last executing test programs: 1m52.256025761s ago: executing program 4 (id=96): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000040)=0x10001, 0x4) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t', 0x5) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000580)={r4, 0x7ff, 0x4, 0xfffffffd, 0x2, 0x5}, 0x14) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r5, 0x1}, 0x75}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(ecb-camellia-aesni-avx2)\x00'}, 0x58) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = syz_open_procfs$namespace(0x0, &(0x7f00000147c0)='ns/net\x00') ioctl$BTRFS_IOC_ADD_DEV(r8, 0x5000940a, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x34, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0x13, 0x34, @random="7294561f8db0b4964198760576c1bd"}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r10, 0x10, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x4000010) ioctl$TUNSETGROUP(r7, 0x400454ce, 0x0) ioctl$TUNSETLINK(r7, 0x400454cd, 0x30a) write$tun(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="00000200000186dd06100004fffffffffffffe800000000000000000000000000130fffffffffffffc0200"/56], 0x38) 1m41.592297083s ago: executing program 4 (id=96): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000040)=0x10001, 0x4) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t', 0x5) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000580)={r4, 0x7ff, 0x4, 0xfffffffd, 0x2, 0x5}, 0x14) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r5, 0x1}, 0x75}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(ecb-camellia-aesni-avx2)\x00'}, 0x58) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = syz_open_procfs$namespace(0x0, &(0x7f00000147c0)='ns/net\x00') ioctl$BTRFS_IOC_ADD_DEV(r8, 0x5000940a, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x34, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0x13, 0x34, @random="7294561f8db0b4964198760576c1bd"}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r10, 0x10, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x4000010) ioctl$TUNSETGROUP(r7, 0x400454ce, 0x0) ioctl$TUNSETLINK(r7, 0x400454cd, 0x30a) write$tun(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="00000200000186dd06100004fffffffffffffe800000000000000000000000000130fffffffffffffc0200"/56], 0x38) 1m31.44295134s ago: executing program 4 (id=96): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000040)=0x10001, 0x4) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t', 0x5) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000580)={r4, 0x7ff, 0x4, 0xfffffffd, 0x2, 0x5}, 0x14) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r5, 0x1}, 0x75}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(ecb-camellia-aesni-avx2)\x00'}, 0x58) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = syz_open_procfs$namespace(0x0, &(0x7f00000147c0)='ns/net\x00') ioctl$BTRFS_IOC_ADD_DEV(r8, 0x5000940a, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x34, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0x13, 0x34, @random="7294561f8db0b4964198760576c1bd"}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r10, 0x10, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x4000010) ioctl$TUNSETGROUP(r7, 0x400454ce, 0x0) ioctl$TUNSETLINK(r7, 0x400454cd, 0x30a) write$tun(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="00000200000186dd06100004fffffffffffffe800000000000000000000000000130fffffffffffffc0200"/56], 0x38) 1m20.886192559s ago: executing program 4 (id=96): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000040)=0x10001, 0x4) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t', 0x5) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000580)={r4, 0x7ff, 0x4, 0xfffffffd, 0x2, 0x5}, 0x14) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r5, 0x1}, 0x75}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(ecb-camellia-aesni-avx2)\x00'}, 0x58) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = syz_open_procfs$namespace(0x0, &(0x7f00000147c0)='ns/net\x00') ioctl$BTRFS_IOC_ADD_DEV(r8, 0x5000940a, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x34, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0x13, 0x34, @random="7294561f8db0b4964198760576c1bd"}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r10, 0x10, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x4000010) ioctl$TUNSETGROUP(r7, 0x400454ce, 0x0) ioctl$TUNSETLINK(r7, 0x400454cd, 0x30a) write$tun(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="00000200000186dd06100004fffffffffffffe800000000000000000000000000130fffffffffffffc0200"/56], 0x38) 41.683226185s ago: executing program 1 (id=2273): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRESHEX=0x0, @ANYRES16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400f9fffbff"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="02"], 0x10) socketpair(0x2, 0x1, 0x100, &(0x7f0000000440)) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) 41.384863449s ago: executing program 1 (id=2279): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x39) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="d2ffdd934517f3e145fa02e086dd", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$OSF_MSG_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=ANY=[], 0x1060}, 0x1, 0x0, 0x0, 0xc041}, 0x4801) recvmmsg$unix(r2, &(0x7f0000007d00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=""/65, 0x41}], 0x1}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000a40)=""/254, 0xfe}], 0x1}}], 0x2, 0x40000021, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f00000000c0)=0x9, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0900110004000000020000000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000a26ec318f812ccd9e77a140599a0c85b802718d23170efc3c08fafdb7b9cdae389ec65db67795b011fa0f6a8123c75600b1182009b2563082db12d164e0a020d04af070d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) 41.308344914s ago: executing program 1 (id=2281): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0xfd84, 0x30, 0x8, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x60000090) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x844, &(0x7f000005ffe4)={0xa, 0x0, 0xffffffff, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x100000}, 0x1c) r4 = socket$kcm(0x2, 0x5, 0x84) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmmsg(r6, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x7b, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r4, 0x84, 0x7b, 0x0, 0x0) shutdown(r3, 0x1) (async) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x7d, &(0x7f0000000000), 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x7d, &(0x7f0000000000), 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) accept$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000200)=0x1c) r8 = socket$inet6(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c00000010000200000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006970766c616e00002400030000000200000000000e000100020000000600010000000000060001000000000008000a00645b6f77e47789f6ce5c329e78b20ea4f26ddb2cb371c0c733916d0820a1784ba597653c360980d8b467ea9eb130a07a8918095104333314ccbef926abb5abbb7ec33923e265768e85fe95ec888f9de4673e117134620166745bcfc78026aa670a6c0275cc3b4737753235eb", @ANYRES32=r7, @ANYBLOB], 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10010, @void, @value}, 0x94) 34.479496756s ago: executing program 1 (id=2281): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0xfd84, 0x30, 0x8, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x60000090) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x844, &(0x7f000005ffe4)={0xa, 0x0, 0xffffffff, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x100000}, 0x1c) r4 = socket$kcm(0x2, 0x5, 0x84) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmmsg(r6, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x7b, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r4, 0x84, 0x7b, 0x0, 0x0) shutdown(r3, 0x1) (async) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x7d, &(0x7f0000000000), 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x7d, &(0x7f0000000000), 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) accept$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000200)=0x1c) r8 = socket$inet6(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c00000010000200000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006970766c616e00002400030000000200000000000e000100020000000600010000000000060001000000000008000a00645b6f77e47789f6ce5c329e78b20ea4f26ddb2cb371c0c733916d0820a1784ba597653c360980d8b467ea9eb130a07a8918095104333314ccbef926abb5abbb7ec33923e265768e85fe95ec888f9de4673e117134620166745bcfc78026aa670a6c0275cc3b4737753235eb", @ANYRES32=r7, @ANYBLOB], 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10010, @void, @value}, 0x94) 29.632716693s ago: executing program 4 (id=96): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000040)=0x10001, 0x4) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t', 0x5) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000580)={r4, 0x7ff, 0x4, 0xfffffffd, 0x2, 0x5}, 0x14) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r5, 0x1}, 0x75}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(ecb-camellia-aesni-avx2)\x00'}, 0x58) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = syz_open_procfs$namespace(0x0, &(0x7f00000147c0)='ns/net\x00') ioctl$BTRFS_IOC_ADD_DEV(r8, 0x5000940a, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x34, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0x13, 0x34, @random="7294561f8db0b4964198760576c1bd"}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r10, 0x10, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x4000010) ioctl$TUNSETGROUP(r7, 0x400454ce, 0x0) ioctl$TUNSETLINK(r7, 0x400454cd, 0x30a) write$tun(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="00000200000186dd06100004fffffffffffffe800000000000000000000000000130fffffffffffffc0200"/56], 0x38) 24.23532964s ago: executing program 1 (id=2281): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0xfd84, 0x30, 0x8, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x60000090) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x844, &(0x7f000005ffe4)={0xa, 0x0, 0xffffffff, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x100000}, 0x1c) r4 = socket$kcm(0x2, 0x5, 0x84) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmmsg(r6, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x7b, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r4, 0x84, 0x7b, 0x0, 0x0) shutdown(r3, 0x1) (async) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x7d, &(0x7f0000000000), 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x7d, &(0x7f0000000000), 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) accept$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000200)=0x1c) r8 = socket$inet6(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c00000010000200000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006970766c616e00002400030000000200000000000e000100020000000600010000000000060001000000000008000a00645b6f77e47789f6ce5c329e78b20ea4f26ddb2cb371c0c733916d0820a1784ba597653c360980d8b467ea9eb130a07a8918095104333314ccbef926abb5abbb7ec33923e265768e85fe95ec888f9de4673e117134620166745bcfc78026aa670a6c0275cc3b4737753235eb", @ANYRES32=r7, @ANYBLOB], 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10010, @void, @value}, 0x94) 14.203748559s ago: executing program 4 (id=96): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000040)=0x10001, 0x4) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t', 0x5) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000580)={r4, 0x7ff, 0x4, 0xfffffffd, 0x2, 0x5}, 0x14) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r5, 0x1}, 0x75}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(ecb-camellia-aesni-avx2)\x00'}, 0x58) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = syz_open_procfs$namespace(0x0, &(0x7f00000147c0)='ns/net\x00') ioctl$BTRFS_IOC_ADD_DEV(r8, 0x5000940a, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x34, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0x13, 0x34, @random="7294561f8db0b4964198760576c1bd"}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r10, 0x10, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x4000010) ioctl$TUNSETGROUP(r7, 0x400454ce, 0x0) ioctl$TUNSETLINK(r7, 0x400454cd, 0x30a) write$tun(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="00000200000186dd06100004fffffffffffffe800000000000000000000000000130fffffffffffffc0200"/56], 0x38) 13.076699403s ago: executing program 1 (id=2281): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0xfd84, 0x30, 0x8, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x60000090) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x844, &(0x7f000005ffe4)={0xa, 0x0, 0xffffffff, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x100000}, 0x1c) r4 = socket$kcm(0x2, 0x5, 0x84) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmmsg(r6, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x7b, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r4, 0x84, 0x7b, 0x0, 0x0) shutdown(r3, 0x1) (async) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x7d, &(0x7f0000000000), 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x7d, &(0x7f0000000000), 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) accept$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000200)=0x1c) r8 = socket$inet6(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c00000010000200000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006970766c616e00002400030000000200000000000e000100020000000600010000000000060001000000000008000a00645b6f77e47789f6ce5c329e78b20ea4f26ddb2cb371c0c733916d0820a1784ba597653c360980d8b467ea9eb130a07a8918095104333314ccbef926abb5abbb7ec33923e265768e85fe95ec888f9de4673e117134620166745bcfc78026aa670a6c0275cc3b4737753235eb", @ANYRES32=r7, @ANYBLOB], 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10010, @void, @value}, 0x94) 2.337995569s ago: executing program 0 (id=2588): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x401, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x4c}}, 0x0) (async, rerun: 64) r1 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge0\x00'}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000200)={'syzkaller0\x00', {0x2, 0x4e21, @remote}}) (async) r2 = accept$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @null}, [@remote, @bcast, @bcast, @remote, @null, @bcast, @rose, @null]}, &(0x7f0000000240)=0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071108100000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000200000000010000003800018008000600776c6300080008000000000008000500000000000800090000000000060001000a000000050007000000000000000000"], 0x4c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000340)) (async) getpeername$packet(r1, &(0x7f0000000180), &(0x7f00000001c0)=0x14) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x4e}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.723385223s ago: executing program 0 (id=2590): r0 = socket$netlink(0x10, 0x3, 0xe) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000008fcff", 0x58}], 0x1) 1.488817008s ago: executing program 0 (id=2593): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x9c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r2, &(0x7f0000000380)="075fdaf9"}, 0x20) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f00000002c0)=0x9) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x26d4, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xffff, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x26a8, 0x2, [@TCA_U32_ACT={0x269c, 0x7, [@m_csum={0x13c, 0x1c, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x2, 0x1f1}, 0x64}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x641a, 0x3, 0x7, 0xffffff38}, 0x2f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x1, 0xffffffffffffffff, 0xfffffffe, 0x2}, 0x66}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x2, 0x6, 0x20000}, 0x3a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x8ccc, 0x6, 0x0, 0x9}, 0x57}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x0, 0x7, 0x8, 0x40}, 0x7e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x24a0, 0xc00000, 0xffffffffffffffff, 0x9, 0x401}, 0x53}}]}, {0x4b, 0x6, "92ae0a971b89044d1db979d5203c75de197a29200d49deb5df11df56b2b53226ac65b22d3f5beed04fab321a71abb81e7160d6cef44707ecd1c5708835881cf2c09958d67760a2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0xee8, 0xc, 0x0, 0x0, {{0xa}, {0xe9c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe98, 0x2, {{{0x0, 0x8934, 0x1, 0x4, 0xe86}, 0x4, 0x4, [{0xc3, 0x8, 0x0, 0x4, 0xfffffff9, 0x8}, {0xbd4c, 0x8, 0x5, 0xe, 0x7fffffff, 0xb0cb}, {0x200, 0x7ff, 0xca, 0x45f, 0x3, 0x9}, {0x61, 0x3, 0x6, 0x81, 0x8000, 0xff}, {0x0, 0xa, 0x7fffffff, 0x1ff, 0x7ff, 0x3}]}, [{0x3, 0xcc52, 0xfff, 0x3, 0x8, 0x800}, {0x9, 0x8, 0x1, 0x6, 0x6, 0x9e}, {0x8, 0x5, 0x4, 0x8bb, 0xb, 0xa}, {0x1, 0x6, 0x3, 0xbdb, 0xe, 0x7}, {0x3, 0x400, 0x800, 0x5, 0x200}, {0x7, 0x2, 0x3, 0x3, 0x4, 0x8}, {0x40, 0x1c400000, 0xffff, 0x7ff, 0x40, 0xfb}, {0xfffffffd, 0x7, 0xff, 0x6, 0x0, 0x4}, {0xff, 0x2, 0x5, 0x2, 0xabb5, 0x80}, {0xf608, 0x0, 0x200, 0x9, 0x7, 0x4}, {0x7, 0x313a, 0x5, 0x6, 0x6, 0xf}, {0xfffeffff, 0x3ff, 0xad7, 0x5, 0x9, 0x8000}, {0x8, 0x3, 0x4, 0x9, 0xff, 0x10}, {0x4a6c8696, 0x7, 0x2, 0x9, 0x2, 0x8}, {0x7, 0x2, 0x6, 0x8, 0x4, 0x8001}, {0xff, 0xb1, 0x1, 0x1, 0xffffffff, 0x4}, {0x6, 0x6, 0x1ec7, 0xfffffff3, 0x0, 0x7}, {0x81, 0x6, 0x81, 0xffffff4e, 0x80, 0xffffffff}, {0x400, 0x80000000, 0x5, 0x4e79, 0x4, 0x2}, {0xe, 0x0, 0x0, 0x8, 0x2, 0x4}, {0x3, 0x2, 0x1, 0x8, 0x8, 0x8000}, {0x6, 0xffffff7c, 0x80000001, 0x2, 0x14a0, 0x10001}, {0x1, 0x5, 0x8, 0x3, 0x7, 0x401}, {0xfffffe3d, 0x5, 0x7fff, 0x2000000, 0x0, 0x1}, {0x1, 0x4, 0x6, 0xc7e2, 0x8001, 0x7}, {0x4, 0x1, 0x8, 0x0, 0x9, 0x7}, {0x2, 0x80000001, 0x80000001, 0x2, 0x7, 0xbdaf}, {0x717, 0xfff, 0x3, 0x10000, 0x2}, {0x6, 0x8001, 0x2, 0x8, 0xa1, 0xc}, {0x80000000, 0xf7a, 0xbca7, 0x6, 0x7fffffff}, {0x1a9, 0x20, 0xdd1, 0x8a, 0x5, 0x8}, {0x3, 0x81, 0x38, 0xd, 0xcf, 0xfffffffb}, {0x4, 0xffff, 0x4, 0x0, 0x7, 0x9098}, {0x94fe, 0x100, 0x7, 0x9, 0x664b, 0x5}, {0x2e4, 0x5, 0xc71a, 0x10, 0xdf, 0x1}, {0x6, 0x1, 0xaf60, 0x80, 0x223, 0x55800000}, {0xff, 0x80, 0x2, 0x2, 0x5, 0x1}, {0x7ca4, 0x4, 0x6, 0x1000, 0x3, 0x7}, {0x7fff, 0x6, 0x1000, 0x9b, 0x9, 0xfff}, {0x8, 0xf, 0x9, 0x335, 0x9, 0x81}, {0x1, 0x1, 0x9, 0xe6d, 0x1, 0x2f2d}, {0x6, 0x8, 0x200, 0x5, 0x7fff, 0x9}, {0x2, 0x2, 0x7fffffff, 0x564, 0x101, 0x7}, {0x7, 0x3, 0x4, 0x7, 0x8}, {0xfffffffd, 0x3, 0xffff9c93, 0x528a, 0x417e, 0x8}, {0x1, 0x0, 0xc8, 0x8, 0x7, 0x7fff}, {0x9, 0xca1d, 0x9, 0x2, 0x5, 0xdb}, {0x3, 0x2, 0xc, 0x13, 0x1, 0x9}, {0xa, 0x8, 0x729, 0x200, 0x3, 0x3}, {0x80000001, 0x10000, 0x3, 0x5a42ba24, 0x4, 0xc}, {0x7, 0x7fffffff, 0x9, 0x8, 0x1, 0x1}, {0x3, 0x1, 0x101, 0x5, 0x7fffffff, 0x4fbd}, {0x0, 0x10000, 0x0, 0x9, 0xe38, 0x5}, {0x7, 0x5, 0xfff, 0x4, 0x5, 0x8000}, {0x8, 0x40, 0x40, 0x7, 0x3, 0x8000}, {0x2, 0x7, 0x80, 0x40000000, 0xe, 0x7}, {0x2, 0x12f, 0x3, 0xffff, 0x7, 0x7}, {0x0, 0x5, 0x1, 0x9, 0x9, 0xb3c}, {0x342, 0x9, 0x1, 0x9, 0x9, 0x2}, {0x1, 0xff, 0xb7, 0x3ff, 0x1ff, 0x7}, {0x10, 0xc000, 0x2, 0x3, 0x400, 0x1}, {0x1, 0x2, 0x0, 0x7ff, 0x466b, 0x80}, {0x8, 0x7, 0x0, 0x200000, 0x9, 0x7ff}, {0x7fffffff, 0x7, 0x2, 0x0, 0x664e98ce, 0xffffffff}, {0x4, 0x2, 0x80000001, 0x9b7, 0x3, 0xa}, {0x70, 0x3, 0x2, 0x5, 0xe8c, 0x4}, {0xe9, 0xed5b, 0x1, 0x3, 0x8, 0x3}, {0x5, 0x6, 0x7, 0x26a4d264, 0x7f, 0xa54}, {0x7f, 0x4, 0x8000, 0x6, 0x9, 0x2}, {0x8, 0x7, 0x537, 0x8, 0x1, 0x2}, {0x8001, 0x6, 0x75, 0xfffff001, 0x0, 0x3ff}, {0x7, 0xfffffff8, 0x7, 0xfc8e, 0x9, 0x4}, {0x10001, 0x1, 0x10b68c2e, 0x0, 0x1, 0xb0a4}, {0x45c, 0x8, 0x0, 0x3, 0x3, 0x1ff}, {0x6, 0x1, 0x7fffffff, 0x2a, 0xfffff5ed, 0xb49}, {0x80000001, 0x10, 0x0, 0x1447, 0xa6, 0x4}, {0x7, 0xfffffff9, 0x7, 0x40, 0xc, 0xe}, {0x1, 0x7ff, 0x8, 0x7b, 0xa, 0x5}, {0x8, 0x3, 0x800, 0x65, 0x3, 0x7e5c}, {0xcb, 0x9, 0x8, 0x6, 0x9, 0x9}, {0x4f8631fe, 0x4, 0x10000, 0x1, 0x6, 0x8}, {0x10000, 0x2, 0x7, 0x7f, 0x7}, {0x80000000, 0x0, 0xfda, 0xd, 0x8, 0x9}, {0x1, 0x8000, 0x7631, 0x6, 0x3, 0x2}, {0x7, 0x6, 0x7, 0x3, 0x7, 0x1302}, {0x9, 0x0, 0x3, 0x6, 0x0, 0xc689}, {0x5, 0xe31, 0x9, 0x3, 0x8, 0x8682bf2}, {0x2, 0x6, 0xff, 0xc9, 0x1, 0x2}, {0x8, 0x9, 0xd, 0x80000001, 0x519b, 0x1}, {0x51ae, 0x0, 0xb, 0x0, 0x4, 0xfffffffb}, {0x5, 0x2, 0x401, 0x8000, 0x6, 0x9d7}, {0xfffeffff, 0x3, 0xdc, 0x4, 0x4, 0x6}, {0x1, 0x80, 0x101, 0x4, 0x7, 0x3}, {0x8, 0x3, 0x8, 0xe, 0x5, 0x5}, {0x1, 0x7, 0x1, 0x5, 0xdf, 0x6}, {0x7, 0x6, 0x3c6, 0x0, 0x200, 0x6}, {0x2, 0x6, 0x6, 0x7f, 0x1, 0xfffffff7}, {0x1, 0xa, 0x6, 0x76c, 0x6, 0x100}, {0x4, 0x6, 0x8, 0x1f14, 0x6, 0x7}, {0x7, 0x1, 0x80000001, 0x5, 0x70f1, 0x2}, {0x4, 0xa, 0x1000, 0x1, 0x3ff, 0x671a}, {0xd85e, 0x9, 0x80000000, 0x87f, 0xff}, {0xde46, 0xa0, 0xffffffff, 0x9, 0x9, 0x3}, {0xad, 0x0, 0x1, 0xffffadbd, 0x3, 0x4}, {0x6, 0x4, 0x1f6, 0x4, 0x2, 0x9}, {0x2, 0x2, 0x87d, 0x4, 0x3, 0x8}, {0x0, 0x80000001, 0x8, 0x7d49, 0x7fff, 0xb9f}, {0x2, 0xd96, 0x0, 0xff, 0x0, 0xb96}, {0x6, 0x6, 0x1cce0000, 0x3b5, 0x4, 0x2}, {0x0, 0x4, 0x5, 0x7, 0x6e52, 0x1}, {0x8, 0x0, 0x18d, 0x8, 0xfff, 0x7fff}, {0xfffffe01, 0xfff, 0xff, 0x1, 0xffff, 0x3e}, {0x5, 0x4, 0x8, 0xf8, 0x8001, 0x4}, {0xffffff80, 0x4, 0xa, 0x10001, 0x5, 0xd8}, {0x4, 0x1, 0xc72d, 0x7, 0x3, 0xce}, {0x9, 0x4d, 0x3719, 0x9da3, 0xc5, 0x5}, {0x9, 0x7, 0x62f, 0x90a, 0x5}, {0xfffffffc, 0x4, 0x10000, 0x80, 0x100, 0x60bf}, {0x4, 0x52a9, 