last executing test programs: 6.850263129s ago: executing program 2 (id=5787): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000027bd7000ffdbdf250700000000000000", @ANYRES32=r2, @ANYBLOB="4000ce040a000200aaaaaaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x200440c5}, 0x14) 6.509341033s ago: executing program 2 (id=5790): r0 = socket$inet(0xa, 0x801, 0x84) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) (async) listen(r1, 0x5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r2, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) (async) close(0x3) (async) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffc, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) close(r3) (async) listen(r0, 0x8) r4 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000001980)={0x9, 0x4, 0x200, 0x3, 0x6, 0x32e35e75, 0x7, 0x80000001}, &(0x7f00000019c0)=0x20) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge0\x00'}) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x74, &(0x7f0000000500)={r8, 0x20, 0x30, 0x1, 0x4}, &(0x7f00000005c0)=0x18) (async) getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, 0x0, &(0x7f0000000140)) socket$packet(0x11, 0x3, 0x300) (async) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x38}}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) 6.219171148s ago: executing program 0 (id=5792): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x5d}, @initr0, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000200)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x9c, 0x12, 0x400, 0x70bd2c, 0x25dfdbfb, {0x1d, 0x3d, 0xe6, 0x90, {0x4e22, 0x4e21, [0x2, 0x1, 0x4, 0x7], [0x10, 0x4, 0x2, 0xd9], 0x0, [0x7fffffff, 0x8]}, 0x200, 0x162}, [@INET_DIAG_REQ_BYTECODE={0x50, 0x1, "8e254c9bc9ba8d7b62f464c35bb818075d49a36fc80c575bb02df2083fc903fa7464204ea5c65b05fc364223861973604663379e58d7fbabab565a46f1372eb18b7d5d26563b2d7609613378"}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40008c0}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000240), &(0x7f0000000280)='%ps \x00'}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 5.852536801s ago: executing program 0 (id=5793): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010009112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600030000000c00030008000c0004"]}, 0x58}}, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000300)="600000001800050601000000000000000a400000fe040001000000001400200020010db80001000000000000000000010800040001000000", 0x38) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000004100010000000000000000000101000000000000040006000400028020000180"], 0x40}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}}, 0x0) 5.80063309s ago: executing program 3 (id=5794): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4e00}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 5.452020121s ago: executing program 0 (id=5796): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x4}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071100600000000009500000000c728b3"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18420000000000000000000000000000dd0e0000170000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="37259ac9225c0900000000000000830700bb4e34772e475fc615742ef00bb16e7b65bbb2a7c3ee2981257f0de94e1d4a49c2a3b3c3e36f027fb299dffafed0bdce563d5eac59deaff343e763bfff485ce1ad26de1f37f7bbf4540b5f1edd12df252b0d69d2fdd32f473028f74bc44c1d8e41cd6a9fcdd38377348d1923d6ff15f38cfc3c4f6464505b69876ff7b628aac8", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000b40)={0x13, "dd6e4eaaff9e7199f5b246fb0144c42ce5a861c065a1424a20e8705c8a6d70b593a9c20eddcb4bf2a10b606ce6b400e06c17dc5c2ad6c632a3aa2d50f01ef1293ad45749226b7af96e58d1a92ac1d2ecd704a63548983cf9b60da2d6ce07bb02a3b3e9b1bb016997bff8ff78f44f6371b5c0f58260bf2d27ebbdba58224b0129"}) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4040002}, 0x4000080) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r5, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) 5.396659814s ago: executing program 4 (id=5797): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind(r1, &(0x7f0000000000)=@hci={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000010)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) write(0xca, &(0x7f0000000040)="040e0c01032000ffffffffffffffff", 0xf) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x3e8}, 0x10) connect(r2, &(0x7f0000000200)=@generic={0x1f, "0102030405060100"}, 0xa) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000580)=ANY=[], 0x3e) 5.396110312s ago: executing program 2 (id=5798): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000580)=0x4000000, 0x4) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newtfilter={0x3c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x10}, {0x9}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x22, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x44}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010108}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x25c, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200002, 0x2, 0x2}) write$tun(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) sendmsg$nl_route(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000002000000008001b00000000001c001a801800028014000180080020000100000008001a"], 0x44}}, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f00000002c0)="1de3709f23f1144330f883162aa54c10a7316b7c2bd6730a3cc2dcb3c8e2638152633fb8767cbc93ea1bebbfcac30b34b5329b2dbc123217f343d62ff9308fe07c2a9748ec8acd1a978e7528f6605d73cd64c774415ccfb92524bafac7b54191b70e7ff171dc847d1208843b38efc0e8f0902f43eb2006acb371d17ac8055436d99dab26da3f619973c02f2bf2991a87a5ed4c8d302c0530c72f116db823942bf92e71c6296993c537f6de52c9ce7ea2a098df9bd932b9156418be035a13d2caad75a09eb889", 0xc6}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xb8}, 0x40) 5.229905531s ago: executing program 1 (id=5799): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x200000c1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$nci(r3, &(0x7f00000002c0)=""/151, 0x97) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000640)={&(0x7f0000000380), 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x214, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {0x22}, [@INET_DIAG_REQ_BYTECODE={0x42, 0x1, "4633e4c6f962da487af18685fa5badc5808ff8d58f91b0464046fc1951ed4622a97289c3c0d47332e045fab2da9f855919ca1aae069026629450cd296152"}, @INET_DIAG_REQ_BYTECODE={0xe0, 0x1, "ca99e8265adc2fa287cfb9a9bfedb8327e9c8c118274005862ec8e457df0a96eb406217dc1966833b33fa713946087424232f2f76545a3dcb79400fd400dc2bf8e8e9017d5767392ad8caa743a73c2a1e9489a0dfd532368cc8e54a1dd5b9f2b1629fcdae1059eaa33438ddb3ef94bc1e493952dad60b718d5519aba01b2512b53d237a80136c9f310748538ae562ad03c7f22ff1fa98bb5d80482389f0e4a72438bc35b32f2441fc2ab382a1fcb8e4efa8c8c9700f29e57377fc12ae467809faf6e073a07e019423392a2387c1a04daab5d9f388de81a14ff1f49a0"}, @INET_DIAG_REQ_BYTECODE={0xb4, 0x1, "f10edb52dc11ef6d88061bdc2228d5d1dd2c31ca3534a224bed260f2ffbdb1ccb9b8bf0b592b5ee4b7c67e37602272194fc9fcde35f319affaf4273940ee1e4fc52e3be3871c65dcdf8bbf233ea5b2d36d084666f300b2cc78dac448714ed3f80338ab59c1d2972fe48bc886ba788ee9b258e779f02e1cc3e5f5325df142b1a66aeead017a222ccd7e39ff6990082d07f28de284ac9351f1877b294488cd9a34be819a59cf876acfe7eb8a1220a33372"}, @INET_DIAG_REQ_BYTECODE={0x25, 0x1, "e8cf0b9f4a50cef330d435b1184e6b0f5572908d09024f602b1534b1525ab7a23e"}]}, 0x214}, 0x1, 0x0, 0x0, 0xc004004}, 0x901) r5 = accept(r4, &(0x7f0000000680)=@ax25={{0x3, @rose}, [@rose, @netrom, @netrom, @netrom, @default, @rose, @remote, @netrom]}, &(0x7f0000000700)=0x80) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x22}}}}, ["", "", ""]}, 0x20}}, 0x4000004) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000840)) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000c80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c40)={&(0x7f00000008c0)={0x36c, r0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xbc, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5bf5b3fe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d99c44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69c4fc83}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x268bd103}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76972cb8}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9a8d115}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b481ac1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a01f86d}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b8fa170}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c72298b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51c3de56}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xac, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c5ddc7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x726b64e1}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4fab1ed6}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15ec911e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24a654cc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ad818d7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e1ff50a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x572aa31a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74dda882}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78d902f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7961bdc0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}]}, {0x4}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x178, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5541e644}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x266d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68af5b69}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfd5a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13aa30e1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe63c}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19256249}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a1d55ae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd60d}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52ae9d3a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59adda39}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc94a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d35}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3a54}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x118ec8d4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66a2febc}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x29b8}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbfc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xeae3165}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x524683e2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a10070f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d67}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9092}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7bbe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea97}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67bfe20}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x625f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2cd6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcc03}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe7b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff41}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x523742c4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501ce835}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21be7ab7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1075b83b}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4da244dd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa22d3a9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f3fb5f1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38b2dc79}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ac2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62947251}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7307}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}]}, 0x36c}, 0x1, 0x0, 0x0, 0x4001}, 0x30004084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r5) sendmsg$NL80211_CMD_SET_MPATH(r6, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x38, r7, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x4010) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e40), r5) sendmsg$DEVLINK_CMD_SB_GET(r6, &(0x7f0000001040)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001000)={&(0x7f0000000e80)={0x148, r8, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xd7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5aa6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x101}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xbe}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}]}, 0x148}, 0x1, 0x0, 0x0, 0x2004c041}, 0x4004) sendmsg$AUDIT_GET_FEATURE(r5, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x10, 0x3fb, 0x4, 0x70bd26, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x4) getsockopt$IP_SET_OP_GET_BYNAME(r4, 0x1, 0x53, &(0x7f0000001180)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000011c0)=0x28) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000012c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001300)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001340)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001380)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000001480)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x54, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x80) getsockopt(r6, 0x5, 0x7, &(0x7f00000014c0)=""/38, &(0x7f0000001500)=0x26) connect(r6, &(0x7f0000001540)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x4, 0x2, 0x2, 0x2, {0xa, 0x4e22, 0x1, @mcast1, 0x4}}}, 0x80) bind(r6, &(0x7f00000015c0)=@in6={0xa, 0x4e22, 0x200, @remote, 0xfffffff9}, 0x80) 4.886167799s ago: executing program 0 (id=5800): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="365b947d30dc85000000ad00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a4f0ff0000000071103100000000001d400500000000004704000001ed00000f030000000000006f44000000000000730a00fe000000007203000000000006b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 4.634163657s ago: executing program 3 (id=5801): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x600}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x30, &(0x7f00000001c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xc0, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=@gettclass={0x24, 0x2a, 0x10, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x6, 0xa}, {0x1, 0x8}, {0xfff1, 0x3}}, ["", "", "", ""]}, 0x24}}, 0x0) 4.395142214s ago: executing program 1 (id=5802): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x38018, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb}]}, 0x44}, 0x1, 0x0, 0x0, 0x400}, 0x800) socket$unix(0x1, 0x5, 0x0) 3.942866919s ago: executing program 3 (id=5803): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[@routing={0x84}], "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"}}}}}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000002000010300000000fbdbdf25022000000000000000000000080001000000000008001b"], 0x2c}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002140)='$|', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)="a3", 0x1}], 0x1}}], 0x2, 0x4040801) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000003200)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000002100)=0x40) 3.85431324s ago: executing program 2 (id=5804): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bind$llc(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, {}, {}, 0x0, 0x200}, [@tmpl={0x144, 0x5, [{{@in=@multicast1, 0x4d6, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x0, 0x73, 0x8001, 0x4, 0x7}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@multicast1, 0x3506, 0x2, 0x3, 0x7, 0x5, 0x3, 0x7}, {{@in6=@loopback, 0x4d4, 0x32}, 0x2, @in6=@mcast1, 0x3502, 0x3, 0x1, 0x7, 0x5, 0x3, 0x7}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x80000001, 0x3c}, 0xa, @in=@remote, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x1fc}}, 0x0) (async, rerun: 64) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) (rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r1, 0x4000, 0x0}, 0x10) (async) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000100)="580000001400add427323b472545b45602117fffffff81004e230e227f004001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa00000000ffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async, rerun: 32) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x84, 0x30, 0x51b, 0x0, 0x0, {}, [{0x70, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="d94c8f9e9390"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x84}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000a80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000700)={0x310, r5, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x3b}}}}, [@NL80211_ATTR_VENDOR_DATA={0xfc, 0xc5, "814c80f2db613f6f017de2f23f77d73ef7c531e5dfec63f33bef0f01323fcd643cfcc88c571285e6bd06722e8ce4e460fcdd55c1b20092ea7bb5efb67a78d253287dbb4eaf87684eb4f58fb1fcae40f52c0a86f16c9a830957285ccfbb2c74c3b8aa99f66197d5cf6a159a4eaf6873da1554f61306531955efff154603e290f90b7c4f907aaf62d91ce999a27272a249772d5e2ab74a5c73e148e141e914cc275bc2bd9be21419067641b3f2efb0f123182d969408456c57218cfdb8c206dc995521608022f1bcc1892360388412d4a2c8bcec41151474cf98a2afe66df2f064157f5d2b2cf669ca82893aabad8d9f2f57e7a37f23b084d5"}, @NL80211_ATTR_VENDOR_DATA={0x21, 0xc5, "c3ecf9c00a56959f010671b77f03b839cdb409d6c43f584ac62eabeeb0"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1ff}, @NL80211_ATTR_VENDOR_DATA={0x8c, 0xc5, "b51bc9dc60108aafd6949374579b50c5e5cca06381216428ef7276d551a7c089f12167e966ac68919bc789cd666cc8013e028f80699448edeb2a42335f2cdc77ae74e7ba932441c4065b5c972d0c9341a834f1a479486f6d56648a3e705f33019f8f038ad03ce592e9102d488617501e34e0313a3dedb5caedce3199c9a354b5715b6c9a2b380502"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xa5, 0xc5, "7b167bc2ee1b28b5f44c973b6fd1e65de9777b4ed3cda55775ef7c283ef8ead06857ffab30d8c4fa247ee94fb6da6114f66359cf4fabc62214703a2eb19dc7696038bb5421eef1d34cc8b6ff4ac5ca4940992b91bc2a42636011e9e0da274a9d5014b52ac0238b469809f1aba240a020c6b8cc7c08755bd6abf2e5f16708e2b5550398fb4867baaca7254dea4014d44226616fa98af12486cba85f6bb22d5b6dfd"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_VENDOR_DATA={0x73, 0xc5, "4e3bdda9ee424cf790edce1c18e14255337fc2ce8c1951a1579d312056f675b9264ee97c186257b24df7334270787bfd7ba7011ae32126664874a73688523af1f20023709ecf3052d6d1fb63931d62176f310390bc651aff2442ab83408e27c1b3b7c11a5e53e826a50485c7479d49"}]}, 0x310}, 0x1, 0x0, 0x0, 0x40020}, 0x48004) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) (async, rerun: 64) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000003060300000000000000000001000007090002fc73797a31000000000500010007"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x28880) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300070000000800090001"], 0x44}}, 0x0) 3.853500451s ago: executing program 4 (id=5805): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) (async) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e22, @loopback}}, 0x0, 0x0, 0x3, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f00000002c0)=@framed={{}, [@jmp={0x6, 0x0, 0xd, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) (async) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async, rerun: 64) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e21, 0x6, @empty, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0xd4, 0x1000}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000003c0)={r4, @in6={{0xa, 0x4e23, 0x440, @private2, 0x4}}, 0x5b, 0x4}, 0x90) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000080)={r4, @in6={{0xa, 0x4e21, 0xb, @private0, 0x1}}, 0x8}, &(0x7f0000000140)=0x90) 3.772040777s ago: executing program 1 (id=5806): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f00000000c0)=0xffffffdf) (async) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)}, &(0x7f0000000100)=0x10) (async, rerun: 32) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (rerun: 32) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) (async) socket$tipc(0x1e, 0x2, 0x0) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r1], 0x0, 0x34, 0x0, 0x0, 0x4}, 0x28) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000002c0), &(0x7f0000000300)=0x4) (async) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) (async) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000280)={0x6, 0x0, 0x4}) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000040)={r3, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000000)=0x84) 3.138059022s ago: executing program 1 (id=5807): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000002d0007012abd7000ffdbdf250a7c0000080001"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="c486070000000000180012800b0001006970365afd6d6772650000080002800400120008001f0002"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="c486070000000000180012800b0001006970365afd6d6772650000080002800400120008001f0002"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 3.0080015s ago: executing program 4 (id=5808): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)={0x34, 0x0, 0xb, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}, 0x34}}, 0x84) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x8, 0x0, 0x6, 0x90000000, {{0x32, 0x4, 0x0, 0x2, 0xc8, 0x65, 0x0, 0x7, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x30}, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @cipso={0x86, 0x15, 0x3, [{0x6, 0xf, "1784f00e3403a23d34f5007e93"}]}, @cipso={0x86, 0x34, 0x3, [{0x0, 0x6, "1570139d"}, {0x0, 0x6, "ca595b49"}, {0x6, 0x10, "218c4d241664fee059d2badd6dcc"}, {0x7, 0x12, "ef633e174ae6070d3d3fd62b444689fa"}]}, @generic={0x94, 0x10, "040978fae093a16fbd781446b642"}, @ssrr={0x89, 0x1b, 0x92, [@loopback, @local, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0xc, 0x22, 0x0, 0xb, [0x7f, 0x7]}, @cipso={0x86, 0x2b, 0x2, [{0x7, 0x12, "7b2e0d3834b75fb161d16f74935c71ec"}, {0x2, 0x10, "6b9284ddbea4aa9bec0b5ac2b7ca"}, {0x0, 