21650] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 513.158593][T21650] bond3 (unregistering): Released all slaves [ 513.967951][T21698] syzkaller0: entered promiscuous mode [ 513.967973][T21698] syzkaller0: entered allmulticast mode [ 514.171788][T21707] syzkaller1: entered promiscuous mode [ 514.171809][T21707] syzkaller1: entered allmulticast mode [ 514.618407][T18204] IPVS: starting estimator thread 0... [ 514.714387][T21737] IPVS: using max 31 ests per chain, 74400 per kthread [ 514.792069][T21745] syzkaller0: entered promiscuous mode [ 514.792089][T21745] syzkaller0: entered allmulticast mode [ 514.905941][T21755] xt_SECMARK: invalid mode: 9 [ 514.913123][T21754] veth1_macvtap: left promiscuous mode [ 515.396151][T21781] netlink: 'syz.1.3921': attribute type 29 has an invalid length. [ 515.396565][T21781] netlink: 'syz.1.3921': attribute type 29 has an invalid length. [ 515.435534][T21781] __nla_validate_parse: 17 callbacks suppressed [ 515.435549][T21781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3921'. [ 515.440202][T21783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3921'. [ 515.829181][T21785] batadv_slave_0: entered promiscuous mode [ 515.829537][T21785] batadv_slave_0: left promiscuous mode [ 515.852195][T21799] lo: entered promiscuous mode [ 515.861077][T21782] syzkaller1: entered promiscuous mode [ 515.861095][T21782] syzkaller1: entered allmulticast mode [ 515.871806][T21813] netlink: 15051 bytes leftover after parsing attributes in process `syz.3.3926'. [ 516.221728][T21823] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3928'. [ 516.267803][T21827] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3930'. [ 516.349356][ T5282] veth1_macvtap: entered promiscuous mode [ 516.421585][T21830] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3931'. [ 516.446079][T21837] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3932'. [ 516.448676][T21830] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3931'. [ 516.505899][T21839] x_tables: duplicate entry at hook 2 [ 516.598419][T21844] netlink: 'syz.4.3934': attribute type 61 has an invalid length. [ 516.704531][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 516.832135][T21848] bond1: entered promiscuous mode [ 516.832172][T21848] bond1: entered allmulticast mode [ 516.840108][T21848] 8021q: adding VLAN 0 to HW filter on device bond1 [ 516.841100][T21841] tipc: Enabling of bearer rejected, failed to enable media [ 516.876781][T21859] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3940'. [ 516.876811][T21859] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3940'. [ 517.181002][T21868] net_ratelimit: 16 callbacks suppressed [ 517.181021][T21868] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 517.219580][T21866] Cannot find add_set index 2 as target [ 517.727913][T21891] ip_tables: iptables: counters copy to user failed while replacing table [ 518.766293][T21935] xt_CT: You must specify a L4 protocol and not use inversions on it [ 519.527285][T21978] netlink: 'syz.1.3968': attribute type 1 has an invalid length. [ 519.527306][T21978] netlink: 'syz.1.3968': attribute type 2 has an invalid length. [ 519.786186][T21989] team0: entered promiscuous mode [ 519.786208][T21989] team_slave_0: entered promiscuous mode [ 519.786402][T21989] team_slave_1: entered promiscuous mode [ 519.859460][T21998] netlink: Failed to add ¦â—k\ helper -22 [ 519.859510][T21998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.286224][T22021] openvswitch: netlink: Multiple metadata blocks provided [ 520.342869][T22007] 8021q: adding VLAN 0 to HW filter on device eth0 [ 520.352628][T22007] 8021q: adding VLAN 0 to HW filter on device eth1 [ 520.361755][T22007] 8021q: adding VLAN 0 to HW filter on device eth2 [ 520.378111][T22007] 8021q: adding VLAN 0 to HW filter on device eth3 [ 520.423031][T22025] xt_hashlimit: invalid interval [ 520.610662][T22030] pim6reg: entered allmulticast mode [ 520.806171][T22042] netlink: 'syz.3.3988': attribute type 1 has an invalid length. [ 520.837321][T22049] __nla_validate_parse: 7 callbacks suppressed [ 520.837337][T22049] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3990'. [ 520.845248][T22049] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3990'. [ 520.937580][T22042] 8021q: adding VLAN 0 to HW filter on device bond1 [ 521.166444][T22064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3993'. [ 521.247262][T22074] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3997'. [ 521.302368][T22077] netlink: 'syz.2.3994': attribute type 4 has an invalid length. [ 521.457075][T22096] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3999'. [ 521.500691][T22065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 521.662157][T22104] xt_CT: You must specify a L4 protocol and not use inversions on it [ 521.819138][T22112] netlink: 'syz.0.4005': attribute type 9 has an invalid length. [ 521.980567][T22118] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4006'. [ 522.063233][T22123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4005'. [ 522.068881][T22123] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4005'. [ 522.688882][T22145] ovs-s: entered promiscuous mode [ 522.706843][T22140] openvswitch: ovs-s: Dropping previously announced user features [ 522.708547][T22148] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4014'. [ 522.904489][T22174] 8021q: VLANs not supported on ip6gre0 [ 