last executing test programs: 2.338560331s ago: executing program 0 (id=7562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) (async) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x10000, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x2, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x4, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x20000004, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x6633, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket(0x11, 0x800000003, 0x0) (async) r12 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000600)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r13, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x2, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}]}}]}, 0x94}, 0x1, 0x7a00}, 0x0) (async) sendmsg$nl_route_sched(r14, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r13, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x2, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}]}}]}, 0x94}, 0x1, 0x7a00}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880) 2.185830434s ago: executing program 0 (id=7567): getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x2cb}, 0x0) r0 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) ioctl$sock_netdev_private(r1, 0x89fd, &(0x7f0000000040)="5e021ce4e8a7338d626e458c7d115df4cb1981a166cc51e877ea81db4547eb0a73a152ecfd908c48495f96bd13f7983cc031cd28645eabc5f692dfe158b4c779f1ef330bf940e71c6c20e5978b05a51bdd201d05f46cb93c792548fc4e80e2e1d20df45fcc773910d22d8ae84529c0f8a94a4e73afff82a9c74a8663390d7915c98ce0cf4cf5ddc7dc088ffd98779d920b980a4cb41170cf3e14ffd7c7cc474c8a67b135fd1de3bb4da3c84af4534876c207b4bb36f98d1b18df503af6c2e652b1d23c49388985a4527c818da626") 2.068035507s ago: executing program 0 (id=7570): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0xfffe, 0x41aa, 0x6, 0x0, 0x8, 0x90, 0x8}, 0xc) bind$bt_l2cap(r0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000300)="24743521dcbed3f12372495319a955f8c0986fd2654fac7effd4a92dc4bc98fc9431c55793f5fa1b6c6e1944367b6190fddf70cb8cc49ba5e994e28d2ebbbf4ef342bb23d79e035ff253c18a0af2267c0127f6", 0x53}], 0x1, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x80000001}}, @ip_retopts={{0xc8, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0xbb, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe}, {@multicast1, 0x35}, {@loopback, 0xf}, {@loopback, 0x6}, {@empty}]}, @timestamp_addr={0x44, 0xc, 0x64, 0x1, 0x8, [{@remote, 0x6}]}, @timestamp={0x44, 0x28, 0x13, 0x0, 0x0, [0x8, 0x3, 0xd9, 0x8, 0x9, 0x3841254a, 0xfffffff7, 0xdb, 0x9]}, @lsrr={0x83, 0x13, 0xee, [@private=0x7, @remote, @broadcast, @private=0xa010102]}, @lsrr={0x83, 0x1f, 0xf4, [@rand_addr=0x64010102, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x34}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast]}, @generic={0x94, 0x12, "c40139c06efdb91a3370d465a0da618c"}, @timestamp_addr={0x44, 0x4, 0xb4, 0x1, 0x6}, @end, @rr={0x7, 0xb, 0xa2, [@broadcast, @remote]}, @noop]}}}], 0xe0}, 0x90) 1.947896492s ago: executing program 0 (id=7574): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r0, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x24, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x208802, 0x0) close(r9) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r11) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x38, r13, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x81, 0x9, 0x2, 0x11, 0x3, 0x9]}}]}]}]}, 0x38}}, 0x0) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r4) sendmsg$DEVLINK_CMD_PORT_SET(r11, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x9c, r14, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8051}, 0x20004000) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x64, r10, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x4, 0x3c}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "e24a2e2300e54ca7adbdf4ee043695b9"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x58}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x6}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0xb}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback, 0x10, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.300072221s ago: executing program 3 (id=7586): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000080)='mptcp_pm\x00', 0x20000, &(0x7f00000000c0)={@align=0x6, {0xb, 0x7ff, 0x4, 0x4}}, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0xb97d}) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d", @ANYRESDEC], 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x2000800) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xdc, r1, 0x0, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0xc0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf910}}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000404}, 0x4004) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 1.137153844s ago: executing program 3 (id=7587): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x403, 0x278bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90606}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000500)={&(0x7f0000000340), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r7, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x22}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000854) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f91124fc60100c03", 0x17}], 0x1}, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r9, 0x8b32, &(0x7f0000000040)) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0xffffffffffffffe5, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="01000040000701feffaffd00000000017c0000040042800c00018006000600800a0000340177262e0114800800188417037fb19735b8d5b2b316f667f56389fc756b1e973d87045cf6e8cd5af52359ddb868c182fc7feee491a657ceb7c5e9e82a5717c9dfca45cd5899d499ce25480bef1d342c49c09a2d6e004326bc1fa70634ff086ff30c927b115f8fd28ce89cd33ac96e6e73f40b9a02e3ab37649e4b1c58b55efbf38dcfbaaa2189359ee2b9252d194c"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1.100928056s ago: executing program 0 (id=7588): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c40)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2b, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8001}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x8001, 0x0, 0x9}, "1ba1"}}]}]}]}}]}, 0x54}}, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)={0x1c, 0x2c, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="1716c2e9"]}]}, 0x1c}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r4], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3264}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 1.005601888s ago: executing program 4 (id=7590): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000040)={0x498, 0x13, 0x800, 0x70bd2a, 0x25dfdbff, {0x33, 0x1, 0x6, 0xae, {0x2, 0x4e22, [0x8cb, 0x9, 0x6, 0x7], [0x9, 0x1, 0x8, 0x5], 0x0, [0x6, 0xfffffffa]}, 0x6, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "26279a2396956d3ae7eb1a1632f97bcdd847f664970783d6795d3cadfe7f5d402a2a8ba4e49f4271eca052820d76a553db2dc6657f48a9df3a4a1258f7674e5eed646b70d35dfc6c113fed12b3e11a068e0c047bf636ace15a0294e9fab64220b48116a770f837"}, @INET_DIAG_REQ_BYTECODE={0xe6, 0x1, "6e4f4ac7419c8d5bd18016cd5a37b585fcd9fd83dfba9ff4303c8ae28fd2fcbd68d26ccc05d8ad5c4c380c79e3d05f1a3f0fc33ae78235530afa4c5dc63613c575e1162472a0d10153a59edf267649cfc09d38681bdbc0b4deef985644526f341677f625050e7e509a6b598eebb5c82547be74a71254d723391137a0d5ffac2fce0116eb468268708c822fd671929179602d73b5b6d7fdd384cd02e555a79d194fee2493a877ff41d1d8a598261b83975be103e8fd648ac2c1a3ebf5d28df1940ad3d1db889dc8ed88ec8d763c62f8c61f7c89e35cebba0ec75110873d7cbaa76219"}, @INET_DIAG_REQ_BYTECODE={0xd7, 0x1, "f666ee8015ee6d6e6255cb43fed90d06585647bb205ae6bab3f83ea2cbc1e4be39c0784291b5d0fc496af8f6e41bd796de4e7332b2d434f86ccf9aef639b0bda6a91df656a12c70d985bc715cae3f295f0971efc7ab0a36fda2899920384e2212316dfa06c4b1f6801e6b99bace583660fa609d0dbff64ba5cfb15988ba757b7a6f9369377c8a629f0ff9d3daa202f88ae2db0d99f6f6e3763b1e4f863f5fb651eb35dbf4e46998f4c2f8324f1498cf0f0b53e91017141336cb7117b26b2de33cc5a5a701346ba41efef0f113c12df9d311536"}, @INET_DIAG_REQ_BYTECODE={0xa8, 0x1, "ff978b1d0889fc6b2480fcbacc760b2574b4d99a2f04f4960e19f022daa26290159ecc1a4fcd25e2c5f986ed6cd686f4c93fa4f63b63e741304dda9b2c2067e92f2e13396270158a2fcfa5f7ce586517f322682d70a68401aaad199514c246a29c4525bc4a9a2040bd89be440bcc9c47cbbcff5bd46f68d6d7a31f537dc6a9279fe9d41946da2941d2f2209164ab59b2fbdc1ba8aaf5db58f9b2d45f732d8db84baefa37"}, @INET_DIAG_REQ_BYTECODE={0x77, 