last executing test programs: 2.096156046s ago: executing program 4 (id=8239): r0 = socket(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) recvfrom$x25(r1, 0x0, 0x0, 0x40, 0x0, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4f}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r2) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x1, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newnexthop={0x18, 0x68, 0x401, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x4, 0x0, 0x10}}, 0x18}, 0x1, 0x0, 0x0, 0x4004}, 0x800) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{0x0, 0x114}], 0x1}, 0x0) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.060556059s ago: executing program 2 (id=8241): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000063015e001e5e9b5dab0000ffff940000aa22d982f12ac6b99c8d574a9a397b3605f866858772d8074fd3ad7dfa92da5491eac72f62c434f64a6b3ca86113ef456122313ae1"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1.928143643s ago: executing program 2 (id=8243): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000480)=[@in={0x2, 0x4e23, @remote}], 0x10) (async) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a8", 0xf, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000004000000000000000600000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000a0000d99700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)=r8}, 0x20) 1.599113569s ago: executing program 4 (id=8247): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'team0\x00', 0x2000}) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0xc6e9f000) write(r1, &(0x7f0000000540)="d396072129e4d17d5f52ba823ceb132fa6b668546f4b2c1d71a25c03fea9b18b0ec9484a3b1101f5832e72f095849cd100c14e9c9650d9fe5d263170e123f83ad86ddf68c26ee7fb285f0ef37415f950316ae8d998720284d970095ab6da2a7ace33f5064745092c10", 0x69) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x3a, 0x2, 0x0, 0x0, 0x0, [@remote]}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) clock_gettime(0xb, &(0x7f0000000980)) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="b4fe635f32ef9f1b5d39edee7233c28fd39a58aa35741a04ead998fe94ba74eea927359da1a1515a2d7cb732c688c057fdad2519edb147c6d99cac040ea916ba722d463aec21227b35d97a7a980f8ee690e50f5106095bbff10fec84d51d5b8cb4fafbd2239df693f85d000bb11394f7e46578f64af1cbc9a6feb1c70cac261392a6d668831c35c6d23dce39191fb868e8eb24cf101569e4349caaafe12e43b8a7659d70521716700ce5e3e627c9d8bed798263605db619addbc429487c80cee39bcc7b9a868152f8b443846476aaede4a4f16a553bac53c021a9f28c5bf4978499d3b072e0dbc4e418ab406", @ANYRES16=r3, @ANYBLOB="10002abd7000fcdbdf251300000005000300000000000c0009000201aaaaaaaaaaaa"], 0x28}}, 0x40000) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000080611250000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r1}, 0x94) 1.417301762s ago: executing program 4 (id=8249): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000300)='M', &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r1, &(0x7f00000001c0)='M', 0x0}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r5, 0x11, 0x0, 0x0, @void, @value=r4}, 0x20) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000400)={r4}, 0x42) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)={@ifindex, r5, 0x11, 0x0, 0x0, @void, @value=r6}, 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], 0x0, 0xbb, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x79, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000007c0), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x507, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)='%pi6 \x00'}, 0x20) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r14, &(0x7f0000000480), 0x0}, 0x20) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r0, 0xffffffffffffffff}, 0x4) r17 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8f7ffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r17, @ANYBLOB="0000000002000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1c, 0x19, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x407}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x0, 0x4, 0x6, 0x9c247eb0495d3df, 0xfffffffffffffffb, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x27, 0xeb, &(0x7f00000001c0)=""/235, 0x41100, 0x0, '\x00', r7, @fallback=0x2, r8, 0x8, &(0x7f0000000440)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0xe, 0x81, 0x1}, 0x10, r9, r10, 0x8, &(0x7f0000000a40)=[r11, r12, 0xffffffffffffffff, r0, r13, r0, r14, r15, r16, r17], &(0x7f0000000a80)=[{0x1, 0x1, 0x3, 0x8}, {0x4, 0x1, 0x7, 0x4}, {0x4, 0x3, 0xb, 0x5}, {0x1, 0x4, 0x4, 0xd}, {0x4, 0x5, 0xf, 0xb}, {0x1, 0x2, 0x7, 0x3}, {0x1, 0x3, 0x3, 0x7}, {0x1, 0x5, 0x8, 0x9}], 0x10, 0x8000}, 0x94) r18 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r19, {}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}]}, @TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 1.331930932s ago: executing program 0 (id=8250): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000005000d0a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a3100000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x4008870}, 0x24000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000001a80)={0x41, 0x1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000001a00)=[{{&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x1, @private=0xa010100}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="78b0b5a5f30b0da182f4a033083b112a5e61022e91fbced4db6880129504885319465dfd6072e40426771315a7a84ac42b9b5fd4588515577292d844f90a7c", 0x3f}, {&(0x7f0000000340)="4b6183cbffd68c9b7b3c8c9cbc614ef5f6d14cc1e479a55a6c2002a081310d84bddb69841c22c18009899f2877f439ad35e3c0c3b1caf24fbe1393e7a047beea7e80be1aef604ed4c663a9a430ee493e1db1e7b9d9fc0b22df5912624680dc1aeac73c906e9d6d416b613fcb890e2c3a552a332fc15c7e83885bbafa0190d99efffaf96dd9da690f7c952fc4d079c4660a26c83403aaf224064d16aea2acd79df03e7ec4d06a0d10da7a05d8efa3b2c806035b24821d995a667df3c2cb8a69fd0c88269f07a7e285c09af1ebb209ba1db5e7e000e1834c77911f9039d971ee3da3ed0277f1cc41275e5ec2", 0xeb}], 0x2, &(0x7f0000000440)=[{0x20, 0x11, 0x7fffffff, "2924f0ca02a104bdc0e450d0"}, {0xd8, 0x115, 0x1, "1a04cf9edbf2a00d7c57b830ddf988a49ca1e6ef3100d89dca8220e6697cb6808f6fff1c7b50e5471780444a929a749f657a4628c5651f57551af7b957d54a822fb545fa43b7404d9c6230cb4191f81946d385ac10eac4c0a37e0b4013b2eb2079de0f578df6a2449abae8854e1d8b42cf9e732e461fef9cfdd650cf1e02dd20b15a21ef958e6c5b9c910b5a43641af8bf8c432d95bd4a0185c6c2af3964dc4698d211f5b32fd9dc1725a2cbe9450665ca8b6fad13e64c3e98fbc990e1408f84732c"}], 0xf8}}, {{&(0x7f0000000540)=@caif=@rfm={0x25, 0x10000, "347e2294bd5b798069880a85a47175a2"}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000240)="46b996c7280a4aa728fff636d2d6307a157a8d736a772903bee228bc2608f5996a410c37081be4204abf80e4680d10dd3f", 0x31}, {&(0x7f00000005c0)="418492c95b3c5a8ad22e9db4c30c6959b06087a83983c2147defe2e420a2c8f95cbe298e0fbd36d373be005b7f37f8f79b4f2474e937c196e4b28144d0cf52bb89", 0x41}], 0x2, &(0x7f0000000680)=[{0xf0, 0x11, 0xfffff800, "a51e8d722137a8fce3632b794f76acce39e2607a88cac0268f6225f9396fadaf90bef017dded5ca16f75114fe46232bf46363b498da338a9a7461d29a1df2a5a98280930167ec60ed4637f932171453d57f02cd915805b90feba3009926ad59952f6ca20bbde8f7e6c99f260a37bd6df4e483a1411bf5e5a475697674e9e87b69fb92851491392f6a8aac29c54ca70422de33a4bdbc7fd3a2dfab298aed5f4f05d3af58e28e034444da7fd414cc6cdd1f906972a05dc36cc480df1618bd57861d2be6c3a4979fd77d5a58f810533c7b772765901bfbe17653120252cfb9ca805"}, {0x1010, 0x10f, 0x4, "512cba0a3e99985a6b4417f9dc9bb4505d3771ddce134159dde5b4342390d282c66aff540fb3018b880a29a1c618fcffdf7c5f968e2d128475faee28303b6cb7278a1990c4c8a74a16c6615f1c11e769b9c89031ff95ef1177cd41a7ea0c2e545607ee6182a866d83cbb1b36f8a51d2bf17535650bff26dd3f4964584ffa032c0050f92f67abea2214cdfddb8fe9a05c2f81ccff1768eaa98b9f2f0a7eea9d74eb54b250234d794ff28c2d8fab65079d5ef27630e295e4f9cc7f51419288a9db0e99e5ed6defbaed1c361eac53605dd3e1689b97e6513b9554ef7e395b596005696be1f55e82e67630e1dc01a3e46906ec4817cd5cd2021a9e59f7f591ee96ac36a0ba6e06202f89a1fb80ce854386ce0d9239f112597db9a42ac5fc62e9ab9290bb1eb21f53a50bb519403f07512d8645d3d458046f3ba9c50bcc3d1fb6fae020814458f24d56a0933331c19bee3bc7365e83112b14ec1b334d88f744ce922b3a881b4cbb2794dc3e07542f937da1987a0d4c1f4228c7f44b5ef2c333db0849a540ece23345e28657c713257ede5c292639bfa7def769da39f2ba597dff5fb1ac13e3ffbf5d9e26f2194267b32631ba9e8d34dcaabc75837f090bf39d7fc887317f63bb6e3a8610d3e200add19143dae4a103ba86c0e6840dd715ad2ac0fa503485e37276349975aa66afdc93a3aff76db70a68acfe3c0ec779f56ff74b8f2ca3401387108ab63d657a21f530bfe94844e475ae5f635b2417c9dbb513d2ea84105a5906c30c6015e4a907fcc8aaf79df31c919613f1121245ff923eb6dcf7bc084b069c1077e594ab84c9e4a351d61f0d1c1ded5e77306ff8a5926c53d0918df4f168c1aac46e58604a476493f81fef62ac66ea5ffd8171c2f23c77c065ff670379615bd343b44ffe74ffb9dc2fdbe8c605d67b0f45c9578045ef4360ea9583b33fca836f85417fa19b52d76b646918793c45e394af6f16f333c12d73e27a88c28deeb7851194b23e9a400398bbabbafd66e56fbb9417c55a373a4fa7d5bd442aded06a6570e2fa520bb3a597cb1c2ad10185fbda61dd2515da702dc731189b4c1f072eb5254d2e9bf409a0d4ffe9ee1f1971f61df58382bdb6bcb37dda9af8e12ad2e29e1951775a35762f1571a6ccecabf13f57fea2b40462e3635528b06009d412ef19fa6742f42200352320e3e3051f18636f139184eea27a5ad339fd0cc0c78a240e8d00d26b787417afd99e9e202de27b1b287e13822646a94e3e8ab0ab815e853e0508368a033243c8eeeb453ad7d266ca0eed7a5acbb11f6fd60ffb6a0b5ec8c865e55d8ab1078b319cb2cce13650f5985ca175cc2a9396a6fe90a3a19588010b288bad1e476354ab157af5950ead30e04c06e011315e73dea10551faea4819b49d1a6f8d6d5cb82d03fee47ee985af62cf4b1bed0d6531a4f67cc93eb50044597988d03f58412353f8ebb72881fcb2ea2ba9cc37a7e8a7209d861a6e83d5df30a4055665bd648d44c1b47f99e5e458a2849e5f4f70e3a1f010c1da51d01d6874f1744c1bb33e760605201d17133dbeee55092fbce991f780b24d862319a729ed2550f6fe0f98aa19bc8142f13576ea8869b2189c472d88ea9a5daff87933a6877c3d62bc89220f5345dc7ecd3c17727650174e361c41e81fc0abf4904173e2ddb0a398fe24b0557046f61d1888f8bc40f9d5de021c1e5a5bc329a6bd4af8fbba06b401bf138f268fc5edf34f077fe7ff8c9a4da05abf23b9aa7c7d6ef76a8074949c055410eb3aa3ba89cb56d165575e7ef49bb47db0bda2c387b223486df435a44eedb73fe4d0950d0ef605839894f3c88f7c030085b505ce80ae44173882c47fdee76777aa8162cc57848153f290744869608e9f0c0b630205df5d6a504ac9857ff06b02157a6c0d3a92dcd6ccf8ca511689268be106a71ea06d3d1f42f3e43b84a524c58a66f76aa06ca0950fc51e70a70dadbac31685b4b4636cc3181503d9e10c4e127743f990674a5beab98ba4293142c49fec773803a5e552df2b316cde920b713652650902a3b113a9a4e2f56e34913b797f848e6e53b6e5a3ac074a41cc41567733ce34fa6149d3a0c514243819362706bddd641a769874ae8cbded07c32450d29d8711a5f0b754415d358f610ef7d106305a11b3b6f3d6b49a2ebd44db7e4dbc08e259549068e9743e0550d6191b184ad58ace26b1af8c8d85a3bd7e75adc4675430ca80c316bdf14818cfca5fef19c6eb8922671d516ec96ca72d8fb7f7cdeb583a0f61e783c9e319b21915a16cfed033ba70e8d67847dc1b2571522256e168af35ff93d6c9ef39d12c1e8d08bc4c0c6cab037e840eef7674406924c70dca114808d73a334e48511cbb99a139307d31b36854bb6bb81b78522d7c19764cf60316f37d5921bdf9909e1a87760e4ef5032ed3175689c7cabbd29207466533a0d324994010b145eb5b8d3470fc59688884ff1e6892a95ac307474d90619ad6c04a151023419844d58c20030d0456f94192bbbd48bc9980f8c8243ae532f90d1c825ba0a007d0ce7bcf71da279222de9a6b1764a682fb4eb3e170f80c05d8d92fa7706450bc1901b70b75843057cc1608838a0ddb47fd320d2772bcad6bd0b30004008e43ac337423d421cb25212b6c747ea8fbfd96130bcb36d74f57670258abe2a0c9c87fdfdcfce0710eed00ce2556671eb4037f411ae127bc95abfd756f34f68dcf775b020562e206e988d38456add71dab0bdc1990b9989be6401992a43392ab1f768e4e478fe7711c7f93a29dd7d809be121dc65edc3b8383550b1b32147f69253db8c32a5cda80f103af5312ee64e9a94df5731d090470900e5209a87b00c7f9aed0dd04447c92eb77c1a45e76adc24e14c927eb2300bd8de2a010c73094f7c4c0ec6dac2a9dab19a91ac435869b06e90ef4bdb57128d6bb1cf4d47955ce394b5e08cbceef78f59430253b00e0ec84d57fc6558db044c9628cf47c1de8a60b9cb2cbfe52736a5d011ebc63a2b9305f1141f9a00a29bd02df0f009f78297d61014f8dfffc7f093c282670821aa2816c6ff07a2f6b6a82832f8c63ae928caa97e834c796fe0c2a408b600aec8f351f80b03794ad71cfcf89347940ca514105112c0df25fe374d34bb4fbe1859074674c1c084c079524aa0de26fa1e98306860d0851e8e7b698ae67a2105dc8673e802a6ca3c2c7b3a0d11aea15cabc1e24376cc0e38144bc6f25bf0a32488286d92e681bb51a88f87d96aa0e04ed0e9a618ca03fa73686207bc21b4503f0ef05ca5f670f1b49b33868fd30b2600f4e6508aa3547f9bf39a911fe5d46b7765c5dfd55eca2dd08628ed636c686f6cafcfc4af6fca816170a2a19d148d767e2eebdafa36353594b4cf71a97a5433318c97f2414d1001912c81cd99b982a7232de3ae440e107844bdcb2deef01482efe4ab2c213e6bd2b097be677df06b486597ab61617b7733032f9a3267ee7eef731beed9436aec35c6a09d045f19aae56a4ac3fd0ea000ec320fd2a1a4c22a21cfe3931721531159be828047696b8fbe23ec73fea243b11889203c9dd5444139f86cdfc5dcc4fa2c7a6c72a95a7bba3bd992169f541e2779cfd11fd550a0bff23c4ecb618844edeaa036218e0eeb32aa1a78be6736b4ab35d6e94635cfe4570501e2303853484a5c8df731012e9ee3362b3223cc9f253833c6ddd42ae818f6b99c01ed75dc54f9b72bb0ca70b68213d479a2972a90c4411713d022e2bd75f2a7877aa1e51a768233fc7f87795c6b14f5df84d4f1b2afee0f4d7c73944af56b41e46ab34081e8b400f4f19cb2bd484326e69ff2a9e47e8658480972c2a414293a80276625c21b46a3e2f846c0e837f05aa5ad3781ef348efbdfc74338d47d0aaaff61dd5bc32eb509cc31d7d34567448139e18dcb3df84218fca549286f9c5455f91d154e9820d70d81e910ff31ee0a41e8c16031cdd7c8637741797f91edb34e388eb626f066eef6afce085d0a0be06e1a955611d65a0572bb29986c3edd022cc8a2b916d80749c9c44242d12c4a156ce19856284afa02867909214e22dd304fe1fd2467335b2370481294c676d8cc1b41b47f706c6e004b5fbb38a3eb676262b56358bfe4a4beb47f85e7df1461c621b687d757db9b7846df3ff6075c579115eac5d56fa5172f79f2d81d837a1f60e2b7ba3a98af4c1694872deef01f15a7afc6a6649209befff7c8eaab0fd7218aa7596c02606c0740db58b269f04b3c6b31e73daf88deff4620185184dce257242dd8d3001169e396f9b7876fb6d359fa3475e51daef999caf2a0ab1cb728dae4b9fd947e76ca1f53da2d2c2b78dda0dd7d6dc79aa39caa1d9f140455c8893cd31d990c7bb4c701532106826fad1f343da041adbc8764e7a3c3f54b60f1c7ce8b36193ca16b5a892fd2f9f0d028256d740dd9c15e32ed45168cf2fba28bb9ed1909d1f89c78856ad4f35157e7e57736caf86a1d1607c54a58b0817149478f1e018ceb63ca8f649fda85adc5cba7c36b76d813f6c02a9025e8063e103124963f9dbc580e826484dd4ae647d6f2f5ac60d8fcf4953006ed98f34255519ea58232fa21425dc0f5665ac603d7fbdd5885c9d912120b511ce6fe3b3d5ae02bc65b50224ab6bc3f6238bcfe839c9bf5dfd24da918988c23920a2de49bfb543a1d0f1670d0d4688ef21d8fe2030c137db0db520574e153ca408200b346c263ed03b0de0b732a955979e82ba5fd56573d2a4583e7c28f66683ed38c1b1f62de55b51463b57791df78ea7fb6f090693e73d09e2c2474432e8b399c2186b1cc0ae012162fbf5ccf39f31c1ab5b88dde6c6b34797d3b4188882f9cdf746184b159b4f1f157a4d59db02efc51dabd03da19ed7814914aca3f948a9296be59aed7e0a6e7e1d8d858607a1f0b24a2bc610f6f5e6401d67f7fb97c75c5cfa85d82f8ecad79ce688c2ab164159c74fde4530d8e057a0ce4a5af84ab0db59a251f4599bfdaf1ba4bfb9f99e9633cb85f351a6d50f7781dec761d008c1bd4795836f15baa2f6fff333050c2c314c2de10b27bc9ea545932a6b64777390a98a11d77bafda72344e266096ed0e3c42647c2ec1bf93c6438402c0fe2b0da1e28792e4bce5eeb341f8179b1b0a58f87c2127a85d2a6c295391f0ea83b5caf8e72744ab9a14b75f5acab72e61218c1954558e00bb3dde783cdb2e39d1d2469dd9fc63844cc922434e4614c9ac45df44ce69e22a568072106d4263f07f6835a3793d4059eb25f4b1bb536afd75406d0ffd51bc681439fb818cc5565e6a219bebd0c504b3faf6ca1eb18511ad0516845e50b30a4abaeeae0d214a09960f637d76bdad6cdae65c446d594980e7181134f2a724574aabd1b65679e6d21141f865a140362a055732aae758db7bba8ce2b92f0a0b1b43e8ec85eafcbd0c83024f5f2da026bd15317dd588fd68c2cc808a5482e60e377214fa6db0fa91ebb781b6a3200ab1482f046fc24f2bf887266c69ee03c46e567a1d85a44cb066d3a824a3cc91181e007168126e0df945f9fdf7c93db91abf2665db5c4b936c10ea0e7c765d31217561c36ce17cafb349bbe66c7b27de3c5bb6c35ab23df5e8a78491f1a3ab6332072a94208466cd61b47eba699c60c34b75ad4a607e0c31bb9d15b242a72920a8c06a2784d5e8fca2eec04c2b5dc1cdad7b208d91e1bc7d654858c6c68e987d2c47f92295d08afd2c37c557efea666c3cda593d1888fb1cefa25d2d8a1159dd1c120af2382adb24d597735898489956538a62f1164d289127"}, {0x88, 0x102, 0x6, "b75c87e246ce2e1890b8f4ef0502460a5d2d29ccb31dc5cb3b2fdc88602ccbb0f71dcc9f51a4b0204dd7ec90a59ad6d97e39d10abfe8f7752bac4b59f1c590d8279b4ba499d8b450d519bff92a272d06b8b3a124b15d756a59e7442b96a115b5cf80e1937080fc8bb29f969ea4238300a8bf33b60ab912"}, {0x78, 0x115, 0x8, "7eeeff439f9b499b27855aaf88be8caeb95e529e016f349547eb9020485e18de67fb73cc76d3cec17e7637c02564634d25d7d128911f71fb9ac910006c56b4240bc47911050ba6d367e70f7150a208e0f83f902744c0258edfa97c3444630d3ab76f599fd36e"}, {0xc0, 0x108, 0x2, "68e92bf6de7a3334691b573e5de7e06bd916392348893982fac9964f4be22184d8a791795532ab8f4e6661caeb5f8a77b676aab3cb2ef9bde25434d30bfe810671039fb0929d16c18d0d1695fccc80c1d7144cc44ccbb1a435b7669ddab215c3245858279b27147e75407c0f5ba4038eb61c64f132e8caed40f67b9eab9c8366c912cd4af237a0acbd51dfcda892454fd3b8badc7623007de178bc495ef94c9516e5c1a7674368dbb34685"}, {0xc0, 0x115, 0xa, "eeb00611f6fba4aaab4b77e68248ed3000e2f3d8fb2d07e112016e93b7950c465037f680d35a1e93a90cb3490a02a8b709056f12a391d509d542acbd4a91e121e8da5457c794c3703ef555850ce27b9718ca1799fffff4142f4e56aa78213c3b01e1e53be4cf3ea35dd1216fffe9d722b7af42c3b9e51b6c1fb10f6ce968409817cb29c09ee3745aa66659d4d73edd88d7daf55f260b36d9a6db0876f848db366c15177007ac49f411e94d58be"}], 0x1380}}], 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000005000d0a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a3100000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x4008870}, 0x24000010) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000001a80)={0x41, 0x1}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r1, &(0x7f0000001a00)=[{{&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x1, @private=0xa010100}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="78b0b5a5f30b0da182f4a033083b112a5e61022e91fbced4db6880129504885319465dfd6072e40426771315a7a84ac42b9b5fd4588515577292d844f90a7c", 0x3f}, {&(0x7f0000000340)="4b6183cbffd68c9b7b3c8c9cbc614ef5f6d14cc1e479a55a6c2002a081310d84bddb69841c22c18009899f2877f439ad35e3c0c3b1caf24fbe1393e7a047beea7e80be1aef604ed4c663a9a430ee493e1db1e7b9d9fc0b22df5912624680dc1aeac73c906e9d6d416b613fcb890e2c3a552a332fc15c7e83885bbafa0190d99efffaf96dd9da690f7c952fc4d079c4660a26c83403aaf224064d16aea2acd79df03e7ec4d06a0d10da7a05d8efa3b2c806035b24821d995a667df3c2cb8a69fd0c88269f07a7e285c09af1ebb209ba1db5e7e000e1834c77911f9039d971ee3da3ed0277f1cc41275e5ec2", 0xeb}], 0x2, &(0x7f0000000440)=[{0x20, 0x11, 0x7fffffff, "2924f0ca02a104bdc0e450d0"}, {0xd8, 0x115, 0x1, "1a04cf9edbf2a00d7c57b830ddf988a49ca1e6ef3100d89dca8220e6697cb6808f6fff1c7b50e5471780444a929a749f657a4628c5651f57551af7b957d54a822fb545fa43b7404d9c6230cb4191f81946d385ac10eac4c0a37e0b4013b2eb2079de0f578df6a2449abae8854e1d8b42cf9e732e461fef9cfdd650cf1e02dd20b15a21ef958e6c5b9c910b5a43641af8bf8c432d95bd4a0185c6c2af3964dc4698d211f5b32fd9dc1725a2cbe9450665ca8b6fad13e64c3e98fbc990e1408f84732c"}], 0xf8}}, {{&(0x7f0000000540)=@caif=@rfm={0x25, 0x10000, "347e2294bd5b798069880a85a47175a2"}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000240)="46b996c7280a4aa728fff636d2d6307a157a8d736a772903bee228bc2608f5996a410c37081be4204abf80e4680d10dd3f", 0x31}, {&(0x7f00000005c0)="418492c95b3c5a8ad22e9db4c30c6959b06087a83983c2147defe2e420a2c8f95cbe298e0fbd36d373be005b7f37f8f79b4f2474e937c196e4b28144d0cf52bb89", 0x41}], 0x2, &(0x7f0000000680)=[{0xf0, 0x11, 0xfffff800, "a51e8d722137a8fce3632b794f76acce39e2607a88cac0268f6225f9396fadaf90bef017dded5ca16f75114fe46232bf46363b498da338a9a7461d29a1df2a5a98280930167ec60ed4637f932171453d57f02cd915805b90feba3009926ad59952f6ca20bbde8f7e6c99f260a37bd6df4e483a1411bf5e5a475697674e9e87b69fb92851491392f6a8aac29c54ca70422de33a4bdbc7fd3a2dfab298aed5f4f05d3af58e28e034444da7fd414cc6cdd1f906972a05dc36cc480df1618bd57861d2be6c3a4979fd77d5a58f810533c7b772765901bfbe17653120252cfb9ca805"}, {0x1010, 0x10f, 