0x3, "9f"}]}]}}}}}) recvfrom(r1, &(0x7f0000000240)=""/173, 0xad, 0x205e84349e6a6aef, &(0x7f0000000440)=@can={0x1d, r2}, 0x80) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x6, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626ff96430000000001700000000d5001400010076657468305f746f5f7465616d00"], 0xec}}, 0x0) 2.78162802s ago: executing program 3 (id=5809): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}]}}}]}, 0x50}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}]}}}]}, 0x50}}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) 2.596307866s ago: executing program 2 (id=5810): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) 2.476227231s ago: executing program 4 (id=5811): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4e00}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2.363809163s ago: executing program 3 (id=5812): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES64=r0], 0x64}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES64=r0], 0x64}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x62, 0x5, 0x338, 0x0, 0x198, 0xffffffff, 0x0, 0x240, 0x430, 0x430, 0xffffffff, 0x430, 0x430, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'hsr0\x00', 'wg1\x00', {}, {}, 0x0, 0x2}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @remote, @empty, @gre_key=0x6, @gre_key=0xfea}}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xff, 0x0, 'caif0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x5e, 0x1, 0x30}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @private, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xc, @private=0xa110100, @private=0xa010101, @gre_key=0x10, @gre_key=0x6}}}}, {{@ip={@remote, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) (async) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="10000000040000000400ed3cc4fd992a00000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r2, &(0x7f0000000240), 0x0}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40440c0}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000000000002000000300004802c0001800b0001006e756d67656e00001c000280080002400000000408000340080900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00"/132], 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) (async) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r10, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r11}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) (async) sendmsg$can_bcm(r10, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r11}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@local, @in6=@mcast1, 0x1, 0x4, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd29, 0x0, 0x2, 0x0, 0xfd, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0xc801}, 0x24000014) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=@migrate={0xa0, 0x29, 0x1, 0x0, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0xff}, 0x0, 0x5, 0x0, 0x2, 0xa, 0x0, 0x0, 0xff}, 0x6e6bbf}, [@migrate={0x50, 0x11, [{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x4}, 0x32, 0x4, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xa0}}, 0x0) (async) sendmsg$nl_xfrm(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=@migrate={0xa0, 0x29, 0x1, 0x0, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0xff}, 0x0, 0x5, 0x0, 0x2, 0xa, 0x0, 0x0, 0xff}, 0x6e6bbf}, [@migrate={0x50, 0x11, [{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x4}, 0x32, 0x4, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xa0}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="868dcb68b19d16e8e66818fcecfeae88000004003d0007800900012ec7eaa26e000000000c000280", @ANYRES32=r9, @ANYBLOB="0a000100bbbbbbbbbbbb0000"], 0x50}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xec, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x892f}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88ca}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x883e}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x6}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x29, 0x7, 0x1, 0x0, "7fac1a00953718997428bc3c3f4473d36929709c3a89765bc7f9db9500e667121437867369"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x21}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000000}, 0x40d00) (async) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xec, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x892f}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88ca}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x883e}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x6}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x29, 0x7, 0x1, 0x0, "7fac1a00953718997428bc3c3f4473d36929709c3a89765bc7f9db9500e667121437867369"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x21}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000000}, 0x40d00) 2.137190654s ago: executing program 1 (id=5813): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newsa={0xf0, 0x10, 0x133, 0x0, 0x0, {{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="d800000019008111e0020f060d8107040a600200640f040b067c55a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a290457f0189b316277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b83ece0b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) 2.067982913s ago: executing program 0 (id=5814): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r5, {}, {0xfff8, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r5, {}, {0xfff8, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) (async) 453.717413ms ago: executing program 4 (id=5815): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000140)={0x5e, 0x0, 0xa, 0x400000b, 0x36, 0x81}) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000080)={0x7, 0x9}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 379.56064ms ago: executing program 2 (id=5816): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x201, 0x400000, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2000004}}}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async, rerun: 64) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0xed000000, 0x10, &(0x7f0000000200), 0x10}, 0x80) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="18005e800800020000efff000c0001"], 0x34}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000003}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x84, r3, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0x4d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}], @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x12, 0x1}, {0x60, 0x1}, {0x12}, {0x3, 0x1}, {0x6c, 0x1}, {0x16}, {0x6, 0x1}, {0x18, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x9}, {0x1b, 0x1}, {0x5, 0x1}, {0x6c, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x1}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x21}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8844}, 0x20004001) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000007100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000070c0)={&(0x7f0000004000)={0x3060, r3, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x11}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xf6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x42}, @NL80211_ATTR_CSA_IES={0x2fc4, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_PROBE_RESP={0x258, 0x91, "ab185793da5bfb840a59dedbfb1593db8ae880afaef1d537eecaa08ca3de80c31322f20c0bcb24b671ff2eb437797d708ba7a44d91901b43c246f488c6c63629e8f2c7b0ca2de47447c8ff19377923536ff1a4098cc987bf4212b741dcc6e97592179fa23ad34f29b3eaaa8c0dad164e6a9614b7e54c0e069668e55d892aa20034d1778a18ac08b4d80a0e56a7b7361c6358e687c7974126912f348c2fb17ca3d9976e193c185b322fe1efc6fd4da548036588e093b11e9e711acf31f198d3cdd19e2a95011f34a58299e578eb9a262e93b78883d0e8dc0308479c81d66c58e20fe003c96c2e9b7c40e75b6e6c1b1e810d64857c5d75e5ba47c20b42175c6f66bcf32081080046f95ddc87ce7af92f98bc4d6e173b293c0eca6abf00ac74a938779446217d4d9e957cba1e2d52a550552a0c393d69fa691fa223987c650dac1401d93e7be23cf1bb61809b6380dcf51cdffefb5596374f72f6d80aa5f380c79201683758753a1e5a8ae8ecb319709b61a1180cde42b16f4026b1ccb1048f48fe79495beac865182dfc442b9b1780e68cd20d7825247e6dc1ead4c603100aece2fd3b6a9266999340fbc72833459015a9e2b577e3d3afbaafaf1e387e6f9b698a81eab57a02a58344ddaa8b3df802357c2b18677914b627bbcb4ffd33b16b08e8e2bced3b7f772a501d06dbd2ca686be99bd773a8de0300e8efd8f4165eb18cd88c1bc7fbf86fbe83ed9bddd22b3a1ddadec193770420e4250515ad45e40952910bb5bb182a3a778e1594b468e1ae22361401847e012076be139c3df7c145c312f11b6c771d01c5750991cd2b91dce684bf75c386"}, @NL80211_ATTR_FTM_RESPONDER={0x380, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xe0, 0x2, "d82a19a0353791d6b191bb59cbd5b306bb865c527a8117e54a4a710d252a748f929933ae83932418a96668e0405466042a81ffd4a61e96ed7ae3a8da74f1ccf1614da9cf7e9abd425208f3b58aeaedfd7c335e5cd4a145f65ced58d553b20905fa2f06a7c08158b2b723d86d9a5aaa462b86e9d42195a29bc610ab1aacc20715679b036a4da3a37f251d6a00c6daa6a5eae7876c41c844b5d3c09dbb7f51930b83460b448009f1b0c039362fc9df9ff26304fa903e14fb5aac170e309dbccccf6bfe08ee780957949738c567bfea8d98e00b37e54993388b01063d80"}, @NL80211_FTM_RESP_ATTR_LCI={0x3e, 0x2, "91311618caf0ad9d9db7a66e0aa913e0c7d1767697c9ec03bc0c3815d4e4880142a278e0f7cc86361260ebc4a0b3d608c3d5eda34eccffed9f86"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x68, 0x3, "bfd4e7c1a39532e8dfeec74458c734e2ee5dbbbcd18e1312860b04d8d1cb11d79601aee49979296c9f095b0f544dcd576a89ce7af0537aa17ae98d9490e17e44c65fc50bfaba307a48e3bd3f6622759590a7bfcd609b642664fe1f660cafd57484631d7d"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xac, 0x3, "5ed85e1e954e27d677c6c8c7fe93de54d48cddb6b0d7ca85a8ab5bab4e66009983a885d99b99efedfaf8ecc4607ae9e54e025d0e8dcd8e7b7af38ffe00305cebda28fac5d1a07b3307e0826c4abff491b6bc1e3f03e8f41aa237cfb7032b575a86b084e0f33f232c098ac0a9f3ad858c909a85685b9fb853ec3e719038aa86a9a716e8ff1fa5db20640b58fbec6a5c1776980a84bc299ace8ba9bb7907777bb51b79f3b70e9c9bd4"}, @NL80211_FTM_RESP_ATTR_LCI={0xad, 0x2, "a7f38a053b190cf8f5df782733ef90d8888f9cd10463a7f75c5677726a89912d7bdcdb93ec2d78e7f89fc05f50a1e535fb46be419a4b68db9741e1ddf14405a2886d0d32cef9bba944133be4e60a01cc06a453866a3730d5482a81b46af94ea8b9b29a2bc9c06c3e1ea67035081bd0f148683fc28a5aea0e349f27eda1b899a73c534c8cad8008a140b06f53aba4e738e8833ff949899577a1af111c8e550eac4a09aee13e6261d50b"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x8d, 0x3, "b4bfbb6c5d6209278b5535e3e6eca377a1e7d6ac19bc0826ff84a436fa3a81e229dd4f6c2f8ce96c5530f768e7981ea746da236674e553fe2794542abb9fef34b2d11b020331ea90f40fe461c334bc8044f750673104c7f1a0cdb2eca05ced4253604d6295ae4ff9d4c96c5610f01ff24ce4c1a570b68c64e99ad4376e3ef1c0a48d66a17b47c3363b"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_FTM_RESPONDER={0x388, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x95, 0x2, "50b165f903dcaa07ffcf0c72f91d87d70b7d24517b0ec7d7f60f1b2d9466edb215c1ef789717d6c7ec20618983bc4adbd5fdcfa4099fb16df9aa22a7d232e18afa93b2ae23169849007dd0ee0fca4b3708e94ca81ffd19dabf2d90878f344c54a9e10d00d3b188ab828e9f725d3b680994484a1312e1f111fde03f913b09783a6a7f31f357a116ed7f9c23bf9afbcc0f2b"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xff, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0xcb, 0x2, "5dd347c7a7d3e4504f249b53d39158abe2c7794cf445990de1968ac29b8dff4132479454b19e6fe3afe53a2a6ac128baf39807d4f3d8cfae4c98bdf438f78cb803d1772e2c7a78174d2074d06b601fa9909d43e74870a59c5c00bde06efdc79435b97f7f9ddd2e37bd07319591f9fbb56b0cc3ba0878be5ca1083c8c3d507ffde92547306c7d2e213ab1043c79dac53de0901822ee4fb668bce5930eece30d3e55bca76b65634e486b0af071532b3bf5b89778c092f37478632eb8adca3494b5f6d34abf949206"}, @NL80211_FTM_RESP_ATTR_LCI={0x8c, 0x2, "14d45a7a90575df878b3dc6dafdfcf91a0cc3d5477a02bf0c3ea03c0de4d42e643d9bb4f7d411b778d2a59ce18fbdc43b08e0f3b5a92552a0c6d405f39a650c89342e2452ec25691f30bec3a9bccba51ed6c17d8734f0881419a43eeef975d73243882d0d2baf29019a8032bf9f94c0b5bd2269b322a42de6b133a2d7e8b15954fe50c552691112a"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x8b, 0x3, "83dc364ca35ae8bc3b75d5e75863c9e1e1692ec621b70fde4a67691608add09c87fba3e0183d5e8e193594511c5639976e97cb345e1f0921af0e2b2b027be7a83141ed664443404a5569412cee0b1ee426d2c8811f5248160af45e25358384b620ac879e2e4bb0287a675f153018a039fd748d696a2260ee7d2d62599e54827d8c5a2f9f9028b9"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_FTM_RESPONDER={0x1008, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}]}, @NL80211_ATTR_PROBE_RESP={0x445, 0x91, "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"}], @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0xd3, 0xf, [@tim={0x5, 0xc2, {0x1, 0x93, 0x5, "7bbc2f51d847d15fb5658632eca9497f4c5d95ba05af6b4fc992ba01fde5295acd8ac9a91d5fd776b6aa3756530b7ab74e7ff7fc5557516dbd65ebddfc4ddd97cb7bc3519a635634751e2e14cf80653aef4f0901dbe79ef203d0379147ffb54eb72ab99a33f6c6073839b30693d830c48327f5d86a6e647451ea723d828932aff1aedad17441575302d04dd91e970ba906f6fa0929c641234b65e26e3aef0a1d7083b376d256e6b57730e6bd99c38084d4412793811940ba97f932c87ab392"}}, @mesh_id={0x72, 0x6}, @challenge={0x10, 0x1, 0x2d}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x19e, 0x80, [@measure_req={0x26, 0xc8, {0x80, 0xf4, 0xfa, "74263b947d1a2f0b7e0258aae952000ccea6e1c99f641ede6030f892103ba210c05d8df5492d9a445aae4acea7f6d8e046ae992378113867077d14a66624b5c7fa1b99cee95369e0473ce3f22f12871bdd1060224e1ad69acd0083a4133f3b6e8969da9ed12aaa0d1090c7b93ba0dac9a145430b57f0fd3e26e70ca5694c9b534836150befe250b451aa60530a7e3565dac9ca4f64fa2513f6556376261889218969d66e8bc4043de6374125f1a86c62f3e7c0782bd13b632336b571194deae3cd6bb1df9d"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @tim={0x5, 0x7f, {0x0, 0x96, 0x6, "a28eb34c050205051edf4f9ad64258e897b5d42ce28fecdc127a21b2b1fe2fb6c53e5eb0a940da402b405445cc84420478fd7079e924193e7a4f1732a5b7e5280b12f04a71e54f8611d644014857a0e9a94cd0f0548b7e52de7c8bc27dc8704ff1765a5247dc5616f9006b2c213cb68c447894e7eb5741f8d20a62e3"}}, @ht={0x2d, 0x1a, {0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10e, 0x400, 0x33}}, @link_id={0x65, 0x12, {@initial, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x1a}, 0xff, 0x5, @device_a, 0xd, 0x1000, 0xfffffffa}}]}, @NL80211_ATTR_IE={0x14f, 0x2a, [@supported_rates={0x1, 0x2, [{0x1b, 0x1}, {0x24}]}, @fast_bss_trans={0x37, 0x71, {0x6, 0x1, "112c5bb8f52ac0ee05a0d3f4a5bdaf65", "3c07f57a4a53572f615500fc131298b67af90dbb8d2b310509de824e8c89d734", "77ab92fdca7125326a9aaa8129fb3d82591f963b112eafb11117915cc116e93c", [{0x1, 0x1d, "15e0e55a724dc133663cc213db35fd204f4be83682486fc91a15bfc086"}]}}, @measure_req={0x26, 0x26, {0xfc, 0x0, 0xfa, "dc76aaa2c4d219acc61536f7213cdfb22476cd10b6f310643d8343bb1e3db2c21b7c52"}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x7, 0x9, @device_b, 0x2, @value, 0x7, 0x1, @broadcast, 0x6}}, @chsw_timing={0x68, 0x4, {0x3, 0x6}}, @prep={0x83, 0x1f, {{}, 0x4, 0x7f, @device_a, 0x2c9, @void, 0x6, 0x5, @device_a, 0x611}}, @preq={0x82, 0x5c, {{0x0, 0x0, 0x1}, 0x0, 0xa5, 0xe, @broadcast, 0x5, @void, 0xef5, 0xffffffff, 0x6, [{{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x8000}, {{}, @device_b, 0xfffff801}, {{0x0, 0x0, 0x1}, @broadcast, 0x5}, {{0x1, 0x0, 0x1}, @broadcast, 0x4}, {{}, @device_b, 0x1}]}}]}, @NL80211_ATTR_IE={0x11d, 0x2a, [@fast_bss_trans={0x37, 0xe4, {0x9, 0x5, "b4d7b534073390c3d8830ff3ee101c8a", "34938d55afbf9376018ffe7e05b3a5b2a07ad0f6ebce4d175e0814ec908abbe8", "a82c9a315f5ecb3465e89501ea1a2c8805b869e54f803f84bdcc505910ff4f28", [{0x3, 0x23, "865d933247e8cf9d04ad34a6a3476d4328376e62998d878519fa60af0718d4df0f2149"}, {0x4, 0x21, "872082519dcb2070290bbf7f4763785859edf10469beb8a814768371f1c658a434"}, {0x1, 0x1c, "ac8d3cba888327617b20c3ea3692d93d0c8be483e10094e879961956"}, {0x2, 0x22, "c6717dfebd972f510739b46b01834769bb63ea8bb5a464e2c7b7d26f62640a473b21"}, {0x3, 0x6, "e76188a9ead4"}]}}, @challenge={0x10, 0x1, 0x7b}, @random_vendor={0xdd, 0x2e, "112850d20d94d3610ab3815af4bf5a4080d681284b1c95c9057a132d94ff36296f3cdf5fe5a5f19c3dfe6ee2a187"}]}, @NL80211_ATTR_BEACON_TAIL={0xa7, 0xf, [@challenge={0x10, 0x1, 0xee}, @dsss={0x3, 0x1, 0x68}, @random_vendor={0xdd, 0x29, "0794729a506b5937b7c396f2e0c7750f72bfd51cddffd8dbac4d2bf5917f723904c145d368fcc375ac"}, @preq={0x82, 0x51, {{0x0, 0x1, 0x1}, 0x3, 0x4, 0x6, @device_a, 0xf7d8, @void, 0xf, 0xffffff81, 0x5, [{{}, @device_a, 0x74000000}, {{0x0, 0x0, 0x1}, @broadcast}, {{0x1}, @device_a, 0xa}, {{0x0, 0x0, 0x1}, @device_b, 0xe}, {{0x1}, @device_b, 0x1}]}}, @rann={0x7e, 0x15, {{0x1, 0x79}, 0x7, 0x9, @device_b, 0x3, 0x3c7, 0xc}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @channel_switch={0x25, 0x3, {0x0, 0x24}}]}], @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x2f3, 0x7f, [@measure_req={0x26, 0xa8, {0x6, 0xa, 0x8, "8579168943b6c0eb2a1736e3c13abb7f4d678ace3f6a716d9a5b2241e1083a16b0389528504f4d480d87b53f1395ea5b8c5d990ec1301b458d7d5c8290bba1a4c8a0005a8a313b0489db8aa8516a3cab964b8d5c416044b35eb3f97000d4a77037847bedb68f704293ded80c358144390f419ac1a610203ea1b9cb105c09f6b82c3368ddc2f42d8e0c75fbc1c4df7521ddf8d87816a6ac6e6192d57ff4b41116590e1d5034"}}, @perr={0x84, 0x135, {0x20, 0x13, [{{}, @device_b, 0x5, @void, 0x27}, {{0x0, 0x1}, @device_a, 0x38, @value=@broadcast, 0xd}, {{}, @broadcast, 0xffffffff, @void, 0x13}, {{}, @device_a, 0x8, @void, 0x38}, {{0x0, 0x1}, @device_a, 0x8, @value=@device_b, 0x25}, {{0x0, 0x1}, @device_b, 0x401, @value=@broadcast, 0x16}, {{}, @broadcast, 0xc4, @void, 0x20}, {{0x0, 0x1}, @device_b, 0x6, @value, 0x22}, {{0x0, 0x1}, @device_a, 0x7fffffff, @value=@device_b, 0x11}, {{0x0, 0x1}, @device_a, 0xba, @value=@broadcast, 0x28}, {{}, @device_b, 0x2, @void, 0x8}, {{0x0, 0x1}, @broadcast, 0x96, @value=@device_b, 0x3e}, {{0x0, 0x1}, @device_b, 0x80000000, @value=@broadcast, 0x37}, {{}, @broadcast, 0x2, @void, 0x29}, {{0x0, 0x1}, @device_b, 0x7, @value=@device_b, 0x6}, {{}, @device_a, 0xfffff060, @void, 0x18}, {{}, @device_b, 0x30, @void, 0x3c}, {{}, @broadcast, 0x7, @void, 0x32}, {{0x0, 0x1}, @device_a, 0x0, @value=@broadcast, 0xe}]}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x6, 0xb4, @device_a, 0xb, @value, 0x90, 0x0, @device_b}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @tim={0x5, 0xd0, {0x3, 0x88, 0xf8, "e330605676f1923952134749128ec64923a99f90ba1382639c991541a4fd98342c805a9b14cfdcc52e2dd38146149a40ee6bdd9c47f8c599b588bff03d008b6a4d3184b4980de237489eb0e32998d39fc8135d0c3768efdd8e484732cfc6bc4d3afe12309fd68bc79e9866cc3d550c1611a1c037c0a3a1d4838ba0be0471f37ec0d17c38b43ea59c2d6a7fa1ded76ee96bf63f690d6e60f98ac039a7809b7cc0b94a3b4c8c215fe9746793b666c2145fcba4739670bbab3f29c6b96f3631806fc1bfb6a1f24b30b577464b7ca5"}}, @mic={0x8c, 0x10, {0x3b6, "b0a2fb067fa3", @short="2283617802b9b429"}}]}, @NL80211_ATTR_PROBE_RESP={0x5b, 0x91, "744d0b69f0c4f4a1492b366b740c11bae6efa4186163d0c3cba64913fde5d0a3288593062ff6b7f87896de2a4176b98276ea1912c1c1c2ee6cdb5dde7450d20602cb828215b9be7752b34d4c5e02b1e61252995ef8c980"}, @NL80211_ATTR_BEACON_HEAD={0x55b, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7}, @device_a, @device_a, @random="7f85c494c457", {0x6, 0x6}}, 0x2cc, @default, 0x28, @void, @void, @void, @void, @val={0x6, 0x2, 0x9}, @val={0x5, 0x50, {0xc2, 0xdb, 0xb, "921b5e5c55f7f9a2856bcf8cc234aa88bee90e377fc7b882049f735445adc9b18cf454f2f5e52d356c4d6a55c791e40a2be7387ededf2e7d8d4bf42416f02ffa3ab012da6e36d74c70707c4749"}}, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x6, 0x40}}, @val={0x76, 0x6, {0x8, 0xfe, 0x24, 0x8}}, [{0xdd, 0x9f, "89074c88e828da21d964a11dab302e8d8fa6a632d44ac38700967d669156cfd34afe31116c562c9fd05bf99af25855a353739d861c08484404cb9569d7f718ee8a1fb0e48bfef863f97720877fb8aad860fa9683a3bd1e94159b9b7608f76f4ac7a69d077ebb8a7034065e1f3209f3f52384379bf8ea935c03548e2ef60da3fc482c60cae43274cb6b008e6701b287da7db2445a06558671def2828b9a3636"}, {0xdd, 0xd8, "00d2221b2f2bcd861309e29c3b7819e23ba91f6f3c34918208c841db05a4a8e0161f9f29bc6be340bdb5f11a27b33fb116daea460c5ef6476234808a8eb7bc029a50917dfcd5ad15d373fb90a8fed3f25d3d23d26aa8e65f5de75931b20e5affcc73e562b4226adfd593d2225ca5a4d9da528bb3aa5d379322186f5f7e7beb92578d4426e32280c916e3c57b00a7452468d752cd48e0fb77a3b936c3cfd9ce79c88ff6356b47660675fb1ac6db22a2deda586411c28d2851f523e28b023be452e075698f76bc4ce2766987ec056df06dc5c3af68f4d88796"}, {0xdd, 0x2a, "f133cfbf0ad82c852fb7f6028f9d3cffb2c8fcefde7e60b0178c16602ce1aeaa0dd52d64ea4560b863aa"}, {0xdd, 0xe2, "78ee5b26f96b6108f8eae05a9bf6e4508bb37d37e1e941cb6f2ffe12652261c7ee563296a39688b20bfe581e089c9a60cd09a9153118e33aecc7edc5b4433543b7d2b0c8d498381f63f7c91b5836b801802862f6047162ee733d551cc6774ffffd3de57d36136a2c37d3acefccf1256ba7c7ac61bd94a0544fd35480b92dcbcaca8171bca77404813ee5e5027295242ff90142b0520c34e01fb4aef585b086ea583e8c1bdc59ebbee8402b06de8a5a0a6bbcfbe2f6652aee67c2803e329bf1c96ea154111891e28b84b4c02c177652ca4807c057bf4f6c227f3219db08c5338131a4"}, {0xdd, 0x9b, "87425d90f534ce73bcc297f8753317a0531ba0c30a5ea87a858d80b3616755e63627fa6de91dd7f8bf1807f781e5ca71c011ff1077a66bcacffd4270bdbc712c046d7966671a916e6976eff6e463d692ebc3e97df030cce9739c28c8cfbb31efaeca2794f21c74379336b7cf5208e77f54d239f18612f84726bdcc0a63c49e6e1d539d9792ad925058f958c73e18ea21dff3814cd7fd685baf32e3"}, {0xdd, 0xa0, "d415fd45b72f3a1a61dfb0742dfe4b0c007364779fd2d062e1d720aaf8a2f491eaaf25fe911d4387199d6c0fe3d1b16f3e2a3659b832cea2df2849692f9e3dde58879a3f0541f2762b9c6a2e14e1de00d28d04243919c9dba44e984069ad0d83c0ff0574d5fad1ff62bc033dd73a686740f263000aec872ba015d9c23893133b0f3a4231f6f8271b2036a2d783a396ec6991ca880870d678939345a28f707f6d"}, {0xdd, 0xf5, "2ed7c2c0e09a435266ae5a34aff040ec0e46a5eb97d28870f8142cf6962cd282ca424a2d07bce2499f7ed772dd915e539810874d56c6f2a213aea62a780252e15dcb23d1e0adef2b76487f879aa687b0e8c3cd95a512b5b220e8aefad4bb81aa92ff7fa4f50504f51000eccaad13ecf837317e1c00cfa514f32bffaf13e098ac83db969cebbb188f212a2105ea965c111471cf735f4d90ed6b0d21b62fa6519463918bdebe6fd14eb410f64a9f9bec28ef8fd895732f586734f996539aa8479186621efecb4e3973c7396aefbed5cd34e5938aa9c7841342ed9515c783439ade22e84a178e092a6fe42ef48ef53175653098b97966"}]}}, @NL80211_ATTR_BEACON_HEAD={0x393, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x52c}, @broadcast, @broadcast, @random="b90b8e4b08f1", {0x4, 0x8}}, 0x5, @random=0x2, 0x60, @void, @void, @void, @void, @val={0x6, 0x2, 0x3ff}, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x0, 0x6, 0xa1, 0x5}}, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20}}, @val={0x76, 0x6, {0x2, 0x2, 0x25, 