0x1, "6308908461935a7ef4532b9b88f331dbc56574850ffc5ccca316587d7bc0baa693a9fe8aae4627ebcb7a9949065f6b1024f5620b0e706354f6c4c34be0968e9465084a4002d1a4202c57e667bd2264b09fc2837ad1b8e6151420bb627a088ba421de375d8f5f19a6aadff42cc20da3c456fb66"}, @INET_DIAG_REQ_BYTECODE={0xff, 0x1, "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"}]}, 0x498}, 0x1, 0x0, 0x0, 0x4000040}, 0x2000844) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x6c5c0000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x400901, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x4, 0x3, 0x6d, @mcast1, @local, 0x780, 0x8, 0x8, 0xfff}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'ip6_vti0\x00', 0x0, 0x29, 0x31, 0xe4, 0x2, 0x53, @mcast1, @private0, 0x8000, 0x7800, 0x4, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000007c0)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'ip_vti0\x00', 0x0, 0x710, 0x1, 0xffffff05, 0x5, {{0x2d, 0x4, 0x2, 0x1c, 0xb4, 0x66, 0x0, 0x2, 0x29, 0x0, @empty, @remote, {[@ssrr={0x89, 0x1f, 0xa3, [@loopback, @dev={0xac, 0x14, 0x14, 0x44}, @empty, @loopback, @local, @broadcast, @multicast2]}, @cipso={0x86, 0x1e, 0x2, [{0x0, 0xa, "e117110810c7e1d7"}, {0x0, 0xb, "04dbdc76904fed8a2f"}, {0x1, 0x3, ';'}]}, @cipso={0x86, 0x40, 0x2, [{0x5, 0x12, "7f9f03a82dbe68610a64cc1005e08cfb"}, {0x7, 0x6, "f685509d"}, {0x7, 0x5, 'q9\v'}, {0x2, 0x6, "84fb04d3"}, {0x1, 0x9, "5b2ed4841f01a4"}, {0x7, 0xe, "e454fb4f9edba26d6dc9735b"}]}, @generic={0x89, 0x6, "117527d8"}, @ssrr={0x89, 0x1b, 0x73, [@loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @private=0xa010100, @rand_addr=0x64010100]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000980)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000c00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x9002}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x11c, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_PAUSE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xde909ad34ab888ee}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x21deab7d672a10af}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) syz_emit_ethernet(0x1e, &(0x7f0000000c40)={@multicast, @local, @void, {@can={0xc, {{0x0, 0x1, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "d53905d94646905a"}}}}, &(0x7f0000000c80)={0x1, 0x2, [0x5e5, 0x1d, 0x2ca, 0x89e]}) r10 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r10, 0x119, 0x1, &(0x7f0000000cc0)=0x3, 0x4) preadv(r0, &(0x7f00000010c0)=[{&(0x7f0000000d00)=""/167, 0xa7}, {&(0x7f0000000dc0)=""/37, 0x25}, {&(0x7f0000000e00)=""/72, 0x48}, {&(0x7f0000000e80)=""/106, 0x6a}, {&(0x7f0000000f00)=""/213, 0xd5}, {&(0x7f0000001000)=""/147, 0x93}], 0x6, 0xfff, 0x7ff) r11 = socket$nl_generic(0x10, 0x3, 0x10) write$tun(r1, &(0x7f0000001140)={@val={0x0, 0x15}, @void, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x14, 0x6e, 0x64, 0x7ff, 0x8d, 0x1, 0x0, @multicast1, @local, {[@ra={0x94, 0x4}]}}, @parameter_prob={0xc, 0x0, 0x0, 0xe, 0x0, 0x0, {0x12, 0x4, 0x1, 0x9, 0x0, 0x65, 0x6c, 0x4, 0x29, 0xd, @dev={0xac, 0x14, 0x14, 0x3f}, @empty, {[@rr={0x7, 0x23, 0x36, [@broadcast, @dev={0xac, 0x14, 0x14, 0x1b}, @broadcast, @empty, @empty, @loopback, @private=0xa010101, @rand_addr=0x64010102]}, @noop, @lsrr={0x83, 0x7, 0x88, [@broadcast]}, @ra={0x94, 0x4}, @noop, @ra={0x94, 0x4, 0x1}]}}, "8740d17a380a"}}}, 0x72) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x30, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x20}, [@typed={0x8, 0xcb, 0x0, 0x0, @fd=r10}, @typed={0x14, 0x17, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000801}, 0x4041) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000012c0)={'tunl0\x00'}) syz_emit_ethernet(0x7a, &(0x7f0000001300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val={0x88a8, 0x0, 0x1, 0x2}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x14, 0x4, 0x1, 0x27, 0x64, 0x66, 0xfffc, 0x6, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x3c, 0x1, [{0x0, 0x7, "2d35bbc871"}, {0x5, 0x8, "68e0510d22f2"}, {0x2, 0xe, "4470e7e86086170a932cc1f8"}, {0x1, 0x8, "3935e26f39f3"}, {0x7, 0xf, "6857acefaf2580913af150d1d4"}, {0x0, 0x2}]}]}}, @timestamp={0xd, 0x0, 0x0, 0x9, 0x55, 0x9, 0x5}}}}}, &(0x7f0000001380)={0x0, 0x2, [0xac8, 0x846, 0xb89, 0xfa8]}) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x49}]}, 0x1c}}, 0x20000080) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), r2) sendmsg$NL80211_CMD_ADD_TX_TS(r11, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x1c, r12, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xcf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x15) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000017c0)={'syztnl1\x00', &(0x7f0000001740)={'syztnl0\x00', r7, 0x29, 0x5, 0x2e, 0x5, 0x4a, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x7800, 0xfffff553, 0x8}}) ioctl$XFS_IOC_FD_TO_HANDLE(r11, 0xc038586a, &(0x7f0000001900)={r2, &(0x7f0000001800)='veth0_macvtap\x00', 0x2800, &(0x7f0000001840)={@align=0x7, {0x4722, 0xfffb, 0x9, 0x10001}}, 0x10, &(0x7f0000001880), &(0x7f00000018c0)=0x1000}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001b00)={0xffffffffffffffff, 0x20, &(0x7f0000001ac0)={&(0x7f00000019c0)=""/169, 0xa9, 0x0, &(0x7f0000001a80)=""/15, 0xf}}, 0x10) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000001b40)=@bloom_filter={0x1e, 0xb, 0x9, 0x6, 0x4000, 0xffffffffffffffff, 0xe1a, '\x00', r5, 0xffffffffffffffff, 0x3, 0x2, 0x5, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c00)=@bpf_lsm={0x1d, 0x3, &(0x7f0000001600)=@raw=[@jmp={0x5, 0x0, 0xb, 0xb, 0xa, 0x50, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000001640)='syzkaller\x00', 0x80000000, 0x81, &(0x7f0000001680)=""/129, 0x41100, 0x44, '\x00', r13, 0x1b, r14, 0x8, &(0x7f0000001940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001980)={0x4, 0x3, 0x8, 0x1}, 0x10, r15, 0x0, 0x0, &(0x7f0000001bc0)=[r16, 0x1], 0x0, 0x10, 0x9}, 0x94) 895.376189ms ago: executing program 3 (id=7592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) (async) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 803.918832ms ago: executing program 0 (id=7593): poll(0x0, 0x0, 0x2e90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e40)={r0, 0x0, 0x23, 0x93, &(0x7f0000000000)="c361656113612bd6a4ccc96952e2b41a570db8542669f8e3f75a2a4cb656d16eadf28b", &(0x7f00000004c0)=""/147, 0x5, 0x0, 0x9, 0x1000, &(0x7f0000000580)="2721ff16917bf5e6ae", &(0x7f0000000e40)="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", 0x1, 0x0, 0x4}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0, 0xfefffffd}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f0000000500)=""/4117, 0x1015}, {&(0x7f0000001680)=""/109, 0x6d}, {&(0x7f0000001bc0)=""/72, 0x48}], 0x4}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8000005}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xa9e5}, {{0x0, 0x0, 0x0}, 0x9}], 0x9, 0x2000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 803.469797ms ago: executing program 4 (id=7594): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, 0x0, &(0x7f00000000c0)) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f00000000c0)={0x0, 0x100000000}) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fddbdf8fab0b81a46e1b4531c0e369fc5218454233250200e9f3976a4e", @ANYRES32=r3, @ANYBLOB="0c00990009000000740000000800a000f00000000800a1000f000000080026008009000008009f0004000000"], 0x48}}, 0x20000000) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'lo\x00', 0x3}, 0x18) sendfile(r2, r2, &(0x7f0000000080)=0x412, 0x3) 750.81689ms ago: executing program 3 (id=7595): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x28e6, 0x50, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001940)={{r1}, &(0x7f0000000300), &(0x7f0000000440), 0x2}, 0x20) recvmmsg(r0, &(0x7f0000007980)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x10003, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000280)={'gretap0\x00', r7, 0x1, 0x8000, 0x6, 0xe72, {{0x14, 0x4, 0x3, 0x3d, 0x50, 0x68, 0x0, 0x8, 0x4, 0x0, @loopback, @local, {[@lsrr={0x83, 0x1b, 0x51, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x24}, @dev={0xac, 0x14, 0x14, 0x3}, @private=0xa010102]}, @rr={0x7, 0x1f, 