0x4, "512cba0a3e99985a6b4417f9dc9bb4505d3771ddce134159dde5b4342390d282c66aff540fb3018b880a29a1c618fcffdf7c5f968e2d128475faee28303b6cb7278a1990c4c8a74a16c6615f1c11e769b9c89031ff95ef1177cd41a7ea0c2e545607ee6182a866d83cbb1b36f8a51d2bf17535650bff26dd3f4964584ffa032c0050f92f67abea2214cdfddb8fe9a05c2f81ccff1768eaa98b9f2f0a7eea9d74eb54b250234d794ff28c2d8fab65079d5ef27630e295e4f9cc7f51419288a9db0e99e5ed6defbaed1c361eac53605dd3e1689b97e6513b9554ef7e395b596005696be1f55e82e67630e1dc01a3e46906ec4817cd5cd2021a9e59f7f591ee96ac36a0ba6e06202f89a1fb80ce854386ce0d9239f112597db9a42ac5fc62e9ab9290bb1eb21f53a50bb519403f07512d8645d3d458046f3ba9c50bcc3d1fb6fae020814458f24d56a0933331c19bee3bc7365e83112b14ec1b334d88f744ce922b3a881b4cbb2794dc3e07542f937da1987a0d4c1f4228c7f44b5ef2c333db0849a540ece23345e28657c713257ede5c292639bfa7def769da39f2ba597dff5fb1ac13e3ffbf5d9e26f2194267b32631ba9e8d34dcaabc75837f090bf39d7fc887317f63bb6e3a8610d3e200add19143dae4a103ba86c0e6840dd715ad2ac0fa503485e37276349975aa66afdc93a3aff76db70a68acfe3c0ec779f56ff74b8f2ca3401387108ab63d657a21f530bfe94844e475ae5f635b2417c9dbb513d2ea84105a5906c30c6015e4a907fcc8aaf79df31c919613f1121245ff923eb6dcf7bc084b069c1077e594ab84c9e4a351d61f0d1c1ded5e77306ff8a5926c53d0918df4f168c1aac46e58604a476493f81fef62ac66ea5ffd8171c2f23c77c065ff670379615bd343b44ffe74ffb9dc2fdbe8c605d67b0f45c9578045ef4360ea9583b33fca836f85417fa19b52d76b646918793c45e394af6f16f333c12d73e27a88c28deeb7851194b23e9a400398bbabbafd66e56fbb9417c55a373a4fa7d5bd442aded06a6570e2fa520bb3a597cb1c2ad10185fbda61dd2515da702dc731189b4c1f072eb5254d2e9bf409a0d4ffe9ee1f1971f61df58382bdb6bcb37dda9af8e12ad2e29e1951775a35762f1571a6ccecabf13f57fea2b40462e3635528b06009d412ef19fa6742f42200352320e3e3051f18636f139184eea27a5ad339fd0cc0c78a240e8d00d26b787417afd99e9e202de27b1b287e13822646a94e3e8ab0ab815e853e0508368a033243c8eeeb453ad7d266ca0eed7a5acbb11f6fd60ffb6a0b5ec8c865e55d8ab1078b319cb2cce13650f5985ca175cc2a9396a6fe90a3a19588010b288bad1e476354ab157af5950ead30e04c06e011315e73dea10551faea4819b49d1a6f8d6d5cb82d03fee47ee985af62cf4b1bed0d6531a4f67cc93eb50044597988d03f58412353f8ebb72881fcb2ea2ba9cc37a7e8a7209d861a6e83d5df30a4055665bd648d44c1b47f99e5e458a2849e5f4f70e3a1f010c1da51d01d6874f1744c1bb33e760605201d17133dbeee55092fbce991f780b24d862319a729ed2550f6fe0f98aa19bc8142f13576ea8869b2189c472d88ea9a5daff87933a6877c3d62bc89220f5345dc7ecd3c17727650174e361c41e81fc0abf4904173e2ddb0a398fe24b0557046f61d1888f8bc40f9d5de021c1e5a5bc329a6bd4af8fbba06b401bf138f268fc5edf34f077fe7ff8c9a4da05abf23b9aa7c7d6ef76a8074949c055410eb3aa3ba89cb56d165575e7ef49bb47db0bda2c387b223486df435a44eedb73fe4d0950d0ef605839894f3c88f7c030085b505ce80ae44173882c47fdee76777aa8162cc57848153f290744869608e9f0c0b630205df5d6a504ac9857ff06b02157a6c0d3a92dcd6ccf8ca511689268be106a71ea06d3d1f42f3e43b84a524c58a66f76aa06ca0950fc51e70a70dadbac31685b4b4636cc3181503d9e10c4e127743f990674a5beab98ba4293142c49fec773803a5e552df2b316cde920b713652650902a3b113a9a4e2f56e34913b797f848e6e53b6e5a3ac074a41cc41567733ce34fa6149d3a0c514243819362706bddd641a769874ae8cbded07c32450d29d8711a5f0b754415d358f610ef7d106305a11b3b6f3d6b49a2ebd44db7e4dbc08e259549068e9743e0550d6191b184ad58ace26b1af8c8d85a3bd7e75adc4675430ca80c316bdf14818cfca5fef19c6eb8922671d516ec96ca72d8fb7f7cdeb583a0f61e783c9e319b21915a16cfed033ba70e8d67847dc1b2571522256e168af35ff93d6c9ef39d12c1e8d08bc4c0c6cab037e840eef7674406924c70dca114808d73a334e48511cbb99a139307d31b36854bb6bb81b78522d7c19764cf60316f37d5921bdf9909e1a87760e4ef5032ed3175689c7cabbd29207466533a0d324994010b145eb5b8d3470fc59688884ff1e6892a95ac307474d90619ad6c04a151023419844d58c20030d0456f94192bbbd48bc9980f8c8243ae532f90d1c825ba0a007d0ce7bcf71da279222de9a6b1764a682fb4eb3e170f80c05d8d92fa7706450bc1901b70b75843057cc1608838a0ddb47fd320d2772bcad6bd0b30004008e43ac337423d421cb25212b6c747ea8fbfd96130bcb36d74f57670258abe2a0c9c87fdfdcfce0710eed00ce2556671eb4037f411ae127bc95abfd756f34f68dcf775b020562e206e988d38456add71dab0bdc1990b9989be6401992a43392ab1f768e4e478fe7711c7f93a29dd7d809be121dc65edc3b8383550b1b32147f69253db8c32a5cda80f103af5312ee64e9a94df5731d090470900e5209a87b00c7f9aed0dd04447c92eb77c1a45e76adc24e14c927eb2300bd8de2a010c73094f7c4c0ec6dac2a9dab19a91ac435869b06e90ef4bdb57128d6bb1cf4d47955ce394b5e08cbceef78f59430253b00e0ec84d57fc6558db044c9628cf47c1de8a60b9cb2cbfe52736a5d011ebc63a2b9305f1141f9a00a29bd02df0f009f78297d61014f8dfffc7f093c282670821aa2816c6ff07a2f6b6a82832f8c63ae928caa97e834c796fe0c2a408b600aec8f351f80b03794ad71cfcf89347940ca514105112c0df25fe374d34bb4fbe1859074674c1c084c079524aa0de26fa1e98306860d0851e8e7b698ae67a2105dc8673e802a6ca3c2c7b3a0d11aea15cabc1e24376cc0e38144bc6f25bf0a32488286d92e681bb51a88f87d96aa0e04ed0e9a618ca03fa73686207bc21b4503f0ef05ca5f670f1b49b33868fd30b2600f4e6508aa3547f9bf39a911fe5d46b7765c5dfd55eca2dd08628ed636c686f6cafcfc4af6fca816170a2a19d148d767e2eebdafa36353594b4cf71a97a5433318c97f2414d1001912c81cd99b982a7232de3ae440e107844bdcb2deef01482efe4ab2c213e6bd2b097be677df06b486597ab61617b7733032f9a3267ee7eef731beed9436aec35c6a09d045f19aae56a4ac3fd0ea000ec320fd2a1a4c22a21cfe3931721531159be828047696b8fbe23ec73fea243b11889203c9dd5444139f86cdfc5dcc4fa2c7a6c72a95a7bba3bd992169f541e2779cfd11fd550a0bff23c4ecb618844edeaa036218e0eeb32aa1a78be6736b4ab35d6e94635cfe4570501e2303853484a5c8df731012e9ee3362b3223cc9f253833c6ddd42ae818f6b99c01ed75dc54f9b72bb0ca70b68213d479a2972a90c4411713d022e2bd75f2a7877aa1e51a768233fc7f87795c6b14f5df84d4f1b2afee0f4d7c73944af56b41e46ab34081e8b400f4f19cb2bd484326e69ff2a9e47e8658480972c2a414293a80276625c21b46a3e2f846c0e837f05aa5ad3781ef348efbdfc74338d47d0aaaff61dd5bc32eb509cc31d7d34567448139e18dcb3df84218fca549286f9c5455f91d154e9820d70d81e910ff31ee0a41e8c16031cdd7c8637741797f91edb34e388eb626f066eef6afce085d0a0be06e1a955611d65a0572bb29986c3edd022cc8a2b916d80749c9c44242d12c4a156ce19856284afa02867909214e22dd304fe1fd2467335b2370481294c676d8cc1b41b47f706c6e004b5fbb38a3eb676262b56358bfe4a4beb47f85e7df1461c621b687d757db9b7846df3ff6075c579115eac5d56fa5172f79f2d81d837a1f60e2b7ba3a98af4c1694872deef01f15a7afc6a6649209befff7c8eaab0fd7218aa7596c02606c0740db58b269f04b3c6b31e73daf88deff4620185184dce257242dd8d3001169e396f9b7876fb6d359fa3475e51daef999caf2a0ab1cb728dae4b9fd947e76ca1f53da2d2c2b78dda0dd7d6dc79aa39caa1d9f140455c8893cd31d990c7bb4c701532106826fad1f343da041adbc8764e7a3c3f54b60f1c7ce8b36193ca16b5a892fd2f9f0d028256d740dd9c15e32ed45168cf2fba28bb9ed1909d1f89c78856ad4f35157e7e57736caf86a1d1607c54a58b0817149478f1e018ceb63ca8f649fda85adc5cba7c36b76d813f6c02a9025e8063e103124963f9dbc580e826484dd4ae647d6f2f5ac60d8fcf4953006ed98f34255519ea58232fa21425dc0f5665ac603d7fbdd5885c9d912120b511ce6fe3b3d5ae02bc65b50224ab6bc3f6238bcfe839c9bf5dfd24da918988c23920a2de49bfb543a1d0f1670d0d4688ef21d8fe2030c137db0db520574e153ca408200b346c263ed03b0de0b732a955979e82ba5fd56573d2a4583e7c28f66683ed38c1b1f62de55b51463b57791df78ea7fb6f090693e73d09e2c2474432e8b399c2186b1cc0ae012162fbf5ccf39f31c1ab5b88dde6c6b34797d3b4188882f9cdf746184b159b4f1f157a4d59db02efc51dabd03da19ed7814914aca3f948a9296be59aed7e0a6e7e1d8d858607a1f0b24a2bc610f6f5e6401d67f7fb97c75c5cfa85d82f8ecad79ce688c2ab164159c74fde4530d8e057a0ce4a5af84ab0db59a251f4599bfdaf1ba4bfb9f99e9633cb85f351a6d50f7781dec761d008c1bd4795836f15baa2f6fff333050c2c314c2de10b27bc9ea545932a6b64777390a98a11d77bafda72344e266096ed0e3c42647c2ec1bf93c6438402c0fe2b0da1e28792e4bce5eeb341f8179b1b0a58f87c2127a85d2a6c295391f0ea83b5caf8e72744ab9a14b75f5acab72e61218c1954558e00bb3dde783cdb2e39d1d2469dd9fc63844cc922434e4614c9ac45df44ce69e22a568072106d4263f07f6835a3793d4059eb25f4b1bb536afd75406d0ffd51bc681439fb818cc5565e6a219bebd0c504b3faf6ca1eb18511ad0516845e50b30a4abaeeae0d214a09960f637d76bdad6cdae65c446d594980e7181134f2a724574aabd1b65679e6d21141f865a140362a055732aae758db7bba8ce2b92f0a0b1b43e8ec85eafcbd0c83024f5f2da026bd15317dd588fd68c2cc808a5482e60e377214fa6db0fa91ebb781b6a3200ab1482f046fc24f2bf887266c69ee03c46e567a1d85a44cb066d3a824a3cc91181e007168126e0df945f9fdf7c93db91abf2665db5c4b936c10ea0e7c765d31217561c36ce17cafb349bbe66c7b27de3c5bb6c35ab23df5e8a78491f1a3ab6332072a94208466cd61b47eba699c60c34b75ad4a607e0c31bb9d15b242a72920a8c06a2784d5e8fca2eec04c2b5dc1cdad7b208d91e1bc7d654858c6c68e987d2c47f92295d08afd2c37c557efea666c3cda593d1888fb1cefa25d2d8a1159dd1c120af2382adb24d597735898489956538a62f1164d289127"}, {0x88, 0x102, 0x6, "b75c87e246ce2e1890b8f4ef0502460a5d2d29ccb31dc5cb3b2fdc88602ccbb0f71dcc9f51a4b0204dd7ec90a59ad6d97e39d10abfe8f7752bac4b59f1c590d8279b4ba499d8b450d519bff92a272d06b8b3a124b15d756a59e7442b96a115b5cf80e1937080fc8bb29f969ea4238300a8bf33b60ab912"}, {0x78, 0x115, 0x8, "7eeeff439f9b499b27855aaf88be8caeb95e529e016f349547eb9020485e18de67fb73cc76d3cec17e7637c02564634d25d7d128911f71fb9ac910006c56b4240bc47911050ba6d367e70f7150a208e0f83f902744c0258edfa97c3444630d3ab76f599fd36e"}, {0xc0, 0x108, 0x2, "68e92bf6de7a3334691b573e5de7e06bd916392348893982fac9964f4be22184d8a791795532ab8f4e6661caeb5f8a77b676aab3cb2ef9bde25434d30bfe810671039fb0929d16c18d0d1695fccc80c1d7144cc44ccbb1a435b7669ddab215c3245858279b27147e75407c0f5ba4038eb61c64f132e8caed40f67b9eab9c8366c912cd4af237a0acbd51dfcda892454fd3b8badc7623007de178bc495ef94c9516e5c1a7674368dbb34685"}, {0xc0, 0x115, 0xa, "eeb00611f6fba4aaab4b77e68248ed3000e2f3d8fb2d07e112016e93b7950c465037f680d35a1e93a90cb3490a02a8b709056f12a391d509d542acbd4a91e121e8da5457c794c3703ef555850ce27b9718ca1799fffff4142f4e56aa78213c3b01e1e53be4cf3ea35dd1216fffe9d722b7af42c3b9e51b6c1fb10f6ce968409817cb29c09ee3745aa66659d4d73edd88d7daf55f260b36d9a6db0876f848db366c15177007ac49f411e94d58be"}], 0x1380}}], 0x2, 0x0) (async) 1.331154266s ago: executing program 3 (id=8251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x44, 0x0, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xaf3}, {{0x0, 0x0, 0x0}, 0x2041}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/223, 0xdf}, {&(0x7f0000004100)=""/4086, 0xff6}], 0x3}, 0xff}, {{0x0, 0x0, 0x0}, 0xb}, {{0x0, 0x0, 0x0}, 0x1ff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/114, 0x72}, {&(0x7f0000000c00)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4106, 0x100a}, {&(0x7f0000002a40)=""/4050, 0xfd2}, {&(0x7f0000000080)=""/110, 0x6e}, {&(0x7f00000004c0)=""/188, 0xbc}, {&(0x7f0000000000)=""/54, 0x36}], 0x7}, 0x8}, {{0x0, 0x0, 0x0}, 0x9}], 0x8, 0x40010020, 0x0) 1.269598919s ago: executing program 2 (id=8253): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @link_local}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xf, 0x0, 0x0, 0xc8, 0x5, 0x3800}, [@RTA_DST={0x8, 0x1, @remote}]}, 0x24}}, 0x0) 1.268712743s ago: executing program 4 (id=8254): socket(0x27, 0x1, 0x4000ffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x20008855) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000640)=[{&(0x7f0000000100)="af", 0x1}], 0x1) recvmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) close(r4) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@gettaction={0x13c, 0x32, 0x1, 0x70bd29, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000004}, 0x48004) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="60e80000", @ANYRES64=r4, @ANYBLOB="200025bd7000fcdbdf2503000000080019000a0101020800090002000000080011000000000008000a0001000000050021000000000014002000fe800000000000000000000000000037080019007f00000108001900ffffffff"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4015) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffd, @empty}, 0x1c) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) shutdown(r8, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000005"], 0x80}}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) 1.182752258s ago: executing program 0 (id=8255): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x3, 0x7f, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x30}, 0x4004810) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000000000002000000300004802c0001800b0001006e756d67656e00001c0002800800014000000000080003400008000208000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}}, 0x0) 1.094903092s ago: executing program 2 (id=8256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) socket(0x28, 0x0, 0x28) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r4, 0x11, 0x0, 0x2, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, &(0x7f0000000080)={0x2c, 0x4, r3, 0x18, r5}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 1.094298689s ago: executing program 1 (id=8257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@bridge_setlink={0x17, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_NUM_RX_QUEUES]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523c7000000000000006422a633a39f030000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x164, 0x4, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_USERDATA={0xe9, 0xc, "5299273ac5900fc01b3a7f82ebcd65fc1034b2d09b04c9ea3fbd8b14e0651445bf25a5c3c56fecb4c03310bc2c4ed923172c16fa3f4380fbe1f8472985ec2f1a55505e74d1cc832cbbce94cb9f0c99c214fce3fef05e4746f85a102e149d3ed60e28308568805cd8d9cba04761c2e075e20378b4acaa374367268255d3cadb7cd0005400c4dc212de7a077997c6a16c74eb019583be9681f1cc5854908d32cad3ba9233056ba5ba1feb609b0e8dcea0cc428e703451f84545c140dce912045dfeb6e3a4b73ee40db930e66d491d28372183a072caf58d411bd72629f4f95a640360e33a640"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x4c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_vlan\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5574cc55}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1e1b9705}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, 0x164}, 0x1, 0x0, 0x0, 0x24000801}, 0x20000000) 1.077190137s ago: executing program 3 (id=8258): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r0) r3 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0xc) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)="991347c388249d2e", 0x8}, 0x1, 0x0, 0x0, 0x40000c0}, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="080027bd7000fddbdf251400000008001c00", @ANYRES64=r3, @ANYBLOB="08001c00", @ANYRES32=r4, @ANYBLOB="4883b762b72b49c5b6612255b1d4d6108636d44b2942a343041ad24733a8673ae361f1967b9e830a48450710fcb47133aaf6fd645712ee8562b45d919ac89c461015676b67eba0a9564b2c30abebfe08155bff5b6f3658e81b07564d6b6599a7729dcf34fc7dcca6f72be6903f12e33c6c2b386fdbe08c690788e2a198218e80e86feefdd99cb8c51c10cf69ca5ae66b214e"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000002480)="3c00000058001f000307f4f9002304000a04d6490800010002010002070003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010001808fdffffff0000000000000200407f62077db4b5e0bbe663932f0adab7ff745392d95e9fe7fdabd366e418", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d800500080001000000"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001e000100fdffffff0000000002000000010000070000000014000900766c616e300000000000000000000000080001"], 0x38}, 0x1, 0x0, 0x0, 0x42812}, 0x0) 984.567156ms ago: executing program 1 (id=8259): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = socket(0x15, 0x2, 0x9) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @bcast, @bpq0, 0x1, 'syz0\x00', @default, 0x10000, 0x2, [@null, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="ca", 0x1}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0xe803) accept4(r2, 0x0, 0x0, 0x80000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1100000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000001000"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 980.17761ms ago: executing program 2 (id=8260): r0 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) (async) bind$xdp(r0, &(0x7f0000000200)={0x2c, 0xf, r2, 0x0, r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) 874.900852ms ago: executing program 0 (id=8261): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000d40)={0x0, 0x7000003, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffff7a, 0xffffffff, 0x1f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x88, 'bm\x00', "007f0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x5, {0x4}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0xff000000, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES16=r3, @ANYRES8=r0, @ANYRES32=r4, @ANYRES8=r0], 0x24}}, 0x48000) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r4], 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x0) 873.263377ms ago: executing program 3 (id=8262): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'macsec0\x00', &(0x7f00000005c0)=@ethtool_ringparam={0x10, 0x3, 0x951, 0x5775, 0xa, 0x9, 0x529, 0x2, 0x5}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "416643c46427168209669d736b27af61"}}}]}, 0x48}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080"], 0x38}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) 863.875278ms ago: executing program 1 (id=8263): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipmr_getroute={0x1c, 0x1a, 0x8, 0x70bd2a, 0x25dfdbff, {0x80, 0x10, 0x10, 0x2, 0x2, 0x2, 0xc8, 0x9, 0x100}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 854.436756ms ago: executing program 2 (id=8264): r0 = socket$kcm(0x2, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x5}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19) socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, &(0x7f0000003580)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000001280)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000011c0)=[{&(0x7f00000012c0)='#', 0x1}], 0x1}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40) r5 = epoll_create(0x3ff) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)={0xa0000008}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000280)={0x20000000}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}}) 726.944368ms ago: executing program 0 (id=8265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r1, 0x204) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x38}}, 0x0) 726.174927ms ago: executing program 1 (id=8266): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x4, 0x5, 0x1018, 0xffffffffffffffff, 0xe}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0xa, 0xc, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000005c0)='syzkaller\x00', 0xa}, 0x94) 670.583772ms ago: executing program 3 (id=8267): syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @val={@void, {0x8100, 0x4, 0x0, 0x3}}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x3d, 0x3c, 0x67, 0x0, 0x7, 0x6, 0x0, @local, @loopback}, @payload_named={{{{{0x28, 0x0, 0x0, 0x1, 0x1, 0xa, 0x1, 0x2, 0x0, 0x0, 0x0, 0xb, 0x4, 0x2, 0xc7ff, 0x6, 0x3, 0x4e22, 0x4e22}, 0x6, 0x1}, 0x4, 0x3}}}}}}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$pptp(0x18, 0x1, 0x2) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@multicast, @random="07a24f79ee3f", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, ' \x00', 0x30, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x0, 0x883e, 0x30, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "aaf43bbacf0d7d4dd62d252269d4c77febb30ee631ad1be1a15e592d3678edb6aaec874e"}}}}}}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = accept(r4, 0x0, &(0x7f0000000140)) bind$pptp(r6, &(0x7f0000000240)={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$sock_int(r4, 0x1, 0xb, 0x0, &(0x7f0000000280)) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000040) (async) syz_emit_ethernet(0x9e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000000004e22007c9078040100000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f00"/152], 0x0) 609.275046ms ago: executing program 1 (id=8268): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_COMPAT_NAME={0xd, 0x1, 'threaded\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x88, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x68, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8}, {0x8}]}}, @AF_INET6={0x4}]}]}, 0x88}}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) 547.141547ms ago: executing program 3 (id=8269): syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000040)={0x54, 0x6, 0x1, 0x101, 0x3, [0x5, 0x0, 0x0, 0x8]}) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x10, 0x20, 0x7, 0x3, {{0xc, 0x4, 0x0, 0xa, 0x30, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x18, 0x3, 0x0, [{@rand_addr=0x64010101, 0x7}]}, @timestamp={0x44, 0x10, 0x29, 0x0, 0x9, [0x8, 0xe, 0x5]}]}}}}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0}, 0xfdff) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x10448) (async) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x4, 0x4, 0x7, 0xfffffffe, 0x80, 0x1, 0x1, '\x00', r2, r3, 0x4, 0x3, 0x2}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1000064, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x3}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}]}, 0x3a8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000030000000700000008000300", @ANYRES32=r9, @ANYBLOB="08000500010000001400040074"], 0x54}}, 0x0) 482.817807ms ago: executing program 0 (id=8270): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x6, 0x0, 0x0) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x800001, 0x10012, r5, 0x0) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async, rerun: 64) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x86dd, r4, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117200000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (rerun: 64) 478.197662ms ago: executing program 1 (id=8271): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) (async) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0x8004, {0x0, 0x0, 0x0, r6, {0x10, 0xffe0}, {}, {0xb, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @remote}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000980)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfffa, 0x6}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @remote}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x48001}, 0x4844) (async) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x73, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, 0x40) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 257.198852ms ago: executing program 0 (id=8272): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=@newtaction={0x74, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x140e, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01052bbd7000fedbdf257c00000008000300", @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000f40)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000480)={0xa00, r4, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2c}}}}, [@NL80211_ATTR_CSA_IES={0x9d8, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x12c, 0x80, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @broadcast}}, @fast_bss_trans={0x37, 0x109, {0x48, 0x7, "18ffe49beec43e06cbfa453d6334a498", "741ef27667329dcef1940f78406281cf657af00fecc9bdf3df222f60d77bb6d4", "1b64393899ddf7f2bcaf75023929d844d0ad866803374b347604698e766dfef7", [{0x2, 0x22, "4020b63abb59261f6cd6df4deb1771b72a0dd32029c5d6195ecc35b8bb51896faca0"}, {0x1, 0x15, "0bcd23cfeaaead98bc79a585287e626b37e8cbfe13"}, {0x4, 0x14, "f949670e4bcc63bcde955c81107137fe7d70945f"}, {0xe, 0x1b, "82f8d76ea5af85fd4ab1efd332fd1783f7280761234c8f29fdcb30"}, {0x1, 0x10, "5ec37116a38ef4af40922c780f6e01c5"}, {0x3, 0x16, "11fc6381f09139c9a7e4e635ad1a9f2caad74096850f"}, {0x1, 0x1d, "52efa1337e95798f1442d95f0c8a3ee9696ec6baaa71bf0868ccd96e52"}]}}, @chsw_timing={0x68, 0x4, {0x4, 0xf}}, @challenge={0x10, 0x1, 0x4e}]}, @NL80211_ATTR_IE={0x13c, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @perr={0x84, 0xfc, {0x64, 0x10, [{{}, @device_b, 0x5, @void, 0x24}, {{}, @device_a, 0x1, @void, 0x8}, {{0x0, 0x1}, @device_a, 0x81, @value=@broadcast, 0x2b}, {{0x0, 0x1}, @device_b, 0x9, @value, 0x35}, {{0x0, 0x1}, @device_b, 0xf, @value=@device_b, 0x14}, {{}, @broadcast, 0x1, @void, 0x33}, {{0x0, 0x1}, @broadcast, 0xef9, @value=@broadcast}, {{0x0, 0x1}, @broadcast, 0x2, @value=@broadcast, 0xa}, {{0x0, 0x1}, @device_a, 0x10, @value=@broadcast, 0x17}, {{}, @broadcast, 0x80000001}, {{}, @device_a, 0x8, @void, 0x11}, {{0x0, 0x1}, @device_b, 0x1ff, @value=@broadcast, 0x13}, {{}, @broadcast, 0x1, @void, 0x40}, {{}, @device_b, 0x2, @void, 0x31}, {{}, @device_b, 0xfffffffa, @void, 0x3b}, {{}, @device_a, 0x8, @void, 0x37}]}}, @gcr_ga={0xbd, 