522.909458][T22170] netlink: 'syz.3.4017': attribute type 12 has an invalid length. [ 523.108354][ T59] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 523.153608][T22187] netlink: 'syz.3.4022': attribute type 1 has an invalid length. [ 523.183782][T22175] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 523.211124][T22187] 8021q: adding VLAN 0 to HW filter on device bond2 [ 523.516516][T22208] ip_tables: iptables: counters copy to user failed while replacing table [ 523.610241][T22213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4029'. [ 524.003202][T22236] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 524.020813][T22233] v: renamed from veth0_vlan [ 525.245915][T22315] veth0: entered promiscuous mode [ 525.248070][T22317] Bluetooth: MGMT ver 1.23 [ 525.269068][T22314] veth0: left promiscuous mode [ 525.818512][T22346] sctp: [Deprecated]: syz.2.4056 (pid 22346) Use of struct sctp_assoc_value in delayed_ack socket option. [ 525.818512][T22346] Use struct sctp_sack_info instead [ 525.849880][T22348] netlink: 'syz.4.4058': attribute type 4 has an invalid length. [ 525.849892][T22348] __nla_validate_parse: 37 callbacks suppressed [ 525.849899][T22348] netlink: 13951 bytes leftover after parsing attributes in process `syz.4.4058'. [ 527.732586][T22288] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 528.168061][T22378] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 528.172992][T22378] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4066'. [ 528.388987][T22391] af_packet: packet size is too long (558759946 > 85) [ 528.562006][T22412] nft_compat: unsupported protocol 0 [ 529.029113][ T5616] Bluetooth: hci5: command 0x0406 tx timeout [ 529.107827][T22435] netlink: 'syz.4.4079': attribute type 32 has an invalid length. [ 529.382602][T22452] netlink: 'syz.0.4082': attribute type 1 has an invalid length. [ 529.515730][T22463] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4083'. [ 529.623436][T22452] 8021q: adding VLAN 0 to HW filter on device bond2 [ 529.628921][T22463] ip_tables: iptables: counters copy to user failed while replacing table [ 529.739010][T22462] bond2: (slave gretap1): making interface the new active one [ 529.754886][T22462] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 530.456618][T22490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4091'. [ 530.456639][T22490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4091'. [ 530.524600][T22499] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20003 [ 530.755431][T22511] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4096'. [ 531.095773][T22535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4100'. [ 531.718885][T22576] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4107'. [ 531.900922][T22586] xt_TPROXY: Can be used only with -p tcp or -p udp [ 531.953604][T22587] netlink: 'syz.0.4108': attribute type 1 has an invalid length. [ 534.077874][T22559] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 534.158141][T22590] netlink: 'syz.0.4109': attribute type 1 has an invalid length. [ 534.219309][T22590] bond3: entered promiscuous mode [ 534.219681][T22590] 8021q: adding VLAN 0 to HW filter on device bond3 [ 534.334660][T22590] 8021q: adding VLAN 0 to HW filter on device bond3 [ 534.335032][T22590] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 534.335049][T22590] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 534.380188][T22590] bond3: (slave xfrm1): making interface the new active one [ 534.380208][T22590] xfrm1: entered promiscuous mode [ 534.382816][T22590] bond3: (slave xfrm1): Enslaving as an active interface with an up link [ 534.443346][T22601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4111'. [ 534.452241][T22601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4111'. [ 534.452544][T22604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4114'. [ 534.700534][T22617] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4116'. [ 534.700564][T22617] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 534.720159][T22624] xt_limit: Overflow, try lower: 536871034/0 [ 534.879965][T22630] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 535.083219][ T1014] IPVS: starting estimator thread 0... [ 535.177240][T22652] sctp: [Deprecated]: syz.3.4127 (pid 22652) Use of int in maxseg socket option. [ 535.177240][T22652] Use struct sctp_assoc_value instead [ 535.186206][T22646] IPVS: using max 30 ests per chain, 72000 per kthread [ 535.280612][T22655] vxcan0: tx address claim with dest, not broadcast [ 538.103872][T22648] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 538.408002][T22694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4142'. [ 538.408075][T22694] bridge_slave_1: left allmulticast mode [ 538.408093][T22694] bridge_slave_1: left promiscuous mode [ 538.408309][T22694] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.463522][T22694] bridge_slave_0: left allmulticast mode [ 538.463543][T22694] bridge_slave_0: left promiscuous mode [ 538.463748][T22694] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.483341][T22708] netlink: 'syz.1.4145': attribute type 1 has an invalid length. [ 538.483357][T22708] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4145'. [ 538.521846][T22706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4144'. [ 538.543536][T22701] syzkaller0: Caught tx_queue_len zero misconfig [ 538.583288][T22686] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 