0xb}}, [{0xdd, 0x4d, "c502d711c264f02226bf478405ae7af49654b7edf7b652949e826bd2e77dccb46a718b2fa402b9eb3b4e2425ca35091fac6fd798d451284a4ebdf81af1d631af7a7d7f083e58ec9d4e0e00b90c"}, {0xdd, 0x73, "8d3627667acfe451839b05c56f4979b1e41bb468c90c251af36eeacca8588e4f8fbedd7238b793289a1a8a9c772d4bf03ba32e226481fee39ac81bb52c39b3ba3bcf3ac2bab0837440ce0d633ea3e97086de3df76d53291820f54bad3a5bf159c7a7197b6183da768a73ecf70ae87491360946"}, {0xdd, 0x7c, "5e581ddbb4288c2b099c737d41a98fbb61c672f32d21f522fb174595555e8e4c0e2f041ea057eb0baed1645f3acac29c67d3f895e25882ebbb909ac7f41e3cf833900e8d701891367f0f3d9476365f52515b304776772b5742dd862233755cc80407a495cd0b6ed4a5bb434307ff5ffd6aede4d1a1bfce11c78f82ca"}, {0xdd, 0xb5, "0ec4f084b8adb7f0be0a17430426468d519bda3264d684fda71eca60d84db570a43fc97f782afaf7e5aeaa4a9d941ab78533915f186692d2a3cbe45d4cefe002439da313324b61c9b2d2ce9d4480ca0ac4f8d27bed9468faa4bbfc5977a9f4cd49fb8c66cb2f1b9bbe920bfed3871379afc4f36b0134137101e14060c04c3dcae78e8381baffe1e1cd4c55ff78d383edd371cc3e2318adef372133eb9d6568bd0be703dd3f06ff889c6790273545c63d06ee2c08d4"}, {0xdd, 0x2f, "adc3ce9d89facc0225783495769e78ecb756a005fb7089511ece8fbc9c73147245e72fba42117ce605dd978e7c8118"}, {0xdd, 0xf9, "598eefab7a8e7bcc37dd4e6decc0070785d90d36fe523fca00202974f4cedbd0f8e8b54c4f4656f2305bb2b48825eb8ad01a1a16e9ab7e74c2997ae9db32779cb41f18c5456bc338dd4beb4a1277c499191cd5cd391d70706fdf843d31c8dbc3785434e5c4312b8deb600c4d3c38fb614d4c1d4dbe22f66247e07ba7a1a9a21c493281de23c3b19b7f276b909e64156f7627b23b501f9ecab86155cedd6cff5171ff3d3285f55e10299e0c57760e2cbd87f92d9a3805ebb70c955ad845e6a2f15c02255f2018418028d2eaa345a3720dee6f642cb21a661f0f22538101f8e6078a76b7045b4fdc9b02a7816ea86161498ca94c3dc70eaf76ec"}, {0xdd, 0x26, "ff407be25aadfbeca13748cb508abc9e773bc4c8e2eee34d39c79dabd0567ea559f86ed86be5"}]}}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_id={0x72, 0x6}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0xf, 0xbb1]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x8, 0xc, 0x8, 0x2]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x5, 0x7, 0x7, 0x1, 0xeae, 0x72c9, 0x5]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x80, 0x8, 0x2, 0xfff9, 0x5]}]}]}, 0x3060}, 0x1, 0x0, 0x0, 0x4010}, 0x4040) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0175de31562ee4cbcf19670d69f036c8a11c46eca735f77bf525ebc0b780d8f419f47a3d4f427f83bc239e6ce6f658a3892361594a52f2645570e2f570b6cba26e9d69c9ca151efebea654739daff38a"], 0x48) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404000000c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e46968eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000000000000005335000000143ea70c2ab40c7cb70c943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a33e680846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2200af6c7784a1975fa807de38a3a61e44a9ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf652e28e700000000000000b24478a78a0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8ff7e7d1c94c450503009688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0000f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b4cbaf5a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13e434aae9df81ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a384002421d898913c45a9ac091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c045a17e9a61c3b064e679508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd911e0e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4218cea744b332ab232a09cf1ec375627074ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d522946727024de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df00000000000000000000dfa4c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5d00f26126d4cf2c73e5f94030000000000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481c55e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62fc9dfffeb13b4858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1ef90ed4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1af45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d78429d358aa54b4b49926c4be9ee4659153d9f9f5d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000d0267ac40d1130a9000000000045f50812a1a0530b02baed19f4c977ac0d397ed6371ec589bf5943690250bdfa5b676d5d53d2ab3aeee1a6910c1a33b6c06c93386768f8b1bb27ec31cffbd4f5c7b0c2e14e4fc6c2f089ab08567254e93780afdddefb3f0d2143ad73c0bf2467859049d46dc5aa91f918a307e7dcaaccd6cbe66e8a04d201392a487f681f82528a800e27d65200ae10e1b5d39a29d8a2c8ed2dfa77e21249b45806733e674a9e8e72ad1cb0d3bfadb00a18a5008ea1e4c8fb93d311f52a476c576a3f65c9bdd4e4b870aed4cb9906a8aa25986e6e30be249d9911114b42b2fb51168e56000a62b794c193f7797ebeb7f8b91c70b6e720af06ecfcfb89a2d5a25f"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r9, 0x18000000000002a0, 0x160, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x13, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff8}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$OCFS2_IOC_UNRESVSP(r10, 0x40305829, &(0x7f00000002c0)={0x1, 0x2, 0x7, 0x2, 0x1, 0x3ff}) 275.951883ms ago: executing program 1 (id=5817): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000140)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x251}, @window={0x3, 0x2, 0x401}, @window={0x3, 0x5b, 0xff}, @timestamp, @mss={0x2, 0x800}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000200)=""/229, 0xe5, 0x6e8c0b9558bdac1, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 179.406824ms ago: executing program 3 (id=5818): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000b88c1000010000000000000000000000000a54000000060a0b040000000000000099e12927feadd3896e713ea7958e6183b5bc4b51d9c53f802465746100000000140003000000014000000000080002400000000b0900010073797a30000000000900020073797a3200000000140000001100010400000000000000000000000a0800000000000000e7cee4f6023c79a9d28a307677dd8c524ec7930c0aa97196812e93da6397360d8652395887e642485c70968275bc5c2ec9397e6ed60a68f2be11f5b0758666eaed4dc56cd1c48834e6ddc935feb175bea7"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getchain={0x2c, 0x66, 0x100, 0x1f0bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf, 0xb}, {0xf, 0xb}, {0x6}}, [{0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000090) 114.14229ms ago: executing program 4 (id=5819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@deltaction={0x24, 0x32, 0x533, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 0s ago: executing program 0 (id=5820): r0 = socket(0x2c, 0x3, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="8d9c4f90085de3d0f3a11be00de71481", 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000680)={r2, @in={{0x2, 0x4e21, @private=0xa010100}}, [0x3, 0x10000, 0x7ff, 0x2000000000000000, 0x85b, 0x9, 0x7, 0x7fffffffffffffff, 0x1, 0x5, 0x8, 0xfffb, 0xfffffc0000000000, 0x2, 0xd]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={r2}, &(0x7f0000000080)=0x8) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x10}, 0x18) r4 = socket(0x840000000002, 0x3, 0xff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f00000006c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000640)="97452a300c0000006f0000000000000000", 0x11}, {&(0x7f00000000c0)="9e762d2f24d02a99cb0aa5", 0xb}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @private=0xa010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}], 0x40}, 0x2400c804) kernel console output (not intermixed with test programs): cess `syz.1.4141'. [ 557.206421][T22046] netlink: 192 bytes leftover after parsing attributes in process `syz.1.4141'. [ 557.212511][T22042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4142'. [ 557.845971][T22064] validate_nla: 1 callbacks suppressed [ 557.845992][T22064] netlink: 'syz.0.4145': attribute type 1 has an invalid length. [ 557.854502][T22064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4145'. [ 558.300047][T22080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4149'. [ 558.318614][T22080] netlink: 'syz.3.4149': attribute type 7 has an invalid length. [ 558.318635][T22080] netlink: 'syz.3.4149': attribute type 8 has an invalid length. [ 558.441686][T22089] __nla_validate_parse: 2 callbacks suppressed [ 558.441707][T22089] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4151'. [ 559.347991][T22113] netlink: 27 bytes leftover after parsing attributes in process `syz.1.4155'. [ 559.355249][T22113] batman_adv: batadv0: Adding interface: veth0 [ 559.355280][T22113] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.355326][T22113] batman_adv: batadv0: Interface activated: veth0 [ 559.447565][T22113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4155'. [ 559.447597][T22113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.447617][T22113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.454842][T22119] netlink: 'syz.0.4157': attribute type 2 has an invalid length. [ 559.502242][T22113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.502266][T22113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.550547][T22113] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 559.550571][T22113] batman_adv: batadv0: Removing interface: ipvlan2 [ 559.579420][T22113] batman_adv: batadv0: Interface deactivated: veth0 [ 559.579444][T22113] batman_adv: batadv0: Removing interface: veth0 [ 559.692438][T22125] 8021q: VLANs not supported on vxcan1 [ 560.019103][T22134] syzkaller1: entered promiscuous mode [ 560.019126][T22134] syzkaller1: entered allmulticast mode [ 560.170610][T22148] syz_tun: entered allmulticast mode [ 560.229866][T22146] syz_tun: left allmulticast mode [ 560.530027][T22163] openvswitch: netlink: IPv4 tunnel dst address is zero [ 561.148748][T22182] tipc: Started in network mode [ 561.148778][T22182] tipc: Node identity e6b697c5df72, cluster identity 4711 [ 561.149030][T22182] tipc: Enabled bearer , priority 0 [ 561.275355][T22186] bond0: option miimon: invalid value (18446744071829782528) [ 561.275382][T22186] bond0: option miimon: allowed values 0 - 2147483647 [ 561.427084][T22194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4179'. [ 561.480171][T22196] xt_hashlimit: size too large, truncated to 1048576 [ 561.741813][T22208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4184'. [ 561.743223][T22208] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0) [ 561.743290][T22208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.850614][T22214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4184'. [ 561.891161][T22212] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0) [ 561.891200][T22212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.196184][T22208] tipc: Enabling of bearer rejected, media not registered [ 562.208071][T22212] tipc: Enabling of bearer rejected, media not registered [ 562.231308][T22222] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 562.272549][ T5790] tipc: Node number set to 969185221 [ 562.329167][T22224] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4188'. [ 562.753826][T22242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4195'. [ 562.893006][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.945635][T22250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4197'. [ 562.945673][T22250] netlink: 'syz.4.4197': attribute type 14 has an invalid length. [ 562.945687][T22250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4197'. [ 563.040974][T22250] netlink: 'syz.4.4197': attribute type 14 has an invalid length. [ 563.056566][ T9612] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.056609][ T9612] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.056667][ T9612] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.056700][ T9612] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.108322][T22249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 563.580559][T22245] syz.2.4195 (22245) used greatest stack depth: 18312 bytes left [ 563.580911][T22242] syz.2.4195 (22242) used greatest stack depth: 18088 bytes left [ 563.879532][T22272] __nla_validate_parse: 2 callbacks suppressed [ 563.879553][T22272] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4203'. [ 563.898446][T22272] xt_hashlimit: size too large, truncated to 1048576 [ 564.024799][T22276] netlink: 464 bytes leftover after parsing attributes in process `syz.2.4203'. [ 564.190749][T22282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4203'. [ 564.888142][T22302] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4211'. [ 564.893620][T22302] FAULT_INJECTION: forcing a failure. [ 564.893620][T22302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.893653][T22302] CPU: 0 UID: 0 PID: 22302 Comm: syz.1.4211 Not tainted syzkaller #0 PREEMPT(full) [ 564.893675][T22302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 564.893687][T22302] Call Trace: [ 564.893695][T22302] [ 564.893704][T22302] dump_stack_lvl+0xe8/0x150 [ 564.893738][T22302] should_fail_ex+0x410/0x560 [ 564.893769][T22302] _copy_from_user+0x2d/0xb0 [ 564.893795][T22302] ___sys_sendmsg+0x1c6/0x360 [ 564.893823][T22302] ? __lock_acquire+0x747/0x2de0 [ 564.893849][T22302] ? __pfx____sys_sendmsg+0x10/0x10 [ 564.893918][T22302] ? __fget_files+0x2a/0x420 [ 564.893944][T22302] ? __fget_files+0x3a2/0x420 [ 564.893980][T22302] __x64_sys_sendmsg+0x1b1/0x290 [ 564.894009][T22302] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 564.894055][T22302] do_syscall_64+0x166/0x520 [ 564.894077][T22302] ? trace_irq_disable+0x3b/0x140 [ 564.894097][T22302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.894123][T22302] ? clear_bhb_loop+0x70/0xc0 [ 564.894148][T22302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.894167][T22302] RIP: 0033:0x7f039dd9e159 [ 564.894185][T22302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.894201][T22302] RSP: 002b:00007f039bff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 564.894223][T22302] RAX: ffffffffffffffda RBX: 00007f039e025fa0 RCX: 00007f039dd9e159 [ 564.894237][T22302] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 564.894249][T22302] RBP: 00007f039bff6090 R08: 0000000000000000 R09: 0000000000000000 [ 564.894262][T22302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.894274][T22302] R13: 00007f039e026038 R14: 00007f039e025fa0 R15: 00007ffe245436d8 [ 564.894305][T22302] [ 565.151368][T22304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4213'. [ 565.151876][T22304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4213'. [ 565.503788][T22325] IPVS: set_ctl: invalid protocol: 46 255.255.255.255:20001 [ 565.562887][T22320] lo speed is unknown, defaulting to 1000 [ 565.796484][T22337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4221'. [ 565.816422][T22337] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4221'. [ 566.587520][T22320] wlan0 speed is unknown, defaulting to 1000 [ 566.730470][T22362] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4228'. [ 566.989974][T22374] netlink: 'syz.2.4230': attribute type 21 has an invalid length. [ 567.088403][T22372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4229'. [ 567.405263][ T9644] bond0: (slave bridge0): link status definitely down, disabling slave [ 567.924296][T22390] vlan3: entered allmulticast mode [ 567.924320][T22390] bond0: entered allmulticast mode [ 567.924333][T22390] bond_slave_0: entered allmulticast mode [ 567.924349][T22390] bond_slave_1: entered allmulticast mode [ 567.924369][T22390] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 567.985769][T22393] sctp: [Deprecated]: syz.0.4235 (pid 22393) Use of int in maxseg socket option. [ 567.985769][T22393] Use struct sctp_assoc_value instead [ 568.961005][T22424] __nla_validate_parse: 8 callbacks suppressed [ 568.961026][T22424] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4242'. [ 568.993924][T22424] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4242'. [ 569.106814][T22429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4243'. [ 569.456616][T22442] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4247'. [ 569.543325][T22446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4249'. [ 569.543539][T22446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4249'. [ 569.544546][ T9567] IPVS: starting estimator thread 0... [ 569.628201][T22447] IPVS: using max 31 ests per chain, 74400 per kthread [ 569.762197][T22457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4251'. [ 569.762226][T22457] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4251'. [ 569.820916][T22457] bond5: (slave veth0_to_bond): Releasing active interface [ 569.820976][T22457] veth0_to_bond: left allmulticast mode [ 570.266458][T22478] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 570.298265][T22482] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4257'. [ 570.730378][T22491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4261'. [ 570.822872][T22491] team0 (unregistering): Port device team_slave_0 removed [ 570.879426][T22491] team0 (unregistering): Port device team_slave_1 removed [ 571.041949][T22489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 571.208092][T22494] xfrm1: entered promiscuous mode [ 571.208115][T22494] xfrm1: entered allmulticast mode [ 571.262751][T22500] gretap0: entered promiscuous mode [ 571.518910][T22505] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 571.889627][T22520] gre2: entered promiscuous mode [ 571.889683][T22520] gre2: entered allmulticast mode [ 573.095578][T22556] tipc: Started in network mode [ 573.095606][T22556] tipc: Node identity ba26379ce0dc, cluster identity 4711 [ 573.112795][T22556] tipc: Enabled bearer , priority 0 [ 573.112864][T22557] syzkaller0: entered promiscuous mode [ 573.112880][T22557] syzkaller0: entered allmulticast mode [ 573.910624][T22566] 8021q: adding VLAN 0 to HW filter on device bond2 [ 573.924346][T22566] 8021q: adding VLAN 0 to HW filter on device bond3 [ 573.965342][T22566] bond4: entered allmulticast mode [ 573.965380][T22566] bridge2: entered allmulticast mode [ 573.983160][T22566] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 573.995755][T22592] __nla_validate_parse: 9 callbacks suppressed [ 573.995772][T22592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4286'. [ 574.010528][T22566] bond5: entered allmulticast mode [ 574.010565][T22566] bridge4: entered allmulticast mode [ 574.013247][T22566] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 574.079009][T22566] 8021q: adding VLAN 0 to HW filter on device bond6 [ 574.106954][T22568] gre0: left allmulticast mode [ 574.231913][T22568] syzkaller0: left allmulticast mode [ 574.234132][T22568] macvtap1: left allmulticast mode [ 574.234150][T22568] bond4: left allmulticast mode [ 574.234162][T22568] bridge2: left allmulticast mode [ 574.262595][T22568] macvtap2: left allmulticast mode [ 574.262647][T22568] bond5: left allmulticast mode [ 574.262660][T22568] bridge4: left allmulticast mode [ 574.276124][T22568] veth3: left allmulticast mode [ 574.322766][ T5788] tipc: Node number set to 1526347676 [ 574.588295][T22581] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 574.673578][T22607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4291'. [ 574.953005][T22616] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4293'. [ 574.953824][T22618] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4293'. [ 575.054344][T22616] netlink: 'syz.3.4293': attribute type 11 has an invalid length. [ 575.054385][T22616] netlink: 'syz.3.4293': attribute type 4 has an invalid length. [ 575.054415][T22616] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4293'. [ 575.125451][T22624] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4297'. [ 575.127792][T20536] Bluetooth: hci1: command tx timeout [ 575.261884][T22627] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4296'. [ 576.006154][T22657] syzkaller0: Caught tx_queue_len zero misconfig [ 576.034866][T22657] syzkaller0: left promiscuous mode [ 576.428587][T22675] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4310'. [ 576.996443][T22703] netlink: 199784 bytes leftover after parsing attributes in process `syz.3.4316'. [ 576.996469][T22703] netlink: 'syz.3.4316': attribute type 1 has an invalid length. [ 577.842509][T22732] sock: sock_timestamping_bind_phc: sock not bind to device [ 577.845453][T22732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4326'. [ 578.231610][T22740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.231822][T22740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.232093][T22740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.232716][T22740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.232939][T22740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.237106][T22740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.276098][T22739] netlink: 'syz.1.4329': attribute type 1 has an invalid length. [ 578.306634][T22742] syzkaller0: entered promiscuous mode [ 578.306671][T22742] syzkaller0: entered allmulticast mode [ 578.338169][T22740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.363728][T22746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.374667][T22746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.398989][T22746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.441683][T22751] siw: device registration error -23 [ 578.501581][T22755] netlink: 'syz.1.4336': attribute type 4 has an invalid length. [ 578.773468][T22759] netlink: 'syz.1.4336': attribute type 4 has an invalid length. [ 579.804875][T22804] syzkaller0: left promiscuous mode [ 579.804899][T22804] syzkaller0: left allmulticast mode [ 580.121778][T22814] __nla_validate_parse: 4 callbacks suppressed [ 580.121797][T22814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4353'. [ 580.131508][T22816] netlink: 'syz.0.4352': attribute type 1 has an invalid length. [ 580.131575][T22816] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4352'. [ 580.622481][T22832] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4356'. [ 580.864073][T22838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4356'. [ 580.864096][T22838] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4356'. [ 581.486042][T22843] lo speed is unknown, defaulting to 1000 [ 581.608906][T22861] x_tables: unsorted entry at hook 4 [ 581.651281][T22863] tipc: Enabled bearer , priority 0 [ 581.747444][T22863] syzkaller0: MTU