0x200, 0x8, 0x9, 0x10}, {0xfffffffa, 0x2, 0xf4c, 0x3ff, 0x3}, {0xfffffffd, 0xb, 0x400, 0x6, 0xfffffffa, 0x7}, {0x8, 0x5, 0x2, 0x6b90, 0x6, 0x1}, {0x0, 0x3, 0xfffffff9, 0xffff, 0x5, 0x81}, {0xf, 0x7fff, 0x9, 0x3, 0x3, 0x4}, {0x9, 0x9, 0x200, 0x4, 0x2, 0xfffffbff}, {0x4, 0x1, 0x0, 0xfffffff8, 0xfff, 0xfffffffc}, {0x8cc9, 0x200, 0x1bdf800, 0x3, 0x7fffffff, 0x8b}, {0x81, 0x37, 0x80000000, 0x2, 0x6, 0x2}], [{0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x3}, {0x2}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x8}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x5}, {0x3}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x723b909ea32b6b90}, {0x2}, {0x5, 0x1}, {0xb, 0x1}, {0x6}, {0x4, 0x1}, {0x4}, {0x2}, {0x1}, {0x4, 0x1}, {0x3}, {0x3}, {0x2}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0xd5e8120d329d746f}, {0x5}, {}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x1, 0x1}, {}, {0x7, 0x1}, {0x1}, {0x2}], 0x1}}]}, {0x24, 0x6, "12c34811c0f078da01b9687ebf3b7d7933218fbaf940bca0dd704016f60fba7f"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ctinfo={0x138, 0x15, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x4}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x1, 0x7, 0x3, 0xf}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x2, 0x0, 0x1, 0x6}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7ff}]}, {0xcb, 0x6, "c74de8518236adefe7152643b32acf731baca627782e714ff30d19640d349facc239907016f23ada65efa26a6f9757672566bf65e94e1b9743aed83bcc1f7dcbedd126373c1bb9bf80e73b3691d0db5840a2612e9a77f7aabba6922b4cbbd2d7d0400c0a35e9a3d5fca0b63d4baa7c08c60d216f2d3d64b5347be3cdb74cd0f8b25a8de330e4a3e3190cceda777d32f94019d6ff4300a5cdb7f392ed7fc7d2fdb200f1bf3f11fbfcd1d8ec844bf5bfeef3df96fbdf5e64de8a62a66e6f000ffbb5bd4873ee2e12"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_sample={0x94, 0x6, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x6, 0x10000000, 0x4f24, 0x9}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3ff}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x7, 0x0, 0x6, 0xa}}]}, {0x16, 0x6, "6517b3645117d10fbc549de600791937155d"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x120, 0xb, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffff, 0xe}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0x9}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffff7}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0x7ff0}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9, 0x4}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}]}, {0xa4, 0x6, "c230f05f0fdb8d8c7f00d7bc849128b97d76568d0e9fe77fa56f15e3aa0cd57db74a62606aa4a31200b2e0137cd7d5356d089730ede71424956cfa701180e717805b5f4a29da4d6b49f09e9bfe603e1d379cd2764ee776734c531014506280d346d7c06569bca184f50334e5d5002671170bc10d15c7b9e1366839ce8ff76d0a9e9928a3576e9b06204d8d7d026095fe8b9f52efa3ebba6c089bf8c9e7f762f4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ife={0x98, 0x5, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x777, 0x4, 0x7, 0xf}, 0x1}}]}, {0x53, 0x6, "14cfa6d19dc65dae76329f89e1ae150c3a14bcf3ee9a08613a3b3d8afd48719571a7126b25075c9f78e7df781ebccb17c28a8db46aa74c7e325eabc978e2aef56ee50e340c5650e5f2572f240d160d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x1144, 0x5, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x3ff, 0x20000000, 0xa1e, 0x45}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x9c, 0x20000000, 0x1000, 0xff}, @broadcast, @multicast2, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x75d, 0x1, 0x2, 0x9, 0xae}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xff51, 0x3, 0x0, 0x0, 0x6}, @multicast1, @rand_addr=0x64010100, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x100, 0x9e0c, 0x2, 0x8, 0x1c}, @broadcast, @dev={0xac, 0x14, 0x14, 0x42}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x1ff, 0x8, 0x8, 0xb}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2b}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80, 0xab, 0x4, 0x18b, 0x3}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0xffffffff, 0x1}}]}, {0x1004, 0x6, "6c9e156646c97ea66a34e7473a91d0889c825c23d2f0912e813b3b815fa0e243339039c35167c1ae520c4619b7f88b7d65a273fb54f9b73883f63249d1af9d72f327fca33327206159a5da0a5b8fb275db48b9c6a6d0211ec1209d441b8458f1d6e9efb64ab68ba6b5ed9e3abcc08426b7fe66510de93fb2228800ad87ea1879b6f13749ecef0c1e844ba89b21b4cf0b70e3cc0806e659414f9e747824603959e264a6ecfbb5df6b76a3bdab5c714da08646b7ade1d4c681e82ca29d0d6cdbdf0bb1f1ed69ad140f7fe5950379a4011642cc7044e2228878a97037081ccbc8f67462e700e8a0ec6f77be6ba431db75ddf57c062a675eefc1aa82b701ee163decb65fbf0d258bc870e689ef75f50238daad16feb20add8eeb5907662fcbbd47c95f48c1fad0a723b870e49b37ce78023dd5d0bf911533a60f180afb5a79f7853078ed7397867f6a2019bd39106b0ae62b5dea1461b48e5a37a8c391b33a9b9f44fd723e1f1bebae503bdb3e3c3a04cfc86a5796e7d873a919d5082cecbf057e7519b9b7ba955aaddb58a98fa2fd5fde2e41bed64a9aa777133230f7c01cf6063516217d631668b48b448b57be96d8ac25002619ebd08fffa70254bf0548a2b02d4a0c3bdd620742e4da49345a57db595534a6a8721379fd5262ca21587b54f1d8cd3e4846f0b15f26217b36d9657050f7fdeddf36c1c90ef09cd035fd7bcd7fd86fa218805067ba481996596750609c1bf2eab38ef463a789c4ce8793c93097f5bd35c77f9b3bf256b8a2a22317a22fa0aef160073376463dd8143b39b3d66367c0dd6ba6fd7e18c32ed64999cf28347158070db12f9bec000bd49f4ae3cfcb52c973505b2b3234c56c8f0bcc450a243bc75a951010ad19308c765d9ddd1d480359a31ae74e9a21fb251b21e4e44a82e4178db50bb34d9231d18af361529bd2d2553d620a71ba08d0b90d3b534fce6ce17ed0e82433388775abe2cf7243eec9820fefdc63a25b36b495a18f7cc6ccc9672cb15e48c6a1b9646ddaf7bb44705410466bf095621f97829d0b65420d4a5f61bb99464e2d49f3afc496f45b399fc9325ca3d9dbeca1358493597b916ec96e051f264ffa5517e9a374bc3366d42b40a8cce3d71c3c0873276f5ad10037cb47dac12d79a9a123b39cc6f0abbfeee098a40395f148a71fe5befb43b86d1529b459e3c708d304ec3fc346e5d738af0c14ebd01715323cf80bd389fb4a954d1caa7869c8255b39ba1d8eccd3bfd78a8dd48383885465b83365891427ae2b16e05a1dd41934301af4aa3a0621769bdc6a7bfbd18a253b8a1e6dacee0a9b5e6c38c630bd6a9f1699ccf2b1944bc175efef136954bcf0040fe289c251e91f0a7713b734d9a5d6b5d64b750bbcc28d4f814441e321e36bf3a3747c120efd7df41b239e96ce1db58a3cd932c9b395cc82391380768339fc5db6e1d4383a1b548a34e5c4ca59758faa6aec4937d9535fc3341ff6b8125b04b20197fcc3eca9168a412e80744e7556ea95395bd6f190b24c5529a314180974695b004ad517fdc9102f3ed89591e2ccb312b60f818e3141343a940223fbfc47593abf34595a9f4d27984c2807d584a50a96e481d0a1118e14c5e51167ad3047c0962c10d6306ff6d779ba2d8274e38f87dbff703d9d5061620179481bfb3fc031af33b8d8114fba45c310dbd302df3b54d6771e78818e557f2e378b90a30ec5ca49cd915e409f180680132adac3e9cd00b128121539ae87fc27bf1710d7f48d2450f8479b27dea6729a04285870d6ef1e4135a64d9d015fd08fedf5f3d33128274545aaecd6eee91c50a5f5fe466c5e30953d567f1a0a8d9879fe68d3b936d83206a1a1dfd869cf258ffe87236971a4cb53bbfc699ee4655bfa963ec7df3f0ab8092dbbf9e157d2c096b58a5fae5f58a1b24eaf0f6b0c5802aff97134396bbdb954473ba2db0ac3affda89a214a4bf69c702462a9168e062153d8f4f4eaaca1e112090bf12a7312c6df0dbfd29526dae8e44ac8d6c6dc2ee4b7115e3118662c37a7c1bd6c8156bd768bb6d32be20412c41deef7ffbee8876a52d8fbaceb1712784ce24ba873cb24a29bd8aff458c969fe85675c5d310076a2935597ae62184f863417b2273de7d99ddd82dceb2a0c25a819fa334dbc9e7a82dd15fffae39512793daee194583860cb09561db35d7247c1f337f63e379764d90b630f4abb36716d131effa769391504ab303241798fecaf7e7bac5ea166b9506ad1e1a806d465473fcfcd0b671cd9817e992c0ce595c946923cf66f8fadd90bd4172b0e98abbc0e828786ea2bc0978ce874c3cba9c91528a59e7f15f53acdf8cff461ad7c4efdf8346ce74f532d19484fd34d43694196371b6edffd82ddbf67ef8221d8dc099035e92f1fdfd38fed5e238fa7ef14e4193eedb6434c9dc28bf80b8dd9cf28295d4d845248529f0b1020b67adfd1309121a85cceb3edb902dfea87ac3f5c25a089ff2a953d8dcc27d7f05cc1d70c92f29f2b85a5554f779e49db17259dd82aea3ed4dbd2d2449c77e33e93b9e901da1ee9e8f15c276223adb78e0394e7c1c1233d918f859537de4f9ee4ec353ed3338837229626343955f0363dc4c241093606b43ca7c517d43d47d953549329517ff5f3a67ce51d6b0dc6ec696f738c003d0dbd0e8b3c28cd5d78ca2ab1ca15727bf6dc524cd807a1f5b859108a50487c0182fb1bc9467d587ec5605df65617ca1e201950b431d68533b98814de8e9b2c8273faa064d768c155549e561d7ae1d03734aa4284983e8bec2c929d5794c4e05ad29e6e8629591f56617288a0a6ae241a1fc6ce71e6fc5ee0a52d63f9aa6fca7dd27334b268bfdd60cbc8bff7477fd583ff886e4af36c0369fb0c8f01bbf2ef72be2947ec4312d6a63515d491ea5180dc3daf5cc2d3d1912d24e136178f65d419ec9735cb3d049b2e474f5366b289408a2b21c2f8ebe2c73755f2323a84e4a0eb820e6c3a484e71202f8d13c0a1ae6c165bafcd37db12d472b7cab768548d0de7916f31555e7a75a36d92f5c08c27ea7285cfb045827a6065c151d58ec114d0a8ec64ef714c7f70da0abd0541bd92c10cee32799776a51ebf3715ca2ed8ff1e9f83675920813c3da10d3a06ad0b9a81c14bba8cdc5b46f76e2f60726d49887a7bf4432dca0a82694c83b97a111b5f6daa70fa430d053e4f5a2459417d01532a721817fa3b59364f8cf9ed7d3746eed80c14098ea3926641bb2033b842191f5bde1335719d69d34093565a2f1ea8aa06d48cfd17fd308faf99312d21626bb979a93a8b33ae0b25719d3e4598b1f66096663a95f4047e2abe9d0e31d7ffa50fafe1142b4c583578afef0f454ef4119076928bae94119098c5106a0aa4395d79d85654308aa00a1faf4b56f55e705255682bd07a618d7cc19e225bfb958aa84ee90daf175e36dbb959b004a63e0bcc944759e00ffb16a585d561114882c883c7c9c8c02ad93eaf4ae266988a6a5d582a7e139229e43f3ded49048e76a97a390bd88f7e5a46c80529a46f395a123c83bb037158469005d2ac7722a59344cb5a9861f0a58cc48a8a5ebc14ba81509795cc724b8c69cb2c11de6908140ecc0bd373704c06b46d660b53bb965a76503224e957908956b90adcf5bf6d25f3b2c4e28905d872fa8340564fe5110bbacec7108fd4987008fd19ab6a0617caa13f4320c1dd68d96f475cc35c8b8a66cd291e7f7a92af6a837540c439e2abfc9e460ae7010235bcd29ad723663ffb263f9c8f8add561605b1f35e729b4dd42d8c0cedd5276f54c206469e9218efe671ae614714e8d9142e710f4a18a3f0aea237e0c2ef6d80ca674c49446417a604ef25082376efdd24778e61b55183bc99314ff3beeb65111083c47f42b9b290b796843636a2247e5e5e2f9fc843668f66c10ee8d3515464efd547b7dc85428782e0aad5015d1ca44f221f243b2fa91df42a84b02896b36bf5b2e5894d684f8076431bbbd8a65434bc079290c8ad02c2ebf7cce49aba9e654bd3b620c48d46414226a005cd24503375d3b607897ea6a90a6a4d37d01b3b02ecaf6b445650faf6000548d98531f9cdf1716712dac20518abbd1e0f423eda59a6e4dc21df1305cc38052cbcefb4eed68e32d3d0cb66d300702948a10748038791a23860fe84e3388b19c63e034e6c8daae9b60ac4c950b6fd1849ae0757c4c9ed3f7bc945c3c892fff3f12bf25366ff0c78fc5ed9dc2a28100f945e669d4e453255022f6bd500cf138f8fc045145391e18be451fb0358d4ecb22b0fde858b312d75bd657b819d16930c001ab56899ad45ffd05e5d625aa498ca627258c826e5657afc5ed386120fb67f94e2095215c7fe1f9724c73ab2530eeded96f5e47fe3b3164e5b96f15172fb450a096755be0fbd9264bcf3700568e6d66a6b5f668540d902984192e83bba638cbae4cd9c8e868e567b975535b9030a0ed154acf8a146d3a6dfce1e2d7e9c72210e50332c956be3fc9ee6fdd4d272f22cb8f09f78bac74989b614271a4ce50b2bf710b1971d9cf89aa0520b688afa032d58095ec42cd466193113ce2054db1ccb41672d82e9743470b5bb8e7ea5738e9d3afb12f4559bbcdf13d382401b254f50ab23e844f3654be34861a10722d4fc9f9c7d956d83a854e8d183e314f33e469b137324c75e9f609f85087e1e724bb8caedc30922e96315914814c274085f93bdd286e848a64b5df4dbb1af5643ab40067353ce6e63264bc29ed9de7acb69ea922323381962dd41e3b6169ffc80b7330a2dde5abcbaaee4054a404135f7874990ac6cc97c0bd563f826d4713b0530e4e83ce37b8008843974e0c9ffa5b6304726caaafa002d5e4d6637a77b20f069943e06a80bd292e13f991d62734315159892318615f0ac309a00914093cdc3574f5862c72bed9a094c63def6a2055e8bff4c06de3a58921e46ce2c0bd6d438ff983bdb84a508db9058109294ce934bde79ba5a2aaf00cbe4ce90afde3a56418c4e97f1b36ceccb8407834346e5853faeeec2dd9fcb01fa2d920bf2964c34caf1568f4a1bcae8914bdfdb69cacb46b1723fa9f5e0167022f5dc11ef22f1ec9d196e271b3823378ed8a060244786b025563bd0c6b967210045b230149add364eb71c15a202a9c34a8f53ff4932983c1214c43424e346f36affadb563a7a39cd99052ab030534f061714f5f56fa5a834bbcb079cb4636914807a3d098a703b2f9c51d34bcbf8e7ae4e1749cc2cd99cd92ebae9e486dfec9e15074a35610d379acfcec03fe91ec9b31853233412428ce8827e30a3d3064ba732860c7fa342c5c096999d1a0b3d7dc9e66c4259c4a395470aa21a78c0fb13b73be8cf7f68f69a1063d0a31abfaa269c7146e84a4d7f8873b4cb746a7a34b8988c31fa7d64eae708043db46cb3c64f7d66047c31ec1b6a00fe6bc98f7779db45cc5bc9597f74970ba40107aa408d56c0bded4efe571630d12ec691a4a047c169dd9bce8c1c54ea98422f6d74d5c26ebca542d83b3f7aed07595533088c6c90763aa2fd907c7500b88cbdfb2f72e062f578090f6ca261babfc6d4e2531eb4ddb3cbe652b1106519d2f8cc223cc99b599b793c942aa7721ce1be3584158f4d9f05825c42bb362ca1a85c6f5dc7ca32ab977c655bee49746cb01f58c986fc70ef770947e5907b25f2dff6c1020edb9b06c3ead9c4090fad9e28c508f637c9bb4043aeccdfbcd186a29be04e9275097e1431cb358a9596ad37eb79fcf3cb7c0ea4f9a621400c437a4bcde8aa51a0ed390e593d4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x128, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x8, 0xb, 0x2, 0xe15f}, {0x7, 0x8, 0xd, 0x8}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1477e28f, 0x7, 0x10000000, 0x6, 0x49}}]}, {0xaf, 0x6, "250d5d4c9fdd2f4afa1ac0c39794b8247cb96587341f5b53a1909ea4b86f68c0f4d4536136abeaafe5db66234af873e17e35e894acd3a8aa854c230a1598e6af888fc967e5fd156ca331944f61c3939056aeba2de3807ba3a2cecea45b1bd4cc955624ec062ce4c295e34a728d040ef39c2131cbd55e7795512f95fbe2335dd941cbbe084a059ac050aea7ced7f337d0acccde930891d25965a66547bed0b5bf5e135bc6a703f151a82afe"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbedit={0x84, 0x10, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x8e7a}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}]}, {0x46, 0x6, "aae5031e850a0ded76d58c582306da6882c00d081bceaf852cd5ae5727a80efdf248c6f2ee14491a47e08133308caa78d37bec7ff52eceeb05dba4ff6537acd3b274"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_U32_CLASSID={0x8, 0x1, {0x2}}]}}]}, 0x26d4}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r8, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000600)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000640)=[0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0], 0x0, 0x66, &(0x7f00000006c0)=[{}], 0x8, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="b405000002000000711028000000000085b9e8ec5480084c91cc544c89b9edd7e857606682a2bcf203ec4d5949eb0d524f265fd5266e760d130dffeb1781cd2cd3c0223a7081a7cb2e79cd000c917e319908a03f5bebc527987cb68a2b2923978e01b04d62be632b290caa48e2dd60cb33410639b2bbafc99a817a3597108d72364f2480259a7356e3959075238e142c0dccff0844389094d453ecd248d08fd7cc899fe3788f93b4a6b992e3"], &(0x7f00000005c0)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x20, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000900), 0x10, r10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffffffffffff4, &(0x7f0000000340)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x7, 0xf}, {0x10, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40484c5) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001800090400000000000000000a000000000000000000000008001e80"], 0x2c}}, 0x28000050) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x1e, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000600000000000000cd465c7a1811000093d70c0352c76074d996b4dfc179dd70f56c3950a68d268f6f1b0c7fa5918f2971cca2c90a40bd0652f7afa237ef8f26728964845a516cd83ce05216746ab9c218bfd7b9f2509024a937395b3a0f30a38ec0b24072ce8b622bfb84629569f8ec0801acaea39516554e9fa76a09f0a5f656e006f341c974c033f5a6503f22dd0386b9c6c2a185ba46abb520659e415b1e33b30fdcd558a9707496835d84b8379a7eed449b7e36fb102540201bf824aef23d1a961d8a62efbc95a0e1d26c3491b5f8c0f9c31203c23a4c7a79024599", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a50000004208410000000000fff5060001000080bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x1, 0x50, &(0x7f0000000480)=""/80, 0x41100, 0x40, '\x00', r1, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x2, 0xa, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e000000, @void, @value}, 0x94) 1.295253083s ago: executing program 2 (id=2595): ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0xa0, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x5, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @nested={0x74, 0x5f, 0x0, 0x1, [@nested={0x4, 0x43}, @typed={0x50, 0xfe, 0x0, 0x0, @binary="00ff29a2d40e2a17c328e1446076ebbbf210567b4c6c37338c803c187d28e4d42c9058f05cea647ca1c48178ae7c0832442ff3210dab7164f155450da800dd7bded25878ed06ba1f1241d0a4"}, @nested={0x1c, 0x1d, 0x0, 0x1, [@typed={0x14, 0xd5, 0x0, 0x0, @ipv6=@empty}, @nested={0x4, 0xc7}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, &(0x7f0000000040)) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd2a, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x8, 0x8, 0x9}, [@NDA_DST_MAC={0xa, 0x1, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000045}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r4, @ANYBLOB="88bf451c1b27ea54fa43d5763a59e52b1fe0ac47ab5f0c9ae1bde57607e17cc7f90c01226be46c5dfc084600504e0a185c1c0c4e371a305c780bb22ceb812d017f21da6d8339c187af9d08acfb71c30968a51d4484cb6372b12057c70bef33902452029552f64dae61ce4822551f2dc2a2434bd89c7891faeeb79e0ba95ff68e39951045ab7c"], 0x40}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100001040600"/20, @ANYRESDEC=r2, @ANYBLOB="2b030000000000000100128008000100736974000c000280080002007f00000108001f0009000000"], 0x40}}, 0x0) 1.162853906s ago: executing program 3 (id=2596): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) unshare(0x20400) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, 0x0) r3 = openat$cgroup_subtree(r0, &(0x7f0000000400), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000180)={[{0x2b, 'net_prio'}, {0x2b, 'devices'}, {0x2b, 'perf_event'}]}, 0x1f) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000000)={0x6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="14000000040000000400000022a1b6acb870cc6468d56e1322dadb09f2862efc80000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r4, &(0x7f0000000240), &(0x7f0000000080)=@tcp}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\t\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf253500000008000300", @ANYRES32=r7, @ANYBLOB="0a000600205cd67a5f950000"], 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x3, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f0000001800)=0x200, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="30000000041400082dbd7000fbdbdf250800010002000000080001000200000008000100020000230800010001000000560af2de95756ae9f2f0d62a3056167c5980db5d9465b5adf56feef595c56332c120219f96e79279d5dcc03c508519ef8b9dc9f46444228cd1"], 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0xd32ecf374a0e8967) 1.034487169s ago: executing program 0 (id=2597): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x9, 0xff, 0x8000000000000001}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r1) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x4}}]}, 0x38}}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0x6c, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x18}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24040800}, 0xf409e138c20b1577) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r6, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000000}, 0x1c) listen(r6, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f0000000080)={0x0, 0x3, '\x00', 0x2, 0xff}) 1.033388522s ago: executing program 2 (id=2598): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000540)={0x1100, 0x204, 0x52, 0x10000}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'sh\x00', 0x10, 0x9, 0x11}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'fo\x00', 0x1a, 0x0, 0x7f}, 0x2c) 856.938993ms ago: executing program 3 (id=2599): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=ANY=[], 0x18}], 0x1}, 0x40040014) 810.284474ms ago: executing program 2 (id=2600): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@x25={0x9, @remote}, &(0x7f0000000080)=0x80, 0x80000) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x30) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000140)) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000001c0)=0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000200)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x60, {0x2, 0x4e20, @local}, 'ipvlan0\x00'}) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x50c0}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, r2, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x100, 0x13}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x128f}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fffffff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x4, 0x401]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0xffff]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4080}, 0x2004c800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@ptr={0xc, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x30, 0x30, 0x0, 0x0, 0x5f, 0x0]}}, &(0x7f0000000440)=""/252, 0x2c, 0xfc, 0x0, 0xffffca69, 0x0, @void, @value}, 0x28) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@bridge_newvlan={0x78, 0x70, 0x200, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xd}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x2, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x36, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x7f}}]}, 0x78}}, 0x8004) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000700)={0x0, 0x1}, &(0x7f0000000740)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000780)={r4, 0x9}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000800)={0x0, 0x265}, 0x8) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000840)=0x8, 0x4) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000880)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, r8, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x65}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8090}, 0x8008885) setsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000a00)={0x0, 0x1, 0xa, 0x4}, 0x8) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000a40)={'syzkaller0\x00', {0x2, 