538.623371][T22698] sit2: entered promiscuous mode [ 538.623389][T22698] sit2: entered allmulticast mode [ 539.098450][T22727] 8021q: VLANs not supported on sit0 [ 539.120440][ T5620] Bluetooth: hci3: Unexpected cc 0x2753 with no status [ 539.120527][ T5620] Bluetooth: hci3: Unexpected cc 0x2753 with no status [ 539.265704][ T5620] Bluetooth: hci1: command 0x0405 tx timeout [ 539.357198][T22742] netlink: 'syz.3.4156': attribute type 1 has an invalid length. [ 539.487863][T22742] bond3: entered promiscuous mode [ 539.488287][T22742] 8021q: adding VLAN 0 to HW filter on device bond3 [ 539.529243][T22749] 8021q: adding VLAN 0 to HW filter on device bond3 [ 539.529613][T22749] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 539.529631][T22749] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 539.565624][T22749] bond3: (slave ip6gre1): making interface the new active one [ 539.565643][T22749] ip6gre1: entered promiscuous mode [ 539.589703][T22749] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 539.834766][T22752] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4158'. [ 539.954983][T22759] ip6gre2: entered allmulticast mode [ 539.958507][ T12] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 540.197187][T22768] netlink: 'syz.2.4162': attribute type 1 has an invalid length. [ 540.367984][T22771] bond3: (slave geneve2): making interface the new active one [ 540.368701][T22771] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 540.435029][ T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 540.437646][T18205] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 540.437682][T18205] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 540.437712][T18205] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 541.077771][T22799] »»»»»»: renamed from wg2 (while UP) [ 541.652504][T22834] netlink: 'syz.3.4176': attribute type 10 has an invalid length. [ 541.657265][T22834] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 541.866876][T22842] openvswitch: netlink: VLAN attribute unexpected. [ 542.138360][T22852] netlink: 516 bytes leftover after parsing attributes in process `syz.4.4183'. [ 542.214799][T22857] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4184'. [ 542.214817][T22857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4184'. [ 542.287306][T22864] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4186'. [ 542.377873][T22864] bond2 (unregistering): Released all slaves [ 542.409354][T22871] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.4187'. [ 542.621811][T22877] netlink: 'syz.1.4191': attribute type 3 has an invalid length. [ 542.627332][T22879] netlink: 'syz.1.4191': attribute type 3 has an invalid length. [ 542.628484][T22880] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.4192'. [ 542.640334][T22877] netlink: 'syz.1.4191': attribute type 1 has an invalid length. [ 542.899720][T22893] lo: entered promiscuous mode [ 543.030171][ T59] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 543.121889][T22889] lo: left promiscuous mode [ 543.192661][T22912] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 543.193286][T22912] batman_adv: batadv0: Adding interface: gretap1 [ 543.193298][T22912] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.193323][T22912] batman_adv: batadv0: Interface activated: gretap1 [ 543.193337][T22912] batadv0: mtu less than device minimum [ 543.201916][T22912] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 543.203387][T22912] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 543.204825][T22912] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 543.206196][T22912] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 543.207577][T22912] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 543.208946][T22912] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 543.210313][T22912] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 543.419308][T22926] netlink: 'syz.4.4200': attribute type 4 has an invalid length. [ 543.419327][T22926] __nla_validate_parse: 3 callbacks suppressed [ 543.419337][T22926] netlink: 8183 bytes leftover after parsing attributes in process `syz.4.4200'. [ 543.420249][T22926] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4200'. [ 543.420266][T22926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4200'. [ 543.811282][T22944] 8021q: adding VLAN 0 to HW filter on device bond2 [ 543.947144][T22956] netlink: 'syz.1.4207': attribute type 12 has an invalid length. [ 543.947163][T22956] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4207'. [ 544.139305][T22971] netlink: 'syz.1.4209': attribute type 1 has an invalid length. [ 544.224445][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 544.279866][T22971] bond3: entered promiscuous mode [ 544.281795][T22971] 8021q: adding VLAN 0 to HW filter on device bond3 [ 544.335563][T22985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4214'. [ 544.339256][T22972] 8021q: adding VLAN 0 to HW filter on device bond3 [ 544.342943][T22972] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 544.342962][T22972] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 544.378050][T22972] bond3: (slave ip6gre1): making interface the new active one [ 544.378067][T22972] ip6gre1: entered promiscuous mode [ 544.379395][T22972] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 544.524883][T22987] 8021q: adding VLAN 0 to HW filter on device bond4 [ 