0xf1, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3c}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010102, @multicast2, @rand_addr=0x64010102]}]}}}}}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0x11, 0x0, &(0x7f0000000000)="63ce310dfbff8546dc3f0adf33cb0fb986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100080}, 0x50) 742.363628ms ago: executing program 1 (id=7596): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x50) 687.85887ms ago: executing program 4 (id=7597): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@rand_addr=0x64010101, @in=@multicast1}, {@in=@multicast2, 0x4d5, 0x32}, @in=@dev, {0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x1}, {}, 0x0, 0x2, 0x2}, [@algo_auth={0x48, 0x1, {{'sha384-avx\x00'}}}]}, 0x138}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x209d}, 0x10) write(r2, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) recvmmsg$unix(r2, 0x0, 0x0, 0x40000002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x5, 0x400, 0x9, 0x81, 0x101, 0x86a4, 0xc40, 0x7fffffff, 0xfffffffd, 0x1, 0xb, 0x16, 0x0, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e01798d28b6d63cf7465ea95bd97b018b7afaccdcb0000000000000009e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236743acdf902703c7bd07f2df5989ee40e409b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ffcf44f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990f7acfdb8216ea52f604b9f12033688caa4b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d6"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0xa5, 0x4, 0x30, 0x46, @private0, @empty, 0x1, 0x80, 0xfffffffc, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r2) r8 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x10) connect$unix(r2, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @multicast1}}}, 0x88) getsockopt$inet_buf(r9, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000028605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x0) 686.546919ms ago: executing program 2 (id=7598): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r1) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x28, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000140)=0x23, 0x4) sendmmsg$inet6(r2, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r4, 0x1, 0x14, &(0x7f0000003ec0)=""/210, &(0x7f0000003fc0)=0xd2) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 642.046562ms ago: executing program 1 (id=7599): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000500)={0xf127, 0x1, 0x4, 0xffff, r1}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x400) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r5, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r4) (async) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={r3, 0x4, 0x3, [0x0, 0x81, 0x8]}, &(0x7f0000000180)=0xe) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x1) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000400)=""/210, &(0x7f0000000540)=0xd2) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r7, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x14, 0x65, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0x9, 0x100, @val=0x80}, "7f8b6b5548e1ea4a13246d01"}}}}, 0x3e) (async) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="100000001114010000000000fc4014315724f700000000"], 0x10}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) pselect6(0x40, &(0x7f0000000300)={0x4d468027, 0x100000001, 0x0, 0x1, 0x100000000, 0x8, 0x400, 0x9}, &(0x7f0000000340)={0x8, 0x6, 0x1000, 0x9, 0x5, 0xffff, 0xffffffffffffffff, 0x4}, &(0x7f0000000580)={0x8001, 0x8, 0xfffffffffffffffe, 0x1ff, 0xdc, 0xae, 0x100000001, 0x3}, &(0x7f0000000600)={0x77359400}, &(0x7f0000000680)={&(0x7f0000000640)={[0x30d]}, 0x8}) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f00000006c0)=0x974) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x3804, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x37d4, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xa9, 0xffff, 0xe9, 0xd, 0x7, 0x7, 0x40, 0x9, 0x4, 0x800, 0x40, 0x10000, 0x2, 0x400000, 0xfffffff8, 0xfffffffd, 0x40, 0x0, 0x2, 0x7f, 0x0, 0x8, 0x2, 0x8, 0xbe, 0xa9, 0x6, 0x1, 0x0, 0xffffff7f, 0x9, 0xaff, 0x6, 0x9, 0x1000, 0x7, 0x0, 0x4, 0x4, 0x6, 0x0, 0x1, 0xfff, 0xbf8b, 0xc7, 0x5, 0xffffff54, 0x7fffffff, 0x5, 0x3, 0xfffffffe, 0x80000, 0x9, 0xcdde, 0xfffffffc, 0x5, 0x1, 0x3, 0x5, 0xe26a, 0x882, 0x3, 0xfffff499, 0xffff, 0x5, 0x40000, 0x7, 0x7db, 0x9, 0xc17, 0xfff, 0x0, 0x3de, 0x1, 0x9, 0x8, 0xa, 0x2, 0x7, 0x8001, 0x6, 0x7ff, 0x4, 0x9, 0x6, 0x10001, 0x9, 0x400, 0xfffffffb, 0x1, 0x3, 0xffffffff, 0x914, 0x9406, 0x8, 0x7fff, 0x8, 0x1, 0x7, 0xdeac, 0xf871, 0x2, 0x7, 0x81, 0xa6, 0x6, 0x1, 0x3ff, 0xf, 0x7fffffff, 0xfff, 0x1, 0x9, 0x0, 0x1, 0x4, 0x5, 0x1, 0x0, 0xd, 0x5, 0xfffffff7, 0x101, 0xfc, 0xffffffff, 0x3, 0x7, 0x5, 0xf, 0x1, 0x9, 0x2, 0x8, 0x7, 0x0, 0xf2, 0x1ff, 0x5, 0x6d, 0xffffffff, 0x9, 0x4, 0x3, 0x10, 0x8d9c, 0x80, 0x3, 0x3, 0x2f, 0xf, 0x408, 0x1, 0x8, 0x1, 0x3, 0x6, 0xf, 0x0, 0x1, 0x81, 0x4, 0x1, 0x9, 0x5, 0x1, 0x10000, 0x1, 0x40000000, 0x9, 0x7fff, 0xd, 0xfff, 0x7fffffff, 0x5, 0x68b2, 0x3ff, 0x8, 0x0, 0x9, 0x3ff, 0x7fff, 0x4, 0x7, 0x3, 0x3, 0x995f, 0x80bb, 0xfffff801, 0x1, 0x933, 0x2, 0x3, 0xe519, 0xe, 0xfffffff2, 0x5, 0x7c, 0x0, 0xffffffff, 0xb, 0x47, 0x998, 0xca, 0x3, 0x9, 0xff, 0x3, 0x4, 0x2, 0xfff, 0x9, 0x9, 0x6, 0x6, 0x9, 0x5, 0x1, 0x7, 0xe, 0x9, 0xfffffffd, 0x8, 0xc00, 0xfff, 0x5, 0x941, 0x4, 0x5, 0x4, 0xfffff21f, 0x9, 0x6, 0x0, 0x7, 0x6, 0x7, 0x4, 0x8, 0x1, 0xc, 0x6, 0x2, 0x81, 0x4, 0x7, 0x1, 0x94, 0x8, 0x7, 0x1ff, 0x9, 0x101, 0x0, 0x0, 0x4739]}]}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x3}, @TCA_FLOW_ACT={0x33c0, 0x9, 0x0, 0x1, [@m_csum={0xac, 0xd, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff7, 0x8000, 0x5, 0x46, 0x5}, 0x3e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x7, 0x6, 0x9, 0x40}, 0x77}}]}, {0x46, 0x6, "e822eedbf0fa67a3f3926164d5ec2bbeca2b10545fb359b0356f2923fcb46de9e5b24e6fe716450783ac1bc20b892e8663e05d26bb189f35c51987c3ef7253cacbb1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_skbedit={0x14c, 0x10, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x5, 0x1, 0xfffffff9, 0x6}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0x7}}]}, {0xf0, 0x6, "f747626bb41cb801be96ddf560d4c09e8967f7b452b04282aac795dcfe96e793732427b09c33e4454a6cd3abe6c4cef30392080575de40159c297e39dd8c4f44c4409cdd2c7dc338230224ff8f46934549fa0c72e10cf05c013094ac797abd84efd1974cd25ee6645b948be24f4101d2756d333a8deccc21e890a3d95a5ea727b833ed1fe3cb1dbb152459eb793d49c1e9008151fd94f87fbf922493463dc9c10c34b3edf18a230002561b14f4f46f22244cc533e79377f17b1ead874a9be93f2dabc34214c0e473422ec884fe0e9311634cadef86f8bff601f6f2d12eb55a5bea700a85077de5dd1b4908da"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_vlan={0x7c, 0xf, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x9, 0x6, 0x6, 0x10001}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x200, 0x8, 0xdf, 0x136}, 0x2}}]}, {0x10, 0x6, "591c17b5eedb564a8074ccba"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x1ddc, 0x17, 0x0, 0x0, {{0xb}, {0x1ce8, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x9, 0x1, 0xffff, 0x0, 0xf, 0x0, 0x6e7d, 0xf61, 0xd4, 0x4, 0xd1, 0x1000, 0x0, 0x81, 0x2, 0x6, 0x2, 0x6, 0x1000, 0x30a, 0x2, 0x8, 0x8001, 0xfc, 0xfffffffc, 0x5, 0x4d, 0xc, 0x0, 0x400000, 0x3c, 0x70000000, 0x101, 0x7, 0x1, 0x5, 0x0, 0x8, 0x3, 0x43, 0x7f, 0x8, 0x3, 0x6c06d21f, 0xffffff02, 0xf8, 0x7ff, 0x81, 0xea8c, 0x9, 0x7, 0x10000, 0x12e3, 0x933c, 0x287ccd8e, 0x3, 0x7ff, 0x3, 0x7, 0x7f, 0x6, 0x0, 0x10, 0xe39b, 0xfffffffc, 0x6, 0x5, 0x2, 0x81, 0x9, 0xffffff80, 0x7, 0xe47, 0x7, 0x7f, 0x10000, 0x3, 0x6, 0x0, 0x4, 0x9, 0x2, 0x5, 0xce, 0x2, 0x1, 0xffff, 0x401, 0x2, 0x10000, 0x8, 0xfffffffd, 0x1, 0xd, 0x1, 0x10000, 0x401, 0x2, 0x6, 0xff, 0x8, 0x1d, 0xe, 0x3, 0x10, 0x1, 0x3, 0x5, 0x8000000, 0x7fffffff, 0x1, 0x5c5c, 0x0, 0x1ff, 0x1, 0xe98a, 0x3, 0x9, 0x498, 0xb, 0x2, 0x2, 0x4, 0x5, 0x401, 0x1, 0xded2, 0x5, 0x5, 0x0, 0x0, 0x0, 0x3, 0xfffffffb, 0x8001, 0xffffffff, 0x7, 0xa, 0x3, 0xe3, 0x2, 0x566, 0x1, 0xfffffffe, 0x6, 0x0, 0xe601, 0x7, 0x80000000, 0x3, 0x2, 0xff, 0x3, 0x7, 0x5, 0x1, 0x6, 0x0, 0xa, 0xd, 0x6, 0xfffffff7, 0x5, 0x3ff, 0xe0, 0x3, 0x5, 0x3, 0x4, 0xfff, 0x2, 0x9, 0xfff, 0xd82b, 0x2, 0x9, 0x2, 0x10000, 0x3, 0xe, 0x8ec, 0x5, 0x1000, 0xf4, 0x8b5c, 0xe1a, 0x1, 0x1, 0x3, 0xb4, 0x811, 0x1, 0x10000, 0xf, 0x40, 0xa281, 0x0, 0xfdb4, 0x10001, 0x9, 0x4, 0x9, 0x0, 0x2, 0x0, 0x4, 0x10, 0x6, 0x49a, 0x7, 0x8, 0xc0, 0x2, 0x101, 0x80000001, 0xa0000000, 