0x4e23, @local}}) r9 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r9, &(0x7f0000000a80)="3447fb409f9b72a8fb18867c96b77150767b58d858afc00d11272dc00ff3aab0c872d82959a53ad34aa468c28db1a882ceeced085c214e2483891a25e375008c1c2bfcc8898d83c3b0180577968cb508aad0f373fe23cec18ad297176d9cfaed98c748df4c0d18cdfd8e527913782c634b73ea2a5c85004e6daa3ba4d7b9ba775022def147a97c3d54a9aa728151d81cd9", 0x91, 0x40000, &(0x7f0000000b40)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000b80)={r4, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000bc0)={r4, 0xdf, "5ea0625d1021efbb2e17287dad55b034e960a784300945c85fa59bd8acfd9c11ece526fde6c62a1d7bff26c8a1a4a93cbfc0c6b967a20dd5d60bd860e337c482dc2222df180a21dcc2b761717fe0fedc9d60e621d32c315ab87d3cb034537f0b1e2d1cc8778a50c1dda739a4aa3169eae3db6fceebde2509fa3c2bf80683ccb914ad2c56f3175beb7ff7557273eb2b8df4cd8e10ada9f89ee410411b43006398af1bedec81fa2b6ced00e6c07590eacdebffc9f7ffe7084c98b2256e43af30847fc62fc386cb292880469d322fbdb6884ce84c89712f630f7b726104709b75"}, &(0x7f0000000cc0)=0xe7) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000e00)={r10, r6, 0xa23d, 0xf8, &(0x7f0000000d00)="825679571496be38edfec8669cb02f18c549df888f10be50b3ad3a09b5e610bc340563d01cc0b61d9e6e8105ac4c0d32bbb23c9f4a5cf84f4f92388424b4445eb4ef1af140bd131415bee9c4b7318bb19b768efa503edace845670086eef36f852e80d3ac5fa11f700fa6d3d38297ee965cc47eb817c18236a0e8a7998b1f555b1749d3b3e098b28842f4cc71cf8901f823383dfd53dbc406639074e32712eb4aaded1b10c1b7e07dbf5dd1b7a91708a01e55805eb59082ac5c089758c1048ca2be6d93ce58c2996223684eef8ea0a1835499c5ab176e4af9568bd3d7cdd7801b47d8314a1b7c90ae8a459f2e303b9e3906a47d70e9c4c9a", 0x80, 0x1, 0x7ac3, 0x7, 0x380, 0x2, 0x7, 'syz0\x00'}) socket$pppl2tp(0x18, 0x1, 0x1) 730.400441ms ago: executing program 0 (id=2601): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="000000eaffffe8aaa26a8b8b8e3f8ffaffffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0240000001"], 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x3c}}, 0x20008000) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket(0x2a, 0xa, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xfffe, 0x2}, 0x6) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r9, 0x890b, &(0x7f00000052c0)={0x0, @default, @netrom={'nr', 0x0}, 0x743, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x10, 0x1, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)=""/203, 0xcb}, {&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000007c0)=""/237, 0xed}, {&(0x7f0000005080)=""/4093, 0xffd}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/88, 0x58}, {&(0x7f0000000440)=""/81, 0x51}, {&(0x7f0000000600)=""/162, 0xa2}, {&(0x7f0000000940)=""/160, 0xa0}], 0x8}, 0xb0}, {{0x0, 0x0, 0x0}, 0xa}], 0x8, 0x20, 0x0) 667.573696ms ago: executing program 3 (id=2602): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) 609.696851ms ago: executing program 2 (id=2603): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="020e0000100000000000000000000000030005000000000002000000ac1e000100000000000000000300060000000000020000000000000000000000000000000800120026"], 0x80}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f9}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 64) write(r1, &(0x7f0000000140)="24000000010006", 0x7) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r3 = socket(0xa, 0x3, 0x3a) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) (async) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd0, 0x0, 0x0) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) (async) r8 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0x98}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1000}) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_tracing={0x1a, 0x40, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x1, 0x4, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffc0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x16, &(0x7f0000000180)=""/22, 0xc3300, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x3, 0x5, 0x9}, 0x10, 0x12980, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xab77, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000600)=0xa00, &(0x7f0000000640)=r11}, 0x20) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000000c0)=0x20, 0x4) (async, rerun: 32) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000aa0005000000030000000060270b42001811000000000000000000000000000000000000000000000000000000ffffac1414aa00000000001890780400"/78], 0x4e) (rerun: 32) 476.865048ms ago: executing program 2 (id=2604): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000000f14020027bd7000fcdbdf250800450073727000080003000100000008e33d5118508f8f0800030000e54d7f46703db8c3340000000800010000000000089e04002000000008000300010000000800030001000044700b84f50f"], 0x50}, 0x1, 0x0, 0x0, 0x1000}, 0x4000801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fcdbdf250b00000008000300", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=r7], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000440)={&(0x7f0000000200), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r3, 0x104, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000048) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x3c, r2, 0xa11, 0xffffffff, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x126}]}, 0x3c}}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000007140100000000000000000005006000b8"], 0x18}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet(0xa, 0x801, 0x84) connect$inet(r11, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r11, 0x8) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f00000002c0)="3c75fd4dc586f2ae9206277f0443ec773ee63a8c6df14fe0183749000000000000", 0x21) r13 = accept4(r11, 0x0, 0x0, 0x0) r14 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r14, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r13, 0x84, 0x6d, &(0x7f0000000700)={r15}, &(0x7f0000000740)=0x8) setsockopt$inet6_tcp_int(r13, 0x6, 0x4, &(0x7f00000001c0)=0x5410, 0x4) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r10) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100dfffffffffffffff00000000", @ANYRES32=0x0, @ANYBLOB="0000000021000400080004000006000008001b"], 0x30}}, 0x0) 395.762761ms ago: executing program 0 (id=2605): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001a80)=[{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000004c0)="af1b3f1b205dad4ab38248541eb62165129e1210209045aa4f78bc81276c50a6d016c28087f3157d2364", 0x2a}, {&(0x7f0000000500)="6d87202237a75ac67aa150a62f55271985359ecfe8113ed49f37a4ef95d6d9667a10758b0f992025ec0b7f33da70f54f603199d85a2c709ce5bad007385804", 0x3f}, {&(0x7f0000000600)="fd3c34f687297c63c2ed81541b2fd0069ede3384d1510b67743c89856f53debfa70efe58c40fd9abc83bc715b9be5195951dc6e0ed6eac84eae8d2e170f3323d23605374391161394bf4f403f29fc05a3a17115bc2947ed04963c6e316d1cd73754bdb55632d2afd86d2aeee8b6eeecf280acbcfeaa282fe7858199b7ad23020ab31d9e6b776414a9c3f4ef69a76698c97210b8b5df9c9add283fd8a68a810deb669196c32e3bd66a62406ceadd69d08861e55a9b112cd0800907832bc4615877412ea6896b840d9c9a4e866ea4383a01703b848cac2b982d1ca6ba5457e1548191bb3ff7244ca889bab27e67d9801099d16c65d30e4e50844748f367e0910c3e466cd60303dea8fec2e395d49ae159fec8126bd0bca786534dbde2abbd6e885a98cbd82a0010dc58138d73f822119e890ab69ae85eaaad130f2f662955714a5060b417ea19f55e968967fc2d8e9b8a168e70051f1f9820a1cf95fe30ab19ff473789edafd07e159faf87e05ff362e7abe28ce23aa82e44c639871c1ffabff337a78838850120ed2a5486fdc1b01c6459dce96ad57f6e3c96abf77f55160f00bdd3d5160b3767ffe4ca16b0ec93c474882a5feef46995ecedc3134a0efd3c2a888baf9c69e0073ffa2d8eba5a2592cd0587b4b426c7257c5090e9126cdbd021e1fb12e91957ddd7ac47b44f96db2884da2eadac71cbc17ef00910e702e513e13f75068c38af50669796f4bf67571d56dadc7efbd2dfdf3fb9a51e522cb0975bff99e059f8b5b4537a0e4d50bc50358b9fb21e7aa20cd8093d2e502597428a62f6da6b0c6866bedabd3e70dd83614dc8ffd80324911397a457e61f92f69b497b5de9ddd887b6e5c45f89e4e7a13dbb73dd2a7fd6f2c096f5596847eed58def6d689bc819232832eac872aad2b7f50409451415870f6fc96f9bb772adfd04d3ee9a6f042d0beb92f2ebd5ec2699511bb2a22ee9914f43147c861128581df96b0bd935dfa621d7196e5a08a20c00edea3ebb35489e46821feeb57bb746578d379d802326102b8aebcf30457052b9c36499a402b3c8b8b5e2baffdc105ada27d903eb7bc570dabda23bd140760bc46cb5ac4324df919d657fe", 0x317}], 0x3, 0x0, 0x0, 0x4048848}], 0x1, 0x0) recvmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x3}, 0x10102) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000005c0)=[0x0], &(0x7f0000000940)=[0x0, 0x0], 0x0, 0x42, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0xcd, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) r3 = socket$kcm(0x2, 0x5, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x78, &(0x7f0000000040)=r4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000003080)=ANY=[@ANYBLOB="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", @ANYRESHEX=r3, @ANYRES8=r2, @ANYRES16=r2, @ANYRES16=0x0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0x923}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r6, 0x0, 0x7b, 0x5c, &(0x7f00000000c0)="50f56f47ccfcf24a1d5b900628e163110ac093736fca441e901d1a3ad8a392a1d5dac62775848ec161ccef57f4de25617e660095a295b79eb0067a5527c0ca5be9cbe09628d858be87c08301444bc3095137f08e5db04de7c32c4924b89b9c5f2a79c8d9d9f822c435fc2f2c9a04bc8a43163d747adfc70cd9bfb5", &(0x7f0000000140)=""/92, 0x4, 0x0, 0xb7, 0x45, &(0x7f0000000380)="1e67a2b6db4a5930da6fb3845cba2a85d1d65482db26bfa7cff2c693add9c43e8c0d0677021cc95f38c344db755bc5ec052d68fc489b5cc611f74eae46ae77dff3ac3edb6bde15a14fd864282963104529425fb62e298eedde04fce505ef34a2e7ea96d799c7ab7fb417d5803e9125852d72ff71cb19603bd08488353365c0f6befd462f51bf8e9d6636e0c8a5c82d252f87542dc5f903dbb5df0779867d332907fed07476fd97e8c71dada6e00543be014ffa8005932b", &(0x7f0000000440)="77844dc412da1d53f33e1d25bfb3f0878429a4ff7146ee499a96de06220102746ed4c13e146419fe5c51532d2942e447add3bbbedab3bc76df70f6f20fe61b865503fbed5a", 0x4, 0x0, 0x635c}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="180000001500010029bd7000fedbdf252d"], 0x18}}, 0x20000000) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000540)=r9, 0x4) 367.095705ms ago: executing program 3 (id=2606): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)={[{0x5b8fbe09be66e56b, 'cpuset'}, {0x2d, 'io'}, {0x2d, 'io'}, {0x2b, 'net'}, {0x2b, 'net_prio'}]}, 0x1f) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x7}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x20}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r5) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80001}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r6, 0x10, 0xffffffff, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}]}, 0x3c}}, 0x8000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x8}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5e4, 0x1, 0x1200000, 0x9, 0x8001, 0xe499}}]}}}]}, 0x78}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c25843", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 140.392084ms ago: executing program 3 (id=2607): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$HCIINQUIRY(r0, 0x400448dd, &(0x7f0000000240)={0x0, 0x0, "ebff00"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$phonet(0x23, 0x2, 0x1) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x9bce63e248f3680c}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r4, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r4, 0x0) mmap(&(0x7f000040b000/0x2000)=nil, 0x2000, 0xa, 0x12, r2, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400048c0}, 0x0) (async) ioctl$HCIINQUIRY(r0, 0x400448dd, &(0x7f0000000240)={0x0, 0x0, "ebff00"}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) socket$phonet(0x23, 0x2, 0x1) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x9bce63e248f3680c}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r4, 0x0) (async) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r4, 0x0) (async) mmap(&(0x7f000040b000/0x2000)=nil, 0x2000, 0xa, 0x12, r2, 0x0) (async) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) 62.325491ms ago: executing program 2 (id=2608): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t', 0x5) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000580)={r2, 0x7ff, 0x4, 0xfffffffd, 0x2, 0x5}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4010) recvmmsg(r5, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/178, 0xb2}, {&(0x7f0000000cc0)=""/261, 0x105}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x7243}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000500)=""/130, 0x82}, {&(0x7f0000000940)=""/238, 0xee}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000003e40)=""/4111, 0x100f}, {&(0x7f00000003c0)=""/101, 0x65}], 0x5}, 0x1452}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x22, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pipe(&(0x7f00000001c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f00000000c0)={r2, 0x7}, &(0x7f0000000100)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4080000000000007311be00000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r8, 0x20000002) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200000c5, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r9, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r7, 0x8}, 0x8) 0s ago: executing program 3 (id=2609): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="67d8901bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d3abc8a75ac1f30e53a0eff506f6e6b369ba6c5306e91acaa94e89d3bff4e52cd151235f3defff171c60b91c0c5aeb29736830a09b262dbe4c7ed149885a054de1d7ff5bcecd7a50061814ceefb", 0x9d}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fedb679328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e27252804059094a318c4cdeeddd5793a427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9", 0x3e4}], 0x2}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r1, 0x8b1b, &(0x7f0000000040)) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) recvmmsg(r0, &(0x7f0000005d40)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40000000, 0x0) kernel console output (not intermixed with test programs): link_parms(): no params data found [ 237.885120][T12249] xt_socket: unknown flags 0x2 [ 238.062251][T12258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.215103][T12266] netlink: 'syz.1.1487': attribute type 10 has an invalid length. [ 238.233434][T12267] netlink: 'syz.1.1487': attribute type 10 has an invalid length. [ 239.187599][ T5840] Bluetooth: hci3: command tx timeout [ 239.636254][T12015] veth0_vlan: entered promiscuous mode [ 239.682066][T12015] veth1_vlan: entered promiscuous mode [ 239.784485][T12015] veth0_macvtap: entered promiscuous mode [ 239.825258][T12015] veth1_macvtap: entered promiscuous mode [ 239.926073][T12015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.942709][T12287] sctp: [Deprecated]: syz.0.1492 (pid 12287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.942709][T12287] Use struct sctp_sack_info instead [ 239.960167][T12015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.970330][T12287] x_tables: duplicate underflow at hook 3 [ 240.014075][T12015] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.039886][T12015] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.053205][T12015] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.068834][T12015] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.090470][T12290] __nla_validate_parse: 7 callbacks suppressed [ 240.090487][T12290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1493'. [ 240.233275][T12269] infiniband syz2: set active [ 240.259925][T12269] infiniband syz2: added veth1_vlan [ 240.296073][T12269] syz2: rxe_create_cq: returned err = -12 [ 240.317116][T12269] infiniband syz2: Couldn't create ib_mad CQ [ 240.336781][ T3020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.351490][T12269] infiniband syz2: Couldn't open port 1 [ 240.357964][ T3020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.432533][T12269] RDS/IB: syz2: added [ 240.437145][T12269] smc: adding ib device syz2 with port count 1 [ 240.479659][ T3020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.487901][ T3020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.495748][T12269] smc: ib device syz2 port 1 has pnetid [ 240.690417][T12318] netlink: 'syz.3.1502': attribute type 10 has an invalid length. [ 240.738552][T12318] batman_adv: batadv0: Adding interface: team0 [ 240.744753][T12318] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.781874][T12318] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 240.826233][T12322] x_tables: duplicate underflow at hook 1 [ 240.915238][T12324] sctp: [Deprecated]: syz.2.1505 (pid 12324) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.915238][T12324] Use struct sctp_sack_info instead [ 240.956693][T12326] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1506'. [ 241.201876][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.376726][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.490654][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.614981][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.801901][ T13] bridge_slave_1: left allmulticast mode [ 241.810729][ T13] bridge_slave_1: left promiscuous mode [ 241.816534][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.834010][ T13] bridge_slave_0: left allmulticast mode [ 241.841366][ T13] bridge_slave_0: left promiscuous mode [ 241.847158][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.240455][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.252191][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.262582][ T13] bond0 (unregistering): Released all slaves [ 242.648662][ T13] hsr_slave_0: left promiscuous mode [ 242.654568][ T13] hsr_slave_1: left promiscuous mode [ 242.665053][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.672779][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.681697][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.690242][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.710873][ T13] veth1_macvtap: left promiscuous mode [ 242.716395][ T13] veth0_macvtap: left promiscuous mode [ 242.722531][ T13] veth1_vlan: left promiscuous mode [ 242.728085][ T13] veth0_vlan: left promiscuous mode [ 243.141799][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1513'. [ 243.431922][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 243.442128][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 243.455699][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 243.465215][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 243.479117][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 243.578065][ T13] team0 (unregistering): Port device team_slave_1 removed [ 243.618558][ T13] team0 (unregistering): Port device team_slave_0 removed [ 244.141657][T12375] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1518'. [ 244.372019][T12382] wg1: entered promiscuous mode [ 244.479471][T12395] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1525'. [ 244.510968][T12395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1525'. [ 244.753341][T12409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1528'. [ 244.753841][T12410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1528'. [ 244.972330][T12435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1532'. [ 245.029827][T12442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1531'. [ 245.034714][T12409] 8021q: adding VLAN 0 to HW filter on device bond7 [ 245.234115][T12430] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1531'. [ 245.252561][T12444] veth1_to_hsr: mtu less than device minimum [ 245.508571][ T5845] Bluetooth: hci3: command tx timeout [ 245.588783][T12368] chnl_net:caif_netlink_parms(): no params data found [ 245.599850][T12473] x_tables: duplicate underflow at hook 3 [ 245.813256][T12485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1542'. [ 245.845284][T12368] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.852812][T12368] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.860409][T12368] bridge_slave_0: entered allmulticast mode [ 245.868313][T12368] bridge_slave_0: entered promiscuous mode [ 245.892465][T12368] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.904864][T12368] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.937743][T12368] bridge_slave_1: entered allmulticast mode [ 245.945605][T12368] bridge_slave_1: entered promiscuous mode [ 246.042324][T12496] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1545'. [ 246.091975][T12368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.132123][T12368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.277331][T12368] team0: Port device team_slave_0 added [ 246.294494][T12368] team0: Port device team_slave_1 added [ 246.546188][T12368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.558822][T12368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.586264][T12368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.620258][T12531] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 246.634258][T12531] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 246.647323][T12527] pimreg: left allmulticast mode [ 246.675212][T12531] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 246.720706][T12368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.731257][T12368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.766362][T12368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.935521][T12550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1559'. [ 