544.529775][T22987] bridge0: port 3(bond4) entered blocking state [ 544.529989][T22987] bridge0: port 3(bond4) entered disabled state [ 544.530114][T22987] bond4: entered allmulticast mode [ 544.580350][T22987] bond4: entered promiscuous mode [ 544.598262][T22987] bridge0: port 3(bond4) entered blocking state [ 544.598385][T22987] bridge0: port 3(bond4) entered forwarding state [ 544.795723][ T12] wlan1: Trigger new scan to find an IBSS to join [ 544.839191][ T12] bridge0: port 3(bond4) entered disabled state [ 544.859579][T23014] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4220'. [ 544.938288][T23024] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4223'. [ 545.240394][T23036] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4225'. [ 545.272010][T23037] netlink: 'syz.1.4224': attribute type 1 has an invalid length. [ 545.313420][T23037] bond4: entered promiscuous mode [ 545.313831][T23037] 8021q: adding VLAN 0 to HW filter on device bond4 [ 545.334928][T23036] Bluetooth: MGMT ver 1.23 [ 545.501219][T23050] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4229'. [ 545.501243][T23050] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4229'. [ 545.916911][T23063] netlink: 'syz.2.4233': attribute type 11 has an invalid length. [ 545.921026][T23069] syzkaller0: entered promiscuous mode [ 545.921047][T23069] syzkaller0: entered allmulticast mode [ 545.949179][T23069] tipc: Started in network mode [ 545.949204][T23069] tipc: Node identity cea4df3a8b34, cluster identity 4711 [ 545.966686][T23069] tipc: Enabled bearer , priority 0 [ 545.973877][T23069] tipc: Resetting bearer [ 546.045513][T23067] tipc: Resetting bearer [ 546.126379][T23067] tipc: Disabling bearer [ 546.326812][T23086] Cannot find add_set index 34 as target [ 546.929498][T23109] xt_CT: No such helper "snmp_trap" [ 547.273778][T23137] vlan2: entered promiscuous mode [ 547.273797][T23137] bridge0: entered promiscuous mode [ 547.418970][T23136] syzkaller1: entered promiscuous mode [ 547.418990][T23136] syzkaller1: entered allmulticast mode [ 547.419504][T23144] x_tables: duplicate underflow at hook 2 [ 547.748105][T18204] wlan1: Trigger new scan to find an IBSS to join [ 547.982483][T23176] x_tables: unsorted entry at hook 1 [ 548.029419][T23174] net_ratelimit: 14 callbacks suppressed [ 548.029437][T23174] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 548.063426][T23181] openvswitch: netlink: IPv4 tunnel dst address is zero [ 548.416261][T23199] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 548.503263][T23207] __nla_validate_parse: 10 callbacks suppressed [ 548.503282][T23207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4277'. [ 548.650850][ T59] wlan1: Creating new IBSS network, BSSID e2:53:e2:ac:45:49 [ 548.667711][T23202] netlink: 'syz.0.4275': attribute type 21 has an invalid length. [ 548.667731][T23202] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4275'. [ 548.667802][T23202] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4275'. [ 548.681402][T23202] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 548.818870][T23219] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 549.516412][T23238] netlink: 3604 bytes leftover after parsing attributes in process `syz.0.4283'. [ 549.753161][T23248] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.754775][T23248] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.816223][T23252] netlink: 'syz.1.4287': attribute type 1 has an invalid length. [ 549.891015][T23252] bond5: entered promiscuous mode [ 549.892321][T23252] 8021q: adding VLAN 0 to HW filter on device bond5 [ 550.316126][T23283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4296'. [ 550.454876][T23289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4299'. [ 550.664458][T23295] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.818767][T23306] netlink: 324 bytes leftover after parsing attributes in process `syz.4.4304'. [ 550.968014][T23317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4307'. [ 551.050877][T23317] bond4: option xmit_hash_policy: invalid value (64) [ 551.072541][T23317] bond4 (unregistering): Released all slaves [ 551.474322][T23334] nbd: couldn't find device at index 15663104 [ 551.553157][T23339] netlink: 'syz.0.4312': attribute type 1 has an invalid length. [ 551.708176][T23349] netlink: 'syz.3.4318': attribute type 1 has an invalid length. [ 551.708197][T23349] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4318'. [ 551.963215][T23364] tipc: Enabled bearer , priority 10 [ 552.354885][T23383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4328'. [ 552.435879][T23386] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 552.498513][T23388] syzkaller0: entered promiscuous mode [ 552.498532][T23388] syzkaller0: entered allmulticast mode [ 552.866842][T23411] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 552.933873][T23416] netlink: 'syz.4.4336': attribute type 23 has an invalid length. [ 553.189420][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 553.252154][T23427] IPVS: sh: FWM 3 0x00000003 - no destination available [ 553.300991][ T7621] tipc: Node number set to 149806203 [ 553.563327][T23444] __nla_validate_parse: 5 callbacks suppressed [ 553.563344][T23444] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4344'. [ 553.563356][T23444] tipc: Invalid UDP bearer configuration [ 553.563393][T23444] tipc: Enabling of bearer rejected, failed to enable media [ 553.569881][T23444] netlink: 'syz.2.4344': attribute type 1 has an invalid length. [ 553.616084][T23444] bond4: entered promiscuous mode [ 553.616476][T23444] 8021q: adding VLAN 0 to HW filter on device bond4 [ 553.617074][T23438] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4341'. [ 553.617095][T23438] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4341'. [ 553.635062][T23444] macvtap2: entered allmulticast mode [ 553.655400][T23444] bond4: (slave bridge2): making interface the new active one [ 553.655418][T23444] bridge2: entered promiscuous mode [ 553.660916][T23444] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 553.737789][T23456] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 553.740150][T23456] netlink: 'syz.2.4346': attribute type 21 has an invalid length. [ 553.740169][T23456] IPv6: NLM_F_CREATE should be specified when creating new route [ 553.740249][T23456] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 553.740258][T23456] IPv6: NLM_F_CREATE should be set when creating new route [ 553.740295][T23456] IPv6: NLM_F_CREATE should be set when creating new route [ 553.740317][T23456] IPv6: NLM_F_CREATE should be set when creating new route [ 553.909995][T23464] pimreg: entered allmulticast mode [ 554.524873][T23493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.570456][T23490] netlink: 'syz.4.4359': attribute type 24 has an invalid length. [ 554.584966][T23487] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 554.584995][T23487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.629516][ T5616] Bluetooth: hci3: command 0x0406 tx timeout [ 554.652066][T23496] syzkaller0: left promiscuous mode [ 554.652083][T23496] syzkaller0: left allmulticast mode [ 554.653897][T23496] tunl0: entered promiscuous mode [ 554.672620][T23496] netlink: 'syz.2.4361': attribute type 3 has an invalid length. [ 554.672635][T23496] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4361'. [ 554.725259][T23503] netlink: 'syz.2.4361': attribute type 3 has an invalid length. [ 554.725275][T23503] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4361'. [ 554.878942][T23511] xt_bpf: check failed: parse error [ 554.881370][T23510] bond4: left allmulticast mode [ 554.897752][T23510] bond4: left promiscuous mode [ 554.901472][T23510] bridge0: port 3(bond4) entered disabled state [ 554.936521][T23510] bridge_slave_1: left allmulticast mode [ 554.936542][T23510] bridge_slave_1: left promiscuous mode [ 554.936737][T23510] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.981655][T23510] bridge_slave_0: left allmulticast mode [ 554.981676][T23510] bridge_slave_0: left promiscuous mode [ 554.982285][T23510] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.221306][T23531] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4369'. [ 555.298184][T23538] netlink: 'syz.0.4371': attribute type 58 has an invalid length. [ 555.298201][T23538] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4371'. [ 555.546678][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804f269000: rx timeout, send abort [ 555.552086][T23540] syzkaller1: entered promiscuous mode [ 555.552105][T23540] syzkaller1: entered allmulticast mode [ 555.597777][T23547] tipc: Enabled bearer , priority 10 [ 555.691868][T23553] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4372'. [ 555.798356][T23561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4376'. [ 555.944155][T23566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4378'. [ 556.046801][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804f269000: abort rx timeout. Force session deactivation [ 556.046959][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803610d400: rx timeout, send abort [ 556.216530][T23582] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 556.546999][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803610d400: abort rx timeout. Force session deactivation [ 556.565965][T23598] pim6reg1: entered promiscuous mode [ 556.565983][T23598] pim6reg1: entered allmulticast mode [ 556.871240][T23610] dvmrp0: entered allmulticast mode [ 557.726417][T23659] openvswitch: netlink: Flow actions attr not present in new flow. [ 558.140925][T23674] syzkaller0: entered promiscuous mode [ 558.140947][T23674] syzkaller0: entered allmulticast mode [ 558.254117][T23697] netlink: 'syz.1.4412': attribute type 1 has an invalid length. [ 558.254307][T23696] netlink: 'syz.1.4412': attribute type 1 has an invalid length. [ 558.502851][T23696] syzkaller1: entered promiscuous mode [ 558.502881][T23696] syzkaller1: entered allmulticast mode [ 558.643008][T23713] __nla_validate_parse: 84 callbacks suppressed [ 558.643025][T23713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4416'. [ 558.770516][T23724] IPVS: set_ctl: invalid protocol: 58 172.20.20.25:20001 [ 558.771003][T23725] IPVS: set_ctl: invalid protocol: 12 10.1.1.2:20002 [ 558.886897][T23732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4421'. [ 558.886925][T23732] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4421'. [ 558.887568][T23715] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 558.890897][T23716] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 559.093103][T23740] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4422'. [ 559.093156][T23740] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4422'. [ 559.326090][T23761] syzkaller0: entered promiscuous mode [ 559.326110][T23761] syzkaller0: entered allmulticast mode [ 559.943155][T23778] netlink: 'syz.2.4430': attribute type 3 has an invalid length. [ 559.943176][T23778] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4430'. [ 560.072086][T23782] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.110180][T23787] xt_hashlimit: size too large, truncated to 1048576 [ 560.383087][T23795] netlink: 'syz.1.4434': attribute type 1 has an invalid length. [ 560.383108][T23795] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4434'. [ 562.160807][T23747] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 562.161248][T23749] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 562.456126][T23812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4439'. [ 562.617857][T23825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4441'. [ 562.638575][T23825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4441'. [ 563.152457][T23839] netlink: 'syz.4.4446': attribute type 33 has an invalid length. [ 563.240402][T23839] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 563.243584][T23839] bond8 (unregistering): Released all slaves [ 563.784316][T23869] __nla_validate_parse: 10 callbacks suppressed [ 563.784335][T23869] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4454'. [ 563.872299][T23883] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4459'. [ 563.913357][T23884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4458'. [ 563.983900][T23888] x_tables: duplicate underflow at hook 1 [ 564.099726][T23869] bond5 (unregistering): Released all slaves [ 564.115241][T23894] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4462'. [ 564.189053][T23898] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4461'. [ 564.265713][ T59] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.267182][T10917] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.267218][T10917] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.267248][T10917] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.573672][T23923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4464'. [ 565.314479][T23952] netlink: 'syz.0.4474': attribute type 10 has an invalid length. [ 565.325580][T23952] v: entered allmulticast mode [ 565.326041][T23952] v: left promiscuous mode [ 565.327360][T23952] team0: Device v failed to register rx_handler [ 565.510279][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 565.523529][T23960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.635569][T23972] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4480'. [ 565.637992][T23961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.759614][T23966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.911252][T23988] netlink: 'syz.1.4483': attribute type 32 has an invalid length. [ 565.911274][T23988] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4483'. [ 565.927819][T23986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.280583][T24009] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4489'. [ 566.280829][T24005] team0: Device veth1_macvtap failed to register rx_handler [ 566.356155][ T1440] tipc: Resetting bearer [ 566.383731][T24009] macvlan0: left promiscuous mode [ 566.501991][T24015] nbd2: detected capacity change from 0 to 63 [ 566.516928][ T5620] block nbd2: Receive control failed (result -104) [ 566.519871][ T2037] block nbd2: Dead connection, failed to find a fallback [ 566.519889][ T2037] block nbd2: shutting down sockets [ 566.520033][ T2037] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 566.520189][ T2037] Buffer I/O error on dev nbd2, logical block 1, async page read [ 566.520979][ T2037] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 566.521005][ T2037] Buffer I/O error on dev nbd2, logical block 2, async page read [ 566.521116][ T2037] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 566.521138][ T2037] Buffer I/O error on dev nbd2, logical block 3, async page read [ 566.593064][T24022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4491'. [ 566.639266][T24021] [ 566.641615][T24021] ====================================================== [ 566.648694][T24021] WARNING: possible circular locking dependency detected [ 566.655798][T24021] syzkaller #0 Not tainted [ 566.660201][T24021] ------------------------------------------------------ [ 566.667232][T24021] syz.2.4492/24021 is trying to acquire lock: [ 566.673273][T24021] ffffffff8ee904e0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x149/0x600 [ 566.682473][T24021] [ 566.682473][T24021] but task is already holding lock: [ 566.689834][T24021] ffff888029f31078 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 566.699360][T24021] [ 566.699360][T24021] which lock already depends on the new lock. [ 566.699360][T24021] [ 566.709751][T24021] [ 566.709751][T24021] the existing dependency chain (in reverse order) is: [ 566.718762][T24021] [ 566.718762][T24021] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 566.726413][T24021] __might_fault+0xcb/0x130 [ 566.731448][T24021] _copy_from_user+0x28/0xb0 [ 566.736558][T24021] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 566.743124][T24021] ip_generic_getfrag+0x149/0x2d0 [ 566.748694][T24021] __ip6_append_data+0x3b26/0x40c0 [ 566.754400][T24021] ip6_append_data+0x108/0x270 [ 566.759685][T24021] rawv6_sendmsg+0x1298/0x18c0 [ 566.765002][T24021] sock_sendmsg_nosec+0x10e/0x180 [ 566.770569][T24021] ____sys_sendmsg+0x54e/0x850 [ 