0x8, 0x8000, 0x8, 0x6, 0x5fe3, 0x5, 0xb, 0x401, 0x8, 0x8, 0x0, 0x91ed, 0x7, 0x7, 0x3, 0xf009, 0x8, 0xffff, 0x96, 0x400, 0x0, 0xfc, 0x0, 0x4, 0x10000, 0x4, 0x0, 0x8354c7a3, 0x6, 0x80, 0x4, 0x1, 0xd5c8, 0x81, 0x7ff, 0x0, 0x9be, 0x8, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3d}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xfff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe738, 0x1, 0x8, 0x7, 0xa, 0x1, 0x2, 0x9, 0x7fff, 0x9, 0x2, 0x200000, 0xd, 0x9, 0x7fffffff, 0x4, 0x5, 0x3, 0x7, 0x1, 0x2, 0x4, 0x400, 0xe3, 0x0, 0xad90, 0x299, 0x800, 0x2, 0x4, 0x2, 0x7, 0x241, 0xffff199b, 0xceff, 0x7, 0x6, 0x2, 0xfff, 0x1, 0xfffffffb, 0x6, 0x7, 0x3, 0x7, 0xb3, 0x9, 0x3, 0x772, 0x100, 0x7ff, 0x371a, 0x1, 0x1ff, 0x800, 0xfff, 0xd1e, 0x3, 0x8, 0x724, 0x80000000, 0x6, 0x8, 0xf0, 0x4, 0x1ff, 0x5, 0x4, 0x8, 0x8, 0x7f, 0x4, 0xfff, 0x0, 0x4, 0xbd6, 0xc792, 0x8, 0x6, 0x100, 0x46, 0xfffffff7, 0x4, 0xe, 0x1ff, 0x2b6, 0x2, 0xfffffffa, 0x8001, 0x5, 0x8001, 0x7, 0x9, 0xf7, 0x4, 0x7, 0x8, 0x1, 0x4, 0x2, 0x5, 0x5, 0x4, 0x5, 0x8e, 0xffffffff, 0x4832, 0x7, 0x3, 0x2, 0x7fff, 0x5, 0x40, 0x7fffffff, 0x7da8, 0x318b, 0x396, 0xffffffff, 0x5, 0x6, 0x8000000, 0x1, 0x0, 0x100, 0x1, 0x4, 0x5, 0x8, 0x4, 0x7, 0x5, 0x4, 0x3, 0x3, 0x4, 0x80000001, 0x5, 0x1, 0x4, 0x5, 0x81, 0x2, 0x9d1, 0x1, 0x1, 0x67a0, 0x1, 0xfffffff7, 0x7, 0x41b6088c, 0xa48, 0xeb, 0xff, 0x4, 0xd13b, 0x1, 0xff, 0x0, 0x7, 0x9, 0xf8c, 0x6, 0xa2e, 0xa481, 0x8, 0x74, 0x9, 0xfffffff7, 0x7, 0x2, 0xfffffffe, 0x2, 0x4, 0x6, 0x8, 0xf, 0x4, 0xe286, 0x7fffffff, 0x5, 0x4, 0x7, 0x5, 0x4, 0x6, 0x100, 0x101, 0x7fffffff, 0x5, 0x6f2d8eaf, 0x8001, 0xac82, 0xb, 0xd, 0x6, 0xc, 0xfffffffb, 0xa7, 0x6, 0x0, 0x1, 0xafe, 0x3, 0x401, 0x66b16654, 0xb2f, 0x0, 0x400, 0xa, 0x7fff, 0x369, 0x40, 0x6, 0xf2e, 0x4, 0x5, 0x6, 0x38bc, 0x10001, 0x1, 0x82, 0x0, 0x40, 0x263f, 0x400, 0x8, 0x1, 0x101, 0x1, 0xfff, 0x800, 0x21, 0x3, 0x4, 0x1, 0x8, 0x4, 0x9, 0x8, 0xfff, 0x3, 0x4, 0x80000000, 0x4, 0x7, 0x4, 0x7, 0x1000, 0xffffffff, 0x7, 0x40, 0x9, 0x400, 0x8, 0x100, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x6, 0x8, 0xe, 0x2, {0x6, 0x2, 0x3e9, 0x401, 0x0, 0x44e07c5e}, {0x1, 0x0, 0x5, 0x1, 0x2, 0xffff}, 0xb11b, 0x2, 0x6}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4f7d, 0x2, 0x55, 0x8, 0x8000, 0xb08, 0x2, 0x200, 0x6, 0xa, 0xfffffffa, 0x10, 0x401, 0xff, 0x2, 0x101, 0xfffffc01, 0xe, 0x2, 0x4, 0x101, 0x1, 0x7ff, 0x5, 0xfffffffd, 0x101, 0xe, 0x8, 0x4, 0x8, 0x5, 0x1, 0x2, 0x5, 0x1, 0x10001, 0x7, 0x80000001, 0xff6, 0x81, 0x123, 0x80000001, 0x9, 0x10000, 0xac2, 0x8000, 0x8000, 0xffff, 0x5, 0x40, 0x5, 0x8, 0x0, 0x37a, 0x8, 0x8, 0x70b, 0x2, 0xfffffffc, 0x9b, 0x7, 0x1, 0x81, 0x9, 0x1ff, 0x7, 0x2, 0x4, 0x7, 0x8000, 0x8001, 0x2, 0x1, 0x6, 0x68, 0x8, 0x4, 0xffffffff, 0x82, 0xd, 0xaaf, 0xa, 0xa5, 0xa75c, 0xc9, 0x35fc, 0x6, 0x8, 0x0, 0x8, 0xc31, 0x7, 0x66, 0x7f, 0x8, 0x8, 0x9, 0x2, 0x1, 0x3, 0x7, 0x3, 0x0, 0xd850, 0xccad, 0xc, 0x3, 0x88, 0x5, 0x80000001, 0x8, 0xc62, 0x5, 0x8, 0x4, 0x6, 0x4a23, 0x0, 0x5, 0x7fff, 0x7, 0x4, 0x2, 0x5, 0x8, 0x2d, 0x7, 0x5, 0x6, 0x4, 0x8, 0x8, 0x8, 0xf3d6, 0x35b, 0xc804, 0x3, 0x1c000, 0x3, 0x9, 0x1, 0x6, 0x6a797899, 0x2c9, 0x5, 0x5, 0x31f0, 0x6, 0x6, 0x4, 0x9, 0x6, 0x4, 0x3, 0x38000000, 0xedb, 0x7ff, 0x53, 0x0, 0x1ff, 0x0, 0x10001, 0x68ed, 0xebe, 0x6, 0x8, 0xd, 0xc9, 0xff, 0x1, 0x1, 0x4e0e, 0x6, 0x3, 0xce9, 0x2, 0x6, 0x8, 0xffffef29, 0x1ff, 0x8, 0x1, 0x3, 0x8001, 0x7f, 0x6, 0x6, 0x6, 0x0, 0xd, 0x9, 0xdd2, 0x3, 0xac59, 0x80000001, 0x80000001, 0xffffffff, 0xca43, 0x9, 0x1, 0x800, 0x800, 0xa, 0x6, 0xff, 0x3, 0x5, 0x7fff, 0x9, 0x9, 0xdfe80000, 0x2, 0x0, 0xe2, 0x5, 0x5, 0x1, 0x6, 0x3, 0x80000001, 0xfffffffd, 0x8, 0x100, 0x5, 0x7, 0xa, 0x7056, 0x100, 0xb, 0x7de4, 0x3, 0xbc, 0x2000, 0x7, 0x8001, 0xfffffff9, 0xfffffff8, 0x8061, 0x10001, 0x8, 0x3, 0x3, 0x9d19, 0x1, 0xe4, 0x3, 0xffffffff, 0xdd, 0x4, 0xa, 0x8, 0x1, 0xbe11, 0xa09, 0x0, 0x80000000]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x58, 0x6, 0x9, 0x2, 0x5, 0xfffffffd, 0x2, 0xe, 0x1000, 0x94, 0xdb25, 0x1, 0x7, 0x2, 0xffffffff, 0x7, 0x200, 0xc9b1, 0xfffffff8, 0x401, 0x8, 0x0, 0xfffffffe, 0xc0000, 0x1, 0x5, 0x0, 0x1ff, 0x2, 0x6, 0x7f, 0xf, 0x854, 0xe, 0xb2, 0x1ff, 0xbe, 0x8001, 0x3, 0x7, 0x7, 0x4, 0x7, 0xd3, 0x7, 0x0, 0x7, 0x80000001, 0x4, 0x2, 0x9, 0x1, 0xbf4, 0x4, 0x40, 0x3ff, 0x8000, 0x401, 0x1, 0x401, 0x6f, 0x8, 0x90000000, 0x5, 0x2, 0xaa5b, 0xff, 0x0, 0x0, 0x9, 0x10000, 0x1, 0x18000, 0x6, 0x9, 0x8, 0x9, 0x9, 0xc8, 0x4000000, 0xff, 0x8, 0xff, 0x0, 0x1, 0x39b, 0x400, 0x7cccb531, 0x1ff, 0x4, 0x7f, 0x1, 0x7fffffff, 0x6e75fa27, 0x8, 0x8, 0x7, 0x0, 0x8, 0xe2, 0xa5d2, 0x66b5, 0x4, 0x3, 0xe, 0x6, 0x4, 0xffffff01, 0x9, 0xa9d, 0x5, 0x10, 0xa5, 0x0, 0x400000, 0x6, 0xb, 0xe38, 0x2, 0x3, 0x4, 0x8, 0x2, 0x0, 0x9, 0x9, 0xc, 0xfb54, 0x400, 0x6, 0xc, 0x0, 0xff, 0x8, 0x6, 0xc, 0x100000, 0x81, 0x7, 0x3, 0x400, 0x101, 0x7, 0x400, 0xe33, 0xfff, 0x2, 0x4, 0x1, 0x6, 0xfffffffd, 0x80, 0xfffff000, 0x7fffffff, 0x4, 0x9, 0x8, 0xc, 0x3, 0x9, 0x7, 0x7, 0x3, 0x1f85ccec, 0x1, 0x2, 0x6, 0x0, 0x4, 0xfffffffa, 0xcb, 0x1ed, 0x8000, 0x2, 0x1, 0x7ff, 0x3, 0xcd7, 0x3, 0x7ff, 0x961b, 0xfffffff4, 0xf, 0xf97f, 0x0, 0xf0, 0x80, 0x0, 0x6, 0xdd76, 0x78, 0x0, 0x81, 0xff, 0xb9d, 0x401, 0x8, 0x186, 0x7fffffff, 0x9, 0x4, 0x8f, 0x2, 0x9, 0x3, 0xffffffff, 0xfffffffe, 0x1, 0x8ae, 0x0, 0x36249732, 0x200, 0x0, 0xd, 0xff, 0xc93, 0x1000, 0x0, 0x46a604bb, 0x57ed18f7, 0xe4, 0x6, 0xf, 0x3, 0x0, 0x3, 0x1, 0x2, 0xfffffff7, 0x4, 0x8, 0x9, 0x7, 0xfffff830, 0xffff, 0xffff, 0x9, 0x1, 0x3, 0x7, 0x6, 0x80000001, 0xb, 0x5, 0x3, 0x10000, 0x8, 0x0, 0x1, 0x3, 0x7f, 0x5, 0xffffffff, 0x1, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x8001, 0xfff, 0x76, 0xffffffcc, 0x1, 0x523, 0x7f, 0x7fffffff, 0x4, 0x4, 0x10000, 0x8, 0x4, 0x3, 0x4, 0x4, 0x90c6, 0x61, 0x2, 0x81, 0x8001, 0x92, 0xe1, 0x9, 0x6, 0x3, 0x5, 0x800000, 0x80000000, 0xfffffffc, 0x6, 0xfffffff9, 0x561, 0xffffff69, 0x4, 0xe2, 0x40, 0x100, 0x8, 0x400, 0x9, 0x9, 0x6, 0x4, 0x7, 0x7767, 0x2, 0x8, 0xf, 0x2, 0x5330, 0x7fffffff, 0xc89, 0x7b69, 0x5, 0x0, 0x5, 0x80, 0x8, 0x3, 0x3, 0xfffffffb, 0xdaf, 0x1, 0x8, 0x400, 0x6d1a, 0x1, 0x9, 0x6, 0xf, 0x6, 0x9, 0xffff, 0x6, 0xf, 0x0, 0x8, 0xf6, 0x7, 0x5, 0x2, 0x8, 0x6c82, 0x5, 0x3, 0x7, 0xfffffff7, 0xec, 0x7, 0x10001, 0x3, 0x5, 0x3, 0x5, 0x9, 0xffff, 0x101, 0x4, 0xf1, 0x8, 0x1, 0x5, 0x6, 0x8, 0x5, 0x8, 0x5, 0x9, 0x6, 0xfffffe01, 0x9, 0x18000000, 0xf, 0x7e415b7f, 0x5, 0x4, 0x2, 0x4, 0x7, 0xe, 0x5, 0x173f, 0x8000, 0x1000, 0x0, 0x8, 0x4, 0x5, 0x3, 0x400, 0x1, 0x5, 0x4, 0x761, 0x1, 0x80, 0x6, 0x2, 0x7, 0x2, 0x7, 0x6, 0x4, 0x10000, 0x6, 0x9, 0x3, 0x5aafff85, 0x1307, 0x3, 0x0, 0xfffffffc, 0x7, 0x8, 0x5, 0x6, 0x11, 0x32fa8e8f, 0xfffffffe, 0x2, 0x8, 0x8, 0x2, 0x7fffffff, 0x9, 0x0, 0xa369, 0x3, 0x1, 0x2, 0x80000001, 0xeb, 0x3077, 0x800, 0x409d, 0x200, 0x879, 0x2, 0x10001, 0x2, 0x5, 0x4, 0x3, 0x8, 0x6, 0x3, 0x2, 0xfffff800, 0xeda, 0x94, 0x6, 0x7, 0x7, 0x10, 0x8, 0x7c80966f, 0x76, 0xfffffff1, 0x1, 0x8000, 0x7, 0x6, 0xd2b, 0x5, 0x0, 0x9, 0xc, 0x5, 0x8001, 0x4, 0x2, 0x10, 0x2, 0x8, 0x9, 0x5, 0x9, 0x8, 0x4, 0x10, 0x0, 0x5, 0xa0, 0x6, 0x6, 0xbeb, 0x9, 0xff, 0x2, 0x1000, 0x8, 0x2, 0x3ff, 0xe7, 0x2, 0x3, 0x8, 0x1, 0x4, 0x4, 0x689a, 0x0, 0xa, 0x80000000, 0x4, 0x5, 0x10, 0x1, 0x0, 0x5, 0x5, 0x0, 0x20f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3b58, 0x8, 0x7fffffff, 0x40, 0x0, {0x5, 0x2, 0x5, 0x0, 0x5, 0x7}, {0x2, 0x1, 0xfffe, 0x6, 0x6, 0x6}, 0xfff, 0x3, 0x672}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x10, 0x200, 0x78a6, 0x77, 0x2, 0x2, 0x101, 0x4, 0x1, 0x400, 0x2, 0xa72, 0xd, 0x0, 0x69, 0x0, 0x5, 0x4, 0x5, 0xda4, 0x7, 0x8, 0x0, 0x8, 0x8, 0xff, 0xe, 0x40, 0x481, 0x2f6, 0x0, 0x1d9, 0x1, 0x6, 0x7fffffff, 0x9, 0x0, 0x6, 0x7, 0x5, 0x80, 0x400, 0x0, 0x6, 0x12c, 0x6c7, 0xa, 0x1, 0x5, 0x9, 0x22aa, 0x5f, 0x7, 0x101, 0x9, 0x4, 0x7, 0x120000, 0x400, 0x8001, 0x9, 0x80000000, 0xce, 0x5, 0xd548, 0x0, 0x1, 0x1ff, 0x8, 0xa, 0x6, 0x10, 0x777f, 0x53f, 0x7, 0x7, 0x77f, 0xbdd, 0x1ab, 0x0, 0x7, 0x91f, 0xffff, 0x4, 0x10000, 0x3000, 0x9, 0x882, 0x0, 0xbfd4, 0x80000000, 0xbcf, 0xe, 0x8, 0x5, 0x0, 0x6, 0x9, 0xd76b, 0x81, 0x0, 0x3, 0x100, 0x100, 0x9, 0x6, 0x0, 0x9, 0xc22, 0x197, 0x9889, 0xfffffffb, 0x1000, 0x9, 0x8000, 0x0, 0x2, 0x8001, 0x7, 0x7, 0x1, 0x1, 0x5, 0x531, 0x7, 0x800, 0x7fffffff, 0x6, 0x401, 0xae40, 0x4000, 0x1, 0x1, 0x6, 0xfffffffb, 0x81, 0x1, 0x80000000, 0x7f, 0xf90, 0x81, 0xff4e, 0x2, 0x8a3, 0xc27e, 0x10000, 0xfff, 0x7, 0x8, 0x10000, 0xbbf3, 0x4, 0x3, 0x6, 0x0, 0xfffffc01, 0x7, 0x2, 0x1, 0x3, 0x7f, 