0x6}, @mesh_id={0x72, 0x6}, @dsss={0x3, 0x1, 0x4}, @mesh_id={0x72, 0x6}, @rann={0x7e, 0x15, {{0x1, 0x13}, 0x2, 0xc, @device_a, 0x6, 0xd3de, 0x8}}]}, @NL80211_ATTR_IE={0xaa, 0x2a, [@mesh_chsw={0x76, 0x6, {0x2, 0x6, 0x3c, 0x9}}, @perr={0x84, 0x9c, {0x6, 0xa, [{{}, @device_b, 0x4, @void, 0x36}, {{}, @broadcast, 0x8001, @void, 0xe}, {{0x0, 0x1}, @broadcast, 0x800, @value, 0xfff7}, {{}, @device_a, 0x6, @void, 0xe}, {{}, @broadcast, 0x101, @void, 0x17}, {{0x0, 0x1}, @device_a, 0x7, @value, 0x3b}, {{}, @device_b, 0x9b3, @void, 0xa}, {{}, @device_a, 0x2, @void, 0x5}, {{0x0, 0x1}, @broadcast, 0x942, @value=@device_b, 0x12}, {{0x0, 0x1}, @broadcast, 0x1ff, @value=@broadcast, 0x1b}]}}]}, @NL80211_ATTR_PROBE_RESP={0xea, 0x91, "8966f70bfdb2361ce8be90f41b3f4f412da73df97d131a0bb5526df781c1ce2541423b29bfc312cea0e958f4519a1ab766bfd134eac4e57277b3c209fdc362bbeec3574991f98daae0b0361ee1badb395a72b150dbfd7a83e89ec703fa59229c43b6a0666a518c6eadcb55cbe028926f2d438cc0ee38c66ec5bf50e6bbe039c122482d56ce6e1ebda6a4f5b0b5fdc182504c8cd6a96293ee491dd0c570bd3e28738aeb269723fb8e5724846b1e16724992be8cc5fb7517e3c616162e2ca7e2e17156f0a131e6784b30e25705432fee16011a99146c1dbefd1629108894e09a3c82af6c354a40"}, @NL80211_ATTR_BEACON_TAIL={0x9, 0xf, [@channel_switch={0x25, 0x3, {0x1, 0x1, 0x40}}]}, @NL80211_ATTR_IE={0x10f, 0x2a, [@ht={0x2d, 0x1a, {0x2, 0x0, 0x7, 0x0, {0x4, 0x81, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x4, 0x6}}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x6, 0x80, @device_a, 0x2, 0x445a}}, @measure_req={0x26, 0xd6, {0x95, 0x8, 0x5, "f5f26e9625a772a97eb2e71fb6240bc366a047a3e6382de11e33c6a3a890537a7c15d5d26d76d9bb7fe553e6aad64fb8cfeeda56066b6dce4291bbebb77168a9138501e995b068e8ccd09d78ddb4e1c7073745b8e8ae142773f4370566ddde34216a3aed7572824350b17869640a22ae9469191df2b7e8213ec81fbb24c416278253600e65835e3ff7a6f65cb6d6122c46bbf4e12e83b318dfdd1f5fbc6cb26bc640bf7152a00df1cefde3c09072a2f72484393d80bf0fd2476ea7209993ec34307b7c91c4d5317d2d7a84498eacbee98a7518"}}]}, @NL80211_ATTR_IE={0x1e, 0x2a, [@ibss={0x6, 0x2, 0xd}, @tim={0x5, 0x14, {0x0, 0x3e, 0x9, "70aca7f26a36e438b2f377a0312a22c1fc"}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xd, 0x80, [@erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @challenge={0x10, 0x1, 0xaa}, @challenge={0x10, 0x1, 0x1b}]}, @NL80211_ATTR_BEACON_TAIL={0x1e, 0xf, [@mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xdc, 0x41}}, @challenge={0x10, 0x1, 0x5d}, @dsss={0x3, 0x1, 0xb9}, @erp={0x2a, 0x1, {0x1}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x2e, 0x80, [@channel_switch={0x25, 0x3, {0x0, 0xb3, 0xd}}, @mic={0x8c, 0x18, {0x7da, "7ded285a7262", @long="a3ba10c497abec4f0a700a6fae8754ba"}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @mesh_chsw={0x76, 0x6, {0x9, 0x2, 0xc, 0x4}}]}], @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x40, 0xf, [@mic={0x8c, 0x18, {0xa77, "6471d67bbbad", @long="fad4b554b56ea127e74e356c28aa7633"}}, @ibss={0x6, 0x2, 0x222}, @mic={0x8c, 0x18, {0x957, "21cc6453aa3c", @long="5f54a139c6d688b150747ec9b9fab264"}}, @ibss={0x6, 0x2}]}, @NL80211_ATTR_PROBE_RESP={0x2bb, 0x91, "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"}, @NL80211_ATTR_IE={0x69, 0x2a, [@mic={0x8c, 0x18, {0xdc6, "65b617a1f1bf", @long="3b96f0272c0aa2a74f470dcdf4498044"}}, @ibss={0x6, 0x2, 0x7}, @preq={0x82, 0x25, {{0x0, 0x1, 0x1}, 0x5, 0x1d, 0x5, @device_a, 0x91, @void, 0x401, 0x8, 0x1, [{{0x1, 0x0, 0x1}, @broadcast, 0x4}]}}, @ibss={0x6, 0x2, 0x8}, @link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @device_b}}, @ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_IE_PROBE_RESP={0xd0, 0x7f, [@supported_rates, @link_id={0x65, 0x12, {@random="2946d9662161", @broadcast}}, @preq={0x82, 0x83, {{0x0, 0x1, 0x0, 0x0, 0x1}, 0xfc, 0x4, 0x1, @broadcast, 0x5, @value=@broadcast, 0x7, 0x2, 0x9, [{{0x1}, @device_b, 0x7}, {{}, @broadcast, 0x40}, {{0x1, 0x0, 0x1}, @device_a, 0x4}, {{0x0, 0x0, 0x1}, @device_b, 0x1ff}, {{}, @device_a, 0x3}, {{0x1}, @device_a, 0x1}, {{}, @device_a, 0x101}, {{}, @broadcast, 0x7fffffff}, {{0x1}, @device_b, 0x4}]}}, @mic={0x8c, 0x10, {0x4fa, "f97eed009ed0", @short="35a0703c7659ed04"}}, @ssid={0x0, 0x6, @default_ap_ssid}, @rann={0x7e, 0x15, {{0x0, 0x2c}, 0x8, 0x2c, @broadcast, 0x5, 0x4c, 0x400}}]}]]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4a}]}, 0xa00}}, 0x9080) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x20, 0x1, 0x3, 0x4, {{0x1d, 0x4, 0x0, 0x25, 0x74, 0x66, 0x0, 0x0, 0x4, 0x0, @multicast2, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x54, 0xcb, 0x1, 0x3, [{@loopback, 0x3}, {@rand_addr=0x64010101, 0x3}, {@private=0xa010100, 0x9}, {@multicast1, 0xd04}, {@empty, 0x80000000}, {@loopback, 0xfffffff5}, {@empty, 0x6}, {@multicast2, 0x5}, {@multicast2, 0xe}, {@multicast2, 0x3}]}, @end, @ssrr={0x89, 0xb, 0x9a, [@multicast2, @broadcast]}]}}}}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x1184, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, r2, 0x300, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004004}, 0x40c4) 174.885872ms ago: executing program 4 (id=8273): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/223, 0xdf}, {&(0x7f00000006c0)=""/170, 0xaa}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000880)=""/55, 0x37}, {&(0x7f00000008c0)=""/4, 0x4}, {&(0x7f0000000900)=""/5, 0x5}], 0x7, &(0x7f0000001a40)=""/191, 0xbf}, 0x5d1}], 0x1, 0x20020040, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000100)=0x4) r1 = socket(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000180)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x9}}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6_vti0\x00', r3, 0x2f, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x700, 0x0, 0x10001, 0x1000}}) 126.525334ms ago: executing program 3 (id=8274): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000008c0)=0x576, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) socket$inet_sctp(0x2, 0x5, 0x84) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000008c0)=0x576, 0x4) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async) 0s ago: executing program 4 (id=8275): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) kernel console output (not intermixed with test programs): 27975] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6195'. [ 683.219321][T27975] vlan0: entered allmulticast mode [ 683.224588][T27975] bridge0: entered allmulticast mode [ 683.247291][T27980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6196'. [ 683.260353][T27980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6196'. [ 683.288244][T27980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6196'. [ 683.313617][T27981] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6196'. [ 683.418308][T27987] macvlan0: entered promiscuous mode [ 683.425472][T27987] batadv0: entered promiscuous mode [ 683.433649][T27987] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 683.447647][T27987] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 683.461924][T27987] hsr1: entered allmulticast mode [ 683.468974][T27987] macvlan0: entered allmulticast mode [ 683.474652][T27987] batadv0: entered allmulticast mode [ 683.483661][T27987] macvlan0: left promiscuous mode [ 683.491474][T27987] batadv0: left promiscuous mode [ 683.564242][T27989] tipc: Started in network mode [ 683.570197][T27989] tipc: Node identity 4248d1822ff3, cluster identity 4711 [ 683.580103][T27989] tipc: Enabled bearer , priority 0 [ 683.596627][T27989] syzkaller0: entered promiscuous mode [ 683.602401][T27989] syzkaller0: entered allmulticast mode [ 683.622961][T27989] xt_cgroup: path and classid specified [ 683.700855][T27999] netlink: 'syz.0.6202': attribute type 1 has an invalid length. [ 683.845002][T27989] tipc: Resetting bearer [ 683.846584][ T5149] Bluetooth: hci4: command tx timeout [ 683.879264][T28003] bond12: (slave geneve2): making interface the new active one [ 683.888722][T28003] bond12: (slave geneve2): Enslaving as an active interface with an up link [ 683.898324][T27988] tipc: Resetting bearer [ 683.949215][T27988] tipc: Disabling bearer [ 683.982144][T23530] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 683.993394][T23530] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 684.047327][T23530] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 684.055682][T23530] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 684.244359][T28026] Cannot find del_set index 3 as target [ 684.479596][ T30] audit: type=1804 audit(1760646209.405:7): pid=28037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6215" name="/newroot/571/cgroup.controllers" dev="tmpfs" ino=2923 res=1 errno=0 [ 684.508146][ T30] audit: type=1800 audit(1760646209.415:8): pid=28037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6215" name="cgroup.controllers" dev="tmpfs" ino=2923 res=0 errno=0 [ 684.587547][T27771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 684.613470][T27771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 684.660396][T28046] ipt_ECN: cannot use operation on non-tcp rule [ 684.908119][T27771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 684.926450][T27771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 684.963892][T28060] tipc: Enabling of bearer rejected, failed to enable media [ 685.204947][T27771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.250847][T27771] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.285553][T23530] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.292782][T23530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.322790][T28085] netlink: 'syz.3.6228': attribute type 1 has an invalid length. [ 685.386840][T23530] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.394061][T23530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.478647][T28091] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6233'. [ 685.502995][T28085] bond1: (slave geneve2): making interface the new active one [ 685.514204][T28085] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 685.534020][T23534] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 685.548920][T23534] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 685.581330][T27771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 685.659920][T23534] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 685.693151][T23534] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 685.759792][T28105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6237'. [ 685.810816][T28105] syzkaller1: entered promiscuous mode [ 685.820233][T28105] syzkaller1: entered allmulticast mode [ 685.869180][T28112] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6239'. [ 685.920000][ T5149] Bluetooth: hci4: command tx timeout [ 685.957362][T28112] gretap0: entered promiscuous mode [ 685.977485][T28112] 0{X功: renamed from gretap0 [ 685.987476][T28112] 0{X功: left promiscuous mode [ 685.992566][T28112] 0{X功: entered allmulticast mode [ 686.004076][T28112] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 686.233092][T27771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.336356][T28136] netlink: 'syz.1.6246': attribute type 1 has an invalid length. [ 686.358610][T27771] veth0_vlan: entered promiscuous mode [ 686.478685][T27771] veth1_vlan: entered promiscuous mode [ 686.591347][T27771] veth0_macvtap: entered promiscuous mode [ 686.633863][T27771] veth1_macvtap: entered promiscuous mode [ 686.742885][T27771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.764067][T28162] netlink: 'syz.0.6254': attribute type 2 has an invalid length. [ 686.764064][T28163] netlink: 'syz.0.6254': attribute type 18 has an invalid length. [ 686.782880][T28159] netdevsim netdevsim4: Direct firmware load for /. failed with error -2 [ 686.813811][T27771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.822677][T28159] netdevsim netdevsim4: Falling back to sysfs fallback for: /. [ 686.943948][T23542] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.984614][T23542] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.030121][T23542] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.048794][T23542] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.334492][T28173] ipvlan0: entered promiscuous mode [ 687.481193][T28178] sctp: [Deprecated]: syz.3.6258 (pid 28178) Use of struct sctp_assoc_value in delayed_ack socket option. [ 687.481193][T28178] Use struct sctp_sack_info instead [ 687.512747][T28179] sctp: [Deprecated]: syz.3.6258 (pid 28179) Use of struct sctp_assoc_value in delayed_ack socket option. [ 687.512747][T28179] Use struct sctp_sack_info instead [ 687.537660][T23543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.574355][T23543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.683639][T23534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.693025][T23534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.864686][T28201] IPv6: sit3: Disabled Multicast RS [ 687.931538][T28205] __nla_validate_parse: 6 callbacks suppressed [ 687.931559][T28205] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6262'. [ 688.005548][T28211] netlink: 'syz.3.6266': attribute type 7 has an invalid length. [ 688.432526][T28238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6272'. [ 688.757212][T28252] veth1_macvtap: left promiscuous mode [ 688.801566][T28250] syzkaller0: entered promiscuous mode [ 688.813870][T28250] syzkaller0: entered allmulticast mode [ 688.881744][T28262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6283'. [ 688.897058][T28263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6282'. [ 688.963082][T28267] netlink: 'syz.0.6283': attribute type 11 has an invalid length. [ 689.048171][T28251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 689.280556][T28275] vlan2: entered promiscuous mode [ 689.285668][T28275] bond0: entered promiscuous mode [ 689.291470][T28275] bond_slave_0: entered promiscuous mode [ 689.304270][T28275] bond_slave_1: entered promiscuous mode [ 689.374552][T28278] bond13: Unable to set down delay as MII monitoring is disabled [ 689.397376][T28278] bond13 (unregistering): Released all slaves [ 689.556928][T28286] netlink: 'syz.1.6289': attribute type 1 has an invalid length. [ 689.669701][T28286] 8021q: adding VLAN 0 to HW filter on device bond11 [ 689.890866][T28299] bridge0: mtu less than device minimum [ 689.900029][T28299] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 690.089458][T28304] block nbd2: Unsupported socket: should be TCP or UNIX. [ 690.112132][T28322] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6292'. [ 690.247575][T28305] 8021q: adding VLAN 0 to HW filter on device bond12 [ 690.868261][T28345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6303'. [ 691.001514][T28350] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6305'. [ 691.047111][T28350] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6305'. [ 691.080600][T28350] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6305'. [ 691.095253][T28350] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6305'. [ 691.107800][T28350] netlink: 'syz.3.6305': attribute type 11 has an invalid length. [ 691.452510][T28395] rdma_rxe: rxe_newlink: failed to add syz_tun [ 691.949641][T28420] netlink: 'syz.2.6321': attribute type 5 has an invalid length. [ 691.988867][T28420] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.997371][T28420] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.093042][T28423] netlink: 'syz.1.6323': attribute type 10 has an invalid length. [ 692.127611][T28423] team0: Device ipvlan1 failed to register rx_handler [ 692.152767][T28426] Cannot find add_set index 0 as target [ 692.181886][T28429] netlink: 'syz.4.6324': attribute type 1 has an invalid length. [ 692.365047][T28432] netlink: 'syz.4.6326': attribute type 1 has an invalid length. [ 692.428155][T28432] 8021q: adding VLAN 0 to HW filter on device bond1 [ 692.472659][T28437] bond1: (slave gretap1): making interface the new active one [ 692.565219][T28445] netlink: 'syz.3.6328': attribute type 13 has an invalid length. [ 692.574811][T28437] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 692.665667][T28440] ip6gre1: entered allmulticast mode [ 692.914526][T28456] netlink: 'syz.1.6333': attribute type 10 has an invalid length. [ 692.993329][T28445] bridge0: port 3(team0) entered disabled state [ 693.000174][T28445] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.007998][T28445] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.104610][T27021] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 693.118567][T27021] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 693.128920][T27021] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 693.140280][T27021] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 693.155599][T27021] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 693.227216][T28445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 693.243753][T28445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 693.428426][T28445] vlan0: left allmulticast mode [ 693.433421][T28445] veth0_vlan: left allmulticast mode [ 693.439926][T28445] vlan0: left promiscuous mode [ 693.755632][T17446] smc: removing ib device syz1 [ 693.769894][T28456] team0: Device dummy0 failed to register rx_handler [ 693.827323][T17452] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.843427][T17452] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 693.854341][T17452] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.890142][T17452] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 693.922335][ T9532] syz1: Port: 1 Link DOWN [ 693.930116][T17452] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.953682][T17452] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 693.981637][T17452] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.000850][T17452] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 694.078232][T28484] IPVS: set_ctl: invalid protocol: 0 172.30.1.3:20000 [ 694.504289][T28496] netlink: 'syz.1.6344': attribute type 1 has an invalid length. [ 694.614393][T28503] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 694.707581][T28503] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 695.025425][T28514] vlan0: entered promiscuous mode [ 695.038038][T28514] vlan0: entered allmulticast mode [ 695.043227][T28514] veth0_vlan: entered allmulticast mode [ 695.186956][T28519] bond13: option miimon: invalid value (18446744073709551585) [ 695.198948][T27021] Bluetooth: hci2: command tx timeout [ 695.217933][T28519] bond13: option miimon: allowed values 0 - 2147483647 [ 695.241137][T28519] bond13 (unregistering): Released all slaves [ 695.510835][T28525] tipc: Failed to obtain node identity [ 695.546973][T28525] tipc: Enabling of bearer rejected, failed to enable media [ 695.896587][T28545] netlink: 'syz.3.6356': attribute type 2 has an invalid length. [ 696.887882][T28582] __nla_validate_parse: 1 callbacks suppressed [ 696.887902][T28582] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6368'. [ 696.993675][T28466] chnl_net:caif_netlink_parms(): no params data found [ 697.180540][T28588] syzkaller1: entered promiscuous mode [ 697.191934][T28588] syzkaller1: entered allmulticast mode [ 697.290748][T27021] Bluetooth: hci2: command tx timeout [ 697.512320][T28596] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6372'. [ 697.542507][T28596] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6372'. [ 697.684817][T28605] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6374'. [ 697.855320][T28466] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.886521][T28466] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.904410][T28466] bridge_slave_0: entered allmulticast mode [ 697.913125][T28466] bridge_slave_0: entered promiscuous mode [ 697.922772][T28466] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.950936][T28466] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.959537][T28466] bridge_slave_1: entered allmulticast mode [ 697.969151][T28466] bridge_slave_1: entered promiscuous mode [ 698.080757][T28631] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6378'. [ 698.115033][T28466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.160247][T28466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.292426][T28466] team0: Port device team_slave_0 added [ 698.314321][T28466] team0: Port device team_slave_1 added [ 698.462485][T28645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6382'. [ 698.494903][T28466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.494935][T28645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6382'. [ 698.506862][T28466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 698.541481][T28466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 698.574851][T28466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 698.604107][T28466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 698.636826][T28466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 698.648844][T28645] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 698.659462][T28645] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6382'. [ 698.871521][T28466] hsr_slave_0: entered promiscuous mode [ 698.887202][T28466] hsr_slave_1: entered promiscuous mode [ 698.916852][T28466] debugfs: 'hsr0' already exists in 'hsr' [ 698.930600][T28466] Cannot create hsr debugfs directory [ 699.080055][T28680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6393'. [ 699.361112][T27021] Bluetooth: hci2: command tx timeout [ 699.849418][T28466] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.879054][T28466] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.916604][T28466] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 