247.003457][T12368] hsr_slave_0: entered promiscuous mode [ 247.016593][T12368] hsr_slave_1: entered promiscuous mode [ 247.033008][T12368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.043005][T12368] Cannot create hsr debugfs directory [ 247.082969][T12562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.124660][T12562] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1563'. [ 247.402434][T12570] veth0: entered promiscuous mode [ 247.442347][T12569] veth0: left promiscuous mode [ 247.473930][T12584] tunl0: entered promiscuous mode [ 247.497050][T12584] netlink: 'syz.0.1568': attribute type 3 has an invalid length. [ 247.526921][T12584] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1568'. [ 247.575879][T12584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1568'. [ 247.601455][ T5845] Bluetooth: hci3: command tx timeout [ 247.646356][T12596] netlink: 'syz.1.1570': attribute type 1 has an invalid length. [ 247.655021][T12596] netlink: 'syz.1.1570': attribute type 3 has an invalid length. [ 247.662994][T12596] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1570'. [ 247.758864][T12594] netlink: 'syz.0.1568': attribute type 3 has an invalid length. [ 247.766788][T12594] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1568'. [ 247.785639][T12600] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 247.819219][T12605] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1572'. [ 247.853413][T12611] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 247.856869][T12609] netlink: 'syz.0.1573': attribute type 2 has an invalid length. [ 248.372886][T12629] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 248.496792][T12368] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 248.522048][T12368] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 248.545600][T12368] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 248.572534][T12368] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 248.863119][T12657] block nbd0: Unsupported socket: shutdown callout must be supported. [ 248.905294][T12677] netlink: 'syz.2.1587': attribute type 10 has an invalid length. [ 249.008911][T12368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.065380][T12368] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.091029][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.098244][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.143295][T12439] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.150501][T12439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.158913][T12691] sctp: [Deprecated]: syz.2.1590 (pid 12691) Use of struct sctp_assoc_value in delayed_ack socket option. [ 249.158913][T12691] Use struct sctp_sack_info instead [ 249.630552][T12368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.667674][ T5845] Bluetooth: hci3: command tx timeout [ 249.768604][T12724] tipc: New replicast peer: 255.255.255.255 [ 249.775486][T12724] tipc: Enabled bearer , priority 10 [ 250.054503][T12739] netlink: 'syz.2.1604': attribute type 24 has an invalid length. [ 250.066352][T12368] veth0_vlan: entered promiscuous mode [ 250.082223][T12368] veth1_vlan: entered promiscuous mode [ 250.118166][T12368] veth0_macvtap: entered promiscuous mode [ 250.131973][T12368] veth1_macvtap: entered promiscuous mode [ 250.159825][T12368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.183768][T12368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.199681][T12368] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.209196][T12368] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.238469][T12368] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.259155][T12368] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.286990][T12748] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 250.305326][T12750] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 250.446150][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.464196][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.528983][T12755] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 250.559750][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.571841][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.903170][T12774] __nla_validate_parse: 16 callbacks suppressed [ 250.903187][T12774] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1617'. [ 250.924207][T12774] netlink: zone id is out of range [ 250.929543][T12774] netlink: zone id is out of range [ 250.934926][T12774] netlink: zone id is out of range [ 250.947225][T12774] netlink: get zone limit has 8 unknown bytes [ 251.147168][T12781] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1619'. [ 251.470374][T12798] sctp: [Deprecated]: syz.3.1624 (pid 12798) Use of int in maxseg socket option. [ 251.470374][T12798] Use struct sctp_assoc_value instead [ 251.868503][T12439] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.922765][T12817] bridge4: entered promiscuous mode [ 251.944358][T12817] bridge4: entered allmulticast mode [ 252.314858][T12439] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.904333][T12439] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.966633][T12439] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.052194][T12439] bridge_slave_1: left allmulticast mode [ 253.058140][T12439] bridge_slave_1: left promiscuous mode [ 253.063859][T12439] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.073058][T12439] bridge_slave_0: left allmulticast mode [ 253.079134][T12439] bridge_slave_0: left promiscuous mode [ 253.084827][T12439] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.386321][T12439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.397168][T12439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.407904][T12439] bond0 (unregistering): Released all slaves [ 253.483428][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1629'. [ 253.493598][T12820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1629'. [ 253.847260][T12839] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1635'. [ 254.138987][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 254.146702][T12853] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1637'. [ 254.159187][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 254.168344][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 254.190896][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 254.202112][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 254.405222][T12439] hsr_slave_0: left promiscuous mode [ 254.417888][T12439] hsr_slave_1: left promiscuous mode [ 254.428180][T12439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.437461][T12439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.445594][T12439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.472139][T12439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.494930][T12863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1641'. [ 254.503027][T12439] veth1_macvtap: left promiscuous mode [ 254.509526][T12864] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1641'. [ 254.510666][T12439] veth0_macvtap: left promiscuous mode [ 254.524614][T12439] veth1_vlan: left promiscuous mode [ 254.530034][T12439] veth0_vlan: left promiscuous mode [ 254.965897][T12439] team0 (unregistering): Port device team_slave_1 removed [ 255.005398][T12439] team0 (unregistering): Port device team_slave_0 removed [ 255.586822][T12870] netlink: 'syz.2.1644': attribute type 9 has an invalid length. [ 255.665772][T12872] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1645'. [ 255.753354][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.950448][T12881] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 255.972297][T12881] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 256.115010][T12897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1652'. [ 256.125612][T12896] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1653'. [ 256.132701][T12899] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 256.300422][T12850] chnl_net:caif_netlink_parms(): no params data found [ 256.312862][ T5845] Bluetooth: hci3: command tx timeout [ 256.411295][T12912] FAULT_INJECTION: forcing a failure. [ 256.411295][T12912] name failslab, interval 1, probability 0, space 0, times 1 [ 256.438310][T12915] Bluetooth: MGMT ver 1.23 [ 256.446500][T12912] CPU: 1 UID: 0 PID: 12912 Comm: syz.3.1658 Not tainted 6.16.0-rc2-syzkaller-00163-gb993ea46b3b6 #0 PREEMPT(full) [ 256.446525][T12912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 256.446542][T12912] Call Trace: [ 256.446553][T12912] [ 256.446560][T12912] dump_stack_lvl+0x189/0x250 [ 256.446588][T12912] ? __pfx____ratelimit+0x10/0x10 [ 256.446611][T12912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.446633][T12912] ? __pfx__printk+0x10/0x10 [ 256.446657][T12912] ? __pfx___might_resched+0x10/0x10 [ 256.446683][T12912] should_fail_ex+0x414/0x560 [ 256.446715][T12912] should_failslab+0xa8/0x100 [ 256.446733][T12912] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 256.446749][T12912] ? __alloc_skb+0x112/0x2d0 [ 256.446770][T12912] __alloc_skb+0x112/0x2d0 [ 256.446792][T12912] netlink_sendmsg+0x5c6/0xb30 [ 256.446821][T12912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.446843][T12912] ? aa_sock_msg_perm+0x94/0x160 [ 256.446866][T12912] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 256.446886][T12912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.446905][T12912] __sock_sendmsg+0x219/0x270 [ 256.446930][T12912] ____sys_sendmsg+0x505/0x830 [ 256.446954][T12912] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.446983][T12912] ? import_iovec+0x74/0xa0 [ 256.447004][T12912] ___sys_sendmsg+0x21f/0x2a0 [ 256.447025][T12912] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.447080][T12912] ? __fget_files+0x2a/0x420 [ 256.447097][T12912] ? __fget_files+0x3a0/0x420 [ 256.447125][T12912] __x64_sys_sendmsg+0x19b/0x260 [ 256.447147][T12912] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 256.447176][T12912] ? __pfx_ksys_write+0x10/0x10 [ 256.447190][T12912] ? rcu_is_watching+0x15/0xb0 [ 256.447218][T12912] ? do_syscall_64+0xbe/0x3b0 [ 256.447238][T12912] do_syscall_64+0xfa/0x3b0 [ 256.447252][T12912] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.447274][T12912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.447290][T12912] ? clear_bhb_loop+0x60/0xb0 [ 256.447309][T12912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.447325][T12912] RIP: 0033:0x7faefe38e929 [ 256.447350][T12912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.447361][T12912] RSP: 002b:00007faeff1d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.447381][T12912] RAX: ffffffffffffffda RBX: 00007faefe5b5fa0 RCX: 00007faefe38e929 [ 256.447392][T12912] RDX: 0000000000000000 RSI: 00002000000018c0 RDI: 000000000000000b [ 256.447402][T12912] RBP: 00007faeff1d8090 R08: 0000000000000000 R09: 0000000000000000 [ 256.447412][T12912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.447421][T12912] R13: 0000000000000000 R14: 00007faefe5b5fa0 R15: 00007fff4c1f4308 [ 256.447444][T12912] [ 256.460386][T12915] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1659'. [ 256.735551][T12850] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.743875][T12850] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.756128][T12850] bridge_slave_0: entered allmulticast mode [ 256.764606][T12850] bridge_slave_0: entered promiscuous mode [ 256.778280][T12850] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.785691][T12850] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.793645][T12850] bridge_slave_1: entered allmulticast mode [ 256.801671][T12850] bridge_slave_1: entered promiscuous mode [ 256.862217][T12850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.879088][T12850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.911104][T12923] xt_NFQUEUE: number of total queues is 0 [ 256.953162][T12850] team0: Port device team_slave_0 added [ 256.967248][T12850] team0: Port device team_slave_1 added [ 257.020819][T12927] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1664'. [ 257.036671][T12850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.044912][T12850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.072049][T12850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.091647][T12927] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 257.096024][T12850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.117495][T12850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.170364][T12850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.261050][T12850] hsr_slave_0: entered promiscuous mode [ 257.268920][T12850] hsr_slave_1: entered promiscuous mode [ 257.276062][T12850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.284645][T12850] Cannot create hsr debugfs directory [ 257.455589][T12943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1669'. [ 257.724482][T12952] "syz.3.1673" (12952) uses obsolete ecb(arc4) skcipher [ 257.885392][T12969] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1678'. [ 257.925247][T12969] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 257.941638][T12974] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 1, id = 0 [ 258.112430][T12850] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 258.126022][T12850] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 258.174369][T12850] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 258.197336][T12850] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 258.372367][T12999] netlink: 'syz.1.1685': attribute type 3 has an invalid length. [ 258.388279][ T5845] Bluetooth: hci3: command tx timeout [ 258.388725][T12999] netlink: 'syz.1.1685': attribute type 1 has an invalid length. [ 258.402196][T13002] netem: incorrect gi model size [ 258.408374][T13002] netem: change failed [ 258.451547][T12850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.500046][T12850] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.512158][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.519399][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.554040][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.561354][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.598341][T13009] netlink: 'syz.0.1689': attribute type 1 has an invalid length. [ 258.606190][T13009] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1689'. [ 258.616190][T13009] netlink: 'syz.0.1689': attribute type 1 has an invalid length. [ 258.837266][T13018] bond8: entered promiscuous mode [ 258.863400][T13018] bond8: entered allmulticast mode [ 258.870561][T13018] 8021q: adding VLAN 0 to HW filter on device bond8 [ 258.907117][T13033] block nbd0: Unsupported socket: shutdown callout must be supported. [ 259.079787][T13041] netlink: 'syz.2.1699': attribute type 1 has an invalid length. [ 259.141600][T13047] netlink: 'syz.1.1700': attribute type 1 has an invalid length. [ 259.144322][T13041] 8021q: adding VLAN 0 to HW filter on device bond8 [ 259.175939][T13047] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1700'. [ 259.215424][T13041] bond8: (slave gretap1): making interface the new active one [ 259.225691][T13041] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 259.576159][T13055] netlink: 'syz.1.1704': attribute type 12 has an invalid length. [ 259.584370][T13076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1707'. [ 259.676208][T12850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.712393][T13078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1708'. [ 260.422482][T12850] veth0_vlan: entered promiscuous mode [ 260.480931][ T5845] Bluetooth: hci3: command tx timeout [ 260.500560][T12850] veth1_vlan: entered promiscuous mode [ 260.546649][T12850] veth0_macvtap: entered promiscuous mode [ 260.561408][T12850] veth1_macvtap: entered promiscuous mode [ 260.586042][T12850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.631394][T12850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.660085][T12850] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.675811][T12850] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.684966][T12850] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.693771][T12850] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.730068][T13141] netlink: 'syz.3.1724': attribute type 16 has an invalid length. [ 260.768746][T13141] netlink: 'syz.3.1724': attribute type 17 has an invalid length. [ 260.832497][T13146] blkio.reset_stats is deprecated [ 260.853308][T13146] openvswitch: netlink: IPv4 tun info is not correct [ 260.914335][T13150] netlink: 'syz.0.1725': attribute type 11 has an invalid length. [ 260.933665][T13150] netlink: 'syz.0.1725': attribute type 4 has an invalid length. [ 260.950382][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.962711][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.061366][ T9219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.098953][ T9219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.182217][T13153] tap0: tun_chr_ioctl cmd 2148553947 [ 261.201479][T13161] __nla_validate_parse: 4 callbacks suppressed [ 261.201508][T13161] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1729'. [ 261.514238][T13184] netlink: 'syz.2.1737': attribute type 1 has an invalid length. [ 261.558884][T13189] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1738'. [ 261.559906][T13184] 8021q: adding VLAN 0 to HW filter on device bond9 [ 261.699649][T13195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1741'. [ 261.712694][T13196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1739'. [ 261.916219][T13208] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1744'. [ 261.943372][ T1160] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 261.953402][ T1160] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 261.967670][ T5959] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 262.111971][T13220] Cannot find del_set index 5 as target [ 262.117248][T13221] dvmrp0: entered allmulticast mode [ 262.187614][ T5904] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 262.232291][T13233] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 262.320836][T13241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1753'. [ 262.415210][T13245] FAULT_INJECTION: forcing a failure. [ 262.415210][T13245] name failslab, interval 1, probability 0, space 0, times 0 [ 262.427606][ T9219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.442508][ T9219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.448551][T13245] CPU: 0 UID: 0 PID: 13245 Comm: syz.3.1756 Not tainted 6.16.0-rc2-syzkaller-00163-gb993ea46b3b6 #0 PREEMPT(full) [ 262.448579][T13245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 262.448589][T13245] Call Trace: [ 262.448596][T13245] [ 262.448604][T13245] dump_stack_lvl+0x189/0x250 [ 262.448631][T13245] ? __pfx____ratelimit+0x10/0x10 [ 262.448655][T13245] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.448677][T13245] ? __pfx__printk+0x10/0x10 [ 262.448700][T13245] ? __pfx___might_resched+0x10/0x10 [ 262.448721][T13245] ? fs_reclaim_acquire+0x7d/0x100 [ 262.448745][T13245] should_fail_ex+0x414/0x560 [ 262.448770][T13245] should_failslab+0xa8/0x100 [ 262.448789][T13245] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 262.448806][T13245] ? __alloc_skb+0x112/0x2d0 [ 262.448828][T13245] __alloc_skb+0x112/0x2d0 [ 262.448850][T13245] netlink_ack+0x146/0xa50 [ 262.448866][T13245] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 262.448882][T13245] ? ref_tracker_free+0x63a/0x7d0 [ 262.448901][T13245] ? __copy_skb_header+0xa7/0x550 [ 262.448923][T13245] ? __pfx_ref_tracker_free+0x10/0x10 [ 262.448943][T13245] ? __skb_clone+0x63/0x7a0 [ 262.448969][T13245] netlink_rcv_skb+0x28c/0x470 [ 262.448989][T13245] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 262.449008][T13245] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 262.449038][T13245] ? netlink_deliver_tap+0x2e/0x1b0 [ 262.449056][T13245] ? netlink_deliver_tap+0x2e/0x1b0 [ 262.449079][T13245] netlink_unicast+0x758/0x8d0 [ 262.449107][T13245] netlink_sendmsg+0x805/0xb30 [ 262.449133][T13245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.449155][T13245] ? aa_sock_msg_perm+0x94/0x160 [ 262.449176][T13245] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 262.449196][T13245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.449215][T13245] __sock_sendmsg+0x219/0x270 [ 262.449242][T13245] ____sys_sendmsg+0x505/0x830 [ 262.449266][T13245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.449295][T13245] ? import_iovec+0x74/0xa0 [ 262.449315][T13245] ___sys_sendmsg+0x21f/0x2a0 [ 262.449337][T13245] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.449402][T13245] ? __fget_files+0x2a/0x420 [ 262.449419][T13245] ? __fget_files+0x3a0/0x420 [ 262.449446][T13245] __x64_sys_sendmsg+0x19b/0x260 [ 262.449468][T13245] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 262.449497][T13245] ? __pfx_ksys_write+0x10/0x10 [ 262.449510][T13245] ? rcu_is_watching+0x15/0xb0 [ 262.449538][T13245] ? do_syscall_64+0xbe/0x3b0 [ 262.449557][T13245] do_syscall_64+0xfa/0x3b0 [ 262.449571][T13245] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.449592][T13245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.449608][T13245] ? clear_bhb_loop+0x60/0xb0 [ 262.449628][T13245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.449643][T13245] RIP: 0033:0x7faefe38e929 [ 262.449658][T13245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.449671][T13245] RSP: 