0x4, 0x6, 0x3, 0x4, 0x4, 0x7, 0x2357050d, 0x1, 0x17, 0xd, 0x7fffffff, 0x595b, 0x6, 0x0, 0x80, 0xd708, 0xa, 0x8, 0x401, 0x5, 0x7, 0x7, 0x45, 0x0, 0xfffffffb, 0x200, 0x6, 0x2, 0x8, 0x4, 0x1, 0xfffffce2, 0x5, 0x2f, 0x6, 0x4, 0x0, 0x1, 0x5, 0x3, 0x98e7, 0x100000, 0x10000, 0x4, 0x3, 0x80, 0xadc, 0x7f, 0x8000, 0x6b, 0x5, 0x7, 0x7, 0x800, 0x0, 0x1, 0x2, 0x3ff, 0x1, 0x414, 0x10, 0x0, 0x0, 0x4, 0x5fa, 0xcfae, 0x10, 0x9, 0x9, 0x3, 0xcef, 0x8, 0x0, 0x1787, 0x7, 0x8, 0x1, 0x3, 0xc, 0x3, 0x7f, 0x8, 0x0, 0x0, 0x7, 0x8, 0x9, 0x2, 0x5c, 0x5, 0x5, 0x0, 0x0, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7fff, 0x1ff, 0x6a, 0x81, 0x2, 0xf, 0x6, 0x3ce, 0x9, 0x30f, 0x3, 0x4, 0x2de, 0xd, 0x38c3, 0x7, 0x3cc0, 0x401, 0x92f5, 0xfff, 0x9, 0x0, 0xffff, 0x1, 0x4, 0x1, 0xb705, 0x0, 0x9, 0xe9e, 0x0, 0xea, 0x5, 0xa43, 0x0, 0x9, 0x10001, 0x0, 0x7f, 0xffffffff, 0x1000, 0x2, 0x6, 0x4, 0x9, 0x9, 0xafa200, 0x101, 0x81, 0x0, 0x150a, 0x1, 0x6, 0xfffffffe, 0x6, 0x2, 0x1, 0x7fffffff, 0x80000001, 0x1c39b873, 0xfffffff8, 0x4, 0x0, 0x100, 0x8, 0x7ff, 0x5, 0xc000000, 0x5, 0x7fff, 0x8, 0x3, 0x9, 0x0, 0x9d8b, 0x623b, 0x401, 0x0, 0x0, 0x8bec, 0xc, 0x9, 0x2, 0x0, 0xfffffff8, 0x103c, 0x3, 0x0, 0xc, 0xfffffffd, 0x2, 0x7, 0xffff388f, 0xd, 0x80000001, 0x1, 0x2, 0x2, 0xf, 0x4, 0x9, 0x3, 0x7fff, 0x3, 0x3ff, 0x6, 0x1, 0x1, 0x70, 0x4, 0x1000, 0x6, 0x9, 0xc70, 0x4, 0x0, 0x7, 0x10000, 0x8, 0x8, 0x6f, 0x201c9433, 0x9, 0xffff8001, 0x6, 0x4, 0x1a, 0x2, 0x5, 0x3, 0x3, 0x0, 0x4, 0x0, 0x0, 0xa, 0xdc, 0xa7, 0x6, 0x5, 0xffffffff, 0x80000000, 0xb95d, 0x1, 0x1, 0x0, 0x9, 0x7f, 0xec54, 0x5, 0x7f, 0x3119, 0x0, 0xffff, 0x9, 0x1ff, 0x4, 0x9, 0x10000, 0x3, 0x8, 0x0, 0x5de, 0x5, 0x10000, 0x7f, 0x37a556ca, 0x9, 0xfb6c, 0x8, 0x2, 0x1, 0x7, 0x6, 0xfff, 0x100, 0x5, 0x5, 0x4, 0xf4, 0x1, 0xcd, 0x7ff, 0x3, 0x5, 0x3, 0x8, 0xa, 0x7c, 0x9, 0x1000, 0x8, 0x6, 0x3, 0x5, 0x6, 0x2, 0x2, 0x7, 0x96, 0x9, 0x8, 0x6, 0x8, 0x1c78, 0x5, 0x3, 0x8, 0x40, 0x67, 0x6, 0xffff, 0x5, 0x1, 0x5, 0xa, 0x6, 0x4, 0x1, 0x0, 0x3, 0x40, 0x7, 0x0, 0xfffffff8, 0x10001, 0x200, 0x5, 0x1, 0x9, 0x8, 0x3, 0x80000001, 0x7, 0x0, 0x3, 0xe2, 0x1, 0x2, 0x2, 0x38, 0x2d, 0x1, 0x7, 0x6, 0x2, 0x9, 0x4, 0x2, 0x2, 0x6, 0xfff00000, 0x401, 0x7, 0x2, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x125}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x40}]]}, {0xcc, 0x6, "809738bfd69c9212263fca5d75bbdbfdb14225ec87a3071fec242b39d76ff2ad6692a62ae33ebb0ad174b5aa0d900260b0711388c9f8159a53487b9cd662e06f57571d8d8e956933d8b2d3b350f8909aa9068516533df3c57937254058eed1c3f82d7b3e2b5ffd83ae430c6a0fceb565efe7bc925faa63bde96dfefaae15745c6fad9a26026a617576ff4ebb8fc3597472301b126bc466ddb70be6ab86a72a676a7f13c1c0511bd3449996f30db84c5cc9c5515e9dc88f2b01fa6072fa5679faa82aec95e0a3c22b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x1d0, 0xa, 0x0, 0x0, {{0x7}, {0xfc, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xe5, 0x6, {0x5, 'raw\x00', 0x6, 0x9, "4a23915fad6e822d20a5c4e4c00a992e76731941e8ebb4ff3d462670b261d4476f5d49d6fe178e2fcfdb0112152dbabd277a1044258f1394efaec2ea2b700575eb0b480354587fd7a83b6ce6b29f1f8a22a77338a494a6dd41021ccd5670e14e77d77b37c09ed8e243b3d72f2f51f54cb929fceb82c98c0b569de6c7558c183f4e1ae92d5818f9a24f370be84c05f761030e3168d08cd42f08a703e8d92298e942f52f5d66c214e5d0f8d0fd4ad99a4a00649710d0926dd8ff747d"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}]}, {0xaf, 0x6, "fd6f59552db11cfac2918649ee6852ac9c91679c79256eedf413aa74301d7e9c1682cd70cd3bae089665e15872f3656ca60bb883c5ca4220379577eb7922e507dfd5f17f22a69910b733be3f7e8d2b1e6ba78fee99508c9ac11ba670cf46bd6d5840e52a9c9bcd7a74e1f7970a6f971d2e33189c95e7d4885d7473383b4bd27dd812c05240cfb403ec7eea5ef627b5ba9a786ff21b991c00ce107b5c69f17ef7685bebd7af5135613dc2d5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0x154, 0x5, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fff, 0x5, 0x8, 0x4}, 0xa}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x81, 0x1, 0x7, 0x8, 0xf}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa814, 0x1, 0x4, 0x5, 0x101}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x101, 0x9, 0x1, 0x2, 0x7}, 0x100}}]}, {0xb2, 0x6, "db8a6f7dc2208d30756c51a72c47beda66c64558ab6b2ccdc8e5fa3a3ae675328a2a24a12c2233b5512f835edc322b4694ed72e59399c3f61719d46a41f6a3852c6e2f62bf8cb330e5c3cbc63b55f67fea1ba78a5348776b7c92a2529ab9585c73cc64485f432a073edd00ee80670896f4aa5d0a7117580160f4b52c6aa4e79ec18280284465971dd0adb1c4a26d7b476d6e4620abd0eb192012d1f0a6e8690fe0e9531a8d7d2ef9740974b7f273"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_gact={0x1048, 0x11, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x14df, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xda3, 0x10000000}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x3804}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) 630.358921ms ago: executing program 3 (id=7600): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000001380)) r1 = socket$inet6(0xa, 0x1, 0x84) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x4002, 0x0) ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003280)=@newtfilter={0x1820, 0x2c, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x3, 0xd}, {0xffed, 0xffff}, {0xfff2}}, [@filter_kind_options=@f_fw={{0x7}, {0x17ec, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x200}, @TCA_FW_MASK={0x8, 0x5, 0x1c0000}, @TCA_FW_MASK={0x8, 0x5, 0x10000}, @TCA_FW_INDEV={0x14, 0x3, 'nr0\x00'}, @TCA_FW_ACT={0x1640, 0x4, [@m_mpls={0x128, 0x20, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x831}]}, {0xf2, 0x6, "1c8cc7d410221028e22fe0e20f99aabb3035b32cdcbe5ecd468f16976e7396e0671c3cbd7aa5b084b318895593443f90b62e888c2b02e514c9a5526a69ffe1a4940f643e98230007cf7f31ad696baf8609b96998f0d6198a397647bcc50568ca90ad2e866e1a9460fb237836ceeaca84e66c0ac7c358d2e58c7a7dd1f66b483cefc70a471c37f1e01a1190cf0cf476a861adf76fefa8445d7f4b87828480b0e4208092cb9b58306c8df95936a03e81f86d004355c1542c1dcdee09fc72c077a73258bd14b3c4ca321d58726b06a20527f435916c36ff9f463f80b010746925438fc3a106e0691bc80a27d1f10afc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0xc8, 0xa, 0x0, 0x0, {{0xf}, {0x68, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x3, 0x4, 0x8, 0xffffffff}, 0x2}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x1, 0xffffffffffffffff, 0x401, 0x8}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x37}}]}, {0x33, 0x6, "da081098f12e646bab653dbc33902643597ff9504d2fd4eec1734ee532713190b51b220b0d778f556e2720e8e2b3b7"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mpls={0xbc, 0x2, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x40, 0xb9a5, 0x6, 0x1580, 0xfff}, 0x2}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88be}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x5}]}, {0x53, 0x6, "fa3058899d7b645c0abf039e16a05919c3901d1e54297a7217bbbeba6c9c1e551e9a08b3d6d40177ef6911015ea285c4f3378ce89b0f1bb3a7a2e77b79568aab07254b61b1bfdcc53a67c9b31b7eef"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x1cc, 0x1e, 0x0, 0x0, {{0x7}, {0x188, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xffff}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0xdc, 0x6, {0x8000, 'raw\x00', 0x10, 0xb49, "4f987a010c0749d828589bd329924fdfd98137411d9a8c745f2afb4f38b6b3f35af3069774d5e7877ed0678954062c124e4c2700d97889f319b9d978beca0adbc910bf1f8b9fb5aa215de4eeea42a48b481f052bf7694e026bb9fe48e777a09995fdcb121c23c8dac9ec45e99d1711ffc54496f146f684be0ceb5364f8c2d966bc7fba2dc126adbc959f09a460e4e28bb4c1aaeac9da6b56bd279309689db19c2381e25793280ea831f12b8b598f9bb600ca"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x1d, 0x6, "1f6e7b9da2df291fdd72f42efecd46f7bdf63343ce7ac0d48b"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_pedit={0xff4, 0x6, 0x0, 0x0, {{0xa}, {0xf00, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x0, 0x2, 0x2, 0x97c8, 0x65}, 0xc8, 0xcb, [{0x8100000, 0x3, 0x7fffffff, 0x2, 0x2, 0x1}, {0x7, 0x7f, 0x101, 0xfffffff8, 0x1, 0x4}]}, [{0x5, 0x9, 0x6, 0x1, 0x6, 0x4}, {0x6, 0x3, 0x0, 0x5db, 0x9, 0x6}, {0x1, 0x9, 0x1000, 0x1, 0x5, 0x3}, {0x3, 0x0, 0x8000, 0x6, 0x1, 0xbb4}, {0x9, 0x40, 0x5, 0x9, 0x8, 0x401}, {0x7, 0x2, 0x1fb5, 0x3, 0x2, 0xffffffff}, {0x6, 0xffffffff, 0x9, 0x3f8, 0x4, 0xf3f}, {0x3, 0x0, 0x5000, 0xf, 0x2}, {0x9, 0x5, 0x34c3, 0x9, 0x7, 0xa}, {0x2, 0x3, 0x6, 0x2, 0x401, 0x6}, {0x9, 0xf3a, 0x16e05381, 0x10000, 0x5, 0xfffffffb}, {0x7fffffff, 0x6, 0x8, 0x90, 0x4e5d, 0x8}, {0x4, 0xffffffff, 0x5, 0x4cd, 0xe}, {0x1, 0x2, 0x10, 0x2, 0x1, 0xa}, {0xff, 0x3, 0x1, 0x80000001, 