700.042387][T28466] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.072265][T28466] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.116567][T28466] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 700.129616][T28699] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6397'. [ 700.228846][T28466] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.242161][T28466] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.270969][T28466] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 700.360455][T28709] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 700.371839][T28466] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.382479][T28466] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.396906][T28466] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 700.572252][T28717] netlink: 'syz.2.6402': attribute type 1 has an invalid length. [ 700.637494][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.783102][T28466] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 700.812269][T28466] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 700.850327][T28723] tipc: Enabling of bearer rejected, failed to enable media [ 700.897417][T28466] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 700.931311][T28466] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 701.007127][T28737] wg1: entered promiscuous mode [ 701.024254][T28737] wg1: entered allmulticast mode [ 701.079733][T28752] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 701.110226][T28751] netlink: 'syz.4.6413': attribute type 12 has an invalid length. [ 701.250356][T28466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.276184][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.399516][T28466] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.436813][T27021] Bluetooth: hci2: command tx timeout [ 701.439473][ T6838] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.449512][ T6838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.532697][ T6838] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.539968][ T6838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.011369][T28789] __nla_validate_parse: 11 callbacks suppressed [ 702.011392][T28789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6423'. [ 702.323704][T28466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.469193][T28466] veth0_vlan: entered promiscuous mode [ 702.504544][T28466] veth1_vlan: entered promiscuous mode [ 702.593117][T28466] veth0_macvtap: entered promiscuous mode [ 702.621980][T28816] netlink: 'syz.4.6430': attribute type 33 has an invalid length. [ 702.630680][T28816] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6430'. [ 702.648392][T28466] veth1_macvtap: entered promiscuous mode [ 702.735340][T28466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 702.767508][T28466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.804052][T17446] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.833512][T17446] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.891836][T28826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6434'. [ 702.911218][T28827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6434'. [ 702.936532][T17446] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.945333][T17446] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.088099][T28834] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 703.305889][T28845] syzkaller1: entered promiscuous mode [ 703.311428][T28845] syzkaller1: entered allmulticast mode [ 703.322244][T17452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.361447][T17452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.504015][T28856] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6443'. [ 703.510193][T17447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.523539][T28856] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6443'. [ 703.530033][T17447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.619470][T28862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6445'. [ 703.671736][T28865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6445'. [ 703.767979][T28867] tipc: Enabling of bearer rejected, failed to enable media [ 703.778140][T28871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6325'. [ 704.056671][T28884] lo: entered promiscuous mode [ 704.068751][T28884] netlink: 'syz.3.6451': attribute type 2 has an invalid length. [ 704.085855][T28884] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 704.820191][T28916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6458'. [ 704.830383][ T5149] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 704.840471][ T5149] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 704.856849][ T5149] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 704.869346][ T5149] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 704.877902][ T5149] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 705.346094][T28940] macvtap1: entered promiscuous mode [ 705.360387][T28940] macvtap1: entered allmulticast mode [ 705.371113][T28940] bond0: entered allmulticast mode [ 705.395970][T28940] bond_slave_0: entered allmulticast mode [ 705.401773][T28940] bond_slave_1: entered allmulticast mode [ 705.427575][T28940] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 705.442044][T28940] team0: Device macvtap1 failed to register rx_handler [ 705.453991][T28940] bond0: left allmulticast mode [ 705.459939][T28940] bond_slave_0: left allmulticast mode [ 705.465534][T28940] bond_slave_1: left allmulticast mode [ 705.814287][T28940] team0 (unregistering): Port device team_slave_0 removed [ 705.826816][T28940] team0 (unregistering): Port device team_slave_1 removed [ 706.431226][T28915] chnl_net:caif_netlink_parms(): no params data found [ 706.693096][T28915] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.701164][T28915] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.710601][T28915] bridge_slave_0: entered allmulticast mode [ 706.720525][T28915] bridge_slave_0: entered promiscuous mode [ 706.730639][T28915] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.739751][T28915] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.748169][T28915] bridge_slave_1: entered allmulticast mode [ 706.756356][T28915] bridge_slave_1: entered promiscuous mode [ 706.855143][T28915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.897617][T28915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.957836][T27021] Bluetooth: hci0: command tx timeout [ 707.003113][T29027] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 707.018723][T28915] team0: Port device team_slave_0 added [ 707.029593][T28915] team0: Port device team_slave_1 added [ 707.099094][T28915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 707.116384][T28915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.177547][T28915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.217020][T28915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.237283][T28915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.283728][T28915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.399867][T28915] hsr_slave_0: entered promiscuous mode [ 707.417285][T28915] hsr_slave_1: entered promiscuous mode [ 707.427757][T28915] debugfs: 'hsr0' already exists in 'hsr' [ 707.443826][T28915] Cannot create hsr debugfs directory [ 707.647838][T29059] netlink: 'syz.3.6495': attribute type 1 has an invalid length. [ 708.097003][T28915] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 708.110586][T28915] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 708.119102][T29088] __nla_validate_parse: 8 callbacks suppressed [ 708.119128][T29088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6501'. [ 708.370069][T28915] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 708.396946][T28915] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 708.485268][T28915] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 708.506275][T28915] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 708.555195][T29104] xt_CT: You must specify a L4 protocol and not use inversions on it [ 708.593453][T28915] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 708.618471][T28915] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 708.653784][T29106] IPVS: length: 21 != 8 [ 708.894085][T28915] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 708.924855][T28915] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 708.967581][T28915] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 708.990476][T29121] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6512'. [ 709.036462][ T5149] Bluetooth: hci0: command tx timeout [ 709.057584][T28915] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 709.170716][T29138] netlink: 22 bytes leftover after parsing attributes in process `syz.0.6513'. [ 709.227828][T29140] netlink: 22 bytes leftover after parsing attributes in process `syz.0.6513'. [ 709.240539][T29135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6514'. [ 709.286569][T29135] chnl_net:caif_netlink_parms(): no params data found [ 709.505041][T28915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.562260][T28915] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.619292][ T6822] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.626577][ T6822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.700744][ T6822] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.708002][ T6822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.846475][ T9530] IPVS: starting estimator thread 0... [ 709.937168][T29169] IPVS: using max 25 ests per chain, 60000 per kthread [ 709.945028][T29172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.998207][T29172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6524'. [ 710.014395][T29172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6524'. [ 710.329464][T29178] syzkaller0: entered promiscuous mode [ 710.335015][T29178] syzkaller0: entered allmulticast mode [ 710.358676][T29180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6527'. [ 710.384946][T29186] veth1_macvtap: left promiscuous mode [ 710.402524][T29186] veth1_macvtap: entered promiscuous mode [ 710.499760][T29191] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6529'. [ 710.509517][T28915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.529705][T29193] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6529'. [ 710.595124][ T6834] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.618272][ T6834] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.649389][ T6834] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.683460][ T6834] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.775045][T28915] veth0_vlan: entered promiscuous mode [ 710.814353][T29208] syzkaller1: entered promiscuous mode [ 710.821933][T29208] syzkaller1: entered allmulticast mode [ 710.831486][T28915] veth1_vlan: entered promiscuous mode [ 710.954134][T29216] netlink: 'syz.2.6536': attribute type 1 has an invalid length. [ 710.988503][T28915] veth0_macvtap: entered promiscuous mode [ 711.055152][T28915] veth1_macvtap: entered promiscuous mode [ 711.117034][ T5149] Bluetooth: hci0: command 0x040f tx timeout [ 711.238768][T28915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 711.271417][T28915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 711.350434][ T6838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.440192][T29246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 711.454209][ T6838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.467397][T29253] netlink: 'syz.3.6544': attribute type 10 has an invalid length. [ 711.507261][ T6838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.558129][ T6825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.780918][T29266] netlink: 'syz.3.6548': attribute type 58 has an invalid length. [ 711.793472][ T6822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.807200][ T6822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.991317][T17452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.039843][T17452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.214994][T29287] veth0: entered promiscuous mode [ 712.399187][T29286] veth0: left promiscuous mode [ 712.426689][T29293] pim6reg1: entered promiscuous mode [ 712.433020][T29293] pim6reg1: entered allmulticast mode [ 712.695208][T29311] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 712.923894][T29303] team0: left allmulticast mode [ 712.930512][T29303] team_slave_0: left allmulticast mode [ 712.947789][T29303] team_slave_1: left allmulticast mode [ 712.971532][T29303] team0: left promiscuous mode [ 712.996324][T29303] team_slave_0: left promiscuous mode [ 713.002026][T29303] team_slave_1: left promiscuous mode [ 713.030927][T29303] bridge0: port 3(team0) entered disabled state [ 713.061680][T29303] bridge_slave_0: left allmulticast mode [ 713.063821][T29318] netlink: 'syz.4.6561': attribute type 10 has an invalid length. [ 713.082394][T29303] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.104041][T29303] bridge_slave_1: left allmulticast mode [ 713.110789][T29303] bridge_slave_1: left promiscuous mode [ 713.121734][T29303] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.136594][T29303] bond0: (slave bond_slave_0): Releasing backup interface [ 713.150210][T29303] bond0: (slave bond_slave_1): Releasing backup interface [ 713.166819][T29303] team0: Port device team_slave_0 removed [ 713.174528][T29303] team0: Port device team_slave_1 removed [ 713.181643][T29303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.192071][T29303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.196142][ T5149] Bluetooth: hci0: command 0x040f tx timeout [ 713.207745][T29303] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 713.235756][T29318] batadv0: entered promiscuous mode [ 713.251792][T29318] batadv0: entered allmulticast mode [ 713.279039][T29318] bridge0: port 3(batadv0) entered blocking state [ 713.289060][T29318] bridge0: port 3(batadv0) entered disabled state [ 713.304718][T29318] bridge0: port 3(batadv0) entered blocking state [ 713.311448][T29318] bridge0: port 3(batadv0) entered forwarding state [ 713.340882][T29324] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 713.360100][T29324] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 713.379865][ T6838] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 713.390142][ T6838] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 713.514779][T29332] syzkaller0: entered promiscuous mode [ 713.521476][T29332] syzkaller0: entered allmulticast mode [ 713.553824][T29332] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 713.599825][T29344] netlink: 'syz.3.6569': attribute type 1 has an invalid length. [ 713.648670][T29333] syzkaller0: entered promiscuous mode [ 713.654292][T29333] syzkaller0: entered allmulticast mode [ 713.696515][T29333] tipc: Started in network mode [ 713.701484][T29333] tipc: Node identity , cluster identity 4711 [ 713.708201][T29333] tipc: Failed to obtain node identity [ 713.713885][T29333] tipc: Enabling of bearer rejected, failed to enable media [ 713.899144][ T30] audit: type=1800 audit(1760646238.835:9): pid=29358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6571" name="memory.events" dev="tmpfs" ino=669 res=0 errno=0 [ 715.623960][T29363] __nla_validate_parse: 7 callbacks suppressed [ 715.623985][T29363] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6574'. [ 715.657413][T29363] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6574'. [ 715.978003][T29383] syzkaller1: entered promiscuous mode [ 716.001363][T29383] syzkaller1: entered allmulticast mode [ 716.016606][T29383] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6582'. [ 716.089548][T29387] netlink: 232 bytes leftover after parsing attributes in process `syz.3.6583'. [ 716.180637][T29394] syzkaller0: entered promiscuous mode [ 716.205633][T29394] syzkaller0: entered allmulticast mode [ 716.249130][T29394] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 716.353963][T29404] tipc: Enabling of bearer rejected, failed to enable media [ 716.377252][T29394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6585'. [ 716.406844][T29403] tipc: Started in network mode [ 716.411944][T29403] tipc: Node identity 1a71cb1bb903, cluster identity 4711 [ 716.415098][T29401] xt_CT: No such helper "snmp" [ 716.428578][T29403] tipc: Enabled bearer , priority 0 [ 716.510109][T29409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6590'. [ 716.517049][T29403] syzkaller0: entered promiscuous mode [ 716.536457][T29403] syzkaller0: entered allmulticast mode [ 716.624381][T29403] tipc: Resetting bearer [ 716.665146][T29413] netlink: 'syz.2.6591': attribute type 1 has an invalid length. [ 716.712692][T29413] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6591'. [ 716.714415][T29416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 716.751808][T29416] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6592'. [ 716.769783][T29402] tipc: Resetting bearer [ 716.833788][T29402] tipc: Disabling bearer [ 716.912698][T29425] netlink: 'syz.4.6594': attribute type 1 has an invalid length. [ 716.950513][T29425] netlink: 212 bytes leftover after parsing attributes in process `syz.4.6594'. [ 716.974008][T29425] netlink: 'syz.4.6594': attribute type 1 has an invalid length. [ 717.033790][T29428] 8021q: adding VLAN 0 to HW filter on device bond3 [ 717.107257][T29429] netlink: 'syz.2.6595': attribute type 6 has an invalid length. [ 717.115049][T29429] netlink: 'syz.2.6595': attribute type 1 has an invalid length. [ 717.171122][T29429] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.6595'. [ 717.286475][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.497956][T29456] netlink: 'syz.2.6602': attribute type 1 has an invalid length. [ 717.630136][T29456] bond2: entered promiscuous mode [ 717.638017][T29456] 8021q: adding VLAN 0 to HW filter on device bond2 [ 717.867863][T29460] 8021q: adding VLAN 0 to HW filter on device bond2 [ 717.881806][T29460] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 717.893340][T29460] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 717.910948][T29460] bond2: (slave wireguard0): making interface the new active one [ 717.920777][T29460] wireguard0: entered promiscuous mode [ 717.928350][T29460] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 718.113464][T29465] macvlan0: mtu less than device minimum [ 718.343092][T29489] nftables ruleset with unbound chain [ 718.618091][T29508] netlink: 'syz.2.6617': attribute type 10 has an invalid length. [ 719.077944][T29470] infiniband syz1: set active [ 719.082789][T29470] infiniband syz1: added bond0 [ 719.162051][T29524] vlan2: entered promiscuous mode [ 719.182672][T29470] RDS/IB: syz1: added [ 719.187260][T29470] smc: adding ib device syz1 with port count 1 [ 719.197717][T29470] smc: ib device syz1 port 1 has no pnetid [ 719.201484][T29524] bridge0: entered promiscuous mode [ 719.665636][T29553] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 719.722846][T29553] netlink: 'syz.2.6632': attribute type 12 has an invalid length. [ 720.343489][T29579] sock: sock_timestamping_bind_phc: sock not bind to device [ 720.397712][T29582] netlink: 'syz.3.6640': attribute type 11 has an invalid length. [ 720.550815][T29569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 720.585558][T29569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 720.589972][T29589] netlink: 'syz.3.6642': attribute type 3 has an invalid length. [ 720.645627][T29590] ip6t_REJECT: ECHOREPLY is not supported [ 720.777177][T29569] bond2: left promiscuous mode [ 720.781994][T29569] wireguard0: left promiscuous mode [ 720.806612][T29576] geneve2: entered promiscuous mode [ 720.811869][T29576] geneve2: entered allmulticast mode [ 720.886204][T29589] __nla_validate_parse: 11 callbacks suppressed [ 720.886227][T29589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6642'. [ 721.085261][ T30] audit: type=1800 audit(1760646246.015:10): pid=29604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6643" name="memory.events" dev="tmpfs" ino=477 res=0 errno=0 [ 721.092558][T29604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6643'. [ 721.132110][T29593] syzkaller0: entered promiscuous mode [ 721.153456][T29593] syzkaller0: entered allmulticast mode [ 721.665928][T29624] netlink: 14436 bytes leftover after parsing attributes in process `syz.2.6650'. [ 722.238014][T29632] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6651'. [ 722.332149][T29638] netlink: 'syz.2.6651': attribute type 6 has an invalid length. [ 723.299428][T29678] netlink: 'syz.4.6663': attribute type 2 has an invalid length. [ 723.333474][T29678] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6663'. [ 723.481247][T29687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6667'. [ 723.526575][T29687] bridge_slave_1: left allmulticast mode [ 723.546672][T29687] bridge_slave_1: left promiscuous mode [ 723.552539][T29687] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.621527][T29687] bridge_slave_0: left allmulticast mode [ 723.634120][T29687] bridge_slave_0: left promiscuous mode [ 723.640953][T29687] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.740079][T29697] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 723.891404][T29701] tipc: Started in network mode [ 723.897432][T29701] tipc: Node identity a216d3f60ccf, cluster identity 4711 [ 723.904967][T29701] tipc: Enabled bearer , priority 0 [ 723.915560][T29701] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6672'. [ 723.930454][T29701] syzkaller0: entered promiscuous mode [ 723.937262][T29701] syzkaller0: entered allmulticast mode [ 723.950182][T29701] tipc: Resetting bearer [ 723.971007][T29700] tipc: Resetting bearer [ 724.015261][T29700] tipc: Disabling bearer [ 