too low for tipc bearer [ 581.747485][T22863] tipc: Disabling bearer [ 581.902268][T22870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4366'. [ 582.084653][T22870] 8021q: adding VLAN 0 to HW filter on device bond3 [ 582.167126][T22879] netlink: 'syz.4.4367': attribute type 21 has an invalid length. [ 582.282207][T22870] macvlan3: entered promiscuous mode [ 582.282231][T22870] macvlan3: entered allmulticast mode [ 582.284719][T22870] bond3: entered promiscuous mode [ 582.285915][T22870] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 582.341170][T22870] bond3: left promiscuous mode [ 582.389557][T22879] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4367'. [ 583.066418][T22899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4375'. [ 583.333623][T22908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4379'. [ 583.517376][T22843] wlan0 speed is unknown, defaulting to 1000 [ 584.235598][T22936] netlink: 'syz.1.4387': attribute type 1 has an invalid length. [ 584.301760][T22936] 8021q: adding VLAN 0 to HW filter on device bond6 [ 584.364304][T22942] bond6: (slave veth3): Enslaving as an active interface with a down link [ 584.406651][T22936] bond6: (slave dummy0): making interface the new active one [ 584.418664][T22936] dummy0: entered promiscuous mode [ 584.419136][T22936] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 584.429300][T22942] netlink: 'syz.1.4387': attribute type 10 has an invalid length. [ 584.429361][T22942] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4387'. [ 584.636780][T22942] bond6: (slave dummy0): Releasing active interface [ 584.869221][T22945] syzkaller0: entered promiscuous mode [ 584.869281][T22945] syzkaller0: entered allmulticast mode [ 585.342643][T22972] __nla_validate_parse: 5 callbacks suppressed [ 585.342663][T22972] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4395'. [ 585.612853][T22975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4396'. [ 586.265598][T23000] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4404'. [ 586.386387][T23004] xt_MASQUERADE: bad MAP_IPS. [ 587.210106][ C0] net_ratelimit: 227 callbacks suppressed [ 587.210127][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.211479][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.862922][ T9612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.863291][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.557874][T23012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.894718][T23028] netdevsim netdevsim4: Firmware load for './file0/file0/..' refused, path contains '..' component [ 589.949260][T23028] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4413'. [ 590.025153][T23028] syzkaller0: entered promiscuous mode [ 590.025178][T23028] syzkaller0: entered allmulticast mode [ 593.298975][T23054] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4418'. [ 593.415371][T23058] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4422'. [ 593.505698][T23060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4423'. [ 593.622128][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.622296][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.900390][T23075] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4424'. [ 594.041525][T23084] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 594.190727][T23084] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 594.196666][T23084] bond7 (unregistering): Released all slaves [ 594.370957][T23096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.371245][T23096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.372743][T23096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.373054][T23096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.374856][T23096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.375176][T23096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.546773][T23094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.846785][T23107] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4433'. [ 594.908981][T23107] netlink: 'syz.2.4433': attribute type 2 has an invalid length. [ 594.909021][T23107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4433'. [ 594.936320][T23107] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 595.283964][T23128] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4439'. [ 595.284620][T23128] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4439'. [ 595.324917][T23128] netlink: 548 bytes leftover after parsing attributes in process `syz.2.4439'. [ 595.516209][T23137] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4439'. [ 596.391643][T23178] xt_IDLETIMER: timeout value is zero [ 597.580236][ T9612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.580258][ T9612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.668203][T23230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 598.673635][T23271] __nla_validate_parse: 6 callbacks suppressed [ 598.673655][T23271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4471'. [ 599.199341][T23290] netlink: 'syz.4.4477': attribute type 10 has an invalid length. [ 599.199388][T23290] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4477'. [ 599.268804][T23293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4476'. [ 599.269906][T23294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4476'. [ 599.274347][T23290] dummy0: entered promiscuous mode [ 599.274500][T23290] dummy0: entered allmulticast mode [ 599.283973][T23290] net_ratelimit: 1 callbacks suppressed [ 599.284003][T23290] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 599.285210][T23293] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4476'. [ 599.285539][T23294] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4476'. [ 599.410555][ T9567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.410950][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.612564][T23306] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4481'. [ 599.612606][T23306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4481'. [ 599.632766][T23303] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 599.654292][T23305] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4481'. [ 599.654335][T23305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4481'. [ 599.880688][T23308] bond7 (unregistering): Released all slaves [ 600.243252][T23317] h: entered promiscuous mode [ 600.264215][T23317] netlink: 'syz.1.4485': attribute type 3 has an invalid length. [ 600.566625][T23331] tipc: Enabling of bearer rejected, already enabled [ 600.582771][T23331] xt_hashlimit: size too large, truncated to 1048576 [ 600.697864][T23335] syzkaller0: entered promiscuous mode [ 600.697888][T23335] syzkaller0: entered allmulticast mode [ 601.109250][T23348] bond0: Device is already in use. [ 601.467869][T23356] nftables ruleset with unbound set [ 601.804028][T23371] openvswitch: netlink: Flow key attr not present in new flow. [ 603.302352][T23421] x_tables: duplicate underflow at hook 1 [ 603.355733][T23422] IPv6: addrconf: prefix option has invalid lifetime [ 603.355750][T23422] IPv6: addrconf: prefix option has invalid lifetime [ 603.703132][T23433] __nla_validate_parse: 71 callbacks suppressed [ 603.703152][T23433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4513'. [ 604.207303][T23459] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4522'. [ 604.349603][T23468] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4523'. [ 604.354805][T23468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.354957][T23468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.706162][T23479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4524'. [ 604.852110][T23485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.854731][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.138415][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.138867][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.236702][T23513] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4535'. [ 605.369032][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.370448][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.066632][T23532] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4538'. [ 606.469467][T23535] vlan0: entered promiscuous mode [ 606.469491][T23535] bridge0: entered promiscuous mode [ 606.469815][T23535] vlan0: entered allmulticast mode [ 606.469851][T23535] bridge0: entered allmulticast mode [ 606.923043][T23539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4541'. [ 607.027609][T23542] netlink: 'syz.2.4542': attribute type 4 has an invalid length. [ 607.065687][T23524] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4537'. [ 607.128657][T23544] netlink: 'syz.2.4542': attribute type 4 has an invalid length. [ 607.982363][T23556] netlink: 'syz.2.4550': attribute type 21 has an invalid length. [ 607.982384][T23556] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4550'. [ 607.982430][T23556] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4550'. [ 607.982686][T23556] netlink: 'syz.2.4550': attribute type 21 has an invalid length. [ 607.982877][T23556] netlink: 'syz.2.4550': attribute type 21 has an invalid length. [ 607.983050][T23556] netlink: 'syz.2.4550': attribute type 21 has an invalid length. [ 607.983224][T23556] netlink: 'syz.2.4550': attribute type 21 has an invalid length. [ 607.983388][T23556] netlink: 'syz.2.4550': attribute type 21 has an invalid length. [ 607.983575][T23556] netlink: 'syz.2.4550': attribute type 21 has an invalid length. [ 607.983745][T23556] netlink: 'syz.2.4550': attribute type 21 has an invalid length. [ 608.800325][T23599] __nla_validate_parse: 14 callbacks suppressed [ 608.800373][T23599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4559'. [ 608.800407][T23599] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4559'. [ 609.048820][T23604] tipc: Started in network mode [ 609.048871][T23604] tipc: Node identity fe66285df9b4, cluster identity 4711 [ 609.049024][T23604] tipc: Enabled bearer , priority 0 [ 609.151142][T23604] syzkaller0: entered promiscuous mode [ 609.151168][T23604] syzkaller0: entered allmulticast mode [ 609.151999][T23604] tipc: Resetting bearer [ 609.158987][ C0] Unknown status report in ack skb [ 609.378886][T23615] ip_tables: iptables: counters copy to user failed while replacing table [ 609.440459][T23615] netlink: 284 bytes leftover after parsing attributes in process `syz.2.4565'. [ 609.616404][ T13] tipc: Resetting bearer [ 609.642811][T23603] tipc: Resetting bearer [ 609.659869][T23626] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4568'. [ 610.249351][ T1131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.249780][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.555350][T23603] tipc: Disabling bearer [ 612.571496][T23626] 0·: renamed from hsr0 (while UP) [ 612.595914][T23626] 0·: entered allmulticast mode [ 612.595938][T23626] hsr_slave_0: entered allmulticast mode [ 612.595956][T23626] hsr_slave_1: entered allmulticast mode [ 612.596458][T23626] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 612.597654][ T57] tipc: Node number set to 131213405 [ 612.676111][T23645] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4572'. [ 612.684620][T23645] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.685220][T23645] bridge0: port 1(1¾x9ÿ) entered disabled state [ 612.749222][T23646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4572'. [ 612.749253][T23646] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4572'. [ 612.749268][T23646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4572'. [ 612.988510][T23655] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4575'. [ 613.241425][T23665] bridge0: port 3(vlan4) entered blocking state [ 613.243723][T23665] bridge0: port 3(vlan4) entered disabled state [ 613.265479][T23665] vlan4: entered allmulticast mode [ 613.265520][T23665] geneve0: entered allmulticast mode [ 613.299621][T23665] vlan4: entered promiscuous mode [ 613.299667][T23665] geneve0: entered promiscuous mode [ 613.357813][T23673] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4578'. [ 613.888043][T23685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4582'. [ 613.981097][T23689] IPVS: Error connecting to the multicast addr [ 614.049309][T23687] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4583'. [ 614.069339][T23687] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4583'. [ 614.075764][T23692] netlink: 'syz.2.4584': attribute type 5 has an invalid length. [ 614.075784][T23692] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4584'. [ 614.333816][T23695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4585'. [ 614.833336][T23698] xt_CT: You must specify a L4 protocol and not use inversions on it [ 615.156920][T23729] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4594'. [ 615.161111][T23729] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 615.368054][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.368258][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.382188][T23735] netlink: 71 bytes leftover after parsing attributes in process `syz.2.4595'. [ 615.981481][T23761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4599'. [ 616.029548][T23765] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4599'. [ 616.193195][T23769] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4600'. [ 616.328757][T23773] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 616.910761][T23808] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 616.972073][T23808] netlink: 'syz.4.4612': attribute type 10 has an invalid length. [ 617.004507][T23808] vlan0: entered promiscuous mode [ 617.149475][T23808] team0: Port device vlan0 added [ 617.211813][T23811] netlink: 'syz.0.4614': attribute type 6 has an invalid length. [ 617.503029][T23832] netlink: 'syz.4.4619': attribute type 23 has an invalid length. [ 617.711836][T23835] openvswitch: netlink: Duplicate or invalid key (type 0). [ 617.838072][T23840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 618.194201][T23850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 618.195413][T23842] 0·: left allmulticast mode [ 618.195451][T23842] hsr_slave_0: left allmulticast mode [ 618.195483][T23842] hsr_slave_1: left allmulticast mode [ 618.262355][T23842] syzkaller0: left allmulticast mode [ 618.610789][T23865] nbd: must specify at least one socket [ 618.968642][T23877] sch_tbf: burst 0 is lower than device lo mtu (143) ! [ 619.142834][T23882] netlink: 'syz.0.4635': attribute type 11 has an invalid length. [ 619.303309][T23884] __nla_validate_parse: 10 callbacks suppressed [ 619.303330][T23884] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4636'. [ 619.869172][T23892] v: renamed from veth0_vlan [ 619.898857][T23908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4644'. [ 619.916559][T23898] sctp: [Deprecated]: syz.1.4641 (pid 23898) Use of int in maxseg socket option. [ 619.916559][T23898] Use struct sctp_assoc_value instead [ 620.134808][T23909] lo speed is unknown, defaulting to 1000 [ 620.144844][T23914] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4645'. [ 620.651063][T23923] veth0_to_bond: entered allmulticast mode [ 620.665098][T23927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4648'. [ 620.665119][T23927] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4648'. [ 620.793919][T23929] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4649'. [ 620.793949][T23929] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4649'. [ 620.793965][T23929] A link change request failed with some changes committed already. Interface E may have been left with an inconsistent configuration, please check. [ 621.310787][T23909] wlan0 speed is unknown, defaulting to 1000 [ 621.819955][T23965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.581280][T23998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4658'. [ 623.149980][T24008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4661'. [ 623.969756][T24024] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 624.024419][T23985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4659'. [ 624.332194][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.821104][T24049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4670'. [ 624.970270][ T1131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.970465][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.000186][T24049] bond4: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 625.021157][T24064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4671'. [ 625.151489][T24049] bond4 (unregistering): Released all slaves [ 625.511364][T24043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 626.053960][T24088] ip_tables: iptables: counters copy to user failed while replacing table [ 626.627685][ T30] audit: type=1800 audit(1789398378.520:5): pid=24115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4684" name="memory.events" dev="tmpfs" ino=1803 res=0 errno=0 [ 626.912919][T24122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4686'. [ 627.018276][ T30] audit: type=1804 audit(1789398378.920:6): pid=24125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4687" name="/newroot/346/cgroup.controllers" dev="tmpfs" ino=1789 res=1 errno=0 [ 627.019663][ T30] audit: type=1800 audit(1789398378.920:7): pid=24125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4687" name="cgroup.controllers" dev="tmpfs" ino=1789 res=0 errno=0 [ 627.192018][T24137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4690'. [ 627.238372][T24139] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 627.256520][T24140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4689'. [ 627.262435][T24140] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4689'. [ 627.335287][T24140] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4689'. [ 627.336282][T24142] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4689'. [ 627.885432][T24160] netlink: 'syz.2.4696': attribute type 3 has an invalid length. [ 628.294840][T24173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4700'. [ 628.375387][T24183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4700'. [ 629.143286][T24206] bridge5: entered promiscuous mode [ 629.143349][T24206] bridge5: entered allmulticast mode [ 629.206177][T24201] tipc: Failed to remove unknown binding: 66,0,0/1526347676:3485869322/3485869323 [ 629.211171][T24201] tipc: Failed to remove unknown binding: 66,0,0/1526347676:3485869322/3485869323 [ 629.229943][T24212] bridge6: entered promiscuous mode [ 629.230877][T24212] bridge6: entered allmulticast mode [ 629.615575][ T194] IPVS: starting estimator thread 0... [ 629.697293][T24225] IPVS: using max 28 ests per chain, 67200 per kthread [ 630.373138][T24250] netlink: Setting conntrack mark requires 'commit' flag. [ 630.373169][T24250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 630.393633][T24266] __nla_validate_parse: 2 callbacks suppressed [ 630.393668][T24266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4725'. [ 630.393706][T24266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4725'. [ 630.393768][T24266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4725'. [ 630.730079][ T9613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.730628][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.922616][T24279] netlink: 'syz.0.4727': attribute type 1 has an invalid length. [ 631.333289][T24300] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 631.349403][T24279] bond6: entered promiscuous mode [ 631.350200][T24279] 8021q: adding VLAN 0 to HW filter on device bond6 [ 631.421966][T24305] x_tables: duplicate underflow at hook 3 [ 631.424537][T24305] tipc: Enabling of bearer rejected, already enabled [ 631.426978][T24305] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4733'. [ 631.505627][T24303] bond6: (slave bridge10): making interface the new active one [ 631.505677][T24303] bridge10: entered promiscuous mode [ 631.523982][T24303] bond6: (slave bridge10): Enslaving as an active interface with an up link [ 631.561990][T24302] macvtap3: entered allmulticast mode [ 631.995254][T24318] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 631.995768][T24318] tipc: Enabled bearer , priority 10 [ 631.996687][T24317] netlink: 'syz.2.4735': attribute type 1 has an invalid length. [ 632.063848][T24321] netlink: 420 bytes leftover after parsing attributes in process `syz.1.4736'. [ 632.064436][T24321] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4736'. [ 632.165219][T24330] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4735'. [ 632.175809][T24331] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4735'. [ 632.262899][T24318] 8021q: adding VLAN 0 to HW filter on device bond5 [ 632.265024][T24318] bond4: (slave bond5): making interface the new active one [ 632.266190][T24318] bond4: (slave bond5): Enslaving as an active interface with an up link [ 632.301550][T24321] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.303654][T24321] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.396881][T24317] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 632.412944][T24330] 8021q: adding VLAN 0 to HW filter on device bond4 [ 632.454357][T24337] syzkaller0: Caught tx_queue_len zero misconfig [ 632.902203][T24357] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4749'. [ 632.926622][T24357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4749'. [ 633.079286][T24357] macvtap4: entered promiscuous mode [ 633.079311][T24357] vlan0: entered promiscuous mode [ 633.082964][T24357] macvtap4: entered allmulticast mode [ 633.082984][T24357] vlan0: entered allmulticast mode [ 633.082999][T24357] veth0_vlan: entered allmulticast mode [ 634.253082][T24401] set match dimension is over the limit! [ 634.353865][T24399] 0ªX¹¦Dö»: left allmulticast mode [ 634.431559][T24399] 0ªî{X¹¦: renamed from 00ªX¹¦Dö» [ 634.465038][T24399] 0ªî{X¹¦: entered allmulticast mode [ 634.476940][T24399] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 634.565744][T24411] netlink: 'syz.2.4763': attribute type 1 has an invalid length. [ 634.768350][T24411] 8021q: adding VLAN 0 to HW filter on device bond6 [ 