0x80000001, 0x9}, {0x2, 0x6, 0x888c, 0xfffffffc, 0x2, 0x2}, {0x5, 0x200, 0x2, 0x9, 0x6, 0xe1c}, {0x9, 0x100, 0xa, 0x4, 0x8}, {0x101, 0x80, 0x6, 0x3, 0xcdb, 0x1}, {0x1, 0xbb, 0x861c, 0x5, 0x7, 0xffffffff}, {0x2, 0x2, 0x9, 0x4000, 0xa2c4, 0xffffff15}, {0x4, 0xe2b, 0x6, 0x8, 0x7fffffff, 0xfaba}, {0x4, 0x1, 0x7fff, 0x7, 0x40, 0x9}, {0x3, 0x23e, 0xc4, 0x6, 0x1, 0x9}, {0x4, 0x4, 0x0, 0xffffd8cf, 0x7, 0x8}, {0x0, 0xf, 0xf, 0x1, 0x3ff, 0x7fff}, {0x1ff, 0x0, 0x8, 0x1, 0x85, 0x80000001}, {0x49, 0x0, 0x5, 0x6, 0xa79e, 0x5}, {0xfff, 0x9, 0x7, 0x9, 0x3, 0x10000}, {0xffffc843, 0x5, 0xfffffce7, 0x2, 0x2, 0x3}, {0x8d, 0x74, 0x2, 0x5, 0x5c8f3ce1, 0x7}, {0xc, 0x6, 0x8000, 0xc, 0x0, 0x6}, {0x6, 0x3, 0x5, 0x100, 0x7cc8, 0x65}, {0x9, 0xec9, 0xb40e, 0x90b, 0x5, 0x1}, {0x736, 0x31f2211, 0x6, 0x81, 0x2, 0x568dfa55}, {0x80000000, 0x2, 0x5, 0x3, 0x3, 0xb}, {0x5, 0x8, 0x0, 0x29c0, 0xc, 0xfffffff8}, {0x3, 0x9, 0xfffffffe, 0x3, 0x1d9, 0xff}, {0x4, 0x80, 0x9, 0x1, 0x3, 0x4}, {0x4, 0x2, 0xd2b4, 0x1cef, 0x3, 0x1}, {0x10, 0x9e, 0x6, 0x1bd2, 0x1, 0x9}, {0x10000, 0x9117, 0x6, 0x5e, 0x4}, {0x1ff, 0xa, 0x800, 0xed62, 0x5, 0x40f}, {0x0, 0x6, 0x5, 0x4ae4, 0x2, 0x400}, {0x7e6, 0x80000001, 0xa0, 0x2, 0x7, 0xd1}, {0x7f, 0xb, 0x9, 0x81, 0x7, 0x8}, {0x1, 0x3b, 0xd092, 0xd, 0xff, 0x9}, {0xffffffff, 0x3, 0x7, 0x7, 0xffffff00, 0x10}, {0x0, 0x6, 0xfff, 0x8, 0x3, 0x9}, {0x8, 0x738, 0x8, 0x4, 0x0, 0xb}, {0x9, 0x0, 0x7, 0x7ff, 0x9, 0x3f6b3611}, {0x6, 0xe, 0xfffffffc, 0x0, 0xa, 0x6}, {0x8000, 0xa6, 0x7fff, 0x8, 0x6, 0x8}, {0x5, 0x4, 0x8000, 0x9, 0xed6c, 0x3}, {0x2, 0x6, 0x0, 0x14, 0x3, 0x4}, {0x40b, 0x63b, 0x80000000, 0x5, 0x8, 0x7}, {0xb, 0x1, 0x5, 0x1000, 0x200, 0xfffffff9}, {0x8, 0x24, 0x366, 0xffffff5b, 0x5, 0x1c4}, {0xfffffff8, 0x16f4, 0xbd, 0x7, 0x8, 0x6}, {0x4, 0x8, 0xfffffffc, 0x8, 0x6, 0x7}, {0x1, 0x2, 0x9, 0xa65, 0x200, 0x83}, {0xffa, 0x1000, 0x10000, 0x8, 0xa, 0x4}, {0x27d2, 0x4, 0x7, 0x9, 0x9662, 0x7}, {0x1, 0x1, 0x0, 0xfffffc00, 0x39e3, 0x5}, {0x6, 0x3, 0x0, 0x0, 0xfffffffe, 0x800}, {0x6, 0x6, 0x3ff, 0x8, 0x6, 0xd5b}, {0x6, 0x5, 0x9, 0x36e, 0x1, 0x2}, {0x7, 0xfb9, 0xfffffffe, 0x7d4, 0x37bd}, {0xf2, 0x20000000, 0x400, 0x1, 0x5, 0x6}, {0x9, 0xcf, 0x6, 0x5, 0x9, 0x61}, {0x1, 0xfb, 0x2, 0xef, 0x100, 0x2}, {0x0, 0xb, 0x401, 0x2, 0x200, 0x3}, {0x0, 0x7a5, 0xb, 0xc4c, 0x5, 0x4}, {0x7, 0x3, 0x1, 0x9, 0x0, 0x40}, {0x40, 0x7f, 0x8, 0x10003, 0x101, 0x9}, {0x0, 0x40000, 0x3, 0x5, 0xfffffff6}, {0x4, 0xfffffffa, 0x5, 0x6, 0x3, 0x4e}, {0x1, 0x1, 0x2, 0x4d42, 0x513}, {0x9, 0x400, 0x215cd0c1, 0x7, 0x2, 0x100}, {0x8, 0x10001, 0x3, 0x566541b5, 0x6, 0x5}, {0x2, 0xa, 0x9c, 0x6, 0xd8fb, 0x7}, {0x80000000, 0x6, 0xa858, 0x8, 0x4, 0x3}, {0xb5, 0xb, 0x1000, 0x6, 0x3, 0x2}, {0x2, 0x8, 0x80b57c73, 0xe96, 0x8, 0xd931}, {0x3, 0x0, 0x51cf, 0x8, 0xffffffff, 0x2170}, {0x200000, 0x1000, 0xffff, 0x0, 0x1ff, 0x1}, {0xad, 0x1, 0x2, 0xe, 0x10, 0x5}, {0x3, 0x2, 0x8, 0x27e, 0x200}, {0x8, 0x7, 0x7, 0x0, 0x6, 0x3}, {0x9, 0x5d5, 0x9, 0x8, 0x2, 0x6}, {0x20000000, 0x9, 0xfffffff9, 0x6, 0x8000, 0x401}, {0x1, 0xc9d2, 0x6d, 0x6, 0x4, 0x2}, {0x6, 0x8486, 0x10001, 0x2, 0x8, 0x4}, {0x1, 0x4, 0x8, 0x8, 0x2, 0xffff}, {0x1000, 0xbc9, 0x2, 0x4, 0x9, 0x4}, {0xff, 0x6, 0xee88, 0x2b5e, 0x7, 0xe3}, {0x7, 0x1, 0x3, 0x4, 0xffffffcf, 0x7}, {0x0, 0x401, 0x6, 0x10000000, 0x8f7, 0x6}, {0x2, 0x0, 0xb, 0x9, 0xfffffff7, 0x3}, {0x7, 0x5, 0x9, 0x10, 0xa2, 0x3800000}, {0xc9e, 0x6, 0x3ff, 0x7, 0x1, 0x4}, {0x7, 0x4, 0x6, 0x800, 0x7, 0x70}, {0x10001, 0x8, 0x100, 0x4, 0x3, 0xa5fa}, {0x4e08, 0xbb, 0x2, 0x2, 0x1, 0x4}, {0x7fff, 0x401, 0x3, 0x6, 0x3, 0xfc}, {0x6, 0x306, 0xffffffff, 0x1, 0x1000, 0x8}, {0x2, 0x3, 0x7, 0x6, 0x40000016}, {0x9, 0x8f53, 0x1, 0x40, 0x100, 0x3}, {0x4, 0x9, 0x0, 0x7, 0x7d, 0x5}, {0x8, 0x4, 0x6, 0x6, 0x9a5, 0x6}, {0x982, 0x4, 0x4, 0x106, 0x7ff, 0x6}, {0x9, 0xffffffff, 0x0, 0x4, 0x5, 0x1}, {0xffffffff, 0xec18, 0xc783, 0x101, 0x9, 0xffffff80}, {0x1, 0x8, 0x5, 0x4, 0x9, 0x46}, {0x6de, 0x48c4, 0x4, 0x2, 0x0, 0xbdc}, {0x6, 0x3, 0x3, 0xffffffff, 0x6, 0x2}, {0x7, 0x81f6, 0x400, 0x3, 0x8, 0x10001}, {0x3, 0x2, 0x7, 0xfffffffe, 0x0, 0x87c}, {0x3, 0x4, 0xaeb, 0x1000, 0x6, 0x5}, {0x6, 0x0, 0x8, 0x0, 0x7, 0xfffffffd}, {0x2, 0x0, 0xfffffffb, 0x6, 0xf7, 0x3e90}, {0x4, 0xff4c, 0x5, 0x1000, 0x7f, 0x3}, {0x8000, 0x3, 0xffff, 0x3, 0x7fff, 0xba9}, {0xffffffff, 0xc, 0x1000, 0xf9, 0x2, 0x1000}, {0x80000001, 0x4, 0x9, 0x1000, 0x9, 0x81}, {0x1, 0x4, 0x2, 0xfffffa4b, 0x6, 0x4}, {0x7ca5, 0x7ff, 0x1fc00, 0x7a, 0x9, 0x8e1e}, {0x5, 0x1000, 0x200, 0x21a, 0x5, 0x8}], [{0x5, 0x1}, {0x4}, {0x5}, {0x4}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x2}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x5}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x2}, {0x2}, {0x1}, {0x5}, {0x4}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x2, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0xac, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0xcc, 0x6, "3a472954f26ab17dd3c8cfff21ed20eb4721c12e384b69c22873d4e3a208ce647c62fffb2e1b3d75cb21399033a9ae9c32077b3192af9b0b502a5622ee022edd9bd93b6825b41a4e202ee803676eefb16cfa3ea6d8a72eb757806c23b7dfe58ab29bc8e01f20f4204ec9cf0586d41267451538fa83cfc2f07fb170c339c0819c39aa5a7d07b6fef5166c14e00897365ad30076e9bf26049e8b2e7db216f1eeedb1e5355f922d9d2f7589a8ac29a53dfbe7abab5dcf09347b9d691cfa1fc3b7f44a8cf23b2ec02079"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0xa8, 0xf, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0xd7, 0x7}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x94a}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7f}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3a3}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}]}, {0x22, 0x6, "e32f3382a0debd88ddeaaaa8865a980c20ab49ee9bb8abd62dcbeae8c85c"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x128, 0xb, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x1}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x1000}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x1b0a}]}, @TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x3}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xe}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x4}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0xa}, @TCA_IFE_TYPE={0x6}]}, {0x98, 0x6, "8228c74976d290613cda1ddecf27e0ea26f4bf2bcef76ba279bebb037333668ff5b1198384937232f0d90a2a51f4b0d829264a065d7e8b296366709c0e48eac9d3e84cf8ec2479fb06664c81b23d8fc2cf969b0719ce0d359da62402251e616f4b3ad91531301790eaa84ab24784e21aa0079e97b1ef7b56743c1baa5b30488a9336405eb5729ef525a2e8f1d7ea26ca075cb950"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7, 0x2}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_INDEV={0x14, 0x3, 'geneve0\x00'}, @TCA_FW_ACT={0x160, 0x4, [@m_skbedit={0x15c, 0x1e, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0xffe0}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4f, 0x4, 0x6, 0x97, 0x8}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0xb}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0xe}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x401}]}, {0xd7, 0x6, "1daa94cc832866d22e14c2a9610bfaf69c884233d1aeced87d34e762a0a27ef1483f3849136294e86498f7e8f461c0012b467ecf56a5744daa4f070b215abe4b313b4531eeab04fde303bc79e18407aa87125636da74e8de68e9ccc57e2c2860d47eafe980c7515b60c1e0cd0d6e799b4f429a14a31a1b5189e6c4ac01344bac2c7cc7f0cab1411187eddbf1365487f10d77721b7381b598ba6f352545c8b4293b2e5ed63f2cdfab142922daef2143e8d4f7ccc10410d8fcb60767219537df533c2cbb16288f4d9d94d09a5925237a46a071ff"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0xdc}}]}, 0x1820}}, 0x20000804) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqsrc(r11, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000040), 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000030000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r12, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7a7eef8d9be4e715aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b410e04418557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d802d9026ae0c11744eb1525c5195fd215d7a432497f35c2f2cfcd2b6336b26dfef0cb968c910ea2af5cdd4d58cc08535d5514", 0x2, 0x0, 0x10000}, 0x24) 567.928324ms ago: executing program 2 (id=7601): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="24005a802000018014000300000000000000000001020004"], 0x40}}, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002a80)=ANY=[], 0x114}], 0x1}, 