002b:00007faeff1d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.449690][T13245] RAX: ffffffffffffffda RBX: 00007faefe5b5fa0 RCX: 00007faefe38e929 [ 262.449702][T13245] RDX: 0000000000000000 RSI: 00002000000018c0 RDI: 000000000000000b [ 262.449713][T13245] RBP: 00007faeff1d8090 R08: 0000000000000000 R09: 0000000000000000 [ 262.449723][T13245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.449733][T13245] R13: 0000000000000000 R14: 00007faefe5b5fa0 R15: 00007fff4c1f4308 [ 262.449760][T13245] [ 262.484096][T13249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1754'. [ 262.556226][ T5840] Bluetooth: hci3: command tx timeout [ 262.814596][ T5904] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 262.961556][T13263] netlink: 'syz.3.1759': attribute type 1 has an invalid length. [ 262.978885][T13263] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1759'. [ 262.997778][T13263] netlink: 'syz.3.1759': attribute type 1 has an invalid length. [ 263.164918][T13268] netlink: 'syz.3.1762': attribute type 10 has an invalid length. [ 263.409770][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1767'. [ 263.518106][T13293] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1770'. [ 263.799060][T13302] erspan0: entered promiscuous mode [ 263.804317][T13302] erspan0: entered allmulticast mode [ 263.937981][T13308] 0ªX¹¦D: left promiscuous mode [ 263.943137][T13308] bridge0: port 1(30ªX¹¦D) entered disabled state [ 264.028602][T13308] bond0: (slave wlan1): Releasing backup interface [ 264.074926][ T5896] srz1: Port: 1 Link DOWN [ 264.098049][ T5896] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 264.337583][ T5896] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 264.766865][T13365] batadv0: entered promiscuous mode [ 264.789049][T13365] batadv0: left promiscuous mode [ 265.066129][T13382] sch_tbf: burst 5 is lower than device lo mtu (18) ! [ 265.228481][T13391] geneve0: entered promiscuous mode [ 265.300543][T13400] netlink: 'syz.3.1805': attribute type 30 has an invalid length. [ 265.326284][T13400] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 265.352412][T13400] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 266.067540][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 266.435185][T13470] x_tables: duplicate underflow at hook 2 [ 266.439532][T13472] x_tables: duplicate entry at hook 3 [ 266.512099][T13475] x_tables: duplicate entry at hook 3 [ 266.755822][T13488] __nla_validate_parse: 36 callbacks suppressed [ 266.755839][T13488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1829'. [ 266.809821][T13490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1830'. [ 266.854145][T13492] pim6reg: entered allmulticast mode [ 266.863314][T13492] pim6reg: left allmulticast mode [ 266.890547][T13497] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 266.963814][T13501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.016830][T13504] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1835'. [ 267.241924][T13517] delete_channel: no stack [ 267.494497][T13533] netlink: zone id is out of range [ 267.505222][T13533] netlink: zone id is out of range [ 267.524307][T13533] netlink: zone id is out of range [ 267.529947][T13533] netlink: zone id is out of range [ 267.535235][T13533] netlink: zone id is out of range [ 267.546639][T13533] netlink: zone id is out of range [ 267.552597][T13535] netlink: 'syz.2.1844': attribute type 32 has an invalid length. [ 267.553313][T13533] netlink: zone id is out of range [ 267.566137][T13533] netlink: zone id is out of range [ 267.571897][T13533] netlink: zone id is out of range [ 267.577178][T13533] netlink: zone id is out of range [ 267.581077][T13535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1844'. [ 267.599626][T13535] (unnamed net_device) (uninitialized): option coupled_control: invalid value (12) [ 267.695073][T13538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1845'. [ 267.708625][T13538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1845'. [ 268.007623][T13552] pimreg3: entered allmulticast mode [ 268.203625][T13564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1854'. [ 268.521425][T13582] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1861'. [ 269.063037][T13613] netlink: 'syz.1.1873': attribute type 1 has an invalid length. [ 269.085261][T13613] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1873'. [ 269.102669][T13613] netlink: 'syz.1.1873': attribute type 1 has an invalid length. [ 269.126451][T13615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1872'. [ 269.147642][T13617] netlink: 'syz.3.1874': attribute type 10 has an invalid length. [ 269.159384][T13619] bridge_slave_0: default FDB implementation only supports local addresses [ 269.195639][T13617] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 269.206947][T13617] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 269.215950][T13619] bridge_slave_0: default FDB implementation only supports local addresses [ 269.522805][T13650] bridge7: entered promiscuous mode [ 269.543947][T13650] bridge7: entered allmulticast mode [ 269.676516][T13663] macvlan3: entered promiscuous mode [ 269.686804][T13663] macvlan3: entered allmulticast mode [ 269.775950][T13665] veth9: entered promiscuous mode [ 270.175002][T13699] netlink: 'syz.0.1899': attribute type 1 has an invalid length. [ 270.543376][ T5840] Bluetooth: hci4: link tx timeout [ 270.551310][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 270.933762][T13730] xt_CT: You must specify a L4 protocol and not use inversions on it [ 270.998705][T13733] netlink: 'syz.1.1911': attribute type 4 has an invalid length. [ 271.420222][T13765] dvmrp0: left allmulticast mode [ 271.950315][T13790] sctp: [Deprecated]: syz.1.1928 (pid 13790) Use of int in maxseg socket option. [ 271.950315][T13790] Use struct sctp_assoc_value instead [ 272.189661][T13800] __nla_validate_parse: 9 callbacks suppressed [ 272.189680][T13800] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1931'. [ 272.234041][T13800] netlink: 'syz.2.1931': attribute type 7 has an invalid length. [ 272.282107][T13800] netlink: 'syz.2.1931': attribute type 8 has an invalid length. [ 272.308260][T13800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1931'. [ 272.405902][T13808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1933'. [ 272.632942][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 272.640176][T13816] nbd: must specify an index to disconnect [ 272.803982][T13823] Cannot find set identified by id 4 to match [ 272.824097][T13823] Cannot find set identified by id 4 to match [ 272.950185][T13814] net_ratelimit: 18 callbacks suppressed [ 272.950202][T13814] openvswitch: netlink: Key type 16134 is out of range max 32 [ 273.222806][T13838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1943'. [ 273.456200][T13851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1945'. [ 273.513972][T13856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1946'. [ 273.583181][T13858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1948'. [ 273.623183][T13858] xt_TPROXY: Can be used only with -p tcp or -p udp [ 273.698242][T13867] sctp: [Deprecated]: syz.1.1950 (pid 13867) Use of int in max_burst socket option deprecated. [ 273.698242][T13867] Use struct sctp_assoc_value instead [ 273.976873][T13889] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1958'. [ 274.091124][T13888] syz_tun: entered allmulticast mode [ 274.099355][T13888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1957'. [ 274.192004][T13887] syz_tun: left allmulticast mode [ 274.199177][T13903] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1962'. [ 274.210620][T13903] 8021q: VLANs not supported on sit0 [ 274.307563][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 274.411608][T13915] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 274.428116][T13915] tipc: Enabled bearer , priority 10 [ 274.547739][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 274.817438][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 275.029940][T13948] bridge0: port 2(gretap0) entered blocking state [ 275.039016][T13948] bridge0: port 2(gretap0) entered disabled state [ 275.045993][T13948] gretap0: entered allmulticast mode [ 275.079572][T13948] gretap0: left allmulticast mode [ 275.242185][ T5920] hid-generic 0005:0C45:1012.0002: item fetching failed at offset 0/1 [ 275.270292][ T5920] hid-generic 0005:0C45:1012.0002: probe with driver hid-generic failed with error -22 [ 275.347446][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 275.791112][T14011] netlink: 'syz.3.1997': attribute type 10 has an invalid length. [ 275.826792][T14011] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 276.314781][T14049] netlink: 'syz.0.2010': attribute type 7 has an invalid length. [ 276.388465][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 276.416806][T14055] netlink: 'syz.2.2013': attribute type 1 has an invalid length. [ 276.429064][T14055] netlink: 'syz.2.2013': attribute type 3 has an invalid length. [ 276.436911][T14055] NCSI netlink: No device for ifindex 131080 [ 276.513944][T14065] Bluetooth: MGMT ver 1.23 [ 276.819755][T14084] gtp1: entered promiscuous mode [ 276.869821][T12439] wlan1: Trigger new scan to find an IBSS to join [ 277.136051][T14109] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan0, syncid = 3, id = 0 [ 277.154455][T14108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.203027][T14111] __nla_validate_parse: 19 callbacks suppressed [ 277.203048][T14111] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2031'. [ 277.291223][T14116] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2033'. [ 277.427573][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 277.503108][T14130] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2038'. [ 277.560327][T14132] netlink: 'syz.0.2036': attribute type 13 has an invalid length. [ 277.826001][T14146] ieee802154 phy0 wpan0: encryption failed: -22 [ 277.826883][T14148] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 277.919161][T14156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2045'. [ 277.966702][T14158] tipc: Enabling of bearer rejected, failed to enable media [ 278.123351][T14167] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2049'. [ 278.135861][T14170] syz.3.2048: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 278.152760][T14170] CPU: 1 UID: 0 PID: 14170 Comm: syz.3.2048 Not tainted 6.16.0-rc2-syzkaller-00163-gb993ea46b3b6 #0 PREEMPT(full) [ 278.152789][T14170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 278.152801][T14170] Call Trace: [ 278.152808][T14170] [ 278.152817][T14170] dump_stack_lvl+0x189/0x250 [ 278.152851][T14170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.152877][T14170] ? __pfx__printk+0x10/0x10 [ 278.152896][T14170] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 278.152915][T14170] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 278.152937][T14170] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 278.152959][T14170] warn_alloc+0x214/0x310 [ 278.152979][T14170] ? stack_depot_save_flags+0x40/0x900 [ 278.153005][T14170] ? __pfx_warn_alloc+0x10/0x10 [ 278.153027][T14170] ? kasan_save_track+0x4f/0x80 [ 278.153052][T14170] ? xskq_create+0x56/0x170 [ 278.153074][T14170] ? xsk_init_queue+0xb0/0x110 [ 278.153094][T14170] ? xsk_setsockopt+0x43f/0x710 [ 278.153113][T14170] ? do_sock_setsockopt+0x257/0x3e0 [ 278.153131][T14170] ? __x64_sys_setsockopt+0x18b/0x220 [ 278.153149][T14170] ? do_syscall_64+0xfa/0x3b0 [ 278.153165][T14170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.153191][T14170] __vmalloc_node_range_noprof+0x125/0x12f0 [ 278.153241][T14170] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 278.153266][T14170] ? __kasan_kmalloc+0x93/0xb0 [ 278.153287][T14170] vmalloc_user_noprof+0xad/0xf0 [ 278.153306][T14170] ? xskq_create+0xbf/0x170 [ 278.153329][T14170] xskq_create+0xbf/0x170 [ 278.153355][T14170] xsk_init_queue+0xb0/0x110 [ 278.153380][T14170] xsk_setsockopt+0x43f/0x710 [ 278.153405][T14170] ? __pfx_xsk_setsockopt+0x10/0x10 [ 278.153425][T14170] ? __lock_acquire+0xab9/0xd20 [ 278.153458][T14170] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 278.153478][T14170] ? __pfx_xsk_setsockopt+0x10/0x10 [ 278.153502][T14170] do_sock_setsockopt+0x257/0x3e0 [ 278.153526][T14170] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 278.153551][T14170] ? __fget_files+0x2a/0x420 [ 278.153579][T14170] __x64_sys_setsockopt+0x18b/0x220 [ 278.153607][T14170] do_syscall_64+0xfa/0x3b0 [ 278.153621][T14170] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.153652][T14170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.153670][T14170] ? clear_bhb_loop+0x60/0xb0 [ 278.153691][T14170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.153708][T14170] RIP: 0033:0x7faefe38e929 [ 278.153725][T14170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.153740][T14170] RSP: 002b:00007faeff1b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 278.153760][T14170] RAX: ffffffffffffffda RBX: 00007faefe5b6080 RCX: 00007faefe38e929 [ 278.153773][T14170] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 278.153784][T14170] RBP: 00007faefe410b39 R08: 0000000000000004 R09: 0000000000000000 [ 278.153795][T14170] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.153807][T14170] R13: 0000000000000000 R14: 00007faefe5b6080 R15: 00007fff4c1f4308 [ 278.153837][T14170] [ 278.153856][T14170] Mem-Info: [ 278.260350][T14162] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2048'. [ 278.268344][T14170] active_anon:4627 inactive_anon:0 isolated_anon:0 [ 278.268344][T14170] active_file:1501 inactive_file:39934 isolated_file:0 [ 278.268344][T14170] unevictable:768 dirty:70 writeback:0 [ 278.268344][T14170] slab_reclaimable:11941 slab_unreclaimable:117338 [ 278.268344][T14170] mapped:29137 shmem:1368 pagetables:1056 [ 278.268344][T14170] sec_pagetables:0 bounce:0 [ 278.268344][T14170] kernel_misc_reclaimable:0 [ 278.268344][T14170] free:1309163 free_pcp:14227 free_cma:0 [ 278.301947][T14162] netlink: 192 bytes leftover after parsing attributes in process `syz.3.2048'. [ 278.303326][T14170] Node 0 active_anon:18508kB inactive_anon:0kB active_file:6004kB inactive_file:159536kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116548kB dirty:280kB writeback:0kB shmem:3936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13148kB pagetables:4096kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 278.477538][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 278.486159][T14170] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 278.608176][T14170] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 278.655098][T14170] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 278.676474][T14170] Node 0 DMA32 free:1319756kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18064kB inactive_anon:0kB active_file:6004kB inactive_file:157704kB unevictable:1536kB writepending:280kB present:3129332kB managed:2561020kB mlocked:0kB bounce:0kB free_pcp:37512kB local_pcp:20832kB free_cma:0kB [ 278.717270][T14184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.734002][T14170] lowmem_reserve[]: 0 0 1 1 1 [ 278.740335][T14170] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 278.771262][T14170] lowmem_reserve[]: 0 0 0 0 0 [ 278.778128][T14170] Node 1 Normal free:3902480kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19556kB local_pcp:10400kB free_cma:0kB [ 278.811320][T14170] lowmem_reserve[]: 0 0 0 0 0 [ 278.816483][T14170] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 278.829833][T14170] Node 0 DMA32: 2183*4kB (UM) 753*8kB (UM) 632*16kB (UM) 338*32kB (UME) 86*64kB (UM) 6*128kB (UME) 3*256kB (UE) 4*512kB (UME) 3*1024kB (UM) 7*2048kB (UM) 307*4096kB (UM) = 1319652kB [ 278.851029][T14170] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 278.852633][T14188] netlink: 'syz.2.2056': attribute type 3 has an invalid length. [ 278.874438][T14170] Node 1 Normal: 182*4kB (UE) 45*8kB (UME) 43*16kB (UME) 63*32kB (UME) 29*64kB (UME) 6*128kB (UME) 3*256kB (ME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 949*4096kB (M) = 3902480kB [ 278.920852][T14170] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 278.932014][T14170] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 278.949843][T14170] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 278.964195][T14170] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 278.976039][T14170] 42799 total pagecache pages [ 278.982282][T14170] 0 pages in swap cache [ 278.986522][T14170] Free swap = 124996kB [ 278.992655][T14170] Total swap = 124996kB [ 278.996883][T14170] 2097051 pages RAM [ 279.001645][T14170] 0 pages HighMem/MovableOnly [ 279.006689][T14170] 424690 pages reserved [ 279.013228][T14170] 0 pages cma reserved [ 279.076940][T14195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2059'. [ 279.507528][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 279.561851][T14231] netlink: 'syz.3.2069': attribute type 10 has an invalid length. [ 279.571865][T14231] batman_adv: batadv0: Removing interface: team0 [ 279.738861][T14240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2072'. [ 279.783416][T14242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2073'. [ 279.865601][T14243] bond3: entered promiscuous mode [ 279.881135][T14243] 8021q: adding VLAN 0 to HW filter on device bond3 [ 279.908548][ T9219] wlan1: Trigger new scan to find an IBSS to join [ 279.922888][T14242] bond4: entered promiscuous mode [ 279.929251][T14242] 8021q: adding VLAN 0 to HW filter on device bond4 [ 280.385093][T14287] netlink: 'syz.1.2089': attribute type 4 has an invalid length. [ 280.402139][T14287] netlink: 'syz.1.2089': attribute type 1 has an invalid length. [ 280.448932][T14290] IPv6: NLM_F_REPLACE set, but no existing node found! [ 280.512001][T14293] netlink: 'syz.3.2092': attribute type 7 has an invalid length. [ 280.547516][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 280.808617][ T1098] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 281.246328][T14348] SET target dimension over the limit! [ 281.440848][T14360] validate_nla: 34 callbacks suppressed [ 281.440866][T14360] netlink: 'syz.2.2115': attribute type 6 has an invalid length. [ 281.456500][T14358] bridge9: entered promiscuous mode [ 281.460122][T14361] netlink: 'syz.2.2115': attribute type 6 has an invalid length. [ 281.477562][T14358] bridge9: entered allmulticast mode [ 281.587535][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 281.688212][T14375] macsec0: entered promiscuous mode [ 281.695092][T14375] macsec0: entered allmulticast mode [ 282.264664][T14414] __nla_validate_parse: 16 callbacks suppressed [ 282.264681][T14414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2129'. [ 282.627561][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 282.706892][T14448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2136'. [ 282.831881][T14454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2137'. [ 282.841355][T14456] netlink: 'syz.2.2138': attribute type 3 has an invalid length. [ 283.083319][T14463] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.223726][T14463] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.289825][T14478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2144'. [ 283.325151][T14463] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.345450][T14480] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 283.388768][T14463] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.555782][T14463] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.605437][T14463] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.646413][T14463] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.665379][T14490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2148'. [ 283.670383][T14487] gtp0: entered promiscuous mode [ 283.679521][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 283.735543][T14463] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.033118][T14512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2152'. [ 284.050510][T14513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.305457][T14524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2159'. [ 284.375908][T14526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2160'. [ 284.462825][T14531] netlink: 'syz.1.2162': attribute type 13 has an invalid length. [ 284.472185][T14531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2162'. [ 284.486446][T14531] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2162'. [ 284.707740][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 284.710830][T14542] block nbd0: server does not support multiple connections per device. [ 284.731451][T14542] block nbd0: shutting down sockets [ 284.991099][T14568] veth0: entered promiscuous mode [ 285.157701][T14555] veth0: left promiscuous mode [ 285.747621][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 285.850335][T14616] netlink: 'syz.2.2185': attribute type 23 has an invalid length. [ 286.013780][T14626] netlink: 'syz.3.2189': attribute type 10 has an invalid length. [ 286.028115][T14627] netlink: 'syz.3.2189': attribute type 10 has an invalid length. [ 286.047535][T14627] veth0_vlan: entered allmulticast mode [ 286.056600][T14630] netlink: 'syz.2.2190': attribute type 11 has an invalid length. [ 286.059579][T14627] tipc: Resetting bearer [ 