635.126082][T24428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 635.222936][ T9616] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 635.839070][T24454] __nla_validate_parse: 8 callbacks suppressed [ 635.839089][T24454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4775'. [ 635.864773][ T9612] wlan0: Trigger new scan to find an IBSS to join [ 635.960583][T24457] netlink: 'syz.3.4774': attribute type 21 has an invalid length. [ 635.960663][T24457] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4774'. [ 636.277398][T24463] bridge_slave_0: invalid flags given to default FDB implementation [ 636.323770][T24471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4777'. [ 636.412115][T24470] bridge_slave_0: invalid flags given to default FDB implementation [ 636.488665][ T9604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.488878][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.675466][T24471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4777'. [ 636.675506][T24471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 637.068598][T24495] wg1: entered promiscuous mode [ 637.068620][T24495] wg1: entered allmulticast mode [ 637.433402][T24512] nftables ruleset with unbound chain [ 638.105750][T24542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4792'. [ 638.107031][T24542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4792'. [ 638.112985][T24542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4792'. [ 638.121445][T24542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4792'. [ 638.122004][T24542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4792'. [ 638.126855][T24542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4792'. [ 638.807965][ T9644] wlan0: Trigger new scan to find an IBSS to join [ 639.162654][T24569] netlink: 'syz.4.4798': attribute type 4 has an invalid length. [ 639.225527][T24569] ip6gretap0: entered promiscuous mode [ 639.298873][T24574] netlink: 'syz.3.4799': attribute type 21 has an invalid length. [ 639.423687][T24574] netlink: 'syz.3.4799': attribute type 6 has an invalid length. [ 640.095443][T24600] syzkaller0: left promiscuous mode [ 641.339881][T24648] gre0: entered allmulticast mode [ 641.404256][T24669] __nla_validate_parse: 146 callbacks suppressed [ 641.404307][T24669] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4818'. [ 641.404507][T24669] 0ªî{X¹¦: renamed from gretap0 [ 641.448416][T24669] 0ªî{X¹¦: left promiscuous mode [ 641.448474][T24669] 0ªî{X¹¦: entered allmulticast mode [ 641.483318][T24669] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 641.562014][T24679] netlink: 30 bytes leftover after parsing attributes in process `syz.1.4819'. [ 641.612167][ T9581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.612555][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.856518][ T9581] wlan0: Trigger new scan to find an IBSS to join [ 641.956467][T24689] xt_hashlimit: size too large, truncated to 1048576 [ 642.141476][T24691] lo speed is unknown, defaulting to 1000 [ 642.406597][T24706] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4831'. [ 642.406622][T24706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4831'. [ 642.765014][ T9581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.979982][T24720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4839'. [ 643.565893][T24739] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4847'. [ 643.592825][T24691] wlan0 speed is unknown, defaulting to 1000 [ 644.345817][T24757] lo speed is unknown, defaulting to 1000 [ 644.422830][T24763] netlink: 'syz.2.4857': attribute type 1 has an invalid length. [ 644.422887][T24763] netlink: 'syz.2.4857': attribute type 2 has an invalid length. [ 644.429444][T24763] netlink: 'syz.2.4857': attribute type 1 has an invalid length. [ 644.429479][T24763] netlink: 'syz.2.4857': attribute type 2 has an invalid length. [ 644.807534][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.811137][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.885718][T24780] IPv6: sit1: Disabled Multicast RS [ 644.903251][T24780] sit1: entered allmulticast mode [ 646.024905][T24757] wlan0 speed is unknown, defaulting to 1000 [ 646.097754][T24806] lo speed is unknown, defaulting to 1000 [ 646.435151][T24815] netlink: 'syz.3.4868': attribute type 1 has an invalid length. [ 646.435174][T24815] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4868'. [ 646.614658][T24806] wlan0 speed is unknown, defaulting to 1000 [ 646.701652][T24817] netlink: 'syz.2.4869': attribute type 1 has an invalid length. [ 646.842183][T24821] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4870'. [ 646.866181][T24822] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4870'. [ 647.369065][T24664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.369255][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.903493][T24844] netlink: 'syz.3.4874': attribute type 11 has an invalid length. [ 647.903515][T24844] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4874'. [ 647.972593][T24844] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4874'. [ 648.389987][T24854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4877'. [ 648.440066][T24854] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4877'. [ 648.919297][T24877] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.4882'. [ 649.136605][T24882] netlink: 'syz.1.4883': attribute type 9 has an invalid length. [ 649.443556][T24887] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 649.733878][T24889] netlink: 808 bytes leftover after parsing attributes in process `syz.1.4885'. [ 649.754257][T24891] netlink: 808 bytes leftover after parsing attributes in process `syz.1.4885'. [ 651.277277][T24851] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 651.786523][T24909] netlink: 'syz.0.4892': attribute type 1 has an invalid length. [ 651.933148][T24914] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 651.935721][T24909] 8021q: adding VLAN 0 to HW filter on device bond7 [ 652.065436][T24912] bond7: (slave bridge12): making interface the new active one [ 652.081015][T24912] bond7: (slave bridge12): Enslaving as an active interface with an up link [ 652.084538][T24921] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4894'. [ 652.141915][T24914] netlink: 'syz.1.4891': attribute type 1 has an invalid length. [ 652.841964][T24948] netlink: 'syz.0.4900': attribute type 1 has an invalid length. [ 652.937779][T24948] bond8: entered promiscuous mode [ 652.938691][T24948] 8021q: adding VLAN 0 to HW filter on device bond8 [ 652.941570][T24951] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4904'. [ 652.993391][T24951] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4904'. [ 653.030389][T24948] 8021q: adding VLAN 0 to HW filter on device bond8 [ 653.030798][T24948] bond8: (slave xfrm1): The slave device specified does not support setting the MAC address [ 653.030840][T24948] bond8: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 653.035999][T24948] bond8: (slave xfrm1): making interface the new active one [ 653.036021][T24948] xfrm1: entered promiscuous mode [ 653.064361][T24948] xfrm1: left promiscuous mode [ 653.128898][T24664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.129102][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.266459][T24964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4908'. [ 654.753059][T24913] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 655.121952][T24995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4917'. [ 655.247965][T24998] syzkaller0: mtu less than device minimum [ 655.304933][T25000] netlink: 'syz.1.4918': attribute type 1 has an invalid length. [ 655.304955][T25000] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4918'. [ 655.304972][T25000] netlink: 'syz.1.4918': attribute type 1 has an invalid length. [ 655.458532][T25005] netlink: 'syz.4.4919': attribute type 11 has an invalid length. [ 655.498866][T25005] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4919'. [ 655.500183][T25005] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4919'. [ 655.500221][T25005] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4919'. [ 655.509188][T25005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4919'. [ 655.622242][T25007] netlink: 'syz.2.4920': attribute type 10 has an invalid length. [ 655.776003][T25011] syzkaller0: entered promiscuous mode [ 655.776026][T25011] syzkaller0: entered allmulticast mode [ 655.838720][T25015] ªªªªª»ÿÿ: renamed from bond_slave_0 (while UP) [ 656.681439][T25056] TCP: TCP_TX_DELAY enabled [ 656.843386][T25059] Bluetooth: MGMT ver 1.23 [ 657.176683][T25078] __nla_validate_parse: 8 callbacks suppressed [ 657.176706][T25078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4936'. [ 657.176734][T25078] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4936'. [ 657.721508][T25101] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4942'. [ 658.053503][T25109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4943'. [ 658.053528][T25109] netlink: 50 bytes leftover after parsing attributes in process `syz.0.4943'. [ 658.053555][T25109] netlink: 50 bytes leftover after parsing attributes in process `syz.0.4943'. [ 658.083497][T25114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.100038][T25113] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4946'. [ 658.218984][T25124] netlink: 'syz.3.4949': attribute type 58 has an invalid length. [ 658.219008][T25124] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4949'. [ 658.338744][T25127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4943'. [ 658.339019][T25127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4943'. [ 658.715996][T25138] tipc: Enabling of bearer rejected, already enabled [ 658.889104][T24675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.889349][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.541482][ T9567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.547671][T21222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.562526][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.566942][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.562238][T25203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.650164][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.892196][T24675] wlan1: Trigger new scan to find an IBSS to join [ 661.198616][T25227] netlink: 'syz.4.4975': attribute type 1 has an invalid length. [ 661.231320][T25234] netlink: 'syz.4.4975': attribute type 1 has an invalid length. [ 661.235985][T25229] bond6 (unregistering): Released all slaves [ 661.306133][T25243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.564247][T25236] 8021q: VLANs not supported on ip_vti0 [ 661.691588][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.778926][T25247] syzkaller0: entered promiscuous mode [ 661.778982][T25247] syzkaller0: entered allmulticast mode [ 661.879912][T25255] tipc: Enabled bearer , priority 0 [ 661.881531][T25253] syzkaller0: entered promiscuous mode [ 661.881553][T25253] syzkaller0: entered allmulticast mode [ 661.948657][T25248] tipc: Resetting bearer [ 662.068710][T25271] netlink: 'syz.2.4981': attribute type 10 has an invalid length. [ 662.164740][T25248] tipc: Disabling bearer [ 662.291757][T25271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 662.434919][T25271] batadv0: entered allmulticast mode [ 662.474232][T25271] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 662.552144][T25273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.554175][T25273] bond_slave_0: left allmulticast mode [ 662.584912][T25273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.599797][T25273] bond_slave_1: left allmulticast mode [ 662.622866][T25273] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 662.625979][T25273] netdevsim netdevsim2 netdevsim1: left allmulticast mode [ 662.645339][T25273] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 662.665794][T25273] batadv0: left allmulticast mode [ 662.683039][T25273] bond0 (unregistering): Released all slaves [ 663.261206][ T9612] bond0: (slave bond_slave_0): interface is now down [ 663.261229][ T9612] bond0: (slave bond_slave_1): interface is now down [ 663.383524][T25306] lo speed is unknown, defaulting to 1000 [ 663.383674][T25306] lo speed is unknown, defaulting to 1000 [ 663.392304][T25306] lo speed is unknown, defaulting to 1000 [ 663.408220][T25306] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 663.408287][T25306] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 663.408351][T25306] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 663.496394][T25306] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 663.657069][T25306] lo speed is unknown, defaulting to 1000 [ 663.665558][T25306] lo speed is unknown, defaulting to 1000 [ 663.678191][T25306] lo speed is unknown, defaulting to 1000 [ 663.679557][T25316] syzkaller0: entered promiscuous mode [ 663.679609][T25316] syzkaller0: entered allmulticast mode [ 663.693836][T25306] lo speed is unknown, defaulting to 1000 [ 663.710584][T25306] lo speed is unknown, defaulting to 1000 [ 663.723613][T25306] lo speed is unknown, defaulting to 1000 [ 663.724025][T25319] __nla_validate_parse: 35 callbacks suppressed [ 663.724058][T25319] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4995'. [ 663.725737][T25306] lo speed is unknown, defaulting to 1000 [ 663.733867][T25306] lo speed is unknown, defaulting to 1000 [ 663.847599][T24664] wlan1: Trigger new scan to find an IBSS to join [ 664.008213][ T9612] net_ratelimit: 4 callbacks suppressed [ 664.008233][ T9612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.008418][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.489920][T25325] syzkaller0: entered promiscuous mode [ 664.489946][T25325] syzkaller0: entered allmulticast mode [ 664.753195][T24664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.811532][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.095178][T25373] netlink: 'syz.3.5005': attribute type 23 has an invalid length. [ 665.325566][ T194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.339890][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.349129][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.777489][ T194] bond0: (slave bond_slave_0): interface is now down [ 665.777549][ T194] bond0: (slave bond_slave_1): interface is now down [ 666.417759][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.448736][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.862943][T24676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.863142][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.339072][T24675] bond0: (slave bond_slave_0): interface is now down [ 668.339098][T24675] bond0: (slave bond_slave_1): interface is now down [ 669.160220][T24676] net_ratelimit: 1 callbacks suppressed [ 669.160241][T24676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.160431][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.259020][T25397] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5012'. [ 669.321061][T25395] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5010'. [ 669.612773][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.757034][T25403] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 669.799781][T25408] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 669.800693][T20536] Bluetooth: hci3: ISO packet too small [ 669.828718][T20536] Bluetooth: hci3: ISO packet too small [ 670.041288][T25414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5017'. [ 670.041323][T25414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5017'. [ 670.431721][T25416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5018'. [ 670.698862][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.891461][T24676] bond0: (slave bond_slave_0): interface is now down [ 670.891487][T24676] bond0: (slave bond_slave_1): interface is now down [ 670.984401][T24676] bond0: now running without any active interface! [ 671.143667][T25439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5023'. [ 671.143694][T25439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5023'. [ 671.233710][T25439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5023'. [ 671.233733][T25439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5023'. [ 671.677395][T25454] ip6tnl0: Caught tx_queue_len zero misconfig [ 671.759332][T25454] netlink: 'syz.3.5029': attribute type 10 has an invalid length. [ 671.778221][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.875643][T25454] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 672.825010][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.894846][T25484] syzkaller1: entered promiscuous mode [ 672.894870][T25484] syzkaller1: entered allmulticast mode [ 673.611770][T24676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.612058][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.886341][T25519] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5045'. [ 674.256445][T24662] net_ratelimit: 1 callbacks suppressed [ 674.256466][T24662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.256676][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.476984][T20536] block nbd1: Receive control failed (result -32) [ 674.477137][ T4936] block nbd1: Receive control failed (result -32) [ 674.632509][T25530] __nla_validate_parse: 3 callbacks suppressed [ 674.632530][T25530] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5048'. [ 674.764562][T25534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5050'. [ 674.888296][ T9567] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 674.985407][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.145390][T25543] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 675.293210][T25542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5052'. [ 676.020883][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.074227][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.750141][T25596] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5070'. [ 678.091243][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.146185][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.369123][T24664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.369343][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.371569][T24675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.371749][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.047407][T25583] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 680.198933][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.625721][T25628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5080'. [ 680.664177][T25628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5080'. [ 680.736767][T25628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5080'. [ 680.779961][T25628] pim6reg: entered allmulticast mode [ 681.199268][ T4936] Bluetooth: hci4: ACL packet for unknown connection handle 3484 [ 681.225612][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.288199][T25639] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:4096 [ 681.497720][T25646] netlink: 'syz.3.5085': attribute type 1 has an invalid length. [ 682.251145][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.335312][T25646] 8021q: adding VLAN 0 to HW filter on device bond9 [ 682.409380][T25662] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5089'. [ 682.477704][T25665] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5090'. [ 682.703641][T25671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5093'. [ 682.717880][T25672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5093'. [ 683.298316][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.794729][T25694] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 683.830686][T25698] netlink: 'syz.1.5097': attribute type 33 has an invalid length. [ 684.013332][T25691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5098'. [ 684.013827][T25691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5098'. [ 684.014604][T25691] netlink: 'syz.4.5098': attribute type 12 has an invalid length. [ 684.015137][T25691] netlink: 'syz.4.5098': attribute type 11 has an invalid length. [ 684.346089][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.405963][T25709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5104'. [ 684.566400][T25714] ip_tables: iptables: counters copy to user failed while replacing table [ 684.848126][T25728] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 684.848962][T25728] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 684.849716][T25728] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 684.849822][T21222] lo speed is unknown, defaulting to 1000 [ 684.851421][T25728] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 684.855426][T25728] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 684.855938][T25728] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 684.858515][T25728] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 684.994329][T25728] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 684.996029][T25725] netlink: 'syz.0.5107': attribute type 8 has an invalid length. [ 685.130147][T24662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.176574][T25748] bond0: (slave gretap0): Opening slave failed [ 687.429857][T25714] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 687.796061][T25761] veth1_to_bond: entered allmulticast mode [ 687.796200][T25761] veth1_to_bond: entered promiscuous mode [ 687.814183][T25760] veth1_to_bond: left promiscuous mode [ 687.814363][T25760] veth1_to_bond: left allmulticast mode [ 688.126660][T25764] __nla_validate_parse: 29 callbacks suppressed [ 688.126682][T25764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5117'. [ 688.280240][T25767] netlink: 'syz.2.5119': attribute type 1 has an invalid length. [ 688.280265][T25767] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5119'. [ 688.455637][T25771] netlink: 'syz.4.5121': attribute type 1 has an invalid length. [ 688.586650][T25771] bond6: entered promiscuous mode [ 688.593832][T25771] 8021q: adding VLAN 0 to HW filter on device bond6 [ 688.642016][T25775] macvtap4: entered allmulticast mode [ 