566.775845][T24021] ___sys_sendmsg+0x2a5/0x360 [ 566.781037][T24021] __x64_sys_sendmsg+0x1b1/0x290 [ 566.786490][T24021] do_syscall_64+0x166/0x520 [ 566.791601][T24021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.798008][T24021] [ 566.798008][T24021] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 566.805732][T24021] lock_sock_nested+0x41/0x100 [ 566.811019][T24021] inet_shutdown+0x6a/0x390 [ 566.816033][T24021] nbd_mark_nsock_dead+0x2cb/0x550 [ 566.821742][T24021] recv_work+0x1cee/0x1e10 [ 566.826675][T24021] process_scheduled_works+0xc3d/0x1630 [ 566.832757][T24021] worker_thread+0xa47/0xfb0 [ 566.837873][T24021] kthread+0x38b/0x480 [ 566.842480][T24021] ret_from_fork+0x514/0xb70 [ 566.847632][T24021] ret_from_fork_asm+0x1a/0x30 [ 566.852917][T24021] [ 566.852917][T24021] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 566.860559][T24021] __mutex_lock+0x19d/0x1550 [ 566.865668][T24021] nbd_queue_rq+0x373/0xff0 [ 566.870685][T24021] blk_mq_dispatch_rq_list+0x499/0x1990 [ 566.876841][T24021] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 566.883719][T24021] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 566.890213][T24021] blk_mq_run_work_fn+0x16c/0x300 [ 566.895759][T24021] process_scheduled_works+0xc3d/0x1630 [ 566.901845][T24021] worker_thread+0xa47/0xfb0 [ 566.906952][T24021] kthread+0x38b/0x480 [ 566.911546][T24021] ret_from_fork+0x514/0xb70 [ 566.916654][T24021] ret_from_fork_asm+0x1a/0x30 [ 566.921940][T24021] [ 566.921940][T24021] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 566.929152][T24021] __mutex_lock+0x19d/0x1550 [ 566.934260][T24021] nbd_queue_rq+0xc1/0xff0 [ 566.939222][T24021] blk_mq_dispatch_rq_list+0x499/0x1990 [ 566.945310][T24021] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 566.952166][T24021] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 566.958673][T24021] blk_mq_run_work_fn+0x16c/0x300 [ 566.964252][T24021] process_scheduled_works+0xc3d/0x1630 [ 566.970321][T24021] worker_thread+0xa47/0xfb0 [ 566.975426][T24021] kthread+0x38b/0x480 [ 566.980007][T24021] ret_from_fork+0x514/0xb70 [ 566.985132][T24021] ret_from_fork_asm+0x1a/0x30 [ 566.990412][T24021] [ 566.990412][T24021] -> #3 (set->srcu){.+.+}-{0:0}: [ 566.997547][T24021] __synchronize_srcu+0xc9/0x2f0 [ 567.003021][T24021] elevator_switch+0x1e8/0x7b0 [ 567.008354][T24021] elevator_change+0x2fa/0x480 [ 567.013630][T24021] elevator_set_default+0x375/0x440 [ 567.019339][T24021] blk_register_queue+0x3f3/0x4e0 [ 567.024936][T24021] __add_disk+0x6b8/0xdb0 [ 567.029808][T24021] add_disk_fwnode+0x100/0x3a0 [ 567.035110][T24021] nbd_dev_add+0x733/0xb60 [ 567.040048][T24021] nbd_init+0x168/0x1f0 [ 567.044822][T24021] do_one_initcall+0x250/0x870 [ 567.050104][T24021] do_initcall_level+0x10a/0x1a0 [ 567.055612][T24021] do_initcalls+0x59/0xa0 [ 567.060489][T24021] kernel_init_freeable+0x29d/0x3e0 [ 567.066198][T24021] kernel_init+0x22/0x1d0 [ 567.071043][T24021] ret_from_fork+0x514/0xb70 [ 567.076141][T24021] ret_from_fork_asm+0x1a/0x30 [ 567.081421][T24021] [ 567.081421][T24021] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 567.089226][T24021] __mutex_lock+0x19d/0x1550 [ 567.094334][T24021] elevator_change+0x1af/0x480 [ 567.099611][T24021] elevator_set_none+0xb5/0x140 [ 567.104975][T24021] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 567.111300][T24021] nbd_start_device+0x189/0xb30 [ 567.116660][T24021] nbd_genl_connect+0x167d/0x1cd0 [ 567.122197][T24021] genl_family_rcv_msg_doit+0x233/0x340 [ 567.128362][T24021] genl_rcv_msg+0x614/0x7a0 [ 567.133381][T24021] netlink_rcv_skb+0x226/0x4a0 [ 567.138699][T24021] genl_rcv+0x28/0x40 [ 567.143203][T24021] netlink_unicast+0x7bd/0x940 [ 567.148504][T24021] netlink_sendmsg+0x813/0xb40 [ 567.153778][T24021] sock_sendmsg_nosec+0x13a/0x180 [ 567.159312][T24021] ____sys_sendmsg+0x54e/0x850 [ 567.164597][T24021] ___sys_sendmsg+0x2a5/0x360 [ 567.169801][T24021] __x64_sys_sendmsg+0x1b1/0x290 [ 567.175266][T24021] do_syscall_64+0x166/0x520 [ 567.180386][T24021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.186802][T24021] [ 567.186802][T24021] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 567.195459][T24021] blk_alloc_queue+0x544/0x690 [ 567.200742][T24021] __blk_mq_alloc_disk+0x194/0x390 [ 567.206386][T24021] nbd_dev_add+0x494/0xb60 [ 567.211358][T24021] nbd_init+0x168/0x1f0 [ 567.216028][T24021] do_one_initcall+0x250/0x870 [ 567.221335][T24021] do_initcall_level+0x10a/0x1a0 [ 567.226782][T24021] do_initcalls+0x59/0xa0 [ 567.231625][T24021] kernel_init_freeable+0x29d/0x3e0 [ 567.237335][T24021] kernel_init+0x22/0x1d0 [ 567.242176][T24021] ret_from_fork+0x514/0xb70 [ 567.247286][T24021] ret_from_fork_asm+0x1a/0x30 [ 567.252567][T24021] [ 567.252567][T24021] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 567.259763][T24021] __lock_acquire+0x164c/0x2de0 [ 567.265146][T24021] lock_acquire+0x115/0x350 [ 567.270161][T24021] fs_reclaim_acquire+0x71/0x100 [ 567.275610][T24021] prepare_alloc_pages+0x149/0x600 [ 567.281233][T24021] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 567.287550][T24021] alloc_pages_mpol+0x21e/0x390 [ 567.292913][T24021] alloc_pages_noprof+0xb1/0x2b0 [ 567.298373][T24021] pte_alloc_one+0x22/0x370 [ 567.303415][T24021] do_pte_missing+0x13c8/0x34b0 [ 567.308784][T24021] handle_mm_fault+0x1a53/0x3750 [ 567.314237][T24021] do_user_addr_fault+0x746/0x1340 [ 567.319862][T24021] exc_page_fault+0x6a/0xc0 [ 567.324877][T24021] asm_exc_page_fault+0x26/0x30 [ 567.330240][T24021] rep_movs_alternative+0x30/0xa0 [ 567.335784][T24021] _copy_from_user+0x7a/0xb0 [ 567.340891][T24021] hci_sock_setsockopt+0x512/0xa90 [ 567.346616][T24021] do_sock_setsockopt+0x17c/0x1b0 [ 567.352162][T24021] __x64_sys_setsockopt+0x13d/0x1b0 [ 567.357876][T24021] do_syscall_64+0x166/0x520 [ 567.362986][T24021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.369393][T24021] [ 567.369393][T24021] other info that might help us debug this: [ 567.369393][T24021] [ 567.379611][T24021] Chain exists of: [ 567.379611][T24021] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 567.379611][T24021] [ 567.392216][T24021] Possible unsafe locking scenario: [ 567.392216][T24021] [ 567.399663][T24021] CPU0 CPU1 [ 567.405070][T24021] ---- ---- [ 567.410421][T24021] rlock(&mm->mmap_lock); [ 567.414829][T24021] lock(sk_lock-AF_INET6); [ 567.421840][T24021] lock(&mm->mmap_lock); [ 567.428678][T24021] lock(fs_reclaim); [ 567.432666][T24021] [ 567.432666][T24021] *** DEADLOCK *** [ 567.432666][T24021] [ 567.440849][T24021] locks held by syz.2.4492/24021: 2, last CPU#0: [ 567.447210][T24021] #0: ffff8880256f3260 (sk_lock-AF_BLUETOOTH-BTPROTO_HCI){+.+.}-{0:0}, at: hci_sock_setsockopt+0x1be/0xa90 [ 567.458707][T24021] #1: ffff888029f31078 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 567.468627][T24021] [ 567.468627][T24021] stack backtrace: [ 567.474512][T24021] CPU: 0 UID: 0 PID: 24021 Comm: syz.2.4492 Not tainted syzkaller #0 PREEMPT(full) [ 567.483915][T24021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 567.493971][T24021] Call Trace: [ 567.497246][T24021] [ 567.500174][T24021] dump_stack_lvl+0xe8/0x150 [ 567.504807][T24021] print_circular_bug+0x2e2/0x300 [ 567.509832][T24021] check_noncircular+0x12f/0x150 [ 567.514774][T24021] __lock_acquire+0x164c/0x2de0 [ 567.519629][T24021] ? __lock_acquire+0x747/0x2de0 [ 567.524561][T24021] ? __lock_acquire+0x747/0x2de0 [ 567.529493][T24021] lock_acquire+0x115/0x350 [ 567.533999][T24021] ? prepare_alloc_pages+0x149/0x600 [ 567.539284][T24021] ? do_raw_spin_lock+0x12b/0x2f0 [ 567.544308][T24021] fs_reclaim_acquire+0x71/0x100 [ 567.549244][T24021] ? prepare_alloc_pages+0x149/0x600 [ 567.554529][T24021] prepare_alloc_pages+0x149/0x600 [ 567.559643][T24021] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 567.565451][T24021] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 567.571782][T24021] ? __pfx_policy_nodemask+0x10/0x10 [ 567.577070][T24021] ? finish_task_switch+0x40e/0xc60 [ 567.582269][T24021] alloc_pages_mpol+0x21e/0x390 [ 567.587117][T24021] alloc_pages_noprof+0xb1/0x2b0 [ 567.592053][T24021] pte_alloc_one+0x22/0x370 [ 567.596554][T24021] do_pte_missing+0x13c8/0x34b0 [ 567.601417][T24021] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 567.607684][T24021] handle_mm_fault+0x1a53/0x3750 [ 567.612627][T24021] ? handle_mm_fault+0xf1/0x3750 [ 567.617562][T24021] ? __pfx_handle_mm_fault+0x10/0x10 [ 567.622848][T24021] ? __lock_acquire+0x747/0x2de0 [ 567.627775][T24021] ? lock_mm_and_find_vma+0xa7/0x340 [ 567.633056][T24021] do_user_addr_fault+0x746/0x1340 [ 567.638163][T24021] exc_page_fault+0x6a/0xc0 [ 567.642665][T24021] asm_exc_page_fault+0x26/0x30 [ 567.647505][T24021] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 567.653303][T24021] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d 67 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 567.672900][T24021] RSP: 0018:ffffc9000561fd58 EFLAGS: 00050212 [ 567.678970][T24021] RAX: 00007ffffffff001 RBX: 0000000000000010 RCX: 0000000000000010 [ 567.686933][T24021] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: ffffc9000561fdc0 [ 567.694899][T24021] RBP: ffffc9000561fe48 R08: ffffc9000561fdcf R09: 1ffff92000ac3fb9 [ 567.702867][T24021] R10: dffffc0000000000 R11: fffff52000ac3fba R12: 1ffff92000ac3fb4 [ 567.710829][T24021] R13: 1ffff11004ade6bf R14: ffffc9000561fdc0 R15: 00002000000000c0 [ 567.718802][T24021] _copy_from_user+0x7a/0xb0 [ 567.723392][T24021] hci_sock_setsockopt+0x512/0xa90 [ 567.728507][T24021] ? __pfx_hci_sock_setsockopt+0x10/0x10 [ 567.734137][T24021] ? aa_sock_opt_perm+0x142/0x1e0 [ 567.739159][T24021] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 567.744742][T24021] ? __pfx_hci_sock_setsockopt+0x10/0x10 [ 567.750386][T24021] do_sock_setsockopt+0x17c/0x1b0 [ 567.755415][T24021] __x64_sys_setsockopt+0x13d/0x1b0 [ 567.760612][T24021] do_syscall_64+0x166/0x520 [ 567.765194][T24021] ? trace_irq_disable+0x3b/0x140 [ 567.770209][T24021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.776278][T24021] ? clear_bhb_loop+0x70/0xc0 [ 567.780950][T24021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.786831][T24021] RIP: 0033:0x7f22af19e159 [ 567.791241][T24021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.810837][T24021] RSP: 002b:00007f22b0127028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 567.819240][T24021] RAX: ffffffffffffffda RBX: 00007f22af425fa0 RCX: 00007f22af19e159 [ 567.827202][T24021] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000008 [ 567.835171][T24021] RBP: 00007f22af23506b R08: 0000000000000010 R09: 0000000000000000 [ 567.843134][T24021] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 567.851096][T24021] R13: 00007f22af426038 R14: 00007f22af425fa0 R15: 00007ffd32626358 [ 567.859067][T24021] [ 569.984362][ T5620] Bluetooth: hci4: command 0x0406 tx timeout [ 571.104075][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!