724.133938][T29711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6674'. [ 724.166868][T29715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6674'. [ 724.201757][ T13] tipc: Subscription rejected, illegal request [ 724.216616][T29711] Bluetooth: MGMT ver 1.23 [ 724.417358][T29725] netlink: 308 bytes leftover after parsing attributes in process `syz.2.6679'. [ 724.870687][T29748] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 725.197353][T29756] tipc: Enabled bearer , priority 0 [ 725.205649][T29756] syzkaller0: entered promiscuous mode [ 725.211373][T29756] syzkaller0: entered allmulticast mode [ 725.240013][T29756] tipc: Resetting bearer [ 725.316260][T29755] tipc: Resetting bearer [ 725.367549][T29755] tipc: Disabling bearer [ 725.407562][T29763] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 725.600582][T29777] netlink: 'syz.2.6698': attribute type 7 has an invalid length. [ 725.616996][T29777] netlink: 'syz.2.6698': attribute type 8 has an invalid length. [ 725.662813][T29780] netlink: 'syz.2.6698': attribute type 7 has an invalid length. [ 725.671450][T29780] netlink: 'syz.2.6698': attribute type 8 has an invalid length. [ 726.111515][T29795] __nla_validate_parse: 5 callbacks suppressed [ 726.111536][T29795] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6703'. [ 726.222537][T29802] ip6gre1: entered allmulticast mode [ 726.367607][T29808] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6708'. [ 726.449374][T29811] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6711'. [ 726.713297][T29826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6715'. [ 726.989650][T29833] netlink: 788 bytes leftover after parsing attributes in process `syz.3.6718'. [ 727.037729][T29839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6720'. [ 727.100864][T29843] netlink: 'syz.2.6721': attribute type 10 has an invalid length. [ 727.116385][T29843] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6721'. [ 727.179314][T29843] batadv0: entered promiscuous mode [ 727.189284][T29843] batadv0: entered allmulticast mode [ 727.214887][T29843] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 727.312381][T29847] bond1: (slave gretap0): Device is not bonding slave [ 727.329305][T29847] bond1: option active_slave: invalid value (gretap0) [ 727.351513][T29847] bond1 (unregistering): Released all slaves [ 727.439863][T29849] bridge5: entered promiscuous mode [ 727.486571][T29849] bridge5: entered allmulticast mode [ 727.789444][T29866] netlink: 248 bytes leftover after parsing attributes in process `syz.3.6727'. [ 728.080857][T29875] syz_tun: entered allmulticast mode [ 728.091517][T29876] netlink: 'syz.3.6729': attribute type 39 has an invalid length. [ 728.292569][T29885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6731'. [ 728.302636][T29885] bridge0: port 3(batadv0) entered disabled state [ 728.313547][T29885] bridge_slave_1: left allmulticast mode [ 728.320288][T29885] bridge_slave_1: left promiscuous mode [ 728.327256][T29885] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.339421][T29885] bridge_slave_0: left allmulticast mode [ 728.345360][T29885] bridge_slave_0: left promiscuous mode [ 728.351760][T29885] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.755327][T29908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6739'. [ 728.768159][T29899] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 728.769737][T29901] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 728.781469][T29908] netlink: 'syz.2.6739': attribute type 7 has an invalid length. [ 728.802929][T29908] netlink: 'syz.2.6739': attribute type 8 has an invalid length. [ 729.036434][T29917] netlink: 'syz.2.6742': attribute type 4 has an invalid length. [ 729.043807][T29915] Cannot find add_set index 0 as target [ 729.061272][T29917] netlink: 'syz.2.6742': attribute type 4 has an invalid length. [ 729.331870][T29935] tipc: Enabled bearer , priority 0 [ 729.361947][T29940] syzkaller0: entered promiscuous mode [ 729.376341][T29940] syzkaller0: entered allmulticast mode [ 729.488435][T29940] tipc: Resetting bearer [ 729.538170][T29940] tipc: Disabling bearer [ 729.822836][T29963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 730.597373][T30014] netlink: 'syz.0.6770': attribute type 16 has an invalid length. [ 730.605576][T30014] netlink: 'syz.0.6770': attribute type 17 has an invalid length. [ 731.320012][T30008] veth0_virt_wifi: renamed from ipvlan1 [ 731.384443][T30014] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 731.481694][T30021] __nla_validate_parse: 10 callbacks suppressed [ 731.481716][T30021] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.6774'. [ 731.572380][T30023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 731.706997][T30031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6777'. [ 731.931518][T30047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6781'. [ 732.048908][T30050] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6782'. [ 732.270258][T30061] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6786'. [ 732.358977][T30061] bond1: invalid ARP target 0.0.0.0 specified for addition [ 732.366866][T30061] bond1: option arp_ip_target: invalid value (0) [ 732.374915][T30061] bond1 (unregistering): Released all slaves [ 732.555122][T30077] netlink: 'syz.0.6790': attribute type 1 has an invalid length. [ 732.593426][T30077] macvlan2: entered promiscuous mode [ 732.599153][T30077] macvlan2: entered allmulticast mode [ 732.605606][T30077] bond1: entered promiscuous mode [ 732.611729][T30077] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 732.623575][T30077] bond1: left promiscuous mode [ 732.693924][T30077] macvlan2: entered promiscuous mode [ 732.699448][T30077] macvlan2: entered allmulticast mode [ 732.705636][T30077] bond1: entered promiscuous mode [ 732.712222][T30077] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 732.721796][T30077] bond1: left promiscuous mode [ 732.783219][T30077] macvlan2: entered promiscuous mode [ 732.788962][T30077] macvlan2: entered allmulticast mode [ 732.795301][T30077] bond1: entered promiscuous mode [ 732.801738][T30077] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 732.810795][T30077] bond1: left promiscuous mode [ 732.886752][T30077] macvlan2: entered promiscuous mode [ 732.892167][T30077] macvlan2: entered allmulticast mode [ 732.898697][T30077] bond1: entered promiscuous mode [ 732.904690][T30077] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 732.913844][T30077] bond1: left promiscuous mode [ 732.987994][T30077] macvlan2: entered promiscuous mode [ 732.993361][T30077] macvlan2: entered allmulticast mode [ 733.000533][T30077] bond1: entered promiscuous mode [ 733.007236][T30077] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 733.019006][T30077] bond1: left promiscuous mode [ 733.063305][T30082] lo: entered promiscuous mode [ 733.075279][T30082] netlink: 'syz.4.6791': attribute type 2 has an invalid length. [ 733.084148][T30082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 733.111254][T30077] macvlan2: entered promiscuous mode [ 733.117591][T30077] macvlan2: entered allmulticast mode [ 733.124002][T30077] bond1: entered promiscuous mode [ 733.131062][T30077] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 733.140691][T30077] bond1: left promiscuous mode [ 733.235070][T30077] macvlan2: entered promiscuous mode [ 733.240952][T30077] macvlan2: entered allmulticast mode [ 733.248803][T30077] bond1: entered promiscuous mode [ 733.254884][T30077] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 733.268859][T30077] bond1: left promiscuous mode [ 733.402529][T30077] macvlan2: entered promiscuous mode [ 733.421041][T30077] macvlan2: entered allmulticast mode [ 733.457643][T30077] bond1: entered promiscuous mode [ 733.457812][T30089] netlink: 'syz.2.6794': attribute type 1 has an invalid length. [ 733.473097][T30077] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 733.485268][T30089] nbd: error processing sock list [ 733.493724][T30089] block nbd2: shutting down sockets [ 733.503384][T30077] bond1: left promiscuous mode [ 733.863663][T30117] netlink: 'syz.0.6801': attribute type 1 has an invalid length. [ 733.990070][T30124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6801'. [ 734.000603][T30123] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6803'. [ 734.022177][T30119] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 734.037159][T30119] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 734.048898][T30119] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 734.579468][T30147] netlink: 'syz.2.6808': attribute type 1 has an invalid length. [ 734.598526][T30147] netlink: 'syz.2.6808': attribute type 1 has an invalid length. [ 734.668939][T30156] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6810'. [ 734.697567][T30156] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 734.938165][T30165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6814'. [ 735.035551][T30165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 735.154207][T30179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6816'. [ 735.413815][T30194] netlink: 'syz.4.6820': attribute type 8 has an invalid length. [ 735.430734][T30194] netdevsim netdevsim4: Direct firmware load for /. failed with error -2 [ 735.460753][T30194] netdevsim netdevsim4: Falling back to sysfs fallback for: /. [ 735.489941][T30197] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 735.509344][T30200] netlink: 'syz.3.6821': attribute type 29 has an invalid length. [ 735.675063][T30217] validate_nla: 1 callbacks suppressed [ 735.675085][T30217] netlink: 'syz.2.6825': attribute type 30 has an invalid length. [ 735.695297][T30218] SET target dimension over the limit! [ 735.743420][T30221] netlink: 'syz.2.6825': attribute type 30 has an invalid length. [ 735.797614][T30221] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 735.940896][T30235] x_tables: duplicate underflow at hook 1 [ 735.988526][T30236] x_tables: duplicate underflow at hook 1 [ 736.073465][T30241] tipc: Started in network mode [ 736.087661][T30241] tipc: Node identity d21b9684478e, cluster identity 4711 [ 736.095254][T30241] tipc: Enabled bearer , priority 0 [ 736.143544][T30248] netlink: 'syz.1.6835': attribute type 39 has an invalid length. [ 736.213815][T30241] tipc: Disabling bearer [ 736.397782][T30266] netlink: 'syz.3.6839': attribute type 10 has an invalid length. [ 736.438565][T30266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 736.593182][T30274] netlink: 'syz.1.6845': attribute type 1 has an invalid length. [ 736.684641][T30278] __nla_validate_parse: 1 callbacks suppressed [ 736.684661][T30278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6846'. [ 736.881732][T30290] dvmrp0: entered allmulticast mode [ 736.897864][T30288] x_tables: duplicate underflow at hook 4 [ 736.909923][T30290] dvmrp0: left allmulticast mode [ 737.062808][T30300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6854'. [ 737.299207][T30309] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6857'. [ 737.344716][T30309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6857'. [ 737.385157][T30309] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.480726][T30309] bridge_slave_1 (unregistering): left allmulticast mode [ 737.498652][T30309] bridge_slave_1 (unregistering): left promiscuous mode [ 737.539865][T30309] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.624908][T30321] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6860'. [ 737.630079][T30322] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6860'. [ 737.950147][T30340] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 738.008878][T30341] netlink: 'syz.1.6865': attribute type 1 has an invalid length. [ 738.019272][T30341] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 738.026703][T30341] IPv6: NLM_F_CREATE should be set when creating new route [ 738.034036][T30341] IPv6: NLM_F_CREATE should be set when creating new route [ 738.105305][T30345] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6867'. [ 738.289679][T30355] openvswitch: netlink: Message has 1 unknown bytes. [ 738.310232][T30360] netlink: 'syz.2.6871': attribute type 1 has an invalid length. [ 738.334662][T30360] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6871'. [ 738.347661][T30355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 738.360395][T30360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6871'. [ 738.377273][T30365] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6872'. [ 738.618278][T30373] syzkaller0: entered promiscuous mode [ 738.623830][T30373] syzkaller0: entered allmulticast mode [ 738.919931][T30399] lo speed is unknown, defaulting to 1000 [ 738.942300][T30399] lo speed is unknown, defaulting to 1000 [ 738.948824][T30394] nbd2: detected capacity change from 0 to 127 [ 738.960724][ T5149] block nbd2: Receive control failed (result -32) [ 738.973843][T30399] lo speed is unknown, defaulting to 1000 [ 739.015082][T30399] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 739.055646][T30399] lo speed is unknown, defaulting to 1000 [ 739.069589][T30399] lo speed is unknown, defaulting to 1000 [ 739.077988][T30399] lo speed is unknown, defaulting to 1000 [ 739.086812][T30399] lo speed is unknown, defaulting to 1000 [ 739.096874][T30399] lo speed is unknown, defaulting to 1000 [ 739.104603][T30399] lo speed is unknown, defaulting to 1000 [ 739.114746][T30399] lo speed is unknown, defaulting to 1000 [ 739.123552][T30399] lo speed is unknown, defaulting to 1000 [ 739.132838][T30399] lo speed is unknown, defaulting to 1000 [ 739.169772][T30399] lo speed is unknown, defaulting to 1000 [ 739.182729][T30411] netlink: 'syz.1.6889': attribute type 1 has an invalid length. [ 739.194544][T30399] lo speed is unknown, defaulting to 1000 [ 739.212826][T30399] lo speed is unknown, defaulting to 1000 [ 739.263820][T30399] lo speed is unknown, defaulting to 1000 [ 739.311286][T30411] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 739.329009][T30399] lo speed is unknown, defaulting to 1000 [ 739.380218][T30427] "syz.4.6890" (30427) uses obsolete ecb(arc4) skcipher [ 740.062411][T30470] openvswitch: netlink: Message has 90 unknown bytes. [ 740.366828][T30485] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 740.511645][T30495] xt_NFQUEUE: number of total queues is 0 [ 740.523820][T30495] xt_NFQUEUE: number of total queues is 0 [ 740.530953][T30495] xt_NFQUEUE: number of total queues is 0 [ 740.537922][T30495] xt_NFQUEUE: number of total queues is 0 [ 740.544189][T30495] xt_NFQUEUE: number of total queues is 0 [ 740.556554][T30493] block nbd3: server does not support multiple connections per device. [ 740.565079][T30493] block nbd3: shutting down sockets [ 740.577317][T30495] xt_NFQUEUE: number of total queues is 0 [ 740.583489][T30495] xt_NFQUEUE: number of total queues is 0 [ 740.599656][T30495] xt_NFQUEUE: number of total queues is 0 [ 740.610340][T30492] netlink: 'syz.3.6910': attribute type 1 has an invalid length. [ 740.623329][T30495] xt_NFQUEUE: number of total queues is 0 [ 740.631224][T30495] xt_NFQUEUE: number of total queues is 0 [ 740.640051][T30498] netlink: 'syz.2.6912': attribute type 23 has an invalid length. [ 740.961996][T30515] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 741.128740][T30518] netlink: 'syz.3.6919': attribute type 12 has an invalid length. [ 741.263851][T30530] netlink: 'syz.1.6922': attribute type 1 has an invalid length. [ 741.511163][T30541] bond1: (slave bridge1): making interface the new active one [ 741.520455][T30541] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 741.970302][T30573] __nla_validate_parse: 13 callbacks suppressed [ 741.970323][T30573] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6935'. [ 741.984344][T30576] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6936'. [ 742.112072][T30578] bond3: (slave bond_slave_1): Device is not our slave [ 742.139255][T30578] bond3: option active_slave: invalid value (bond_slave_1) [ 742.158546][T30578] bond3 (unregistering): Released all slaves [ 742.351681][T30594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6940'. [ 742.437823][T30599] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 742.445103][T30599] IPv6: NLM_F_CREATE should be set when creating new route [ 742.910888][T30614] can: request_module (can-proto-3) failed. [ 742.924429][T23540] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 742.944276][T23540] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 742.969982][T23540] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 742.996765][T23540] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.053690][T30632] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6952'. [ 743.065644][T30632] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6952'. [ 743.103922][T30634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6953'. [ 743.136940][T30638] lo: entered allmulticast mode [ 743.225876][T30638] lo: left allmulticast mode [ 743.271956][T30643] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 743.284288][T30643] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 743.325328][T30634] netlink: 'syz.4.6953': attribute type 4 has an invalid length. [ 743.335521][T30653] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6959'. [ 743.349221][T30649] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6957'. [ 743.421348][T30647] syzkaller0: entered promiscuous mode [ 743.428847][T30647] syzkaller0: entered allmulticast mode [ 743.440396][T30653] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6959'. [ 743.594482][T30667] netlink: 'syz.3.6962': attribute type 25 has an invalid length. [ 745.573044][T30691] netlink: 'syz.4.6969': attribute type 1 has an invalid length. [ 745.581741][T30691] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6969'. [ 746.207614][T30722] netlink: 'syz.0.6979': attribute type 6 has an invalid length. [ 746.224409][T30722] netlink: 'syz.0.6979': attribute type 5 has an invalid length. [ 746.459840][T30731] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 746.478817][T30731] bond3 (unregistering): Released all slaves [ 746.505378][T30687] lo speed is unknown, defaulting to 1000 [ 746.638425][T30738] macsec2: entered promiscuous mode [ 746.644667][T30738] macsec2: entered allmulticast mode [ 746.651761][T30738] bond5: (slave macsec2): Error -34 calling dev_set_mtu [ 746.687949][T30745] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 747.113227][T30762] geneve4: entered promiscuous mode [ 747.135313][T30762] geneve4: entered allmulticast mode [ 747.164020][T23536] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 747.182987][T23536] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 747.224369][T23536] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 747.243484][T23536] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 747.430920][T30772] __nla_validate_parse: 8 callbacks suppressed [ 747.430943][T30772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6995'. [ 747.748590][T30789] IPVS: Unknown mcast interface: netpci0 [ 747.800590][T30782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 747.838668][T30792] IPVS: length: 183 != 24 [ 748.447327][T30823] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7010'. [ 749.199280][T30847] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 749.209439][T30847] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 749.469854][T30864] netlink: 'syz.0.7021': attribute type 1 has an invalid length. [ 749.513219][T30864] bond3: entered promiscuous mode [ 749.519887][T30864] 8021q: adding VLAN 0 to HW filter on device bond3 [ 749.599476][T30864] bond3: (slave bridge2): making interface the new active one [ 749.619378][T30864] bridge2: entered promiscuous mode [ 749.629771][T30864] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 749.953590][T30892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7030'. [ 749.974587][T30892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7030'. [ 750.047797][T30892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7030'. [ 750.187225][T30892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7030'. [ 750.244134][T30892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7030'. [ 750.382728][T30892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7030'. [ 750.404271][T30892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7030'. [ 750.414905][T30892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7030'. [ 751.055206][T30931] tipc: Enabled bearer , priority 0 [ 751.073579][T30931] syzkaller0: entered promiscuous mode [ 751.097028][T30931] syzkaller0: entered allmulticast mode [ 751.158199][T30931] tipc: Resetting bearer [ 751.188509][T30929] tipc: Resetting bearer [ 751.267539][T30929] tipc: Disabling bearer [ 751.369444][T30941] netem: invalid attributes len -24 [ 751.384975][T30941] netem: change failed [ 751.760748][T30957] netlink: 'syz.4.7049': attribute type 1 has an invalid length. [ 751.903024][T30957] 8021q: adding VLAN 0 to HW filter on device bond6 [ 751.997047][ T6834] wlan1: Trigger new scan to find an IBSS to join [ 752.012316][T30968] veth3: entered promiscuous mode [ 752.047624][T30968] bond6: (slave veth3): Enslaving as an active interface with a down link [ 752.150748][T30957] vlan2: entered allmulticast mode [ 752.179794][T30957] bond6: entered allmulticast mode [ 752.212308][T30957] bond6: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 752.472940][T30994] xt_hashlimit: size too large, truncated to 1048576 [ 752.512696][T30997] __nla_validate_parse: 59 callbacks suppressed [ 752.512722][T30997] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7061'. [ 