286.085758][T14628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.103908][T14627] veth0_vlan: left promiscuous mode [ 286.135530][T14627] veth0_vlan: entered promiscuous mode [ 286.151931][T14638] ipt_REJECT: TCP_RESET invalid for non-tcp [ 286.164281][T14627] team0: Device veth0_vlan failed to register rx_handler [ 286.174877][T14627] tipc: Resetting bearer [ 286.201210][T14626] veth0_vlan: left promiscuous mode [ 286.207655][T14626] veth0_vlan: entered promiscuous mode [ 286.240312][T14626] team0: Device veth0_vlan failed to register rx_handler [ 286.250220][T14626] tipc: Resetting bearer [ 286.267137][T14640] bridge: RTM_NEWNEIGH with invalid ether address [ 286.289533][T14642] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 286.318769][T14642] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 286.475414][T14654] netlink: 'syz.3.2199': attribute type 1 has an invalid length. [ 286.556911][T14654] 8021q: adding VLAN 0 to HW filter on device bond6 [ 286.609538][T14661] 8021q: adding VLAN 0 to HW filter on device bond6 [ 286.628389][T14661] bond6: (slave vti0): The slave device specified does not support setting the MAC address [ 286.693535][T14661] bond6: (slave vti0): Error -95 calling set_mac_address [ 286.787825][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 287.169203][T14687] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 287.759714][T14710] netlink: 'syz.1.2215': attribute type 1 has an invalid length. [ 287.824064][T14710] bond10: entered promiscuous mode [ 287.836903][T14710] 8021q: adding VLAN 0 to HW filter on device bond10 [ 287.837537][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 287.890133][T14716] 8021q: adding VLAN 0 to HW filter on device bond11 [ 287.899063][T14716] bond10: (slave bond11): making interface the new active one [ 287.906549][T14716] bond11: entered promiscuous mode [ 287.912990][T14716] bond10: (slave bond11): Enslaving as an active interface with an up link [ 287.924864][T14726] __nla_validate_parse: 6 callbacks suppressed [ 287.924880][T14726] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2217'. [ 287.948674][T14710] xfrm2: entered allmulticast mode [ 287.977043][T14718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2218'. [ 287.992823][T14715] C: renamed from lo [ 288.021057][T14715] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 288.045481][T14718] sctp: [Deprecated]: syz.3.2218 (pid 14718) Use of int in max_burst socket option. [ 288.045481][T14718] Use struct sctp_assoc_value instead [ 288.063413][T14715] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2217'. [ 288.348232][T14750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2228'. [ 288.410996][T14750] netlink: 'syz.2.2228': attribute type 1 has an invalid length. [ 288.422027][T14750] netlink: 'syz.2.2228': attribute type 1 has an invalid length. [ 288.511588][T14756] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2230'. [ 288.565087][T14758] netlink: 'syz.1.2229': attribute type 4 has an invalid length. [ 288.655631][T14767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2233'. [ 288.655935][T14762] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 288.670776][T14767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2233'. [ 288.777119][T14773] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2234'. [ 288.799905][T14772] netlink: 'syz.2.2236': attribute type 1 has an invalid length. [ 288.831601][T14772] netlink: 'syz.2.2236': attribute type 10 has an invalid length. [ 288.847241][T14772] netlink: 'syz.2.2236': attribute type 4 has an invalid length. [ 288.855582][T14772] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2236'. [ 288.867406][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 288.886996][T14778] ieee802154 phy0 wpan0: encryption failed: -22 [ 289.249095][T14806] netlink: 'syz.3.2246': attribute type 2 has an invalid length. [ 289.326449][T14812] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2249'. [ 289.665809][T14831] sctp: [Deprecated]: syz.3.2253 (pid 14831) Use of int in max_burst socket option deprecated. [ 289.665809][T14831] Use struct sctp_assoc_value instead [ 289.763239][T14836] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.771477][T14838] sctp: [Deprecated]: syz.1.2255 (pid 14838) Use of int in max_burst socket option deprecated. [ 289.771477][T14838] Use struct sctp_assoc_value instead [ 289.781320][T14836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.856707][T14841] netlink: 'syz.1.2255': attribute type 5 has an invalid length. [ 289.907790][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 290.474898][T14883] openvswitch: netlink: IPv4 tun info is not correct [ 290.714721][T14910] batadv0: Device is already in use. [ 290.947934][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 290.947996][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 291.171440][T14947] pim6reg1: entered promiscuous mode [ 291.190128][T14947] pim6reg1: entered allmulticast mode [ 291.588501][T14961] netlink: 'syz.3.2282': attribute type 11 has an invalid length. [ 291.610537][T14961] validate_nla: 5 callbacks suppressed [ 291.610564][T14961] netlink: 'syz.3.2282': attribute type 2 has an invalid length. [ 291.861966][T14971] netlink: 'syz.3.2284': attribute type 16 has an invalid length. [ 291.891422][T14971] netlink: 'syz.3.2284': attribute type 17 has an invalid length. [ 291.923416][T14971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.944949][T14971] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.987702][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 292.024826][T14971] veth0_vlan: left promiscuous mode [ 292.042180][T14971] veth0_vlan: entered promiscuous mode [ 292.053806][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 292.055396][T14971] tipc: Resetting bearer [ 292.070200][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 292.078850][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 292.088414][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 292.098152][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 292.099403][T14971] 8021q: adding VLAN 0 to HW filter on device bond1 [ 292.128489][T14971] 8021q: adding VLAN 0 to HW filter on device bond2 [ 292.137042][T14971] 8021q: adding VLAN 0 to HW filter on device bond3 [ 292.146009][T14971] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 768 - 0 [ 292.155716][T14971] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 768 - 0 [ 292.164978][T14971] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 768 - 0 [ 292.174367][T14971] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 768 - 0 [ 292.190932][T14971] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 292.207193][T14971] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 292.215279][T14971] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 292.232936][T14971] 8021q: adding VLAN 0 to HW filter on device bond6 [ 292.242482][T14971] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 292.251925][T14971] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 292.261629][T14971] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 292.271068][T14971] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 292.280390][T14971] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 292.371053][T12439] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 292.679876][T14995] sctp: [Deprecated]: syz.0.2291 (pid 14995) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.679876][T14995] Use struct sctp_sack_info instead [ 292.814381][T15008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 293.020615][T14976] chnl_net:caif_netlink_parms(): no params data found [ 293.027638][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 293.174206][T14976] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.183216][T14976] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.200976][T14976] bridge_slave_0: entered allmulticast mode [ 293.211377][T14976] bridge_slave_0: entered promiscuous mode [ 293.231864][T14976] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.239194][T14976] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.246458][T14976] bridge_slave_1: entered allmulticast mode [ 293.260362][T14976] bridge_slave_1: entered promiscuous mode [ 293.284814][T15029] __nla_validate_parse: 12 callbacks suppressed [ 293.284832][T15029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2299'. [ 293.341711][T14976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.355535][T14976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.414951][T14976] team0: Port device team_slave_0 added [ 293.431941][T14976] team0: Port device team_slave_1 added [ 293.432132][T15031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2300'. [ 293.456741][T15031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2300'. [ 293.476466][T14976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.483769][T14976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.513156][T14976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.527179][T14976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.540502][T14976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.573520][T14976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.736807][T14976] hsr_slave_0: entered promiscuous mode [ 293.759726][T14976] hsr_slave_1: entered promiscuous mode [ 293.767718][T15046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2304'. [ 293.776691][T14976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.789580][T14976] Cannot create hsr debugfs directory [ 294.067420][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 294.148777][ T5840] Bluetooth: hci4: command tx timeout [ 294.398212][T14976] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.414806][T14976] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 294.503828][T14976] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.515764][T14976] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 294.535581][T15076] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2308'. [ 294.564289][T15079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2310'. [ 294.574359][T15069] netlink: 'syz.3.2308': attribute type 1 has an invalid length. [ 294.575762][T14976] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.593421][T14976] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 294.655741][T15069] bond7: (slave gretap2): making interface the new active one [ 294.675790][T15069] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 294.699547][T14976] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.727989][T14976] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 294.843675][T15092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.976700][T14976] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 295.001589][T15101] netlink: 'syz.2.2316': attribute type 11 has an invalid length. [ 295.009950][T15101] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2316'. [ 295.053648][T14976] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 295.082751][T14976] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 295.104421][T14976] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 295.111524][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 295.359240][T14976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.389954][T14976] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.441938][T12439] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.449155][T12439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.473460][T12439] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.480671][T12439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.513088][T15129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2323'. [ 295.600507][T14976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 295.618933][T15131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2325'. [ 295.925838][T15152] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 296.036517][T14976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.045955][T15157] netlink: 'syz.2.2331': attribute type 23 has an invalid length. [ 296.147565][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 296.173687][T14976] veth0_vlan: entered promiscuous mode [ 296.203260][T14976] veth1_vlan: entered promiscuous mode [ 296.228454][ T5840] Bluetooth: hci4: command tx timeout [ 296.303691][T14976] veth0_macvtap: entered promiscuous mode [ 296.343985][T14976] veth1_macvtap: entered promiscuous mode [ 296.380060][T15169] tipc: Enabled bearer , priority 10 [ 296.392674][T15169] tipc: Enabling of bearer rejected, already enabled [ 296.431165][T14976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.478892][T14976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.516428][T14976] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.541413][T14976] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.559846][T14976] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.575592][T14976] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.584882][T15182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2337'. [ 296.789789][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 296.829640][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.842906][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.944677][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.960445][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.981499][T15199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.004067][T15201] syzkaller0: entered promiscuous mode [ 297.040289][T15201] syzkaller0: entered allmulticast mode [ 297.187742][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 297.599358][T15229] lo: entered allmulticast mode [ 297.695589][T15235] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 297.706138][T15235] tipc: Enabled bearer , priority 10 [ 297.706586][T15237] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 297.713094][T15232] tipc: Enabling of bearer rejected, already enabled [ 297.739556][T15237] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 297.829446][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 297.967267][T15257] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 0, id = 0 [ 298.098731][ T1160] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.301073][T15266] __nla_validate_parse: 5 callbacks suppressed [ 298.301090][T15266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2363'. [ 298.478379][T15267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2362'. [ 298.510685][T15267] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2362'. [ 298.642785][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 298.722535][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 298.724742][T15280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2367'. [ 298.731671][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 298.747938][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 298.756000][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 298.764103][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 298.903291][T15287] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 298.986466][ T1160] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.002283][T15290] netlink: 'syz.2.2370': attribute type 2 has an invalid length. [ 299.034654][T15287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2369'. [ 299.050634][T15287] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 299.093159][T15292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2370'. [ 299.205945][ T1160] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.267544][ C0] net_ratelimit: 3 callbacks suppressed [ 299.267562][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 299.339572][ T1160] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.472769][T15283] chnl_net:caif_netlink_parms(): no params data found [ 299.565863][ T1160] bridge_slave_1: left allmulticast mode [ 299.575613][ T1160] bridge_slave_1: left promiscuous mode [ 299.593642][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.607120][ T1160] bridge_slave_0: left allmulticast mode [ 299.614147][ T1160] bridge_slave_0: left promiscuous mode [ 299.624482][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.667431][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 300.026314][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.037944][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.053425][ T1160] bond0 (unregistering): Released all slaves [ 300.206427][T15283] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.215667][T15283] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.235936][T15283] bridge_slave_0: entered allmulticast mode [ 300.246505][T15283] bridge_slave_0: entered promiscuous mode [ 300.266669][T15283] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.295975][T15283] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.305482][T15283] bridge_slave_1: entered allmulticast mode [ 300.311536][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 300.331579][T15283] bridge_slave_1: entered promiscuous mode [ 300.378052][T15331] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2377'. [ 300.423238][T15332] bridge14: entered promiscuous mode [ 300.429254][T15332] bridge14: entered allmulticast mode [ 300.520242][T15283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.594974][T15336] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2382'. [ 300.618176][T15340] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2382'. [ 300.648029][T15283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.660992][T15339] netlink: 'syz.2.2380': attribute type 1 has an invalid length. [ 300.688602][T15342] netlink: 'syz.2.2380': attribute type 1 has an invalid length. [ 300.707435][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 300.790135][ T5852] Bluetooth: hci4: command tx timeout [ 300.866407][T15283] team0: Port device team_slave_0 added [ 300.873419][T15353] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2384'. [ 300.896557][T15283] team0: Port device team_slave_1 added [ 301.104480][T15283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.129338][T15283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.206823][T15283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.236327][T15370] netlink: 'syz.0.2389': attribute type 1 has an invalid length. [ 301.288425][T15283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.295416][T15283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.321904][T15283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.347417][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 301.358574][ T1160] hsr_slave_0: left promiscuous mode [ 301.372519][ T1160] hsr_slave_1: left promiscuous mode [ 301.387188][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.394911][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.420514][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.429438][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.459678][ T1160] veth1_macvtap: left promiscuous mode [ 301.465270][ T1160] veth0_macvtap: left promiscuous mode [ 301.471054][ T1160] veth1_vlan: left promiscuous mode [ 301.476390][ T1160] veth0_vlan: left promiscuous mode [ 301.515690][T15378] netlink: 'syz.0.2392': attribute type 4 has an invalid length. [ 301.571282][T15379] netlink: 'syz.0.2392': attribute type 4 has an invalid length. [ 301.747565][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 302.061132][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 302.109792][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 302.388954][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 302.575113][T15375] bridge_slave_0: invalid flags given to default FDB implementation [ 302.677585][T15384] netlink: 'syz.0.2392': attribute type 5 has an invalid length. [ 302.764372][T15389] netlink: 'syz.0.2394': attribute type 15 has an invalid length. [ 302.788637][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 302.870639][ T5845] Bluetooth: hci4: command tx timeout [ 302.905301][T15396] netlink: 'syz.2.2395': attribute type 21 has an invalid length. [ 302.956267][T15396] netlink: 'syz.2.2395': attribute type 1 has an invalid length. [ 303.002161][T15283] hsr_slave_0: entered promiscuous mode [ 303.018747][T15283] hsr_slave_1: entered promiscuous mode [ 303.031094][T15283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.047668][T15283] Cannot create hsr debugfs directory [ 303.299511][ T1160] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.390846][ T1160] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.428310][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 303.453872][ T1160] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.515051][ T1160] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.681563][ T1160] bridge_slave_1: left allmulticast mode [ 303.687271][ T1160] bridge_slave_1: left promiscuous mode [ 303.694177][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.712996][ T1160] bridge_slave_0: left allmulticast mode [ 303.718828][ T1160] bridge_slave_0: left promiscuous mode [ 303.724527][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.827513][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 304.062087][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.072723][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.083545][ T1160] bond0 (unregistering): Released all slaves [ 304.176437][T15283] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 