0x400c851) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800400120005001600010000000800150000c422"], 0x48}}, 0x0) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) (async) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000040)) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 489.347178ms ago: executing program 1 (id=7602): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) r3 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@tcp6=r3, 0x2}, 0x20) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYRES16=r0], 0x3c}}, 0x0) accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x100000) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="20000000002f00002c001200000001006772001c000280c53d2045020000000808070064010101000010004e22000008000a03", @ANYRES32=r4, @ANYBLOB], 0x54}}, 0x24000000) 443.642045ms ago: executing program 2 (id=7603): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000150000000000000000000c0000000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) 327.997207ms ago: executing program 4 (id=7604): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000000", @ANYRES32], 0x48}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000004c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 327.7331ms ago: executing program 2 (id=7605): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008800) listen(r1, 0x0) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="18fea40000000000000000000000008036ffdf00d9322603e19545e7", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000183200000500000000000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00}, 0x94) 309.963237ms ago: executing program 1 (id=7606): syz_80211_inject_frame(0x0, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) (async) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0) (async) close(r1) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x1}, {0xffff, 0xa}, {0x1, 0x3}}}, 0x24}}, 0x40080) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000180)={0x4, &(0x7f0000000200)=[{}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}]}) 304.286579ms ago: executing program 3 (id=7607): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x8, 0x40}}]}, 0x38}, 0x1, 0xf2ff, 0x0, 0x4000}, 0x44080) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_deladdr={0x50, 0x15, 0x300, 0x70bd28, 0x25dfdbfb, {0x2, 0x1f, 0xb2, 0xc8, r3}, [@IFA_LOCAL={0x8, 0x2, @empty}, @IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_LABEL={0x14, 0x3, 'bond_slave_0\x00'}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x3, 0xb, 0x5}}]}, 0x50}}, 0x0) 247.998858ms ago: executing program 4 (id=7608): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001a00010000000000000000001c000000000000000000000408000100ff0001"], 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001a00010000000000000000001c000000000000000000000408000100ff0001"], 0x24}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(0x3) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) 247.622617ms ago: executing program 2 (id=7609): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0xf4, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0xec, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xbc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xb0, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x77}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x81}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7f}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6a}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x6, 0x4, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xfd}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xbb}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xa0}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x24, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25, 0x4}]}, 0x24}}, 0x0) 174.852401ms ago: executing program 2 (id=7610): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r3) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x38, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x4000894) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r5) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r7, 0x5452, &(0x7f0000000c80)=0xf4e) readv(r7, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0) writev(r7, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0x1}, {&(0x7f00000197c0)="1902e902d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5c2df6b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r9, 0x0, 0x20000000002) 166.522003ms ago: executing program 1 (id=7611): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x40) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x80000, @dev={0xfe, 0x80, '\x00', 0x36}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x80, 0x29, 0x4, {0x32, 0xc, '\x00', [@enc_lim={0x4, 0x1, 0xfd}, @enc_lim, @calipso={0x7, 0x20, {0x3, 0x6, 0x80, 0x3, [0x3ff, 0x9, 0x2f5]}}, @enc_lim={0x4, 0x1, 0x81}, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0x65}, @jumbo={0xc2, 0x4, 0x4}, @generic={0x0, 0x1d, "fa2fafc059d59f496d3656f771c60166e70b616450eb99e9d5970b5976"}]}}}], 0x80}, 0x440e0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="2f060000", @ANYRES16=r7, @ANYBLOB="0100000000000000000007000000140008000000000000000000000000000000000005001400ff000000"], 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x20000040) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r10, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r3) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x118, r11, 0x4, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x118}, 0x1, 0x0, 0x0, 0x400}, 0x4000000) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x2e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004600002010000000800290780000005c61000300880200000800907800060003"], 0x0) 165.98066ms ago: executing program 4 (id=7612): bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r0, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000380)="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", 0x0, 0xfe, 0x60000000, 0x4c, 0xfffffffe, &(0x7f0000000000), &(0x7f0000000000), 0x4, 0x0, 0x100000}, 0x2c) 0s ago: executing program 1 (id=7613): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)) (async, rerun: 32) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00 \x00', @ANYRES16=r3, @ANYBLOB="180b25bd7000ffdbdf250f00000018000180080009003a0000000c000700080000001b000000"], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4004054) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) (rerun: 32) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150600000000000000000100000028004180b974368700000000000000000000ffff0a010100060005004e220000060001000a000000"], 0x3c}, 0x5}, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x303}, "26a229470a81d41e", "7d0bf5a1dc1ee4a8950f059ba8389d9e", "572d0c01", "846160c6a083cd0e"}, 0x28) kernel console output (not intermixed with test programs): mode [ 416.737958][T26506] bridge_slave_0: entered promiscuous mode [ 416.747056][T26506] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.757491][T26506] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.765285][T26506] bridge_slave_1: entered allmulticast mode [ 416.773645][T26506] bridge_slave_1: entered promiscuous mode [ 416.820040][ T5624] Bluetooth: hci0: command 0x080f tx timeout [ 416.842370][T26654] ve: renamed from vlan0 [ 416.906158][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 416.953727][T26506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.004187][T26506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.072551][ T13] hsr_slave_0: left promiscuous mode [ 417.099733][ T13] hsr_slave_1: left promiscuous mode [ 417.109796][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.136444][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.168879][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.373876][ T13] team0 (unregistering): Port device team_slave_1 removed [ 417.405993][ T13] team0 (unregistering): Port device team_slave_0 removed [ 417.620344][T26506] team0: Port device team_slave_0 added [ 417.800412][T26506] team0: Port device team_slave_1 added [ 417.877852][T26716] netlink: 'syz.3.5850': attribute type 1 has an invalid length. [ 