752.589564][T30997] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7061'. [ 752.617441][T31000] sch_fq: defrate 0 ignored. [ 752.775410][T31002] netlink: 'syz.0.7063': attribute type 1 has an invalid length. [ 752.857289][T31002] bond4: entered promiscuous mode [ 752.879755][T31002] 8021q: adding VLAN 0 to HW filter on device bond4 [ 752.949170][T31010] 8021q: adding VLAN 0 to HW filter on device bond4 [ 752.957918][T31010] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 752.976571][T31010] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 753.002520][T31010] bond4: (slave wireguard0): making interface the new active one [ 753.016566][T31017] openvswitch: netlink: IP tunnel dst address not specified [ 753.037798][T31010] wireguard0: entered promiscuous mode [ 753.049190][T31010] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 753.071305][T31017] netlink: 'syz.2.7066': attribute type 11 has an invalid length. [ 753.260416][T31025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7070'. [ 753.271011][T31028] IPVS: length: 8 != 1152 [ 753.327095][T31033] netlink: 'syz.0.7073': attribute type 29 has an invalid length. [ 753.360124][T31033] netlink: 'syz.0.7073': attribute type 29 has an invalid length. [ 753.697372][T31050] netlink: 'syz.1.7080': attribute type 10 has an invalid length. [ 753.710662][T31050] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7080'. [ 753.791712][T31050] team0: Port device geneve0 added [ 753.808506][T31054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7082'. [ 753.839961][T31054] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7082'. [ 754.144999][T31086] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7088'. [ 754.191067][T31086] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7088'. [ 754.241247][T31091] netlink: 116 bytes leftover after parsing attributes in process `syz.4.7091'. [ 754.533536][T31100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7092'. [ 754.636803][T27021] Bluetooth: hci0: command 0x040f tx timeout [ 754.694623][T31110] netlink: 'syz.4.7096': attribute type 10 has an invalid length. [ 755.225660][T31113] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 755.282717][T31114] tipc: Enabled bearer , priority 0 [ 755.305403][T31107] tipc: Disabling bearer [ 755.357047][T31123] netlink: 'syz.0.7099': attribute type 1 has an invalid length. [ 755.382379][T31123] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 755.458582][T31130] syzkaller0: refused to change device tx_queue_len [ 755.593492][T31134] netlink: 'syz.3.7103': attribute type 9 has an invalid length. [ 755.645391][T31137] netlink: 'syz.4.7104': attribute type 1 has an invalid length. [ 756.677714][T31184] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 756.723803][T27021] Bluetooth: hci0: command 0x040f tx timeout [ 756.737887][T31182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 756.978473][T31206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 757.038206][T17446] wlan1: Trigger new scan to find an IBSS to join [ 758.163635][T31220] __nla_validate_parse: 10 callbacks suppressed [ 758.163660][T31220] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7135'. [ 758.181245][T31228] validate_nla: 4 callbacks suppressed [ 758.181265][T31228] netlink: 'syz.4.7137': attribute type 58 has an invalid length. [ 758.204333][T31228] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7137'. [ 758.261914][T31233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7136'. [ 758.268535][T31235] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7138'. [ 758.456146][T31233] hsr_slave_0 (unregistering): left promiscuous mode [ 758.622641][T31255] Bluetooth: hci0: unsupported parameter 33553 [ 758.632268][T31255] Bluetooth: hci0: invalid length 5, exp 2 for type 8 [ 758.834640][T31265] netlink: 248 bytes leftover after parsing attributes in process `syz.2.7147'. [ 758.857007][T31265] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7147'. [ 758.945053][T31268] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7148'. [ 758.979424][T31268] bridge3: entered promiscuous mode [ 758.984778][T31268] bridge3: entered allmulticast mode [ 759.326654][T17447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.359274][T31289] netlink: 440 bytes leftover after parsing attributes in process `syz.3.7155'. [ 759.387843][T31286] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7155'. [ 759.569621][T31248] lo speed is unknown, defaulting to 1000 [ 759.681188][T31304] netlink: 'syz.0.7161': attribute type 2 has an invalid length. [ 759.713849][T31304] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7161'. [ 759.729731][T31304] nbd: must specify a device to reconfigure [ 759.875080][T31311] netlink: 'syz.4.7164': attribute type 4 has an invalid length. [ 760.007411][T31313] netlink: 'syz.3.7165': attribute type 1 has an invalid length. [ 760.287893][T31313] 8021q: adding VLAN 0 to HW filter on device bond4 [ 760.500183][T31318] bond4: (slave veth5): Enslaving as an active interface with a down link [ 760.515569][T31325] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 760.603069][T31338] xt_CT: You must specify a L4 protocol and not use inversions on it [ 760.724685][T31329] bond4: (slave veth7): Enslaving as an active interface with a down link [ 760.851836][T31343] Bluetooth: MGMT ver 1.23 [ 760.994070][T31347] syzkaller0: entered promiscuous mode [ 761.000686][T31347] syzkaller0: entered allmulticast mode [ 763.429975][T31385] __nla_validate_parse: 5 callbacks suppressed [ 763.429997][T31385] netlink: 11 bytes leftover after parsing attributes in process `syz.1.7187'. [ 763.448486][T31385] netlink: 11 bytes leftover after parsing attributes in process `syz.1.7187'. [ 763.798884][T31414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7194'. [ 763.967486][T31420] netlink: 'syz.1.7197': attribute type 4 has an invalid length. [ 764.015050][T31420] netlink: 'syz.1.7197': attribute type 4 has an invalid length. [ 764.178720][T31428] batadv0: left allmulticast mode [ 764.188163][T31430] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7203'. [ 764.194361][T31428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.218703][T31428] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7201'. [ 764.411544][T31447] netlink: 112 bytes leftover after parsing attributes in process `syz.2.7208'. [ 764.428497][T31444] netlink: 'syz.1.7206': attribute type 1 has an invalid length. [ 764.456433][T31447] netlink: 'syz.2.7208': attribute type 10 has an invalid length. [ 764.541236][T31450] bond2: (slave bridge3): making interface the new active one [ 764.557359][T31452] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.7209'. [ 764.573989][T31450] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 764.990881][T31476] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.7216'. [ 765.115430][T31486] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7220'. [ 765.141677][T31486] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7220'. [ 765.504324][T31513] netlink: 'syz.4.7226': attribute type 29 has an invalid length. [ 765.717182][T31515] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 765.823258][T31528] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 766.171885][T31548] ipvlan2: entered promiscuous mode [ 766.193740][T31551] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 766.208405][T31550] sctp: [Deprecated]: syz.3.7238 (pid 31550) Use of struct sctp_assoc_value in delayed_ack socket option. [ 766.208405][T31550] Use struct sctp_sack_info instead [ 766.798363][T31586] bond5: (slave gretap0): Device is not bonding slave [ 766.805212][T31586] bond5: option active_slave: invalid value (gretap0) [ 766.829680][T31586] bond5 (unregistering): Released all slaves [ 766.981881][T31600] openvswitch: netlink: IP tunnel dst address not specified [ 767.528295][T31633] netlink: 'syz.0.7264': attribute type 1 has an invalid length. [ 767.887741][T31652] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 767.961656][T31655] netlink: 'syz.3.7274': attribute type 11 has an invalid length. [ 768.118129][T31660] netlink: 'syz.1.7276': attribute type 1 has an invalid length. [ 768.123853][T31665] xt_TCPMSS: Only works on TCP SYN packets [ 768.228021][T31670] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 768.290947][T31679] netlink: 'syz.1.7280': attribute type 1 has an invalid length. [ 768.329268][T31679] bond3: entered promiscuous mode [ 768.335094][T31679] 8021q: adding VLAN 0 to HW filter on device bond3 [ 768.345099][T31674] tipc: Enabled bearer , priority 0 [ 768.372954][T31682] bond3: (slave bridge4): making interface the new active one [ 768.381159][T31682] bridge4: entered promiscuous mode [ 768.388590][T31682] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 768.402726][T31683] syzkaller0: entered promiscuous mode [ 768.411746][T31683] syzkaller0: entered allmulticast mode [ 768.428277][T31684] RDS: rds_bind could not find a transport for 7231::1c2:0:0:0, load rds_tcp or rds_rdma? [ 768.443901][T31674] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 768.484234][T31674] tipc: Resetting bearer [ 768.499117][T31672] tipc: Resetting bearer [ 768.550502][T31672] tipc: Disabling bearer [ 768.723366][T31695] __nla_validate_parse: 13 callbacks suppressed [ 768.723390][T31695] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7285'. [ 768.820829][T31697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7286'. [ 769.052895][T31713] netlink: 9 bytes leftover after parsing attributes in process `syz.1.7293'. [ 769.064383][T31713] gretap0: entered promiscuous mode [ 769.110062][T31713] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7293'. [ 769.120316][T31713] 0{X功: renamed from gretap0 [ 769.159012][T31713] 0{X功: left promiscuous mode [ 769.164168][T31713] 0{X功: entered allmulticast mode [ 769.185021][T31713] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 769.234189][T31730] geneve3: entered promiscuous mode [ 769.244346][T31730] geneve3: entered allmulticast mode [ 769.270437][ T6828] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 769.282435][T31724] netlink: 116 bytes leftover after parsing attributes in process `syz.3.7294'. [ 769.311540][ T6828] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 769.339045][ T6828] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 769.372673][T31730] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.423993][T31740] team_slave_0: entered promiscuous mode [ 769.429817][T31740] team_slave_1: entered promiscuous mode [ 769.435573][T31740] geneve0: entered promiscuous mode [ 769.462975][T31745] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7300'. [ 769.474805][T31740] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 769.476422][T31746] netlink: 112 bytes leftover after parsing attributes in process `syz.3.7300'. [ 769.507787][T31738] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 769.669453][T31760] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7303'. [ 769.701805][T31760] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7303'. [ 770.447462][T31805] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7315'. [ 770.800586][T31827] netlink: 'syz.1.7323': attribute type 4 has an invalid length. [ 770.832801][T31827] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.840658][T31827] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.923394][T31730] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.959112][T31730] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 771.073995][T31834] netlink: 'syz.4.7324': attribute type 1 has an invalid length. [ 771.143570][T31730] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.160749][T31730] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 771.177924][T31848] netlink: 'syz.1.7326': attribute type 1 has an invalid length. [ 771.237635][T31730] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.262064][T31730] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 771.345381][T31850] syzkaller0: entered promiscuous mode [ 771.351222][T31850] syzkaller0: entered allmulticast mode [ 771.412257][T31858] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 771.453764][ T6828] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 771.465975][ T6828] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 772.051887][T31870] IPVS: ip_vs_edit_dest(): server weight less than zero [ 772.059533][ T43] IPVS: starting estimator thread 0... [ 772.160264][T31871] IPVS: using max 27 ests per chain, 64800 per kthread [ 773.278153][ T6828] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 773.296418][ T6828] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 773.381066][ T50] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 773.402591][ T50] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 773.463344][ T6828] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 773.485124][ T6828] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 773.498574][T31883] xt_hashlimit: invalid rate [ 773.876777][T31905] __nla_validate_parse: 5 callbacks suppressed [ 773.876799][T31905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7344'. [ 773.912831][T31909] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7345'. [ 773.917458][T31908] netlink: 'syz.3.7346': attribute type 21 has an invalid length. [ 774.003299][T31912] bond7: ARP target 1.0.0.0 is already present [ 774.015503][T31912] bond7: option arp_ip_target: invalid value (1) [ 774.035590][T31912] bond7 (unregistering): Released all slaves [ 774.084469][T31920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7348'. [ 774.127420][T31920] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.142018][T31920] bridge_slave_0: left allmulticast mode [ 774.153379][T31922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7349'. [ 774.156517][T31920] bridge_slave_0: left promiscuous mode [ 774.185287][T31920] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.262993][T31928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 774.284672][T31928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 774.492013][T31938] netlink: 'syz.1.7354': attribute type 1 has an invalid length. [ 774.591635][T31946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7357'. [ 774.606779][T31946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7357'. [ 774.768072][T31956] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7358'. [ 774.779597][T31960] syzkaller0: entered promiscuous mode [ 774.802704][T31960] syzkaller0: entered allmulticast mode [ 774.879084][T31965] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7361'. [ 774.893016][T31966] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7361'. [ 775.009836][T31970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 775.020071][T31978] netlink: 'syz.2.7362': attribute type 1 has an invalid length. [ 775.046049][T31970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.055583][T31970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 775.068983][T31970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.113419][T31982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7364'. [ 775.363203][T31991] netlink: 'syz.0.7368': attribute type 21 has an invalid length. [ 775.383372][T31989] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 775.402701][T31989] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 775.480447][T31993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 775.706375][T32006] netlink: 'syz.0.7372': attribute type 3 has an invalid length. [ 775.716816][T32004] netlink: 'syz.3.7374': attribute type 5 has an invalid length. [ 775.755433][T32008] netlink: 'syz.4.7375': attribute type 12 has an invalid length. [ 776.056858][T32030] bond0: entered promiscuous mode [ 776.478085][T32061] netlink: 'syz.0.7388': attribute type 10 has an invalid length. [ 776.649500][T32072] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 776.697242][T32052] openvswitch: netlink: Flow key attr not present in new flow. [ 777.267308][T32102] xt_CT: You must specify a L4 protocol and not use inversions on it [ 777.508494][T32116] netlink: 'syz.4.7410': attribute type 4 has an invalid length. [ 777.531495][T32116] netlink: 'syz.4.7410': attribute type 4 has an invalid length. [ 777.548270][T32116] netlink: 'syz.4.7410': attribute type 4 has an invalid length. [ 777.909152][T32142] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 777.945878][T32142] netlink: 'syz.0.7417': attribute type 1 has an invalid length. [ 777.981004][T32142] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 778.626705][T32175] netlink: 'syz.0.7423': attribute type 2 has an invalid length. [ 778.701949][T32175] netlink: 'syz.0.7423': attribute type 1 has an invalid length. [ 778.758423][T32175] netlink: 'syz.0.7423': attribute type 2 has an invalid length. [ 778.855852][T32175] netlink: 'syz.0.7423': attribute type 1 has an invalid length. [ 778.863898][T32175] netlink: 'syz.0.7423': attribute type 2 has an invalid length. [ 778.987860][T32188] __nla_validate_parse: 18 callbacks suppressed [ 778.987881][T32188] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7429'. [ 779.051529][T32199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7432'. [ 779.092423][T32199] tipc: Invalid UDP bearer configuration [ 779.092480][T32199] tipc: Enabling of bearer rejected, failed to enable media [ 779.168862][T32206] xt_hashlimit: invalid rate [ 779.213707][T32206] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 779.536513][T32233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7442'. [ 779.589995][T32235] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7441'. [ 779.616044][T32234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7442'. [ 779.994982][T32257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 780.030122][T32257] batadv_slave_1: entered promiscuous mode [ 780.037638][T32257] batadv_slave_1: entered allmulticast mode [ 780.160385][T27021] Bluetooth: hci3: command 0x0406 tx timeout [ 780.259272][T32274] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7454'. [ 780.377465][T32282] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7457'. [ 780.579659][T32293] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.7461'. [ 780.626466][T32293] netlink: 348 bytes leftover after parsing attributes in process `syz.2.7461'. [ 780.753623][T32301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7464'. [ 780.906848][T32314] Cannot find del_set index 49151 as target [ 781.183435][T32328] delete_channel: no stack [ 781.707265][T32361] bridge_slave_0: left allmulticast mode [ 781.716618][T32361] bridge_slave_0: left promiscuous mode [ 781.730145][T32361] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.732233][T32363] validate_nla: 131 callbacks suppressed [ 781.732255][T32363] netlink: 'syz.4.7483': attribute type 1 has an invalid length. [ 781.903524][T32363] 8021q: adding VLAN 0 to HW filter on device bond7 [ 782.023895][T32383] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 782.198783][T32393] team0: Device gtp0 is of different type [ 782.328297][T32403] macvlan0: entered promiscuous mode [ 782.336681][T32403] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 782.358463][T32403] hsr1: entered allmulticast mode [ 782.363578][T32403] macvlan0: entered allmulticast mode [ 782.369213][T32403] batadv0: entered allmulticast mode [ 782.385980][T32403] macvlan0: left promiscuous mode [ 782.588681][ T50] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 782.612837][T32417] bridge_slave_0: default FDB implementation only supports local addresses [ 782.626777][T32422] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 783.003444][T32446] tipc: MTU too low for tipc bearer [ 783.237903][T32458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 783.268730][T32458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 783.310016][T32458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.322934][T32458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.643175][T32481] tipc: New replicast peer: 255.255.255.255 [ 783.669941][T32481] tipc: Enabled bearer , priority 10 [ 783.792824][T32489] x_tables: duplicate entry at hook 2 [ 783.891396][T32497] xt_TCPMSS: Only works on TCP SYN packets [ 783.979307][T32497] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 784.299093][T32518] __nla_validate_parse: 15 callbacks suppressed [ 784.299115][T32518] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7527'. [ 784.331058][T32517] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 784.351806][T32518] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7527'. [ 784.367867][T32518] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7527'. [ 784.402342][T32518] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7527'. [ 784.676680][ T9530] tipc: Node number set to 2509608580 [ 784.860954][T32555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7537'. [ 784.868137][T32558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7536'. [ 784.880374][T32558] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7536'. [ 784.917346][T32558] gretap1: entered promiscuous mode [ 784.932109][T32558] gretap1: entered allmulticast mode [ 785.330533][T32585] netlink: 'syz.4.7544': attribute type 18 has an invalid length. [ 785.351170][T32585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7544'. [ 785.484038][T32588] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7544'. [ 785.550965][T32596] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7550'. [ 785.576126][T32588] bond8 (unregistering): Released all slaves [ 785.609662][T32596] Bluetooth: hci0: unsupported parameter 512 [ 785.617400][T32596] Bluetooth: hci0: unsupported parameter 6278 [ 785.623599][T32596] Bluetooth: hci0: unsupported parameter 512 [ 785.630232][T32596] Bluetooth: hci0: unsupported parameter 6278 [ 786.349968][T32637] 1{X功: renamed from 30{X功 (while UP) [ 786.365114][T32637] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 786.604812][T32649] bond5 (unregistering): Released all slaves [ 787.337258][T32695] Cannot find set identified by id 0 to match [ 787.400906][T32701] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 787.571796][T32713] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 787.634605][T32717] netlink: 'syz.1.7584': attribute type 1 has an invalid length. [ 787.643386][T32717] netlink: 'syz.1.7584': attribute type 2 has an invalid length. [ 787.676333][ T5149] Bluetooth: hci1: command tx timeout [ 787.711111][T32719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 787.811018][T32723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 787.990663][T32730] tipc: Enabled bearer , priority 0 [ 787.999374][T32730] syzkaller0: entered promiscuous mode [ 788.004984][T32730] syzkaller0: entered allmulticast mode [ 788.077164][T32730] tipc: Resetting bearer [ 788.245434][T32728] tipc: Resetting bearer [ 788.291154][T32728] tipc: Disabling bearer [ 788.430136][T32746] Bluetooth: hci0: unsupported parameter 512 [ 788.456664][T32746] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 788.577058][T32763] 8021q: VLANs not supported on ip_vti0 [ 789.211557][ T329] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20000 [ 789.518924][ T351] netlink: 'syz.1.7612': attribute type 21 has an invalid length. [ 789.545967][ T351] __nla_validate_parse: 11 callbacks suppressed [ 789.545990][ T351] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7612'. [ 789.633394][ T351] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7612'. [ 789.775523][ T358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7616'. [ 789.777450][ T360] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7618'. [ 790.195059][ T386] tipc: New replicast peer: 255.255.255.255 [ 790.212504][ T390] netlink: get zone limit has 4 unknown bytes [ 790.213200][ T389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7627'. [ 790.226481][ T386] tipc: Enabled bearer , priority 10 [ 790.369749][ T393] netlink: 'syz.0.7628': attribute type 1 has an invalid length. [ 790.396266][T27021] Bluetooth: hci1: command 0x0406 tx timeout [ 790.663441][ T409] delete_channel: no stack [ 790.679458][ T409] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 790.884030][ T415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7637'. [ 790.934210][ T417] netlink: 'syz.1.7639': attribute type 10 has an invalid length. [ 790.981818][ T417] bridge_slave_1: left promiscuous mode [ 790.990551][ T417] bridge_slave_1: left allmulticast mode [ 791.024671][ T417] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 791.037746][ T416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 791.589574][ T452] netlink: 'syz.0.7649': attribute type 1 has an invalid length. [ 791.604421][ T452] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 791.629438][ T457] syzkaller0: entered promiscuous mode [ 791.647023][ T457] syzkaller0: entered allmulticast mode [ 791.762406][ T461] netlink: 13 bytes leftover after parsing attributes in process `syz.2.7651'. [ 792.052531][ T481] netlink: 'syz.1.7655': attribute type 10 has an invalid length. [ 792.080497][ T481] dummy0: entered promiscuous mode [ 792.100022][ T481] team0: Port device dummy0 added [ 792.162554][ T488] netlink: 'syz.2.7658': attribute type 1 has an invalid length. [ 792.196782][ T488] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7658'. [ 792.226623][ T494] netlink: 'syz.4.7659': attribute type 8 has an invalid length. [ 792.301128][ T497] netlink: 'syz.0.7657': attribute type 2 has an invalid length. [ 792.487098][ T505] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7657'. [ 792.716049][ T5149] Bluetooth: hci0: command tx timeout [ 792.730208][T22880] IPVS: starting estimator thread 0... [ 792.878398][ T520] IPVS: using max 24 ests per chain, 57600 per kthread [ 792.963264][ T526] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 793.206836][ T546] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7664'. [ 793.258253][ T546] vlan2: entered allmulticast mode [ 793.284457][ T546] erspan0: entered allmulticast mode [ 793.773021][ T571] netlink: 'syz.3.7675': attribute type 30 has an invalid length. [ 793.870383][ T571] bond5: option arp_missed_max: invalid value (0) [ 793.887507][ T571] bond5: option arp_missed_max: allowed values 1 - 255 [ 793.907481][ T571] bond5 (unregistering): Released all slaves [ 794.196645][ T551] lo speed is unknown, defaulting to 1000 [ 794.420000][ T562] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 794.700105][ T591] netlink: 'syz.3.7679': attribute type 1 has an invalid length. [ 794.868098][ T595] __nla_validate_parse: 6 callbacks suppressed [ 794.868120][ T595] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.7680'. [ 794.913741][ T601] ip6gre3: entered allmulticast mode [ 795.165530][ T610] tipc: Started in network mode [ 795.171399][ T610] tipc: Node identity 86b214052404, cluster identity 4711 [ 795.180591][ T610] tipc: Enabled bearer , priority 0 [ 795.194741][ T613] syzkaller0: entered promiscuous mode [ 795.203943][ T613] syzkaller0: entered allmulticast mode [ 795.239128][ T610] tipc: Resetting bearer [ 795.252878][ T609] tipc: Resetting bearer [ 795.307929][ T609] tipc: Disabling bearer [ 795.400169][ T622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7687'. [ 795.526577][ T624] netlink: 'syz.1.7689': attribute type 6 has an invalid length. [ 795.527174][ T627] netlink: 'syz.0.7688': attribute type 33 has an invalid length. [ 795.588818][ T627] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 795.610592][ T627] bond5 (unregistering): Released all slaves [ 795.708061][ T637] netlink: 'syz.4.7692': attribute type 1 has an invalid length. [ 795.948778][ T646] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7694'. [ 795.966650][ T649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 795.983780][ T650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 796.003806][ T646] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 796.049783][ T646] netlink: 'syz.3.7694': attribute type 83 has an invalid length. [ 796.268254][ T667] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7701'. [ 796.318249][ T667] sctp: [Deprecated]: syz.4.7701 (pid 667) Use of int in maxseg socket option. [ 796.318249][ T667] Use struct sctp_assoc_value instead [ 796.451964][ T679] netlink: 'syz.4.7701': attribute type 1 has an invalid length. [ 796.476521][ T679] netlink: 172 bytes leftover after parsing attributes in process `syz.4.7701'. [ 796.718297][ T699] x_tables: duplicate underflow at hook 3 [ 796.892710][ T707] veth0: entered promiscuous mode [ 796.900198][ T706] veth0: left promiscuous mode [ 796.911142][ T710] netlink: 'syz.0.7708': attribute type 83 has an invalid length. [ 796.944192][ T711] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7707'. [ 797.207129][ T735] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7716'. [ 797.294852][ T735] netlink: 248 bytes leftover after parsing attributes in process `syz.4.7716'. [ 797.310696][ T735] NCSI netlink: No device for ifindex 0 [ 797.463462][ T744] netlink: 576 bytes leftover after parsing attributes in process `syz.3.7718'. [ 797.648586][ T759] netlink: 'syz.2.7723': attribute type 2 has an invalid length. [ 797.698426][ T759] netlink: 'syz.2.7723': attribute type 83 has an invalid length. [ 797.791313][ T761] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004 [ 797.881373][ T761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7723'. [ 797.934497][ T771] netlink: 'syz.2.7723': attribute type 11 has an invalid length. [ 797.950871][ T771] netlink: 'syz.2.7723': attribute type 11 has an invalid length. [ 798.122392][ T779] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 798.240320][ T783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 799.714170][ T836] netlink: 'syz.3.7747': attribute type 1 has an invalid length. [ 799.745938][ T836] netlink: 'syz.3.7747': attribute type 1 has an invalid length. [ 799.858827][ T832] bond6 (unregistering): Released all slaves [ 800.300094][ T856] __nla_validate_parse: 4 callbacks suppressed [ 800.300117][ T856] netlink: 332 bytes leftover after parsing attributes in process `syz.4.7752'. [ 800.348365][ T858] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7753'. [ 800.360827][ T858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7753'. [ 800.449762][ T861] netlink: 5 bytes leftover after parsing attributes in process `syz.4.7754'. [ 800.449762][ T860] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7754'. [ 800.449928][ T861] 0{X功: renamed from gretap0 (while UP) [ 800.497852][ T861] 0{X功: entered allmulticast mode [ 800.503823][ T861] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 800.523078][ T860] 0{X功: entered promiscuous mode [ 800.528939][ T860] 0{X功: left allmulticast mode [ 800.562563][ T865] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7755'. [ 800.610880][ T863] IPv6: sit2: Disabled Multicast RS [ 800.618237][ T863] sit2: entered allmulticast mode [ 800.637723][ T5149] Bluetooth: hci4: command 0x0406 tx timeout [ 800.880171][ T873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 801.056870][ T879] netlink: 14436 bytes leftover after parsing attributes in process `syz.3.7763'. [ 801.073826][ T879] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 801.232178][ T891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 801.248911][ T43] lo speed is unknown, defaulting to 1000 [ 801.451180][ T902] bridge_slave_1: entered promiscuous mode [ 801.514438][ T905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7770'. [ 802.338736][ T929] vlan2: entered promiscuous mode [ 802.343849][ T929] bridge0: entered promiscuous mode [ 802.484055][ T941] netem: change failed [ 802.630314][ T956] netlink: 'syz.3.7781': attribute type 11 has an invalid length. [ 802.649080][ T956] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7781'. [ 802.672943][ T956] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 802.692945][ T956] netlink: 'syz.3.7781': attribute type 10 has an invalid length. [ 802.703653][ T956] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7781'. [ 802.714451][ T956] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 803.818658][ T1003] netlink: 'syz.0.7794': attribute type 16 has an invalid length. [ 803.902623][ T1006] netlink: 'syz.3.7795': attribute type 29 has an invalid length. [ 803.967964][ T1006] netlink: 'syz.3.7795': attribute type 29 has an invalid length. [ 804.151952][ T1009] batman_adv: batadv0: Adding interface: geneve4 [ 804.164057][ T1009] batman_adv: batadv0: Not using interface geneve4 (retrying later): interface not active [ 804.277504][ T1011] syzkaller0: entered promiscuous mode [ 804.284141][ T1011] syzkaller0: entered allmulticast mode [ 804.547273][ T1001] lo speed is unknown, defaulting to 1000 [ 804.628115][ T1026] xt_CT: You must specify a L4 protocol and not use inversions on it [ 805.269172][ T1058] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 805.680036][ T1081] netlink: 'syz.4.7817': attribute type 1 has an invalid length. [ 806.026685][ T1094] __nla_validate_parse: 7 callbacks suppressed [ 806.026708][ T1094] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7821'. [ 806.039805][ T1096] netlink: 'syz.2.7822': attribute type 4 has an invalid length. [ 806.070115][ T1094] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7821'. [ 806.601628][ T1134] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7830'. [ 806.648012][ T1137] tipc: Enabled bearer , priority 0 [ 806.660640][ T1137] syzkaller0: entered promiscuous mode [ 806.670956][ T1137] syzkaller0: entered allmulticast mode [ 806.687305][ T1138] netlink: 'syz.0.7832': attribute type 1 has an invalid length. [ 806.740759][ T1140] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7834'. [ 806.778376][ T1144] bond5: (slave bridge0): making interface the new active one [ 806.783426][ T1143] Bluetooth: hci0: invalid length 39, exp 2 for type 26 [ 806.794605][ T1144] bond5: (slave bridge0): Enslaving as an active interface with an up link [ 806.876938][ T1137] tipc: Resetting bearer [ 806.910331][ T1148] tipc: Enabling of bearer rejected, already enabled [ 806.938341][ T1147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7837'. [ 806.994694][ T1147] netlink: 'syz.0.7837': attribute type 1 has an invalid length. [ 807.012551][ T1147] netlink: 'syz.0.7837': attribute type 2 has an invalid length. [ 807.022721][ T1148] tipc: Resetting bearer [ 807.078008][ T1148] tipc: Disabling bearer [ 807.218567][ T1164] netlink: 'syz.1.7840': attribute type 10 has an invalid length. [ 807.517472][T27368] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 807.832449][ T1207] xt_ecn: cannot match TCP bits for non-tcp packets [ 807.864457][ T1207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7851'. [ 807.895983][ T1210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7851'. [ 808.050387][ T1214] netlink: 'syz.3.7854': attribute type 1 has an invalid length. [ 808.070003][ T1214] netlink: 'syz.3.7854': attribute type 16 has an invalid length. [ 808.105118][ T1214] netlink: 'syz.3.7854': attribute type 17 has an invalid length. [ 808.112139][ T1218] netlink: 19 bytes leftover after parsing attributes in process `syz.2.7856'. [ 808.145500][ T1214] lo: left promiscuous mode [ 808.285036][ T1214] bond0: left promiscuous mode [ 808.304645][ T1214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.321549][ T1214] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 808.409596][ T1221] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7855'. [ 808.517737][ T1241] netlink: 'syz.4.7858': attribute type 1 has an invalid length. [ 808.526672][ T1241] netlink: 236 bytes leftover after parsing attributes in process `syz.4.7858'. [ 808.616799][ T1244] batadv_slave_0: entered promiscuous mode [ 808.622815][ T1244] batadv_slave_0: entered allmulticast mode [ 808.689730][ T1247] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 808.780625][ T1247] vlan2: entered promiscuous mode [ 808.792094][ T1247] bridge0: entered promiscuous mode [ 808.879926][ T1261] team_slave_0: entered promiscuous mode [ 808.885726][ T1261] team_slave_1: entered promiscuous mode [ 808.938762][ T1261] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 810.208530][ T1338] SET target dimension over the limit! [ 810.652815][ T1369] bond6: Setting coupled_control to off (0) [ 810.966828][ T1396] validate_nla: 6 callbacks suppressed [ 810.966972][ T1396] netlink: 'syz.2.7900': attribute type 21 has an invalid length. [ 811.003367][ T1396] netlink: 'syz.2.7900': attribute type 22 has an invalid length. [ 811.021470][ T1396] netlink: 'syz.2.7900': attribute type 23 has an invalid length. [ 811.101662][ T1396] netlink: 'syz.2.7900': attribute type 25 has an invalid length. [ 811.130605][ T1396] netlink: 'syz.2.7900': attribute type 26 has an invalid length. [ 811.139654][ T1396] __nla_validate_parse: 6 callbacks suppressed [ 811.139675][ T1396] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7900'. [ 811.163734][ T1400] syzkaller0: entered promiscuous mode [ 811.170569][ T1400] syzkaller0: entered allmulticast mode [ 813.410943][ T1449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7918'. [ 813.574474][ T1449] bond6: option xmit_hash_policy: invalid value (64) [ 813.621258][ T1449] bond6 (unregistering): Released all slaves [ 813.675065][ T1466] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 813.896009][ T1468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7922'. [ 813.926736][ T1468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7922'. [ 814.483181][ T1504] netlink: 'syz.1.7932': attribute type 9 has an invalid length. [ 814.504788][ T1504] netlink: 'syz.1.7932': attribute type 7 has an invalid length. [ 814.519374][ T1506] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7936'. [ 814.546548][ T1504] netlink: 'syz.1.7932': attribute type 8 has an invalid length. [ 814.788646][ T1518] tipc: Enabled bearer , priority 0 [ 814.809947][ T1517] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7939'. [ 814.834175][ T1518] syzkaller0: entered promiscuous mode [ 814.896574][ T1518] syzkaller0: entered allmulticast mode [ 815.017201][ T1518] tipc: Resetting bearer [ 815.027206][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.035888][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.072031][ T1472] lo speed is unknown, defaulting to 1000 [ 815.082738][ T1515] tipc: Resetting bearer [ 815.133888][ T1515] tipc: Disabling bearer [ 815.149836][ T1535] netlink: 'syz.3.7943': attribute type 1 has an invalid length. [ 815.164454][ T1535] netlink: 140 bytes leftover after parsing attributes in process `syz.3.7943'. [ 815.186898][ T1535] netlink: 'syz.3.7943': attribute type 1 has an invalid length. [ 815.325173][ T1546] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 815.418490][ T1550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7947'. [ 815.489547][ T1550] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 815.504426][ T1550] netlink: 184 bytes leftover after parsing attributes in process `syz.1.7947'. [ 815.601918][ T1557] bridge4: entered promiscuous mode [ 815.631626][ T1557] bridge4: entered allmulticast mode [ 815.729772][ T1568] netlink: 1296 bytes leftover after parsing attributes in process `syz.2.7951'. [ 816.012826][ T1585] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 816.362870][ T1599] __nla_validate_parse: 1 callbacks suppressed [ 816.362891][ T1599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7962'. [ 816.664387][ T1613] tipc: Enabled bearer , priority 0 [ 816.801287][ T1613] syzkaller0: entered promiscuous mode [ 816.827210][ T1613] syzkaller0: entered allmulticast mode [ 816.834348][ T1613] tipc: Resetting bearer [ 816.952121][ T1613] netlink: 'syz.4.7965': attribute type 2 has an invalid length. [ 817.050574][ T1642] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 817.073850][ T1642] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 817.089582][ T1642] gretap2: entered promiscuous mode [ 817.095239][ T1642] gretap2: entered allmulticast mode [ 817.154906][ T1646] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7975'. [ 817.323938][ T1657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7977'. [ 817.523009][T17454] tipc: Resetting bearer [ 817.531904][ T1612] tipc: Resetting bearer [ 817.690786][ T9532] tipc: Node number set to 1841025410 [ 819.256455][ T1612] tipc: Disabling bearer [ 819.302685][ T1675] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 819.539130][ T1689] tipc: Enabling of bearer rejected, failed to enable media [ 819.661636][ T1698] netlink: 'syz.0.7991': attribute type 1 has an invalid length. [ 819.735549][ T1698] bond6: (slave geneve2): making interface the new active one [ 819.751786][ T1698] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 819.762854][ T6826] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 819.794801][ T6826] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 819.830581][ T6826] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 819.839895][ T6826] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 819.920016][ T1712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7996'. [ 820.025004][ T1714] netlink: 'syz.4.7997': attribute type 4 has an invalid length. [ 820.054911][ T1716] veth1_macvtap: left promiscuous mode [ 820.067035][ T1716] macsec0: entered promiscuous mode [ 820.082153][ T1716] macsec0: entered allmulticast mode [ 820.104112][ T1721] macsec0: left promiscuous mode [ 820.266388][ T1730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8003'. [ 820.527087][ T1737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8005'. [ 820.568045][ T1737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8005'. [ 820.608516][ T1737] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8005'. [ 820.623984][ T1746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8008'. [ 820.662826][ T1743] tipc: Enabled bearer , priority 0 [ 820.676793][ T1746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8008'. [ 820.710972][ T1743] syzkaller0: entered promiscuous mode [ 820.728588][ T1743] syzkaller0: entered allmulticast mode [ 820.812782][ T1755] netlink: 'syz.4.8010': attribute type 1 has an invalid length. [ 820.852247][ T1743] tipc: Resetting bearer [ 820.986661][ T1742] tipc: Resetting bearer [ 821.062055][ T1742] tipc: Disabling bearer [ 821.091954][ T1769] netlink: 'syz.4.8014': attribute type 4 has an invalid length. [ 821.250603][ T1781] veth0: entered promiscuous mode [ 821.267770][ T1775] veth0: left promiscuous mode [ 821.468378][ T1796] veth2: entered promiscuous mode [ 821.485935][ T1796] veth2: entered allmulticast mode [ 821.574903][ T1810] __nla_validate_parse: 5 callbacks suppressed [ 821.574926][ T1810] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8027'. [ 821.652772][ T1810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8027'. [ 821.697923][ T1810] xfrm1: entered promiscuous mode [ 821.712837][ T1811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8027'. [ 821.733458][ T1810] xfrm1: entered allmulticast mode [ 821.861564][ T1816] IPv6: sit1: Disabled Multicast RS [ 821.869853][ T1816] sit1: entered allmulticast mode [ 822.147416][ T1848] netlink: 196 bytes leftover after parsing attributes in process `syz.0.8039'. [ 822.161164][ T1848] netlink: 196 bytes leftover after parsing attributes in process `syz.0.8039'. [ 822.163084][ T1849] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 822.181388][ T1848] netlink: 19 bytes leftover after parsing attributes in process `syz.0.8039'. [ 822.249635][ T1848] netlink: 'syz.0.8039': attribute type 10 has an invalid length. [ 822.333245][ T1861] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8041'. [ 822.365378][ T1848] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 822.416455][ T1848] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 822.469749][ T9530] lo speed is unknown, defaulting to 1000 [ 822.479299][ T9530] syz2: Port: 1 Link DOWN [ 822.731507][ T1882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8046'. [ 822.756068][ T1879] tipc: Enabling of bearer rejected, failed to enable media [ 822.797938][ T1886] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8047'. [ 822.823870][ T1886] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8047'. [ 822.914827][ T1891] !: renamed from bond_slave_0 [ 823.017490][ T1903] tunl0: entered promiscuous mode [ 823.049113][ T1903] netlink: 'syz.4.8053': attribute type 3 has an invalid length. [ 823.183802][ T1909] netlink: 'syz.0.8055': attribute type 1 has an invalid length. [ 823.334111][ T1907] macvlan3: entered promiscuous mode [ 823.361219][ T1907] macvlan3: entered allmulticast mode [ 823.402744][ T1907] bond7: entered promiscuous mode [ 823.431840][ T1907] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 823.563112][ T1907] bond7: left promiscuous mode [ 823.591803][ T30] audit: type=1107 audit(1760646348.525:11): pid=1924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='冻AZ鍱x迷磜豤Q鑔猀$綢Kt~俒尹O狫黔腴&/ ' [ 824.034105][ T1942] netlink: 'syz.1.8060': attribute type 11 has an invalid length. [ 824.058837][ T1942] netlink: 'syz.1.8060': attribute type 5 has an invalid length. [ 824.527360][ T1964] tipc: Enabled bearer , priority 0 [ 824.573503][ T1964] tipc: Resetting bearer [ 824.729813][ T1964] tipc: Disabling bearer [ 826.213744][ T2073] delete_channel: no stack [ 826.284434][ T2077] netlink: 'syz.3.8097': attribute type 3 has an invalid length. [ 826.390026][ T2077] sctp: [Deprecated]: syz.3.8097 (pid 2077) Use of struct sctp_assoc_value in delayed_ack socket option. [ 826.390026][ T2077] Use struct sctp_sack_info instead [ 826.753314][ T2105] __nla_validate_parse: 11 callbacks suppressed [ 826.753336][ T2105] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8103'. [ 826.887642][ T2109] netlink: 'syz.1.8104': attribute type 11 has an invalid length. [ 826.903135][ T2109] netlink: 'syz.1.8104': attribute type 11 has an invalid length. [ 826.936330][ T2109] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8104'. [ 826.952112][ T2117] syzkaller0: entered promiscuous mode [ 826.958538][ T2117] syzkaller0: entered allmulticast mode [ 827.666386][ T2141] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8113'. [ 828.003253][ T2154] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8117'. [ 828.288242][ T2166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8124'. [ 828.477469][ T2177] tipc: Enabled bearer , priority 0 [ 828.497106][ T2168] syzkaller0: entered promiscuous mode [ 828.502765][ T2168] syzkaller0: entered allmulticast mode [ 828.550735][ T2168] tipc: Resetting bearer [ 828.576289][ T2167] tipc: Resetting bearer [ 828.682338][ T2167] tipc: Disabling bearer [ 828.903410][ T2188] netlink: 'syz.0.8130': attribute type 10 has an invalid length. [ 828.960122][ T2188] team0: Device veth1_macvtap failed to register rx_handler [ 829.103654][ T2199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8134'. [ 829.313355][ T2209] syzkaller0: entered promiscuous mode [ 829.320697][ T2209] syzkaller0: entered allmulticast mode [ 829.561551][ T2222] digital: digital_start_poll: Unknown protocol [ 829.571726][ T2222] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8143'. [ 829.635169][ T2221] netlink: 'syz.3.8142': attribute type 2 has an invalid length. [ 829.648364][ T2221] tipc: Enabled bearer , priority 10 [ 829.774070][ T2235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8146'. [ 829.818691][ T2235] vlan2: entered allmulticast mode [ 829.824394][ T2235] bridge0: entered allmulticast mode [ 829.831152][ T2235] bridge5: port 1(vlan2) entered blocking state [ 829.844006][ T2235] bridge5: port 1(vlan2) entered disabled state [ 829.858815][ T2235] vlan2: entered promiscuous mode [ 829.983545][ T2244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8149'. [ 830.307118][ T2263] netlink: 'syz.4.8154': attribute type 1 has an invalid length. [ 830.480596][ T2270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8154'. [ 830.765937][T22898] tipc: Node number set to 2729841669 [ 832.248824][ T2284] __nla_validate_parse: 1 callbacks suppressed [ 832.248844][ T2284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8159'. [ 832.258447][ T2263] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 832.342479][ T2265] bond8: (slave veth61): Enslaving as a backup interface with a down link [ 832.394135][ T2270] macvtap1: entered promiscuous mode [ 832.400605][ T2270] vlan0: entered promiscuous mode [ 832.408182][ T2270] macvtap1: entered allmulticast mode [ 832.413621][ T2270] vlan0: entered allmulticast mode [ 832.419573][ T2270] veth0_vlan: entered allmulticast mode [ 832.602858][ T2293] IPv6: sit1: Disabled Multicast RS [ 832.617920][ T2293] sit1: entered allmulticast mode [ 833.005105][ T2308] syzkaller0: entered promiscuous mode [ 833.021730][ T2308] syzkaller0: entered allmulticast mode [ 833.061097][ T2323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8170'. [ 833.160393][ T2330] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8173'. [ 835.024068][ T2356] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8178'. [ 835.110252][ T2354] netlink: zone id is out of range [ 835.115436][ T2354] netlink: zone id is out of range [ 835.137977][ T2354] netlink: zone id is out of range [ 835.331493][ T2373] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8182'. [ 835.369395][ T2372] 8021q: adding VLAN 0 to HW filter on device ipvlan5 [ 835.505158][ T2380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8185'. [ 835.530079][ T2380] netlink: 'syz.4.8185': attribute type 5 has an invalid length. [ 835.566329][ T2380] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8185'. [ 835.582856][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804f809c00: rx timeout, send abort [ 835.622430][ T2380] geneve2: entered promiscuous mode [ 835.628109][ T2380] geneve2: entered allmulticast mode [ 835.637532][ T6831] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 835.647944][ T6831] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 835.664129][ T6831] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 835.680153][ T6831] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 835.795519][ T2388] veth1_macvtap: left promiscuous mode [ 835.805366][ T2388] macsec0: entered promiscuous mode [ 835.811998][ T2388] macsec0: entered allmulticast mode [ 835.866269][ T2388] veth1_macvtap: entered promiscuous mode [ 835.872064][ T2388] veth1_macvtap: entered allmulticast mode [ 835.896185][ T2388] macsec0: left promiscuous mode [ 835.909495][ T2388] macsec0: left allmulticast mode [ 835.924831][ T2388] veth1_macvtap: left allmulticast mode [ 836.083007][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804f808400: rx timeout, send abort [ 836.091746][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804f809c00: abort rx timeout. Force session deactivation [ 836.413911][ T2437] netlink: 192 bytes leftover after parsing attributes in process `syz.0.8196'. [ 836.444215][ T2433] xt_CONNSECMARK: invalid mode: 0 [ 836.511064][ T2433] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8198'. [ 836.570729][ T2449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8201'. [ 836.591310][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804f808400: abort rx timeout. Force session deactivation [ 837.212407][ T2490] netlink: 'syz.0.8213': attribute type 178 has an invalid length. [ 837.238197][ T2491] netlink: 'syz.1.8214': attribute type 1 has an invalid length. [ 837.373334][ T2491] bond4: entered promiscuous mode [ 837.387106][ T2491] 8021q: adding VLAN 0 to HW filter on device bond4 [ 837.411135][ T2503] xt_ecn: cannot match TCP bits for non-tcp packets [ 837.442691][ T2504] bond4: (slave bridge7): making interface the new active one [ 837.455485][ T2504] bridge7: entered promiscuous mode [ 837.517852][ T2504] bond4: (slave bridge7): Enslaving as an active interface with an up link [ 837.771082][ T2521] netlink: 'syz.4.8222': attribute type 10 has an invalid length. [ 837.801841][ T2521] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8222'. [ 837.847435][ T2521] dummy0: entered promiscuous mode [ 837.858015][ T2521] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 837.877128][ T2530] tc_dump_action: action bad kind [ 838.108100][ T2548] tipc: Enabling of bearer rejected, failed to enable media [ 838.222383][ T2560] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 838.533331][ T2571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8233'. [ 838.554248][ T2571] netlink: 348 bytes leftover after parsing attributes in process `syz.3.8233'. [ 839.239576][ T2613] syzkaller0: entered promiscuous mode [ 839.245119][ T2613] syzkaller0: entered allmulticast mode [ 839.268369][ T2618] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 839.302325][ T2631] team_slave_0: left promiscuous mode [ 839.317133][ T2631] team_slave_1: left promiscuous mode [ 839.601048][ T2646] netlink: 'syz.3.8251': attribute type 2 has an invalid length. [ 839.633923][ T2646] netlink: 'syz.3.8251': attribute type 1 has an invalid length. [ 839.748093][ T2660] xt_HMARK: spi-set and port-set can't be combined [ 839.764661][ T2658] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8254'. [ 839.798721][ T2658] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8254'. [ 839.819108][ T2658] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8254'. [ 839.856591][ T2664] netlink: 'syz.3.8258': attribute type 3 has an invalid length. [ 839.865037][ T2664] netlink: 'syz.3.8258': attribute type 9 has an invalid length. [ 839.979932][ T2677] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8261'. [ 840.012838][ T2678] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8262'. [ 840.048943][ T2680] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 840.157503][ T6826] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 840.182339][ T2694] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 840.780315][ T2737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8272'. [ 840.796830][ T31] INFO: task kworker/u8:56:23535 blocked for more than 143 seconds. [ 840.815133][ T31] Not tainted syzkaller #0 [ 840.825248][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 840.851132][ T31] task:kworker/u8:56 state:D stack:24200 pid:23535 tgid:23535 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 840.864660][ T31] Workqueue: netns cleanup_net [ 840.877068][ T2741] netlink: 'syz.3.8274': attribute type 4 has an invalid length. [ 840.885010][ T31] Call Trace: [ 840.893911][ T31] [ 840.897555][ T2737] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 840.913286][ T31] __schedule+0x1798/0x4cc0 [ 840.918553][ T31] ? do_raw_spin_lock+0x121/0x290 [ 840.923750][ T31] ? __lock_acquire+0xab9/0xd20 [ 840.929731][ T2744] netlink: 'syz.3.8274': attribute type 4 has an invalid length. [ 840.938716][ T31] ? __pfx___schedule+0x10/0x10 [ 840.943642][ T31] ? schedule+0x91/0x360 [ 840.948630][ T31] schedule+0x165/0x360 [ 840.952848][ T31] rxrpc_destroy_all_calls+0x55e/0x660 [ 840.959561][ T31] ? __pfx_rxrpc_destroy_all_calls+0x10/0x10 [ 840.966685][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 840.972216][ T31] ? rxrpc_net+0x23/0x240 [ 840.978096][ T31] rxrpc_exit_net+0x6f/0xc0 [ 840.982902][ T31] ops_undo_list+0x497/0x990 [ 840.988668][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 840.993837][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 840.999348][ T31] cleanup_net+0x4d8/0x820 [ 841.003820][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 841.009130][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 841.014350][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 841.021206][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 841.027691][ T31] process_scheduled_works+0xae1/0x17b0 [ 841.033420][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 841.034250][ T2747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 841.039553][ T31] worker_thread+0x8a0/0xda0 [ 841.039628][ T31] kthread+0x711/0x8a0 [ 841.039664][ T31] ? __pfx_worker_thread+0x10/0x10 [ 841.039690][ T31] ? __pfx_kthread+0x10/0x10 [ 841.039722][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 841.039749][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 841.039775][ T31] ? __pfx_kthread+0x10/0x10 [ 841.039809][ T31] ret_from_fork+0x4bc/0x870 [ 841.039839][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 841.039871][ T31] ? __switch_to_asm+0x39/0x70 [ 841.039900][ T31] ? __switch_to_asm+0x33/0x70 [ 841.039926][ T31] ? __pfx_kthread+0x10/0x10 [ 841.039961][ T31] ret_from_fork_asm+0x1a/0x30 [ 841.040010][ T31] [ 841.040177][ T31] [ 841.040177][ T31] Showing all locks held in the system: [ 841.040192][ T31] 1 lock held by rcu_tasks_trace/29: [ 841.040208][ T31] #0: ffffffff8e13e050 [ 841.122674][ T2747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 841.141139][ T31] (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xaf9/0xdf0 [ 841.162644][ T31] 1 lock held by khungtaskd/31: [ 841.168367][ T31] #0: ffffffff8e13d320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 841.178808][ T31] 2 locks held by getty/5587: [ 841.183517][ T31] #0: ffff8880335bd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 841.193867][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 841.198644][ T2747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 841.204830][ T31] 3 locks held by kworker/u8:56/23535: [ 841.221241][ T31] #0: ffff88801aa9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 841.232942][ T31] #1: ffffc9000bbafba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 841.243739][ T31] #2: ffffffff8f4d2bb0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 841.253930][ T31] 2 locks held by syz.3.8274/2741: [ 841.259592][ T31] #0: ffffffff8f4dfa48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_setlink+0x4f2/0x910 [ 841.269800][ T31] #1: ffffffff8e142db8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 841.281638][ T31] 1 lock held by syz.3.8274/2744: [ 841.287457][ T31] #0: ffffffff8f4dfa48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_setlink+0x4f2/0x910 [ 841.296806][ T31] 2 locks held by syz.4.8275/2743: [ 841.301951][ T31] #0: ffffffff8f5456d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 841.310520][ T31] #1: ffffffff8f4dfa48 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 841.320493][ T31] 2 locks held by syz.4.8275/2745: [ 841.326415][ T31] #0: ffffffff8f5456d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 841.334743][ T31] #1: ffffffff8f4dfa48 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 841.344695][ T31] [ 841.347811][ T31] ============================================= [ 841.347811][ T31] [ 841.357239][ T31] NMI backtrace for cpu 0 [ 841.357261][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 841.357285][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 841.357297][ T31] Call Trace: [ 841.357305][ T31] [ 841.357313][ T31] dump_stack_lvl+0x189/0x250 [ 841.357343][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 841.357365][ T31] ? __pfx__printk+0x10/0x10 [ 841.357402][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 841.357440][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 841.357478][ T31] ? __pfx__printk+0x10/0x10 [ 841.357505][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 841.357545][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 841.357584][ T31] watchdog+0xf60/0xfa0 [ 841.357612][ T31] ? watchdog+0x1e2/0xfa0 [ 841.357642][ T31] kthread+0x711/0x8a0 [ 841.357677][ T31] ? __pfx_watchdog+0x10/0x10 [ 841.357698][ T31] ? __pfx_kthread+0x10/0x10 [ 841.357731][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 841.357755][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 841.357781][ T31] ? __pfx_kthread+0x10/0x10 [ 841.357811][ T31] ret_from_fork+0x4bc/0x870 [ 841.357845][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 841.357877][ T31] ? __switch_to_asm+0x39/0x70 [ 841.357902][ T31] ? __switch_to_asm+0x33/0x70 [ 841.357927][ T31] ? __pfx_kthread+0x10/0x10 [ 841.357958][ T31] ret_from_fork_asm+0x1a/0x30 [ 841.358004][ T31] [ 841.358013][ T31] Sending NMI from CPU 0 to CPUs 1: [ 841.513505][ C1] NMI backtrace for cpu 1 [ 841.513525][ C1] CPU: 1 UID: 0 PID: 5816 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 841.513547][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 841.513561][ C1] RIP: 0010:dequeue_entities+0x20d4/0x30b0 [ 841.513590][ C1] Code: 89 f7 e8 4f cc 91 00 e9 34 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 49 ff ff ff 4c 89 f7 e8 31 cc 91 00 e9 3c ff ff ff <4c> 89 ff 4c 8b 6c 24 10 4c 89 ee 31 d2 e8 ca 53 01 00 49 8d 7d 51 [ 841.513608][ C1] RSP: 0018:ffffc900040bf850 EFLAGS: 00000093 [ 841.513626][ C1] RAX: 1ffff110170e7426 RBX: ffff8880b873a130 RCX: dffffc0000000000 [ 841.513640][ C1] RDX: 1ffff110170e7550 RSI: dffffc0000000000 RDI: ffff8880b873a120 [ 841.513655][ C1] RBP: 0000000000000400 R08: ffffffff8f9e1277 R09: 1ffffffff1f3c24e [ 841.513670][ C1] R10: dffffc0000000000 R11: fffffbfff1f3c24f R12: dffffc0000000000 [ 841.513685][ C1] R13: 00000000017fb800 R14: 0000000000000009 R15: ffff8880b873a100 [ 841.513698][ C1] FS: 000055558b923500(0000) GS:ffff888125e0f000(0000) knlGS:0000000000000000 [ 841.513715][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 841.513728][ C1] CR2: 00007f34859b12f8 CR3: 000000006d816000 CR4: 00000000003526f0 [ 841.513745][ C1] Call Trace: [ 841.513755][ C1] [ 841.513775][ C1] ? do_raw_spin_lock+0x121/0x290 [ 841.513804][ C1] ? rcu_is_watching+0x15/0xb0 [ 841.513831][ C1] dequeue_task_fair+0x20e/0x790 [ 841.513859][ C1] __schedule+0x5f1/0x4cc0 [ 841.513888][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 841.513918][ C1] ? __lock_acquire+0xab9/0xd20 [ 841.513937][ C1] ? __pfx___schedule+0x10/0x10 [ 841.513967][ C1] ? schedule+0x91/0x360 [ 841.513989][ C1] schedule+0x165/0x360 [ 841.514010][ C1] do_nanosleep+0x1c5/0x610 [ 841.514030][ C1] ? do_nanosleep+0x7f/0x610 [ 841.514048][ C1] ? __pfx_do_nanosleep+0x10/0x10 [ 841.514068][ C1] ? __hrtimer_setup+0x187/0x210 [ 841.514086][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 841.514110][ C1] hrtimer_nanosleep+0x169/0x360 [ 841.514132][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 841.514154][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 841.514177][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 841.514202][ C1] __se_sys_clock_nanosleep+0x336/0x390 [ 841.514224][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 841.514246][ C1] ? do_syscall_64+0xbe/0xfa0 [ 841.514272][ C1] do_syscall_64+0xfa/0xfa0 [ 841.514294][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.514313][ C1] ? asm_common_interrupt+0x26/0x40 [ 841.514330][ C1] ? clear_bhb_loop+0x60/0xb0 [ 841.514351][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.514370][ C1] RIP: 0033:0x7fdb519c1743 [ 841.514385][ C1] Code: 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 1e 6e 1f 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 841.514401][ C1] RSP: 002b:00007ffff719bd78 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 841.514424][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdb519c1743 [ 841.514437][ C1] RDX: 00007ffff719bd90 RSI: 0000000000000000 RDI: 0000000000000000 [ 841.514449][ C1] RBP: 0000000000000000 R08: 7fffffffffffffff R09: 3fffffffffffffff [ 841.514463][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffff719c1e0 [ 841.514475][ C1] R13: 0000000000000004 R14: 00007ffff719bdcc R15: 00007ffff719be60 [ 841.514499][ C1] [ 841.858775][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 841.865693][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 841.874842][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 841.884928][ T31] Call Trace: [ 841.888228][ T31] [ 841.891170][ T31] dump_stack_lvl+0x99/0x250 [ 841.895895][ T31] ? __asan_memcpy+0x40/0x70 [ 841.900499][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 841.905708][ T31] ? __pfx__printk+0x10/0x10 [ 841.910332][ T31] vpanic+0x237/0x6d0 [ 841.914329][ T31] ? __pfx_vpanic+0x10/0x10 [ 841.918856][ T31] ? preempt_schedule_common+0x83/0xd0 [ 841.924343][ T31] panic+0xb9/0xc0 [ 841.928108][ T31] ? __pfx_panic+0x10/0x10 [ 841.932544][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 841.937938][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 841.944114][ T31] watchdog+0xf9f/0xfa0 [ 841.948281][ T31] ? watchdog+0x1e2/0xfa0 [ 841.952624][ T31] kthread+0x711/0x8a0 [ 841.956711][ T31] ? __pfx_watchdog+0x10/0x10 [ 841.961395][ T31] ? __pfx_kthread+0x10/0x10 [ 841.966014][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 841.971234][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 841.976445][ T31] ? __pfx_kthread+0x10/0x10 [ 841.981055][ T31] ret_from_fork+0x4bc/0x870 [ 841.985662][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 841.990801][ T31] ? __switch_to_asm+0x39/0x70 [ 841.995582][ T31] ? __switch_to_asm+0x33/0x70 [ 842.000358][ T31] ? __pfx_kthread+0x10/0x10 [ 842.004967][ T31] ret_from_fork_asm+0x1a/0x30 [ 842.009757][ T31] [ 842.013104][ T31] Kernel Offset: disabled [ 842.017429][ T31] Rebooting in 86400 seconds..