304.187010][T15283] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 304.222794][T15283] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 304.232471][T15283] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 304.340784][T15283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.381040][T15283] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.397288][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.404505][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.466497][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.474021][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.477408][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 304.615096][ T1160] hsr_slave_0: left promiscuous mode [ 304.624481][ T1160] hsr_slave_1: left promiscuous mode [ 304.634976][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.643773][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.654758][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.665942][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.693480][ T1160] veth1_macvtap: left promiscuous mode [ 304.699273][ T1160] veth0_macvtap: left promiscuous mode [ 304.704856][ T1160] veth1_vlan: left promiscuous mode [ 304.710806][ T1160] veth0_vlan: left promiscuous mode [ 304.867524][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 304.947769][ T5845] Bluetooth: hci4: command tx timeout [ 305.168807][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 305.183282][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 305.199054][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 305.207897][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 305.215898][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 305.476706][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 305.517470][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 305.536108][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 305.911486][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 306.262755][T15283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.308305][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 306.406173][T15283] veth0_vlan: entered promiscuous mode [ 306.435513][T15283] veth1_vlan: entered promiscuous mode [ 306.547572][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 306.593080][T15283] veth0_macvtap: entered promiscuous mode [ 306.611983][T15283] veth1_macvtap: entered promiscuous mode [ 306.633877][T15448] __nla_validate_parse: 5 callbacks suppressed [ 306.633894][T15448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2407'. [ 306.642530][T15283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.684118][T15283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.703564][T15283] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.734921][T15283] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.744171][T15283] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.758607][T15283] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.829819][T15451] macvtap1: entered promiscuous mode [ 306.835151][T15451] vlan0: entered promiscuous mode [ 306.868511][T15451] macvtap1: entered allmulticast mode [ 306.879725][T15451] vlan0: entered allmulticast mode [ 306.892613][T15451] vlan0: left allmulticast mode [ 306.901009][T15451] vlan0: left promiscuous mode [ 306.948313][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.958329][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 307.027875][ T5845] Bluetooth: hci4: command tx timeout [ 307.267948][ T5845] Bluetooth: hci3: command tx timeout [ 307.294576][T12437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.329779][T12437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.356960][T15469] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2410'. [ 307.391720][T15469] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2410'. [ 307.405706][T15474] netlink: 4192 bytes leftover after parsing attributes in process `syz.2.2413'. [ 307.472575][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.486843][T15426] chnl_net:caif_netlink_parms(): no params data found [ 307.496841][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.587848][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 307.870958][T15426] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.889642][T15426] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.896982][T15426] bridge_slave_0: entered allmulticast mode [ 307.910214][T15426] bridge_slave_0: entered promiscuous mode [ 307.919350][T15426] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.927058][T15426] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.935697][T15426] bridge_slave_1: entered allmulticast mode [ 307.944247][T15426] bridge_slave_1: entered promiscuous mode [ 307.987421][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 308.051563][T15426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.070912][T15426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.196945][T15426] team0: Port device team_slave_0 added [ 308.229249][T15426] team0: Port device team_slave_1 added [ 308.464436][ T9219] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.492542][T15492] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 308.523189][T15426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.537622][T15426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.597720][T15426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.619800][T15426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.626762][T15426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.652859][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 308.673224][T15426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.842522][ T9219] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.915964][T15502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2420'. [ 309.126753][ T9219] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.269540][T15426] hsr_slave_0: entered promiscuous mode [ 309.275945][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 309.276705][T15426] hsr_slave_1: entered promiscuous mode [ 309.293840][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 309.295259][T15426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.324709][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 309.324726][T15426] Cannot create hsr debugfs directory [ 309.343757][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 309.351651][ T5840] Bluetooth: hci3: command tx timeout [ 309.358615][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 309.385262][ T9219] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.470862][T15517] x_tables: duplicate underflow at hook 1 [ 309.667528][ C0] net_ratelimit: 1 callbacks suppressed [ 309.667546][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 310.067506][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 310.160051][ T9219] bridge_slave_1: left allmulticast mode [ 310.179804][ T9219] bridge_slave_1: left promiscuous mode [ 310.187178][ T9219] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.210596][ T9219] bridge_slave_0: left allmulticast mode [ 310.216275][ T9219] bridge_slave_0: left promiscuous mode [ 310.239741][ T9219] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.296415][T15541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2433'. [ 310.713547][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 310.740772][ T9219] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.751832][ T9219] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.762629][ T9219] bond0 (unregistering): Released all slaves [ 310.938472][T15548] pim6reg: entered allmulticast mode [ 310.945059][T15549] pim6reg: left allmulticast mode [ 310.952465][T15553] delete_channel: no stack [ 311.107530][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 311.428166][ T5845] Bluetooth: hci3: command tx timeout [ 311.435496][ T5852] Bluetooth: hci4: command tx timeout [ 311.554320][T15576] netlink: 'syz.3.2443': attribute type 1 has an invalid length. [ 311.706649][T15512] chnl_net:caif_netlink_parms(): no params data found [ 311.755410][ T9219] hsr_slave_0: left promiscuous mode [ 311.757499][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 311.771030][ T9219] hsr_slave_1: left promiscuous mode [ 311.782215][ T9219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.790180][ T9219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.798834][ T9219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.806294][ T9219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.816452][T15586] netlink: 'syz.3.2445': attribute type 39 has an invalid length. [ 311.840088][ T9219] veth1_macvtap: left promiscuous mode [ 311.845694][ T9219] veth0_macvtap: left promiscuous mode [ 311.851636][ T9219] veth1_vlan: left promiscuous mode [ 311.856992][ T9219] veth0_vlan: left promiscuous mode [ 312.151411][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 312.248774][T15592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2446'. [ 312.530015][ T9219] team0 (unregistering): Port device team_slave_1 removed [ 312.576821][ T9219] team0 (unregistering): Port device team_slave_0 removed [ 312.797450][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 313.192642][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 313.224198][T15426] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 313.239731][T15426] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 313.334226][T15426] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 313.449797][T15426] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 313.456821][T15606] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2450'. [ 313.471529][T15607] nbd: must specify at least one socket [ 313.494285][T15512] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.502095][T15512] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.509640][ T5852] Bluetooth: hci4: command tx timeout [ 313.516039][ T5845] Bluetooth: hci3: command tx timeout [ 313.522855][T15512] bridge_slave_0: entered allmulticast mode [ 313.532325][T15512] bridge_slave_0: entered promiscuous mode [ 313.548124][T15611] openvswitch: netlink: Actions may not be safe on all matching packets [ 313.563784][T15512] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.571462][T15512] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.580024][T15512] bridge_slave_1: entered allmulticast mode [ 313.590525][T15512] bridge_slave_1: entered promiscuous mode [ 313.652757][T15615] tipc: Enabled bearer , priority 10 [ 313.690644][T15512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.722374][T15512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.785911][T15628] netlink: 'syz.3.2455': attribute type 10 has an invalid length. [ 313.827771][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 313.850452][T15512] team0: Port device team_slave_0 added [ 313.884162][T15512] team0: Port device team_slave_1 added [ 313.941522][T15512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.960995][T15512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.997310][T15512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.030995][T15636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2458'. [ 314.039979][T15512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.039998][T15512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.040047][T15512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.112277][T15638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2459'. [ 314.151603][T15512] hsr_slave_0: entered promiscuous mode [ 314.160317][T15512] hsr_slave_1: entered promiscuous mode [ 314.166711][T15512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.174829][T15512] Cannot create hsr debugfs directory [ 314.364099][T15426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.511670][T15426] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.565725][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.572958][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.629841][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.637048][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.867523][ C0] net_ratelimit: 2 callbacks suppressed [ 314.867539][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 314.971365][T15670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2471'. [ 315.267752][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 315.335488][T15512] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 315.351864][T15685] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2476'. [ 315.482467][T15512] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 315.588415][ T5852] Bluetooth: hci4: command tx timeout [ 315.670923][T15512] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 315.728010][T15512] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 315.847997][T15693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2479'. [ 315.864428][T15694] vlan0: entered promiscuous mode [ 315.878027][T15694] vlan0: entered allmulticast mode [ 315.907863][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 315.958065][T15426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.307408][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 316.349388][T15512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.402434][T15512] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.434963][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.442204][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.470737][T15717] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2483'. [ 316.477949][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.486847][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.663337][T15426] veth0_vlan: entered promiscuous mode [ 316.699478][T15727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2485'. [ 316.756362][T15426] veth1_vlan: entered promiscuous mode [ 316.845036][T15426] veth0_macvtap: entered promiscuous mode [ 316.867987][T15426] veth1_macvtap: entered promiscuous mode [ 316.911735][T15426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.937006][T15426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.947599][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 316.990349][T15426] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.019496][T15426] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.021889][T15739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2487'. [ 317.045084][T15426] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.091638][T15426] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.248267][T15747] bridge_slave_0: entered promiscuous mode [ 317.347466][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 317.377014][T15512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.456327][T15755] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2492'. [ 317.476462][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.498514][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.578904][T15761] netlink: 'syz.2.2495': attribute type 28 has an invalid length. [ 317.595709][T15761] netlink: 'syz.2.2495': attribute type 3 has an invalid length. [ 317.613144][T15761] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2495'. [ 317.626885][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.631142][T15512] veth0_vlan: entered promiscuous mode [ 317.641617][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.671564][ T5852] Bluetooth: hci4: command tx timeout [ 317.703154][T15512] veth1_vlan: entered promiscuous mode [ 317.736638][T15768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2497'. [ 317.747203][T15512] veth0_macvtap: entered promiscuous mode [ 317.760990][T15512] veth1_macvtap: entered promiscuous mode [ 317.859083][T15512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.883019][T15772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2498'. [ 317.904410][T15512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.937050][T15772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2498'. [ 317.987694][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 317.997111][T15778] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2501'. [ 318.008432][T15778] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2501'. [ 318.072754][T15512] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.086875][T15512] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.101656][T15512] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.110898][T15780] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 318.115950][T15512] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.305470][T15792] netlink: 'syz.3.2503': attribute type 21 has an invalid length. [ 318.326908][ T1160] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.357267][T15792] netlink: 'syz.3.2503': attribute type 6 has an invalid length. [ 318.377898][T15792] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2503'. [ 318.387455][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 318.469304][T15796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2503'. [ 318.507886][T15796] openvswitch: netlink: Unknown nsh attribute 0 [ 318.516414][ T1160] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.570406][T12439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.587776][T12439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.645420][ T1160] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.684520][T12437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.692647][T12437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.744593][ T1160] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.112475][ T1160] bridge_slave_1: left allmulticast mode [ 319.118492][ T1160] bridge_slave_1: left promiscuous mode [ 319.124260][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.133602][ T1160] bridge_slave_0: left allmulticast mode [ 319.140491][ T1160] bridge_slave_0: left promiscuous mode [ 319.146267][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.756386][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 319.764560][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.766508][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 319.782833][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 319.790872][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 319.799933][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 319.801300][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.876231][ T1160] bond0 (unregistering): Released all slaves [ 319.943525][T15814] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2508'. [ 320.067457][ C0] net_ratelimit: 3 callbacks suppressed [ 320.067476][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 320.316088][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 320.328281][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 320.338896][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 320.351482][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 320.361865][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 320.428378][T15835] netlink: 'syz.0.2514': attribute type 32 has an invalid length. [ 320.466495][T15833] tipc: Enabling of bearer rejected, already enabled [ 320.474925][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 320.512181][T15835] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 320.606436][T15839] bridge0: left allmulticast mode [ 320.639346][T15839] bond0: left promiscuous mode [ 320.662267][T15839] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 320.700558][T15839] wg1: left promiscuous mode [ 320.707271][T15839] bridge_slave_0: left promiscuous mode [ 320.731461][T15839] vlan0: left promiscuous mode [ 320.736385][T15839] vlan0: left allmulticast mode [ 320.743147][T15839] veth0_vlan: left allmulticast mode [ 320.757997][T15839] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 320.781461][T15839] geneve2: left promiscuous mode [ 320.786454][T15839] geneve2: left allmulticast mode [ 320.795246][T15839] gretap1: left promiscuous mode [ 320.805793][T15839] macvlan3: left promiscuous mode [ 320.812624][T15839] macvlan3: left allmulticast mode [ 320.819533][T15839] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 320.833691][T15839] gtp0: left promiscuous mode [ 320.847206][T15839] 8021q: adding VLAN 0 to HW filter on device bond7 [ 320.864920][T15839] 8021q: adding VLAN 0 to HW filter on device bond8 [ 320.935751][ T48] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 320.951213][ T48] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 320.959718][ T5904] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 321.107559][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 321.389276][ T48] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 321.397042][ T48] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 321.418622][ T10] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 321.507424][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 321.532912][T15802] chnl_net:caif_netlink_parms(): no params data found [ 321.668940][ T5943] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 321.676642][ T5943] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 321.855499][ T5852] Bluetooth: hci3: command tx timeout [ 321.891157][T15880] xt_hashlimit: max too large, truncated to 1048576 [ 321.936143][ T1160] hsr_slave_0: left promiscuous mode [ 321.949971][ T1160] hsr_slave_1: left promiscuous mode [ 