688.656957][T25774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5122'. [ 688.681120][T25777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5123'. [ 688.900180][T25781] bond6: (slave bridge9): making interface the new active one [ 688.900206][T25781] bridge9: entered promiscuous mode [ 688.973716][T25781] bond6: (slave bridge9): Enslaving as an active interface with an up link [ 689.748586][ T5751] net_ratelimit: 8 callbacks suppressed [ 689.748620][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.153903][T25819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5131'. [ 690.192476][T25819] netlink: 'syz.4.5131': attribute type 2 has an invalid length. [ 690.221681][T25824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5133'. [ 690.248978][T24676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.249211][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.521350][T25830] netlink: 'syz.4.5136': attribute type 1 has an invalid length. [ 690.741591][T25830] bond7: entered promiscuous mode [ 690.742206][T25830] 8021q: adding VLAN 0 to HW filter on device bond7 [ 690.817217][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.851615][T25833] macvtap5: entered allmulticast mode [ 690.898930][ T194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.899094][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.937182][T25840] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5137'. [ 691.043315][T25838] bond7: (slave bridge10): making interface the new active one [ 691.043342][T25838] bridge10: entered promiscuous mode [ 691.074295][T25838] bond7: (slave bridge10): Enslaving as an active interface with an up link [ 691.883874][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.179945][T25865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5144'. [ 692.179972][T25865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5144'. [ 692.909485][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.744716][T25880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5147'. [ 693.941947][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.136599][T25880] bond8: entered promiscuous mode [ 694.136623][T25880] bond8: entered allmulticast mode [ 694.916610][T25889] vcan0: tx address claim with different name [ 694.985756][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.252074][T25900] macvlan0: entered promiscuous mode [ 695.370037][T24664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.370225][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.703504][T25909] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5157'. [ 695.934450][T24644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.934650][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.012732][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.495892][ T4936] Bluetooth: hci5: unexpected cc 0x2003 length: 1 < 9 [ 696.495924][ T4936] Bluetooth: hci5: unexpected event for opcode 0x2003 [ 697.102601][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.288975][ T9583] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 697.482705][T25931] siw: device registration error -23 [ 697.651133][T25934] netlink: 'syz.4.5165': attribute type 10 has an invalid length. [ 697.682844][T25934] dummy0: left promiscuous mode [ 697.682868][T25934] dummy0: left allmulticast mode [ 697.875231][T25934] team0: Port device dummy0 added [ 698.087426][ T4936] Bluetooth: hci1: command 0x0405 tx timeout [ 698.173677][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.046198][T25967] netlink: 'syz.2.5174': attribute type 9 has an invalid length. [ 699.046221][T25967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5174'. [ 699.071165][T25965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.071372][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.208249][T25973] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5175'. [ 699.268503][ T9583] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 699.268565][ T9583] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 699.268602][ T9583] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 699.268637][ T9583] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 699.684484][T25975] can: request_module (can-proto-0) failed. [ 699.989685][T25995] xt_hashlimit: size too large, truncated to 1048576 [ 700.083981][T26001] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5179'. [ 700.338715][ T988] net_ratelimit: 1 callbacks suppressed [ 700.338763][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.490766][T24659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.490981][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.738507][T26012] sctp: [Deprecated]: syz.4.5182 (pid 26012) Use of int in max_burst socket option deprecated. [ 700.738507][T26012] Use struct sctp_assoc_value instead [ 700.961757][T26019] openvswitch: netlink: Flow actions attr not present in new flow. [ 701.104739][T26019] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5184'. [ 701.132255][T24647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.132434][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.192534][T26024] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5186'. [ 701.192559][T26024] netlink: 120 bytes leftover after parsing attributes in process `syz.1.5186'. [ 701.192605][T26024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5186'. [ 701.251628][T26027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5188'. [ 701.390500][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.489718][T26032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5187'. [ 702.461476][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.515813][T26060] sctp: [Deprecated]: syz.1.5193 (pid 26060) Use of struct sctp_assoc_value in delayed_ack socket option. [ 702.515813][T26060] Use struct sctp_sack_info instead [ 703.093257][T26045] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.093295][T26045] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.093324][T26045] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 56628 - 0 [ 703.330932][T26049] syzkaller1: entered promiscuous mode [ 703.330956][T26049] syzkaller1: entered allmulticast mode [ 703.590237][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.762517][T26082] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5198'. [ 703.840566][T26076] ovs-system: entered promiscuous mode [ 704.325903][T26045] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.325941][T26045] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.325969][T26045] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 56628 - 0 [ 704.483918][T26095] netlink: zone id is out of range [ 704.527484][T26097] __nla_validate_parse: 1 callbacks suppressed [ 704.527505][T26097] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5203'. [ 704.527528][T26097] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5203'. [ 704.656033][T26102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5201'. [ 704.824613][T26045] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.824660][T26045] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.824689][T26045] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 56628 - 0 [ 705.244521][T26045] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.244560][T26045] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.244588][T26045] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 56628 - 0 [ 705.373069][T26115] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5207'. [ 705.373104][T26115] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5207'. [ 705.617618][T26121] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5204'. [ 705.641844][T26122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5206'. [ 705.711584][ T57] net_ratelimit: 781 callbacks suppressed [ 705.711633][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.051778][T26123] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5205'. [ 706.217510][T26133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5209'. [ 706.259505][T24660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.259693][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.262266][T24674] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 706.506303][T26129] smbdirect: ib_dev[syz2] removed [ 706.640515][T26139] bond0: Caught tx_queue_len zero misconfig [ 706.889548][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.892575][T24647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.892771][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.950278][T24652] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 706.950326][T24652] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 56628 - 0 [ 706.950352][T24652] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 707.079000][T24660] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 707.080312][T24660] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 56628 - 0 [ 707.080998][T24660] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 707.331928][T24661] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 707.331963][T24661] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 56628 - 0 [ 707.331989][T24661] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 707.419919][T26147] syzkaller0: entered promiscuous mode [ 707.419942][T26147] syzkaller0: entered allmulticast mode [ 707.499503][T26158] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5217'. [ 707.800654][T24652] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 707.800689][T24652] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 56628 - 0 [ 707.801194][T24652] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 708.172829][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.248391][T26166] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 708.309199][T26176] netlink: 'syz.2.5223': attribute type 13 has an invalid length. [ 708.838107][T26186] bridge8: entered promiscuous mode [ 708.838146][T26186] bridge8: entered allmulticast mode [ 709.235351][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.937441][T26211] bond7 (unregistering): Released all slaves [ 710.342659][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.832603][T26221] bond9: entered promiscuous mode [ 710.849306][T26221] bond9: entered allmulticast mode [ 711.172075][T26251] lo: entered promiscuous mode [ 711.204282][T26251] tunl0: entered promiscuous mode [ 711.264656][T26252] __nla_validate_parse: 1 callbacks suppressed [ 711.265268][T26252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5238'. [ 711.320182][T26251] gre0: entered promiscuous mode [ 711.457999][T26251] 0ªî{X¹¦: left allmulticast mode [ 711.944388][T26251] erspan0: entered promiscuous mode [ 712.042731][T26251] ip_vti0: entered promiscuous mode [ 712.135085][T21222] lo speed is unknown, defaulting to 1000 [ 712.136505][ T5790] lo speed is unknown, defaulting to 1000 [ 712.136537][ T5790] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 712.275903][T26258] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 712.680985][T26276] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5245'. [ 712.817370][T26279] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 712.821317][T26279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5246'. [ 712.853828][T26277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5245'. [ 713.005067][T26276] netlink: 'syz.3.5245': attribute type 3 has an invalid length. [ 713.166587][T26287] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5248'. [ 713.223503][T26291] netlink: 'syz.2.5250': attribute type 7 has an invalid length. [ 713.257071][T26284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5248'. [ 713.630468][T26284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5248'. [ 713.630651][T26284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5248'. [ 713.630837][T26284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5248'. [ 713.631026][T26284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5248'. [ 713.710041][T26304] netlink: 'syz.3.5252': attribute type 1 has an invalid length. [ 714.769005][T26333] raw_sendmsg: syz.1.5263 forgot to set AF_INET. Fix it! [ 714.856347][T26339] netlink: 'syz.3.5265': attribute type 4 has an invalid length. [ 715.531352][T26355] openvswitch: netlink: IPv4 tun info is not correct [ 715.681708][T26360] netlink: 'syz.1.5270': attribute type 1 has an invalid length. [ 715.819627][T26360] bond7: entered promiscuous mode [ 715.822944][T26360] 8021q: adding VLAN 0 to HW filter on device bond7 [ 715.896313][T26360] bond7: (slave bridge10): making interface the new active one [ 715.896338][T26360] bridge10: entered promiscuous mode [ 715.915523][T26360] bond7: (slave bridge10): Enslaving as an active interface with an up link [ 715.943863][T26368] xt_hashlimit: size too large, truncated to 1048576 [ 716.042260][T26362] macvtap3: entered allmulticast mode [ 716.274752][T26378] __nla_validate_parse: 29 callbacks suppressed [ 716.274775][T26378] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.5274'. [ 716.743802][T26399] tipc: Enabling of bearer rejected, already enabled [ 716.835475][T26402] netlink: 'syz.0.5280': attribute type 10 has an invalid length. [ 716.835500][T26402] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5280'. [ 716.835579][T26402] dummy0: entered promiscuous mode [ 716.835598][T26402] dummy0: entered allmulticast mode [ 716.836256][T26402] bridge0: port 3(dummy0) entered blocking state [ 716.836540][T26402] bridge0: port 3(dummy0) entered disabled state [ 716.990778][T26402] xt_CT: You must specify a L4 protocol and not use inversions on it [ 717.426463][T26416] xt_CT: You must specify a L4 protocol and not use inversions on it [ 717.759082][T26422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5288'. [ 717.968802][T26429] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5291'. [ 718.019940][T26435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5292'. [ 718.032157][T26433] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5291'. [ 718.151382][T26438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5292'. [ 718.251897][T26422] macvtap0: entered promiscuous mode [ 718.252149][T26422] macvtap0: entered allmulticast mode [ 718.252165][T26422] vlan0: entered allmulticast mode [ 718.252178][T26422] veth0_vlan: entered allmulticast mode [ 718.518396][T26452] xt_check_match_common: 55 callbacks suppressed [ 718.518477][T26452] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 718.547964][T26452] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5294'. [ 718.555283][T26443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5293'. [ 718.555302][T26443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5293'. [ 720.163553][T26503] openvswitch: netlink: Key type 144 is out of range max 32 [ 720.866074][T26524] vlan3: entered allmulticast mode [ 720.866096][T26524] bond0: entered allmulticast mode [ 720.866110][T26524] bond_slave_0: entered allmulticast mode [ 720.866127][T26524] bond_slave_1: entered allmulticast mode [ 720.866141][T26524] bridge0: entered allmulticast mode [ 721.277759][T26535] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5312'. [ 721.329442][T26531] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5310'. [ 721.332146][T26535] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5312'. [ 721.334969][T26531] syz_tun: entered allmulticast mode [ 721.364324][T26535] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5312'. [ 721.393333][T26529] syz_tun: left allmulticast mode [ 721.673858][T26544] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5314'. [ 721.822287][T26551] openvswitch: netlink: IPv4 frag type 32 is out of range max 2 [ 721.825610][T26551] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5315'. [ 721.825631][T26551] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5315'. [ 722.194635][T26471] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 722.346811][T26562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 722.576625][T26564] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5318'. [ 722.590262][T26564] bridge0: port 3(dummy0) entered disabled state [ 722.855212][T26564] bridge0: port 3(dummy0) entered disabled state [ 723.084342][T26580] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5324'. [ 723.616392][T26588] netlink: 'syz.3.5326': attribute type 1 has an invalid length. [ 723.856654][T26588] bond10: entered promiscuous mode [ 723.870494][T26588] 8021q: adding VLAN 0 to HW filter on device bond10 [ 723.989515][T26594] bond10: (slave bridge9): making interface the new active one [ 723.989541][T26594] bridge9: entered promiscuous mode [ 723.993804][T26594] bond10: (slave bridge9): Enslaving as an active interface with an up link [ 724.118646][T26605] netlink: 'syz.1.5331': attribute type 1 has an invalid length. [ 724.388573][T26617] netlink: 'syz.3.5332': attribute type 21 has an invalid length. [ 724.685973][T26617] bond11: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 724.747445][T26617] bond11 (unregistering): Released all slaves [ 724.855960][T26628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5334'. [ 725.616822][T26629] syzkaller0: entered promiscuous mode [ 725.616847][T26629] syzkaller0: entered allmulticast mode [ 725.649501][T26648] ip_tables: iptables: counters copy to user failed while replacing table [ 727.063907][T26605] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 727.738930][T26672] netlink: Setting conntrack mark requires 'commit' flag. [ 727.738963][T26672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 729.297760][T24644] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 730.457283][T26651] syzkaller0: left promiscuous mode [ 730.457306][T26651] syzkaller0: left allmulticast mode [ 730.921559][T26686] __nla_validate_parse: 54 callbacks suppressed [ 730.921581][T26686] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5348'. [ 731.036769][T26689] bridge6: entered promiscuous mode [ 731.110864][T26689] bridge6: entered allmulticast mode [ 731.848876][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 732.124445][T26710] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5356'. [ 732.182631][T26703] can: request_module (can-proto-0) failed. [ 732.395509][T26717] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5358'. [ 732.462315][T26718] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5358'. [ 732.633159][T26725] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5360'. [ 733.025432][T26733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5363'. [ 733.773100][T26755] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5367'. [ 733.806654][T26755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5367'. [ 733.872447][T26763] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5370'. [ 733.905438][T26755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5367'. [ 735.416828][T26805] IPVS: Unknown mcast interface: lo [ 735.880474][T26817] netlink: 'syz.1.5385': attribute type 1 has an invalid length. [ 735.959030][T26813] ip6tnl2: entered promiscuous mode [ 735.959053][T26813] ip6tnl2: entered allmulticast mode [ 736.198199][T26817] 8021q: adding VLAN 0 to HW filter on device bond8 [ 736.244466][T26818] vlan4: entered promiscuous mode [ 736.246201][T26818] bond8: entered promiscuous mode [ 736.246372][T26818] vlan4: entered allmulticast mode [ 736.246386][T26818] bond8: entered allmulticast mode [ 736.398045][T26817] bond8: (slave bridge11): making interface the new active one [ 736.398078][T26817] bridge11: entered promiscuous mode [ 736.398250][T26817] bridge11: entered allmulticast mode [ 736.434890][T26817] bond8: (slave bridge11): Enslaving as an active interface with an up link [ 736.737135][T26838] __nla_validate_parse: 3 callbacks suppressed [ 736.737480][T26838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5391'. [ 737.413629][T26856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5395'. [ 737.586580][T26861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5396'. [ 737.736708][T26860] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5397'. [ 737.765234][T26862] netlink: 'syz.0.5395': attribute type 1 has an invalid length. [ 737.765255][T26862] netlink: 756 bytes leftover after parsing attributes in process `syz.0.5395'. [ 737.830721][T26862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5395'. [ 737.852475][T26868] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5398'. [ 738.254584][T24661] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 739.245585][T26891] netlink: 'syz.3.5402': attribute type 1 has an invalid length. [ 739.498014][T26907] netlink: 'syz.4.5404': attribute type 2 has an invalid length. [ 739.516189][T26891] 8021q: adding VLAN 0 to HW filter on device bond11 [ 739.526164][T26906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5403'. [ 739.526185][T26906] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5403'. [ 739.949935][T26909] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5405'. [ 740.078056][T26913] netlink: 'syz.2.5406': attribute type 1 has an invalid length. [ 740.175818][T26913] 8021q: adding VLAN 0 to HW filter on device bond10 [ 740.176526][T26915] syzkaller0: entered promiscuous mode [ 740.176546][T26915] syzkaller0: entered allmulticast mode [ 740.269107][T26913] veth0_to_bond: left allmulticast mode [ 740.297949][T26926] netlink: 'syz.1.5410': attribute type 12 has an invalid length. [ 740.303206][T26913] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 740.526728][T26930] netlink: 'syz.1.5410': attribute type 12 has an invalid length. [ 740.552059][T26920] netlink: 'syz.2.5406': attribute type 1 has an invalid length. [ 740.552295][T26920] netlink: 'syz.2.5406': attribute type 3 has an invalid length. [ 740.603952][T26913] macvlan3: entered promiscuous mode [ 740.603976][T26913] macvlan3: entered allmulticast mode [ 740.618478][T26913] bond10: entered promiscuous mode [ 740.621047][T26913] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 740.623334][T26913] bond10: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 740.757916][T26913] bond10: left promiscuous mode [ 741.520792][T26962] 8021q: adding VLAN 0 to HW filter on device bond8 [ 741.521544][T26962] bridge0: port 1(bond8) entered blocking state [ 741.521727][T26962] bridge0: port 1(bond8) entered disabled state [ 741.521887][T26962] bond8: entered allmulticast mode [ 741.524415][T26962] bond8: entered promiscuous mode [ 741.754619][T26971] netlink: 'syz.2.5420': attribute type 3 has an invalid length. [ 741.998763][T26975] __nla_validate_parse: 12 callbacks suppressed [ 741.998803][T26975] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5421'. [ 742.391408][T26990] netlink: 'syz.4.5425': attribute type 10 has an invalid length. [ 742.484066][T26987] syz_tun: entered allmulticast mode [ 742.522433][T26991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5426'. [ 742.522464][T26991] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 742.586742][T26986] syz_tun: left allmulticast mode [ 742.834061][T27006] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5429'. [ 743.064163][T27011] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5429'. [ 743.090346][T27015] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5430'. [ 743.091492][T27015] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5430'. [ 743.091519][T27015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5430'. [ 743.091811][T27017] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5430'. [ 743.091831][T27017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5430'. [ 743.529684][T27024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5432'. [ 743.670584][T27022] tap0: tun_chr_ioctl cmd 2147767517 [ 743.673593][T27022] tap0: tun_chr_ioctl cmd 1074025672 [ 743.673613][T27022] tap0: ignored: set checksum disabled [ 743.682291][T27022] tap0: tun_chr_ioctl cmd 2180551740 [ 744.574961][T27045] netlink: 'syz.2.5437': attribute type 8 has an invalid length. [ 745.184298][T27060] netlink: 'syz.4.5440': attribute type 12 has an invalid length. [ 746.001565][T27060] bond9: option primary_reselect: invalid value (255) [ 746.136412][T27060] bond9 (unregistering): Released all slaves [ 746.300068][T27067] tipc: Enabling of bearer rejected, already enabled [ 746.352298][T27067] bridge6: entered promiscuous mode [ 746.352361][T27067] bridge6: entered allmulticast mode [ 746.393614][T27074] netlink: 'syz.1.5443': attribute type 83 has an invalid length. [ 746.830150][T27085] bond0: ARP target 8.4.0.0 is already present [ 746.830179][T27085] bond0: option arp_ip_target: invalid value (1032) [ 747.421860][T27103] __nla_validate_parse: 5 callbacks suppressed [ 747.421882][T27103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5451'. [ 747.422086][T27105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5453'. [ 747.782535][T27109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5454'. [ 747.782573][T27109] netlink: 'syz.1.5454': attribute type 8 has an invalid length. [ 747.782587][T27109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5454'. [ 747.911085][T27109] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5454'. [ 748.296425][T27130] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5461'. [ 749.323965][T27151] netlink: 'syz.0.5468': attribute type 4 has an invalid length. [ 750.240360][T27171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5477'. [ 750.510530][T27190] openvswitch: netlink: IPv4 frag type 32 is out of range max 2 [ 750.665586][T27180] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.966783][T20536] Bluetooth: hci4: unexpected cc 0x2003 length: 0 < 9 [ 750.967746][T20536] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 751.966540][T27227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5488'. [ 752.426399][T27234] netlink: 'syz.3.5490': attribute type 11 has an invalid length. [ 752.426421][T27234] netlink: 'syz.3.5490': attribute type 11 has an invalid length. [ 752.426435][T27234] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5490'. [ 752.457508][T27234] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5490'. [ 753.873912][T27274] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5497'. [ 753.874031][T27274] 0·: renamed from hsr0 (while UP) [ 753.905697][T27274] 0·: entered allmulticast mode [ 753.905719][T27274] hsr_slave_0: entered allmulticast mode [ 753.905737][T27274] hsr_slave_1: entered allmulticast mode [ 753.906189][T27274] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 754.217666][T27281] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5500'. [ 754.374265][T27285] syzkaller0: entered promiscuous mode [ 754.374289][T27285] syzkaller0: entered allmulticast mode [ 755.624600][T27318] netlink: 'syz.0.5509': attribute type 49 has an invalid length. [ 756.083092][T27318] ip6gretap0: entered promiscuous mode [ 756.083115][T27318] ip6gretap0: entered allmulticast mode [ 756.486711][T27341] lo: entered promiscuous mode [ 756.543643][T27341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 757.976225][T27383] netlink: 'syz.3.5523': attribute type 1 has an invalid length. [ 758.452903][T27400] netlink: 'syz.0.5527': attribute type 1 has an invalid length. [ 758.484637][T27399] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5526'. [ 758.797624][T27415] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5526'. [ 758.912258][T27400] bond9: entered promiscuous mode [ 758.912675][T27400] 8021q: adding VLAN 0 to HW filter on device bond9 [ 759.244474][T27404] macvtap5: entered allmulticast mode [ 759.438233][T27413] bond9: (slave bridge15): making interface the new active one [ 759.438658][T27413] bridge15: entered promiscuous mode [ 759.633244][T27413] bond9: (slave bridge15): Enslaving as an active interface with an up link [ 760.495558][T27446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5531'. [ 760.740970][T27452] bridge10: entered promiscuous mode [ 760.740996][T27452] bridge10: entered allmulticast mode [ 760.975339][T27455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5534'. [ 761.291546][T24677] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 761.650022][T27469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5538'. [ 761.902850][T27479] netlink: 'syz.3.5540': attribute type 11 has an invalid length. [ 761.977577][T27479] netlink: 'syz.3.5540': attribute type 2 has an invalid length. [ 761.987268][T27481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5541'. [ 762.145398][T27484] netlink: 'syz.2.5542': attribute type 1 has an invalid length. [ 762.345327][T27484] bond12: entered promiscuous mode [ 762.353257][T27484] 8021q: adding VLAN 0 to HW filter on device bond12 [ 762.430723][T27488] macvtap2: entered allmulticast mode [ 762.592091][T27491] bond12: (slave bridge7): making interface the new active one [ 762.592117][T27491] bridge7: entered promiscuous mode [ 762.623047][T27491] bond12: (slave bridge7): Enslaving as an active interface with an up link [ 762.968822][T27496] syzkaller0: entered promiscuous mode [ 762.968845][T27496] syzkaller0: entered allmulticast mode [ 763.013412][T27497] netlink: Unknown nat attribute (0) [ 763.013445][T27497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 763.013929][T27496] netlink: Unknown nat attribute (0) [ 763.013955][T27496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 763.853684][T27520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5547'. [ 764.440455][T27523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5547'. [ 765.165722][T27550] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5554'. [ 765.532325][T27560] netlink: 'syz.4.5558': attribute type 1 has an invalid length. [ 765.647551][T27560] bond9: entered promiscuous mode [ 765.648060][T27560] 8021q: adding VLAN 0 to HW filter on device bond9 [ 765.855203][T27560] macvtap6: entered allmulticast mode [ 765.890753][T27571] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5559'. [ 766.056976][T27565] bond9: (slave bridge11): making interface the new active one [ 766.057002][T27565] bridge11: entered promiscuous mode [ 766.159165][T27565] bond9: (slave bridge11): Enslaving as an active interface with an up link [ 767.113440][T27598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5566'. [ 767.249399][T27598] bond0 (unregistering): Released all slaves [ 767.454655][T27609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5567'. [ 767.520978][T27609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5567'. [ 767.521228][T27609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5567'. [ 767.563165][T27609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5567'. [ 767.563432][T27609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5567'. [ 767.690564][T27602] Unsupported ieee802154 address type: 0 [ 768.580602][T27620] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 768.584598][T27624] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 768.795041][T27635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 769.112327][T27646] netlink: 'syz.3.5575': attribute type 1 has an invalid length. [ 769.373757][T27646] bond12: entered promiscuous mode [ 769.374167][T27646] 8021q: adding VLAN 0 to HW filter on device bond12 [ 769.667098][T27651] macvtap3: entered allmulticast mode [ 769.865679][T20536] Bluetooth: hci4: connection err: -111 [ 769.867780][T20536] Bluetooth: hci4: connection err: -111 [ 769.869476][T20536] Bluetooth: hci4: connection err: -111 [ 769.872105][T20536] Bluetooth: hci4: connection err: -111 [ 769.875504][T20536] Bluetooth: hci4: connection err: -111 [ 769.876892][T20536] Bluetooth: hci4: connection err: -111 [ 769.879541][T20536] Bluetooth: hci4: connection err: -111 [ 769.881611][T20536] Bluetooth: hci4: connection err: -111 [ 769.883905][T20536] Bluetooth: hci4: connection err: -111 [ 769.886879][T20536] Bluetooth: hci4: connection err: -111 [ 769.889898][T20536] Bluetooth: hci4: connection err: -111 [ 769.892722][T20536] Bluetooth: hci4: connection err: -111 [ 769.895110][T20536] Bluetooth: hci4: connection err: -111 [ 769.897934][T20536] Bluetooth: hci4: connection err: -111 [ 769.900974][T20536] Bluetooth: hci4: connection err: -111 [ 769.904525][T20536] Bluetooth: hci4: connection err: -111 [ 769.920670][T20536] Bluetooth: hci4: connection err: -111 [ 769.923320][T20536] Bluetooth: hci4: connection err: -111 [ 769.925261][T20536] Bluetooth: hci4: connection err: -111 [ 769.927092][T20536] Bluetooth: hci4: connection err: -111 [ 769.929462][T20536] Bluetooth: hci4: connection err: -111 [ 769.931849][T20536] Bluetooth: hci4: connection err: -111 [ 769.934272][T20536] Bluetooth: hci4: connection err: -111 [ 769.936143][T20536] Bluetooth: hci4: connection err: -111 [ 769.939313][T20536] Bluetooth: hci4: connection err: -111 [ 769.942337][T20536] Bluetooth: hci4: connection err: -111 [ 769.945576][T20536] Bluetooth: hci4: connection err: -111 [ 769.948202][T20536] Bluetooth: hci4: connection err: -111 [ 769.950365][T20536] Bluetooth: hci4: connection err: -111 [ 769.952750][T20536] Bluetooth: hci4: connection err: -111 [ 769.953836][T20536] Bluetooth: hci4: connection err: -111 [ 769.955998][T20536] Bluetooth: hci4: connection err: -111 [ 769.958165][T20536] Bluetooth: hci4: connection err: -111 [ 769.959570][T20536] Bluetooth: hci4: connection err: -111 [ 769.961242][T20536] Bluetooth: hci4: connection err: -111 [ 769.963962][T20536] Bluetooth: hci4: connection err: -111 [ 769.965302][T20536] Bluetooth: hci4: connection err: -111 [ 769.967434][T20536] Bluetooth: hci4: connection err: -111 [ 769.969328][T20536] Bluetooth: hci4: connection err: -111 [ 769.971002][T20536] Bluetooth: hci4: connection err: -111 [ 769.973597][T20536] Bluetooth: hci4: connection err: -111 [ 769.975497][T20536] Bluetooth: hci4: connection err: -111 [ 769.977810][T20536] Bluetooth: hci4: connection err: -111 [ 769.981022][T20536] Bluetooth: hci4: connection err: -111 [ 769.982147][T20536] Bluetooth: hci4: connection err: -111 [ 769.984507][T20536] Bluetooth: hci4: connection err: -111 [ 769.988142][T20536] Bluetooth: hci4: connection err: -111 [ 769.990268][T20536] Bluetooth: hci4: connection err: -111 [ 769.991913][T20536] Bluetooth: hci4: connection err: -111 [ 769.993714][T20536] Bluetooth: hci4: connection err: -111 [ 769.996426][T20536] Bluetooth: hci4: connection err: -111 [ 769.999846][T20536] Bluetooth: hci4: connection err: -111 [ 770.001837][T20536] Bluetooth: hci4: connection err: -111 [ 770.003472][T20536] Bluetooth: hci4: connection err: -111 [ 770.194652][T20536] Bluetooth: hci4: connection err: -111 [ 770.196545][T20536] Bluetooth: hci4: connection err: -111 [ 770.198259][T20536] Bluetooth: hci4: connection err: -111 [ 770.202815][T20536] Bluetooth: hci4: connection err: -111 [ 770.204648][T20536] Bluetooth: hci4: connection err: -111 [ 770.208773][T20536] Bluetooth: hci4: connection err: -111 [ 770.211431][T20536] Bluetooth: hci4: connection err: -111 [ 770.212798][T20536] Bluetooth: hci4: connection err: -111 [ 770.215683][T20536] Bluetooth: hci4: connection err: -111 [ 770.217687][T20536] Bluetooth: hci4: connection err: -111 [ 770.219648][T20536] Bluetooth: hci4: connection err: -111 [ 770.277712][ T9583] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 770.384000][T27656] bond12: (slave bridge12): making interface the new active one [ 770.384025][T27656] bridge12: entered promiscuous mode [ 770.420067][T27656] bond12: (slave bridge12): Enslaving as an active interface with an up link [ 771.062520][T27670] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 771.101397][T27670] bond3: entered allmulticast mode [ 771.101418][T27670] bridge2: entered allmulticast mode [ 771.125743][T27670] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 771.162478][T27670] bond4: entered allmulticast mode [ 771.162498][T27670] bridge3: entered allmulticast mode [ 771.184184][T27670] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 771.221698][T27670] 8021q: adding VLAN 0 to HW filter on device bond5 [ 771.491099][T27701] __nla_validate_parse: 36 callbacks suppressed [ 771.491120][T27701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5585'. [ 771.492972][T27670] A link change request failed with some changes committed already. Interface dvmrp1 may have been left with an inconsistent configuration, please check. [ 771.493200][ T5788] lo speed is unknown, defaulting to 1000 [ 771.493219][ T5788] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE [ 771.495921][T24677] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.496027][T24677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.010481][T27742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.010941][T27742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.011369][T27742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.093184][T27742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.094254][T27742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.096489][T27742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.096921][T27742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.138544][T27742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.158919][T27734] netlink: 'syz.2.5593': attribute type 21 has an invalid length. [ 773.159012][T27734] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5593'. [ 773.376610][T27742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5594'. [ 774.275276][T27766] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5600'. [ 774.299858][T27766] gretap0: entered promiscuous mode [ 774.328462][T27768] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5600'. [ 774.329137][T27768] 0ªî{X¹¦: renamed from gretap0 [ 774.462393][T27768] 0ªî{X¹¦: left promiscuous mode [ 774.462416][T27768] 0ªî{X¹¦: entered allmulticast mode [ 774.497483][T27768] net_ratelimit: 25 callbacks suppressed [ 774.497504][T27768] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 774.881080][T27779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5602'. [ 775.003850][T27775] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5602'. [ 775.581103][T27795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5604'. [ 776.631171][T27811] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 776.811014][T27821] atomic_op ffff8880623d19e0 conn xmit_atomic 0000000000000000 [ 776.815417][T27823] atomic_op ffff8880792a39e0 conn xmit_atomic 0000000000000000 [ 776.841493][T27821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5610'. [ 776.902578][T27822] ip_tables: iptables: counters copy to user failed while replacing table [ 777.235112][T27835] xt_hashlimit: size too large, truncated to 1048576 [ 778.270077][T27865] netlink: 'syz.0.5619': attribute type 11 has an invalid length. [ 778.270107][T27865] netlink: 4320 bytes leftover after parsing attributes in process `syz.0.5619'. [ 779.298441][T27879] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5622'. [ 779.524572][T27889] netlink: 'syz.4.5624': attribute type 1 has an invalid length. [ 779.831588][T27889] 8021q: adding VLAN 0 to HW filter on device bond10 [ 779.944926][T27894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 780.082899][T27909] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5629'. [ 780.175140][T27902] bond0 (unregistering): Released all slaves [ 780.203592][T27913] Cannot find add_set index 4 as target [ 780.264193][T27912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5629'. [ 780.288590][T27911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5629'. [ 780.300160][T27912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5629'. [ 780.320437][T27915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5629'. [ 780.323628][T27915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5629'. [ 780.337498][T27911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5629'. [ 782.317024][T27972] netlink: 'syz.0.5641': attribute type 1 has an invalid length. [ 782.355414][ T5281] veth1_vlan: left promiscuous mode [ 782.434092][T27972] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 782.511945][T27969] bridge13: entered promiscuous mode [ 783.101660][T27991] bond0: entered allmulticast mode [ 783.101684][T27991] bond_slave_0: entered allmulticast mode [ 783.101702][T27991] bond_slave_1: entered allmulticast mode [ 783.533138][T27997] syzkaller0: left promiscuous mode [ 783.533161][T27997] syzkaller0: left allmulticast mode [ 783.712183][ T30] audit: type=1800 audit(1789398535.610:8): pid=28009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5653" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2571 res=0 errno=0 [ 783.756392][T28001] netlink: 'syz.2.5651': attribute type 2 has an invalid length. [ 784.033232][T28022] __nla_validate_parse: 72 callbacks suppressed [ 784.033281][T28022] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5655'. [ 784.534239][T28038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5658'. [ 784.675700][T28031] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5657'. [ 784.771614][T28040] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 784.880575][T28044] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5659'. [ 785.013047][T28047] netlink: 'syz.1.5660': attribute type 21 has an invalid length. [ 785.562280][T28047] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5660'. [ 785.951671][T28063] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 786.071480][ T988] wlan0 speed is unknown, defaulting to 1000 [ 786.071504][ T988] syz0: Port: 1 Link DOWN [ 786.789620][T28027] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 786.789645][T28027] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 786.845378][T28078] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.5667'. [ 787.186685][T28087] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5668'. [ 787.855249][T28027] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 787.855274][T28027] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 788.005234][T28036] wlan0 speed is unknown, defaulting to 1000 [ 788.060066][T28036] lo speed is unknown, defaulting to 1000 [ 788.562875][T28027] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 788.562899][T28027] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 789.115883][T28027] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 789.115909][T28027] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 789.566700][T28027] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 789.566726][T28027] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 789.899681][T28142] netlink: 'syz.3.5680': attribute type 1 has an invalid length. [ 790.419071][T28154] netlink: 'syz.2.5681': attribute type 1 has an invalid length. [ 790.490775][T28152] netlink: 'syz.2.5681': attribute type 32 has an invalid length. [ 790.490797][T28152] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5681'. [ 790.619734][T28162] netlink: 'syz.1.5683': attribute type 1 has an invalid length. [ 791.082009][T28162] bond9: entered promiscuous mode [ 791.084938][T28162] 8021q: adding VLAN 0 to HW filter on device bond9 [ 791.174561][T28172] netlink: 'syz.4.5685': attribute type 28 has an invalid length. [ 791.174585][T28172] netlink: 'syz.4.5685': attribute type 3 has an invalid length. [ 791.174599][T28172] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5685'. [ 791.248430][T28165] macvtap4: entered allmulticast mode [ 791.268471][T28168] bond9: (slave bridge12): making interface the new active one [ 791.268493][T28168] bridge12: entered promiscuous mode [ 791.270043][T28168] bond9: (slave bridge12): Enslaving as an active interface with an up link [ 791.763552][T28178] ip_tables: iptables: counters copy to user failed while replacing table [ 791.823436][T28178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5686'. [ 791.823484][T28178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5686'. [ 792.313088][T28192] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 792.351855][T28194] netlink: 4384 bytes leftover after parsing attributes in process `syz.2.5690'. [ 793.538412][T28215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5693'. [ 793.541812][T28214] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5692'. [ 793.541847][T28214] netlink: 'syz.2.5692': attribute type 1 has an invalid length. [ 794.354618][T28232] netlink: 'syz.4.5697': attribute type 1 has an invalid length. [ 794.576622][T28232] bond11: entered promiscuous mode [ 794.584914][T28232] 8021q: adding VLAN 0 to HW filter on device bond11 [ 794.775553][T28237] macvtap7: entered allmulticast mode [ 794.946682][T28245] bond11: (slave bridge13): making interface the new active one [ 794.946708][T28245] bridge13: entered promiscuous mode [ 794.986264][T28245] bond11: (slave bridge13): Enslaving as an active interface with an up link [ 795.364227][T28266] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 795.718886][T28275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5703'. [ 795.768583][ C0] syz_tun: tun_net_xmit 60 [ 795.860845][T28275] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 795.860887][T28275] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 795.860924][T28275] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 797.350075][T28310] vlan2: entered promiscuous mode [ 797.350097][T28310] hsr0: entered promiscuous mode [ 797.350316][T28310] vlan2: entered allmulticast mode [ 797.350330][T28310] hsr0: entered allmulticast mode [ 797.350341][T28310] hsr_slave_0: entered allmulticast mode [ 797.350356][T28310] hsr_slave_1: entered allmulticast mode [ 797.847657][ C0] syz_tun: tun_net_xmit 60 [ 798.098179][T28335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5718'. [ 798.750520][T28347] bond0: invalid NS target ff00:: specified for addition [ 798.750552][T28347] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 798.976394][T28359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5719'. [ 799.144980][T28363] netlink: NAT attribute has 8 unknown bytes [ 799.145015][T28363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 799.515695][T28370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5724'. [ 799.515728][T28370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5724'. [ 799.579159][T28374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 799.927309][ C0] syz_tun: tun_net_xmit 60 [ 800.033429][T28382] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 800.045656][T28382] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 800.419193][T28395] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 800.644129][T28401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5732'. [ 800.644156][T28401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5732'. [ 801.446960][T28423] nbd2: detected capacity change from 0 to 63 [ 801.524996][T28423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5737'. [ 801.525020][T28423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5737'. [ 801.533708][T28424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.597078][T20536] block nbd2: Receive control failed (result -104) [ 801.651517][T28428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.783447][T28444] xt_hashlimit: size too large, truncated to 1048576 [ 801.989337][T28436] ¾x9ÿ (unregistering): left allmulticast mode [ 801.989364][T28436] ¾x9ÿ (unregistering): left promiscuous mode [ 801.989457][T28436] bridge0: port 1(1¾x9ÿ) entered disabled state [ 802.013473][ C0] syz_tun: tun_net_xmit 60 [ 802.365457][T28450] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5742'. [ 802.627017][T28454] netlink: 'syz.3.5742': attribute type 29 has an invalid length. [ 803.624343][T28481] netlink: 'syz.4.5747': attribute type 21 has an invalid length. [ 803.624367][T28481] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5747'. [ 803.624460][T28481] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5747'. [ 803.813776][T28478] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5747'. [ 803.813805][T28478] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5747'. [ 804.087381][ C0] syz_tun: tun_net_xmit 60 [ 804.236533][T28491] batadv_slave_0: Caught tx_queue_len zero misconfig [ 804.811295][ T194] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 804.814984][ T194] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex [ 805.481177][T28539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5759'. [ 805.504233][T28532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5759'. [ 805.553177][T28539] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5759'. [ 805.661424][T28543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 805.916784][T28543] sch_tbf: burst 4095 is lower than device syzkaller0 mtu (65589) ! [ 805.949398][T28548] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 805.989736][T28543] syzkaller0: entered promiscuous mode [ 805.989776][T28543] syzkaller0: entered allmulticast mode [ 806.019376][ T5790] syz_tun: tun_net_xmit 90 [ 806.167585][ C0] syz_tun: tun_net_xmit 60 [ 806.732312][ T10] syz_tun: tun_net_xmit 90 [ 806.865784][T28568] __nla_validate_parse: 3 callbacks suppressed [ 806.865805][T28568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5769'. [ 807.826705][T28586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.863401][T28586] ip_tables: iptables: counters copy to user failed while replacing table [ 808.081849][T28586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5772'. [ 808.247353][ C0] syz_tun: tun_net_xmit 60 [ 808.451226][T28597] netlink: 'syz.0.5777': attribute type 1 has an invalid length. [ 808.518830][T28597] bond10: entered promiscuous mode [ 808.519472][T28597] 8021q: adding VLAN 0 to HW filter on device bond10 [ 808.630074][T28599] bond0: invalid NS target ff00:: specified for addition [ 808.630105][T28599] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 808.666566][T28604] bond0: invalid NS target ff00:: specified for addition [ 808.666596][T28604] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 808.855810][T28597] macvtap6: entered allmulticast mode [ 809.291464][T28606] bond10: (slave bridge16): making interface the new active one [ 809.291663][T28606] bridge16: entered promiscuous mode [ 809.368973][T28606] bond10: (slave bridge16): Enslaving as an active interface with an up link [ 809.581958][T28630] bridge0: port 1(vlan0) entered blocking state [ 809.583806][T28630] bridge0: port 1(vlan0) entered disabled state [ 809.583950][T28630] vlan0: entered allmulticast mode [ 809.583966][T28630] geneve0: entered allmulticast mode [ 810.298474][T28660] netlink: 'syz.3.5791': attribute type 1 has an invalid length. [ 810.327652][ C0] syz_tun: tun_net_xmit 60 [ 810.441565][T28660] 8021q: adding VLAN 0 to HW filter on device bond14 [ 810.443112][T28665] netlink: 'syz.3.5791': attribute type 10 has an invalid length. [ 810.443133][T28665] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5791'. [ 810.566044][T28662] bond14: (slave veth9): Enslaving as an active interface with a down link [ 810.943578][T28670] openvswitch: netlink: Message has 28 unknown bytes. [ 810.944658][T28673] netlink: 'syz.3.5794': attribute type 1 has an invalid length. [ 811.286224][T28673] bond15: entered promiscuous mode [ 811.286626][T28673] 8021q: adding VLAN 0 to HW filter on device bond15 [ 811.323549][T28679] macvtap4: entered allmulticast mode [ 811.344283][T28681] bond15: (slave bridge14): making interface the new active one [ 811.344307][T28681] bridge14: entered promiscuous mode [ 811.346119][T28681] bond15: (slave bridge14): Enslaving as an active interface with an up link [ 811.419506][T28687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5798'. [ 811.479629][T28684] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.5796'. [ 811.678514][T28685] Bluetooth: ISO socket layer initialized [ 812.407351][ C0] syz_tun: tun_net_xmit 60 [ 813.236349][T28718] bond14 (unregistering): Released all slaves [ 813.574171][T28744] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5807'. [ 813.592761][T28744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5807'. [ 813.592782][T28744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5807'. [ 813.593308][T28746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5807'. [ 813.593326][T28746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5807'. [ 813.926545][T28753] IPv6: sit3: Disabled Multicast RS [ 814.160169][T28757] netlink: 'syz.4.5811': attribute type 1 has an invalid length. [ 814.303896][T28757] bond12: entered promiscuous mode [ 814.304646][T28757] 8021q: adding VLAN 0 to HW filter on device bond12 [ 814.323482][T28761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5812'. [ 814.431229][T28761] netlink: 'syz.3.5812': attribute type 1 has an invalid length. [ 814.431360][T28763] netlink: 'syz.3.5812': attribute type 1 has an invalid length. [ 814.477871][T28759] bond12: (slave bridge14): making interface the new active one [ 814.477893][T28759] bridge14: entered promiscuous mode [ 814.483202][T28759] bond12: (slave bridge14): Enslaving as an active interface with an up link [ 814.487764][ C0] syz_tun: tun_net_xmit 60 [ 814.750748][T28761] 8021q: adding VLAN 0 to HW filter on device bond16 [ 815.477024][T28761] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5812'. [ 816.058498][T28775] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5813'. [ 816.567240][ C0] syz_tun: tun_net_xmit 60 [ 816.630923][T28798] [ 816.633295][T28798] ====================================================== [ 816.640390][T28798] WARNING: possible circular locking dependency detected [ 816.647529][T28798] syzkaller #0 Not tainted [ 816.651960][T28798] ------------------------------------------------------ [ 816.659032][T28798] syz.4.5819/28798 is trying to acquire lock: [ 816.665158][T28798] ffffffff8ee900e0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x149/0x600 [ 816.674329][T28798] [ 816.674329][T28798] but task is already holding lock: [ 816.681691][T28798] ffff88807f107678 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 816.691213][T28798] [ 816.691213][T28798] which lock already depends on the new lock. [ 816.691213][T28798] [ 816.701622][T28798] [ 816.701622][T28798] the existing dependency chain (in reverse order) is: [ 816.710645][T28798] [ 816.710645][T28798] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 816.718301][T28798] __might_fault+0xcb/0x130 [ 816.723346][T28798] _copy_from_iter+0x100/0x1660 [ 816.728729][T28798] tcp_sendmsg_locked+0x20cf/0x5400 [ 816.734550][T28798] tcp_sendmsg+0x2f/0x50 [ 816.739319][T28798] sock_sendmsg_nosec+0x10e/0x180 [ 816.744882][T28798] sock_write_iter+0x2de/0x3e0 [ 816.750179][T28798] vfs_write+0x612/0xba0 [ 816.754955][T28798] ksys_write+0x150/0x270 [ 816.759818][T28798] do_syscall_64+0x166/0x520 [ 816.764936][T28798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.771356][T28798] [ 816.771356][T28798] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 816.779016][T28798] lock_sock_nested+0x41/0x100 [ 816.784311][T28798] inet_shutdown+0x6a/0x390 [ 816.789472][T28798] nbd_mark_nsock_dead+0x2cb/0x550 [ 816.795195][T28798] recv_work+0x1cee/0x1e10 [ 816.800138][T28798] process_scheduled_works+0xc3d/0x1630 [ 816.806217][T28798] worker_thread+0xa47/0xfb0 [ 816.811340][T28798] kthread+0x38b/0x480 [ 816.815952][T28798] ret_from_fork+0x514/0xb70 [ 816.821087][T28798] ret_from_fork_asm+0x1a/0x30 [ 816.826387][T28798] [ 816.826387][T28798] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 816.834046][T28798] __mutex_lock+0x19d/0x1550 [ 816.839230][T28798] nbd_queue_rq+0x373/0xff0 [ 816.844258][T28798] blk_mq_dispatch_rq_list+0x499/0x1990 [ 816.850426][T28798] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 816.857333][T28798] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 816.863843][T28798] blk_mq_run_work_fn+0x16c/0x300 [ 816.869397][T28798] process_scheduled_works+0xc3d/0x1630 [ 816.875510][T28798] worker_thread+0xa47/0xfb0 [ 816.880644][T28798] kthread+0x38b/0x480 [ 816.885247][T28798] ret_from_fork+0x514/0xb70 [ 816.890365][T28798] ret_from_fork_asm+0x1a/0x30 [ 816.895684][T28798] [ 816.895684][T28798] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 816.902908][T28798] __mutex_lock+0x19d/0x1550 [ 816.908034][T28798] nbd_queue_rq+0xc1/0xff0 [ 816.912978][T28798] blk_mq_dispatch_rq_list+0x499/0x1990 [ 816.919050][T28798] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 816.925917][T28798] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 816.932424][T28798] blk_mq_run_work_fn+0x16c/0x300 [ 816.937982][T28798] process_scheduled_works+0xc3d/0x1630 [ 816.944066][T28798] worker_thread+0xa47/0xfb0 [ 816.949186][T28798] kthread+0x38b/0x480 [ 816.953776][T28798] ret_from_fork+0x514/0xb70 [ 816.958894][T28798] ret_from_fork_asm+0x1a/0x30 [ 816.964206][T28798] [ 816.964206][T28798] -> #3 (set->srcu){.+.+}-{0:0}: [ 816.971352][T28798] __synchronize_srcu+0xc9/0x2f0 [ 816.976847][T28798] elevator_switch+0x1e8/0x7b0 [ 816.982206][T28798] elevator_change+0x2fa/0x480 [ 816.987492][T28798] elevator_set_default+0x375/0x440 [ 816.993219][T28798] blk_register_queue+0x3f3/0x4e0 [ 816.998828][T28798] __add_disk+0x6b8/0xdb0 [ 817.003701][T28798] add_disk_fwnode+0x100/0x3a0 [ 817.009005][T28798] nbd_dev_add+0x733/0xb60 [ 817.013951][T28798] nbd_init+0x168/0x1f0 [ 817.018741][T28798] do_one_initcall+0x250/0x870 [ 817.024039][T28798] do_initcall_level+0x10a/0x1a0 [ 817.029555][T28798] do_initcalls+0x59/0xa0 [ 817.034410][T28798] kernel_init_freeable+0x29d/0x3e0 [ 817.040133][T28798] kernel_init+0x22/0x1d0 [ 817.045004][T28798] ret_from_fork+0x514/0xb70 [ 817.050120][T28798] ret_from_fork_asm+0x1a/0x30 [ 817.055425][T28798] [ 817.055425][T28798] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 817.063252][T28798] __mutex_lock+0x19d/0x1550 [ 817.068369][T28798] elevator_change+0x1af/0x480 [ 817.073667][T28798] elevator_set_none+0xb5/0x140 [ 817.079042][T28798] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 817.085382][T28798] nbd_start_device+0x189/0xb30 [ 817.090758][T28798] nbd_genl_connect+0x167d/0x1cd0 [ 817.096392][T28798] genl_family_rcv_msg_doit+0x233/0x340 [ 817.102529][T28798] genl_rcv_msg+0x614/0x7a0 [ 817.107555][T28798] netlink_rcv_skb+0x226/0x4a0 [ 817.112888][T28798] genl_rcv+0x28/0x40 [ 817.117394][T28798] netlink_unicast+0x7bd/0x940 [ 817.122687][T28798] netlink_sendmsg+0x813/0xb40 [ 817.127981][T28798] sock_sendmsg_nosec+0x13a/0x180 [ 817.133542][T28798] ____sys_sendmsg+0x54e/0x850 [ 817.138839][T28798] ___sys_sendmsg+0x2a5/0x360 [ 817.144043][T28798] __x64_sys_sendmsg+0x1b1/0x290 [ 817.149509][T28798] do_syscall_64+0x166/0x520 [ 817.154631][T28798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.161055][T28798] [ 817.161055][T28798] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 817.169737][T28798] blk_alloc_queue+0x544/0x690 [ 817.175032][T28798] __blk_mq_alloc_disk+0x194/0x390 [ 817.180676][T28798] nbd_dev_add+0x494/0xb60 [ 817.185611][T28798] nbd_init+0x168/0x1f0 [ 817.190297][T28798] do_one_initcall+0x250/0x870 [ 817.195588][T28798] do_initcall_level+0x10a/0x1a0 [ 817.201053][T28798] do_initcalls+0x59/0xa0 [ 817.205908][T28798] kernel_init_freeable+0x29d/0x3e0 [ 817.211628][T28798] kernel_init+0x22/0x1d0 [ 817.216483][T28798] ret_from_fork+0x514/0xb70 [ 817.221594][T28798] ret_from_fork_asm+0x1a/0x30 [ 817.226890][T28798] [ 817.226890][T28798] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 817.234107][T28798] __lock_acquire+0x164c/0x2de0 [ 817.239482][T28798] lock_acquire+0x115/0x350 [ 817.244511][T28798] fs_reclaim_acquire+0x71/0x100 [ 817.249975][T28798] prepare_alloc_pages+0x149/0x600 [ 817.255609][T28798] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 817.261944][T28798] alloc_pages_mpol+0x21e/0x390 [ 817.267323][T28798] folio_alloc_mpol_noprof+0x39/0x160 [ 817.273226][T28798] vma_alloc_folio_noprof+0xe1/0x1e0 [ 817.279038][T28798] do_pte_missing+0x173a/0x34b0 [ 817.284418][T28798] handle_mm_fault+0x1a53/0x3750 [ 817.289889][T28798] do_user_addr_fault+0x746/0x1340 [ 817.295552][T28798] exc_page_fault+0x6a/0xc0 [ 817.300585][T28798] asm_exc_page_fault+0x26/0x30 [ 817.305957][T28798] rep_movs_alternative+0x4a/0xa0 [ 817.311572][T28798] _copy_to_user+0x8a/0xb0 [ 817.316689][T28798] ethtool_get_stats+0x32a/0x3b0 [ 817.322205][T28798] dev_ethtool+0x1130/0x29c0 [ 817.327314][T28798] dev_ioctl+0x392/0x1150 [ 817.332236][T28798] sock_do_ioctl+0x23e/0x320 [ 817.337362][T28798] sock_ioctl+0x57a/0x7e0 [ 817.342224][T28798] __se_sys_ioctl+0xfc/0x170 [ 817.347342][T28798] do_syscall_64+0x166/0x520 [ 817.352466][T28798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.358886][T28798] [ 817.358886][T28798] other info that might help us debug this: [ 817.358886][T28798] [ 817.369112][T28798] Chain exists of: [ 817.369112][T28798] fs_reclaim --> sk_lock-AF_INET --> &mm->mmap_lock [ 817.369112][T28798] [ 817.381700][T28798] Possible unsafe locking scenario: [ 817.381700][T28798] [ 817.389154][T28798] CPU0 CPU1 [ 817.394515][T28798] ---- ---- [ 817.399881][T28798] rlock(&mm->mmap_lock); [ 817.404303][T28798] lock(sk_lock-AF_INET); [ 817.411247][T28798] lock(&mm->mmap_lock); [ 817.418095][T28798] lock(fs_reclaim); [ 817.422082][T28798] [ 817.422082][T28798] *** DEADLOCK *** [ 817.422082][T28798] [ 817.430217][T28798] locks held by syz.4.5819/28798: 2, last CPU#0: [ 817.436565][T28798] #0: ffffffff90252700 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x3a0/0x29c0 [ 817.445536][T28798] #1: ffff88807f107678 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 817.455484][T28798] [ 817.455484][T28798] stack backtrace: [ 817.461371][T28798] CPU: 0 UID: 0 PID: 28798 Comm: syz.4.5819 Not tainted syzkaller #0 PREEMPT(full) [ 817.470737][T28798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 817.480794][T28798] Call Trace: [ 817.484073][T28798] [ 817.487007][T28798] dump_stack_lvl+0xe8/0x150 [ 817.491613][T28798] print_circular_bug+0x2e2/0x300 [ 817.496651][T28798] check_noncircular+0x12f/0x150 [ 817.501597][T28798] __lock_acquire+0x164c/0x2de0 [ 817.506450][T28798] ? __update_page_owner_handle+0x5a/0x580 [ 817.512289][T28798] ? __update_page_owner_handle+0x5a/0x580 [ 817.518122][T28798] ? __update_page_owner_handle+0x512/0x580 [ 817.524026][T28798] lock_acquire+0x115/0x350 [ 817.528531][T28798] ? prepare_alloc_pages+0x149/0x600 [ 817.533821][T28798] ? __page_table_check_zero+0x6c/0x430 [ 817.539374][T28798] fs_reclaim_acquire+0x71/0x100 [ 817.544316][T28798] ? prepare_alloc_pages+0x149/0x600 [ 817.549605][T28798] prepare_alloc_pages+0x149/0x600 [ 817.554724][T28798] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 817.560536][T28798] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 817.566869][T28798] ? __pfx_policy_nodemask+0x10/0x10 [ 817.572165][T28798] ? __lock_acquire+0x747/0x2de0 [ 817.577109][T28798] alloc_pages_mpol+0x21e/0x390 [ 817.581969][T28798] folio_alloc_mpol_noprof+0x39/0x160 [ 817.587353][T28798] vma_alloc_folio_noprof+0xe1/0x1e0 [ 817.592651][T28798] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 817.598559][T28798] ? lock_acquire+0x115/0x350 [ 817.603245][T28798] do_pte_missing+0x173a/0x34b0 [ 817.608116][T28798] handle_mm_fault+0x1a53/0x3750 [ 817.613069][T28798] ? handle_mm_fault+0xf1/0x3750 [ 817.618020][T28798] ? __pfx_handle_mm_fault+0x10/0x10 [ 817.623331][T28798] ? lock_mm_and_find_vma+0xa7/0x340 [ 817.628629][T28798] do_user_addr_fault+0x746/0x1340 [ 817.633753][T28798] exc_page_fault+0x6a/0xc0 [ 817.638262][T28798] asm_exc_page_fault+0x26/0x30 [ 817.643123][T28798] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 817.648948][T28798] Code: 67 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 67 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 817.668591][T28798] RSP: 0018:ffffc9000bdef968 EFLAGS: 00050202 [ 817.674669][T28798] RAX: ffffffff84deb301 RBX: 00000000000000f0 RCX: 0000000000000038 [ 817.682649][T28798] RDX: 0000000000000000 RSI: ffffc9000376f0b8 RDI: 0000200000001000 [ 817.690626][T28798] RBP: ffffc9000bdefa50 R08: ffffc9000376f0ef R09: 1ffff920006ede1d [ 817.698606][T28798] R10: dffffc0000000000 R11: fffff520006ede1e R12: 0000200000001038 [ 817.706586][T28798] R13: 00007ffffffff000 R14: ffffc9000376f000 R15: 0000200000000f48 [ 817.714579][T28798] ? _copy_to_user+0x31/0xb0 [ 817.719196][T28798] _copy_to_user+0x8a/0xb0 [ 817.723622][T28798] ethtool_get_stats+0x32a/0x3b0 [ 817.728573][T28798] ? __pfx_ethtool_get_stats+0x10/0x10 [ 817.734044][T28798] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 817.739939][T28798] dev_ethtool+0x1130/0x29c0 [ 817.744539][T28798] ? __lock_acquire+0x747/0x2de0 [ 817.749490][T28798] ? __pfx_dev_ethtool+0x10/0x10 [ 817.754436][T28798] ? kasan_quarantine_put+0xbb/0x1f0 [ 817.759731][T28798] ? lock_acquire+0x115/0x350 [ 817.764421][T28798] ? dev_load+0x21/0x1f0 [ 817.768671][T28798] ? dev_load+0x21/0x1f0 [ 817.772921][T28798] dev_ioctl+0x392/0x1150 [ 817.777258][T28798] sock_do_ioctl+0x23e/0x320 [ 817.781862][T28798] ? __pfx_sock_do_ioctl+0x10/0x10 [ 817.786984][T28798] ? hook_file_ioctl+0x1f2/0x600 [ 817.792008][T28798] sock_ioctl+0x57a/0x7e0 [ 817.796359][T28798] ? __pfx_sock_ioctl+0x10/0x10 [ 817.801227][T28798] ? __fget_files+0x2a/0x420 [ 817.805832][T28798] ? __fget_files+0x3a2/0x420 [ 817.810520][T28798] ? __fget_files+0x2a/0x420 [ 817.815123][T28798] ? bpf_lsm_file_ioctl+0x9/0x20 [ 817.820103][T28798] ? __pfx_sock_ioctl+0x10/0x10 [ 817.824969][T28798] __se_sys_ioctl+0xfc/0x170 [ 817.829568][T28798] do_syscall_64+0x166/0x520 [ 817.834159][T28798] ? trace_irq_disable+0x3b/0x140 [ 817.839193][T28798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.845268][T28798] ? clear_bhb_loop+0x70/0xc0 [ 817.849954][T28798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.855859][T28798] RIP: 0033:0x7f4098d9e159 [ 817.860278][T28798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.879892][T28798] RSP: 002b:00007f4099bb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 817.888317][T28798] RAX: ffffffffffffffda RBX: 00007f4099025fa0 RCX: 00007f4098d9e159 [ 817.896291][T28798] RDX: 0000200000000000 RSI: 0000000000008946 RDI: 0000000000000003 [ 817.904270][T28798] RBP: 00007f4098e3503b R08: 0000000000000000 R09: 0000000000000000 [ 817.912251][T28798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 817.920229][T28798] R13: 00007f4099026038 R14: 00007f4099025fa0 R15: 00007ffd2eb16df8 [ 817.928216][T28798] [ 818.647337][ C0] syz_tun: tun_net_xmit 60 [ 820.727209][ C0] syz_tun: tun_net_xmit 60 [ 822.807377][ C0] syz_tun: tun_net_xmit 60 [ 824.887258][ C0] syz_tun: tun_net_xmit 60