321.973019][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.982403][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.991611][T15887] netlink: 'syz.3.2527': attribute type 11 has an invalid length. [ 322.001295][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.010027][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.034401][ T1160] veth1_macvtap: left promiscuous mode [ 322.040218][ T1160] veth0_macvtap: left promiscuous mode [ 322.045853][ T1160] veth1_vlan: left promiscuous mode [ 322.053538][ T1160] veth0_vlan: left promiscuous mode [ 322.147564][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 322.155995][ T10] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 322.237898][ T5916] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 322.478416][ T5852] Bluetooth: hci4: command tx timeout [ 322.547508][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 322.625820][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 322.676957][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 323.187642][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 323.504151][T15802] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.531109][T15802] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.555033][T15802] bridge_slave_0: entered allmulticast mode [ 323.583020][T15802] bridge_slave_0: entered promiscuous mode [ 323.587906][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 323.741158][T15802] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.761899][T15802] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.777625][T15802] bridge_slave_1: entered allmulticast mode [ 323.789409][T15802] bridge_slave_1: entered promiscuous mode [ 323.907885][ T5852] Bluetooth: hci3: command tx timeout [ 324.017057][T15802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.064671][T15829] chnl_net:caif_netlink_parms(): no params data found [ 324.105314][T15802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.228042][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 324.251780][T15802] team0: Port device team_slave_0 added [ 324.277283][T15802] team0: Port device team_slave_1 added [ 324.521254][T15829] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.542712][T15942] __nla_validate_parse: 17 callbacks suppressed [ 324.542732][T15942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2538'. [ 324.549438][T15829] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.549649][T15829] bridge_slave_0: entered allmulticast mode [ 324.561772][T15829] bridge_slave_0: entered promiscuous mode [ 324.572780][ T5852] Bluetooth: hci4: command tx timeout [ 324.628455][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 324.665390][ T1160] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.687038][T15802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.694496][T15802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.721932][T15802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.736138][T15802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.744250][T15802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.771269][T15802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.835324][T15829] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.842627][T15829] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.852627][T15829] bridge_slave_1: entered allmulticast mode [ 324.861347][T15829] bridge_slave_1: entered promiscuous mode [ 324.941634][ T1160] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.053012][T15829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.110641][ T1160] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.194400][T15829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.267942][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 325.284364][ T1160] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.375290][T15802] hsr_slave_0: entered promiscuous mode [ 325.392510][T15802] hsr_slave_1: entered promiscuous mode [ 325.401855][T15802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.410954][T15802] Cannot create hsr debugfs directory [ 325.430637][T15829] team0: Port device team_slave_0 added [ 325.457001][T15829] team0: Port device team_slave_1 added [ 325.536662][T15829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.544850][T15829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.576159][T15829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.616958][T15829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.624221][T15829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.652285][T15829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.667448][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 325.807292][T15829] hsr_slave_0: entered promiscuous mode [ 325.812459][T15980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2551'. [ 325.824549][T15829] hsr_slave_1: entered promiscuous mode [ 325.831717][T15829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.839510][T15829] Cannot create hsr debugfs directory [ 325.984357][ T1160] bridge_slave_1: left allmulticast mode [ 325.987686][ T5852] Bluetooth: hci3: command tx timeout [ 325.991628][ T1160] bridge_slave_1: left promiscuous mode [ 326.004297][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.014812][ T1160] bridge_slave_0: left allmulticast mode [ 326.022032][ T1160] bridge_slave_0: left promiscuous mode [ 326.028566][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.307449][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 326.551681][T16003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.580389][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.594738][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.605601][ T1160] bond0 (unregistering): Released all slaves [ 326.627878][ T5852] Bluetooth: hci4: command tx timeout [ 326.707584][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 326.799327][T16006] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 326.904271][T16011] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2559'. [ 326.964102][T16014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.002380][T16018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2559'. [ 327.022213][T16020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2562'. [ 327.031355][T16018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2559'. [ 327.196689][T16028] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2564'. [ 327.347517][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 327.379571][T16037] netlink: 'syz.3.2566': attribute type 9 has an invalid length. [ 327.747488][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 327.770845][ T1160] hsr_slave_0: left promiscuous mode [ 327.805711][ T1160] hsr_slave_1: left promiscuous mode [ 327.820369][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.844043][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.868467][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.890283][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.961849][ T1160] veth1_macvtap: left promiscuous mode [ 327.981484][ T1160] veth0_macvtap: left promiscuous mode [ 327.987193][ T1160] veth1_vlan: left promiscuous mode [ 328.008000][ T1160] veth0_vlan: left promiscuous mode [ 328.068404][ T5845] Bluetooth: hci3: command tx timeout [ 328.397411][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 328.583268][T16064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2575'. [ 328.648861][T16065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2575'. [ 328.718101][ T5852] Bluetooth: hci4: command tx timeout [ 328.733822][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 328.782348][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 329.426243][T16074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2578'. [ 329.584769][T16081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2579'. [ 329.596010][T16081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2579'. [ 329.654712][T16084] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2579'. [ 329.686701][T16084] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2579'. [ 329.941365][ T5852] block nbd0: Receive control failed (result -32) [ 329.958402][T15802] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 329.965733][T16091] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2583'. [ 329.999869][T15802] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 330.022179][T15802] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 330.060012][T15802] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 330.095738][T15829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 330.130305][T15829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 330.160544][T15829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 330.185911][T16108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2587'. [ 330.206425][T15829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 330.255534][T16108] FAULT_INJECTION: forcing a failure. [ 330.255534][T16108] name failslab, interval 1, probability 0, space 0, times 0 [ 330.275723][T16108] CPU: 1 UID: 0 PID: 16108 Comm: syz.2.2587 Not tainted 6.16.0-rc2-syzkaller-00163-gb993ea46b3b6 #0 PREEMPT(full) [ 330.275749][T16108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 330.275760][T16108] Call Trace: [ 330.275767][T16108] [ 330.275775][T16108] dump_stack_lvl+0x189/0x250 [ 330.275803][T16108] ? __pfx____ratelimit+0x10/0x10 [ 330.275827][T16108] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.275849][T16108] ? __pfx__printk+0x10/0x10 [ 330.275870][T16108] ? __pfx___might_resched+0x10/0x10 [ 330.275893][T16108] ? fs_reclaim_acquire+0x7d/0x100 [ 330.275914][T16108] should_fail_ex+0x414/0x560 [ 330.275939][T16108] should_failslab+0xa8/0x100 [ 330.275959][T16108] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 330.275976][T16108] ? __alloc_skb+0x112/0x2d0 [ 330.275999][T16108] __alloc_skb+0x112/0x2d0 [ 330.276020][T16108] alloc_skb_with_frags+0xca/0x890 [ 330.276040][T16108] ? rcu_is_watching+0x15/0xb0 [ 330.276061][T16108] ? __switch_to+0xd74/0x1600 [ 330.276087][T16108] sock_alloc_send_pskb+0x857/0x990 [ 330.276126][T16108] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 330.276150][T16108] ? dev_get_by_index+0x22/0x2e0 [ 330.276171][T16108] ? dev_get_by_index+0x22/0x2e0 [ 330.276204][T16108] packet_sendmsg+0x3672/0x53f0 [ 330.276238][T16108] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 330.276274][T16108] ? __pfx___might_resched+0x10/0x10 [ 330.276295][T16108] ? __lock_acquire+0xab9/0xd20 [ 330.276332][T16108] ? __pfx_packet_sendmsg+0x10/0x10 [ 330.276350][T16108] ? aa_sk_perm+0x81e/0x950 [ 330.276376][T16108] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 330.276404][T16108] ? aa_sock_msg_perm+0x94/0x160 [ 330.276426][T16108] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 330.276446][T16108] ? __pfx_packet_sendmsg+0x10/0x10 [ 330.276467][T16108] __sock_sendmsg+0x219/0x270 [ 330.276493][T16108] __sys_sendto+0x3bd/0x520 [ 330.276526][T16108] ? __pfx___sys_sendto+0x10/0x10 [ 330.276542][T16108] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 330.276571][T16108] ? __fget_files+0x3a0/0x420 [ 330.276599][T16108] ? ksys_write+0x22a/0x250 [ 330.276618][T16108] ? __pfx_ksys_write+0x10/0x10 [ 330.276631][T16108] ? rcu_is_watching+0x15/0xb0 [ 330.276658][T16108] __x64_sys_sendto+0xde/0x100 [ 330.276680][T16108] do_syscall_64+0xfa/0x3b0 [ 330.276699][T16108] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.276721][T16108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.276737][T16108] ? clear_bhb_loop+0x60/0xb0 [ 330.276757][T16108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.276773][T16108] RIP: 0033:0x7f7b6c18e929 [ 330.276789][T16108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.276803][T16108] RSP: 002b:00007f7b6cf6d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 330.276821][T16108] RAX: ffffffffffffffda RBX: 00007f7b6c3b5fa0 RCX: 00007f7b6c18e929 [ 330.276834][T16108] RDX: 000000000000000e RSI: 00002000000002c0 RDI: 0000000000000003 [ 330.276844][T16108] RBP: 00007f7b6cf6d090 R08: 0000200000000440 R09: 0000000000000014 [ 330.276855][T16108] R10: 0000000000000830 R11: 0000000000000246 R12: 0000000000000001 [ 330.276866][T16108] R13: 0000000000000000 R14: 00007f7b6c3b5fa0 R15: 00007fff046975e8 [ 330.276893][T16108] [ 330.487590][ C0] net_ratelimit: 4 callbacks suppressed [ 330.487607][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 330.611875][T15802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.633306][T15802] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.674992][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.682205][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.706993][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.714190][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.867430][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 330.979033][T15829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.025440][T16132] bridge0: entered allmulticast mode [ 331.083772][T15829] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.111667][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.118877][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.165343][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.172553][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.198881][T16138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2594'. [ 331.253665][T16138] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2594'. [ 331.258621][T16141] : entered promiscuous mode [ 331.317048][T16141] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2595'. [ 331.354804][T15802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.507570][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 331.609239][T16153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2597'. [ 331.666389][T16156] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 331.907882][ C1] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 331.907901][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 331.922035][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 331.985548][T15829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.131775][T15829] veth0_vlan: entered promiscuous mode [ 332.160990][T16182] nbd: must specify a size in bytes for the device [ 332.173848][T15829] veth1_vlan: entered promiscuous mode [ 332.212760][T16182] tipc: Resetting bearer [ 332.358286][T15829] veth0_macvtap: entered promiscuous mode [ 332.401221][T16188] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 332.403909][T15829] veth1_macvtap: entered promiscuous mode [ 332.434679][T15802] veth0_vlan: entered promiscuous mode [ 332.492323][T15802] veth1_vlan: entered promiscuous mode [ 332.526468][T15829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.548821][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 332.570833][T15829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.582944][T15829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.592739][T15829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.601842][T15829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.610899][T15829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.715972][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.724568][T15802] veth0_macvtap: entered promiscuous mode [ 332.729648][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.746405][T15802] veth1_macvtap: entered promiscuous mode [ 332.786678][T12439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.790925][T15802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.810893][T12439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.814285][T15802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.836285][T15802] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.845294][T15802] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.854655][T15802] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.865140][T15802] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.947434][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 333.035893][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.048782][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.075035][T12439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.083215][T12439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.189550][ T1162] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 333.203108][ T1162] ------------[ cut here ]------------ [ 333.210409][ T1162] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 [ 333.218688][ T1162] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 333.234264][ T1162] CPU: 0 UID: 0 PID: 1162 Comm: kworker/u8:7 Not tainted 6.16.0-rc2-syzkaller-00163-gb993ea46b3b6 #0 PREEMPT(full) [ 333.234289][ T1162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 333.234301][ T1162] Workqueue: events_unbound cfg80211_wiphy_work [ 333.234324][ T1162] Call Trace: [ 333.234331][ T1162] [ 333.234338][ T1162] dump_stack_lvl+0x189/0x250 [ 333.234360][ T1162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.234375][ T1162] ? __pfx__printk+0x10/0x10 [ 333.234393][ T1162] ubsan_epilogue+0xa/0x40 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 333.234403][ T1162] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 333.234423][ T1162] ieee80211_request_ibss_scan+0x600/0x8b0 [ 333.234445][ T1162] ieee80211_ibss_work+0xd85/0x1060 [ 333.234459][ T1162] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.234475][ T1162] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 333.234488][ T1162] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 333.234510][ T1162] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 333.234527][ T1162] ? skb_dequeue+0x10e/0x150 [ 333.234535][ T1162] ? ieee80211_iface_work+0xcdb/0xfe0 [ 333.234551][ T1162] ? ieee80211_iface_work+0xf39/0xfe0 [ 333.234565][ T1162] ? rcu_is_watching+0x15/0xb0 [ 333.234583][ T1162] cfg80211_wiphy_work+0x2dc/0x460 [ 333.234594][ T1162] ? process_scheduled_works+0x9ef/0x17b0 [ 333.234610][ T1162] process_scheduled_works+0xae1/0x17b0 [ 333.234645][ T1162] ? __pfx_process_scheduled_works+0x10/0x10 [ 333.234684][ T1162] worker_thread+0x8a0/0xda0 [ 333.234727][ T1162] kthread+0x70e/0x8a0 [ 333.234744][ T1162] ? __pfx_worker_thread+0x10/0x10 [ 333.234759][ T1162] ? __pfx_kthread+0x10/0x10 [ 333.234771][ T1162] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.234783][ T1162] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.234796][ T1162] ? __pfx_kthread+0x10/0x10 [ 333.234807][ T1162] ret_from_fork+0x3f9/0x770 [ 333.234822][ T1162] ? __pfx_ret_from_fork+0x10/0x10 [ 333.234839][ T1162] ? __switch_to_asm+0x39/0x70 [ 333.234848][ T1162] ? __switch_to_asm+0x33/0x70 [ 333.234856][ T1162] ? __pfx_kthread+0x10/0x10 [ 333.234867][ T1162] ret_from_fork_asm+0x1a/0x30 [ 333.234887][ T1162] [ 333.234890][ T1162] ---[ end trace ]--- [ 333.534311][ T1162] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 333.541552][ T1162] CPU: 0 UID: 0 PID: 1162 Comm: kworker/u8:7 Not tainted 6.16.0-rc2-syzkaller-00163-gb993ea46b3b6 #0 PREEMPT(full) [ 333.553713][ T1162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 333.563765][ T1162] Workqueue: events_unbound cfg80211_wiphy_work [ 333.570021][ T1162] Call Trace: [ 333.573293][ T1162] [ 333.576215][ T1162] dump_stack_lvl+0x99/0x250 [ 333.580808][ T1162] ? __asan_memcpy+0x40/0x70 [ 333.585392][ T1162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.590586][ T1162] ? __pfx__printk+0x10/0x10 [ 333.595176][ T1162] panic+0x2db/0x790 [ 333.599074][ T1162] ? __pfx_panic+0x10/0x10 [ 333.603481][ T1162] ? _printk+0xcf/0x120 [ 333.607630][ T1162] ? __pfx__printk+0x10/0x10 [ 333.612216][ T1162] check_panic_on_warn+0x89/0xb0 [ 333.617146][ T1162] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 333.622869][ T1162] ieee80211_request_ibss_scan+0x600/0x8b0 [ 333.628678][ T1162] ieee80211_ibss_work+0xd85/0x1060 [ 333.633876][ T1162] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.639073][ T1162] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 333.644959][ T1162] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 333.651277][ T1162] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 333.656992][ T1162] ? skb_dequeue+0x10e/0x150 [ 333.661567][ T1162] ? ieee80211_iface_work+0xcdb/0xfe0 [ 333.666935][ T1162] ? ieee80211_iface_work+0xf39/0xfe0 [ 333.672305][ T1162] ? rcu_is_watching+0x15/0xb0 [ 333.677067][ T1162] cfg80211_wiphy_work+0x2dc/0x460 [ 333.682174][ T1162] ? process_scheduled_works+0x9ef/0x17b0 [ 333.687896][ T1162] process_scheduled_works+0xae1/0x17b0 [ 333.693465][ T1162] ? __pfx_process_scheduled_works+0x10/0x10 [ 333.699559][ T1162] worker_thread+0x8a0/0xda0 [ 333.704188][ T1162] kthread+0x70e/0x8a0 [ 333.708277][ T1162] ? __pfx_worker_thread+0x10/0x10 [ 333.713396][ T1162] ? __pfx_kthread+0x10/0x10 [ 333.717986][ T1162] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.723190][ T1162] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.728382][ T1162] ? __pfx_kthread+0x10/0x10 [ 333.732963][ T1162] ret_from_fork+0x3f9/0x770 [ 333.737550][ T1162] ? __pfx_ret_from_fork+0x10/0x10 [ 333.742657][ T1162] ? __switch_to_asm+0x39/0x70 [ 333.747408][ T1162] ? __switch_to_asm+0x33/0x70 [ 333.752173][ T1162] ? __pfx_kthread+0x10/0x10 [ 333.756756][ T1162] ret_from_fork_asm+0x1a/0x30 [ 333.761614][ T1162] [ 333.764886][ T1162] Kernel Offset: disabled [ 333.769253][ T1162] Rebooting in 86400 seconds..