417.901335][T26506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.922005][T26506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.953451][T26506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.007694][T26716] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 418.007935][T26506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.036843][T26506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.074024][T26716] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 418.119640][T26506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.142284][T26716] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 418.227493][T26716] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 418.242398][ T13] IPVS: stop unused estimator thread 0... [ 418.326904][T26506] hsr_slave_0: entered promiscuous mode [ 418.355181][T26506] hsr_slave_1: entered promiscuous mode [ 418.379887][T26506] debugfs: 'hsr0' already exists in 'hsr' [ 418.386320][T26506] Cannot create hsr debugfs directory [ 418.413106][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 418.579665][ T5624] Bluetooth: hci1: command tx timeout [ 418.595970][T26757] netlink: 'syz.2.5859': attribute type 7 has an invalid length. [ 418.640692][T26757] netlink: 'syz.2.5859': attribute type 8 has an invalid length. [ 419.140635][T26785] netlink: 'syz.3.5863': attribute type 3 has an invalid length. [ 419.492816][T26811] netlink: 'syz.3.5867': attribute type 1 has an invalid length. [ 419.543246][T26811] __nla_validate_parse: 12 callbacks suppressed [ 419.543266][T26811] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5867'. [ 419.630996][T26818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5868'. [ 419.657088][T26811] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5867'. [ 419.670270][T26811] netlink: 658 bytes leftover after parsing attributes in process `syz.3.5867'. [ 419.724148][T26506] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 419.778141][T26506] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 419.796069][T26506] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 419.820623][T26506] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 419.845715][T26506] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 419.876824][T26506] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 419.902521][T26825] netlink: 'syz.2.5869': attribute type 1 has an invalid length. [ 419.913165][T26825] netlink: 'syz.2.5869': attribute type 1 has an invalid length. [ 419.918313][T26834] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5873'. [ 419.946680][T26837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5871'. [ 419.962929][T26506] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 419.987465][T26506] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 420.013362][T26825] syzkaller0: entered promiscuous mode [ 420.024504][T26825] syzkaller0: entered allmulticast mode [ 420.313342][T26835] syzkaller0: entered promiscuous mode [ 420.320076][T26835] syzkaller0: entered allmulticast mode [ 420.327297][T26858] batadv_slave_1: entered promiscuous mode [ 420.342375][T26856] batadv_slave_1: left promiscuous mode [ 420.497176][T26852] lo speed is unknown, defaulting to 1000 [ 420.507669][T26870] netlink: 'syz.2.5877': attribute type 11 has an invalid length. [ 420.659596][ T5624] Bluetooth: hci1: command tx timeout [ 420.785344][T26885] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20001 [ 420.804995][T26506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.988236][T26506] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.074420][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.081689][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.104097][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.111276][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.159649][T26912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5884'. [ 421.703393][T26956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5893'. [ 421.866771][T26977] syzkaller1: entered promiscuous mode [ 421.877104][T26977] syzkaller1: entered allmulticast mode [ 422.164580][T26506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.239861][T26506] veth0_vlan: entered promiscuous mode [ 422.271925][T26506] veth1_vlan: entered promiscuous mode [ 422.324068][T26506] veth0_macvtap: entered promiscuous mode [ 422.337508][T26506] veth1_macvtap: entered promiscuous mode [ 422.402597][T26506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.422976][T26506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.456889][ T5996] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.480652][ T5996] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.495324][ T5996] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.515549][ T5996] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.742824][ T5624] Bluetooth: hci1: command tx timeout [ 422.852615][T27039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5905'. [ 424.652667][T26956] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 424.696602][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.731285][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.817685][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.841203][T27058] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5910'. [ 424.846771][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.047968][T27082] netlink: 'syz.4.5916': attribute type 1 has an invalid length. [ 425.106155][T27082] 8021q: adding VLAN 0 to HW filter on device bond1 [ 425.118199][T27081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5915'. [ 425.141135][T27090] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5919'. [ 425.168314][T27081] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 425.225528][T27100] netlink: 27 bytes leftover after parsing attributes in process `syz.1.5922'. [ 425.253825][T27081] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 425.414524][T27119] netlink: 'syz.3.5925': attribute type 1 has an invalid length. [ 425.517925][T27127] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 425.713702][T27145] bond1: Unable to set up delay as MII monitoring is disabled [ 425.726448][T27145] bond1 (unregistering): Released all slaves [ 426.012891][T27169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5941'. [ 426.141820][T27178] netlink: 'syz.0.5943': attribute type 1 has an invalid length. [ 426.167138][T27175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5942'. [ 426.194786][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 426.205957][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 426.216074][ T5628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 426.228427][ T5628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 426.238273][T27178] 8021q: adding VLAN 0 to HW filter on device bond11 [ 426.251034][ T5628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 426.288369][T27189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5945'. [ 426.314756][T27197] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 426.335103][T27181] bond11: (slave gretap2): making interface the new active one [ 426.342005][T27189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5945'. [ 426.386335][T27181] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 426.654014][T27207] reject_tg6_check: 55 callbacks suppressed [ 426.654043][T27207] ip6t_REJECT: ECHOREPLY is not supported [ 426.654422][T27222] ip6t_REJECT: ECHOREPLY is not supported [ 426.731883][T27228] xt_cluster: node mask cannot exceed total number of nodes [ 426.742394][T27228] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 426.997687][T27185] lo speed is unknown, defaulting to 1000 [ 427.156840][T27264] netlink: 'syz.1.5955': attribute type 4 has an invalid length. [ 427.266378][T27270] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 427.586823][T27185] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.621465][T27185] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.647450][T27185] bridge_slave_0: entered allmulticast mode [ 427.660724][T27185] bridge_slave_0: entered promiscuous mode [ 427.683667][T27185] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.706229][T27185] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.714715][T27185] bridge_slave_1: entered allmulticast mode [ 427.723132][T27185] bridge_slave_1: entered promiscuous mode [ 427.825454][T27311] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.5968'. [ 427.837150][T27311] netlink: Unknown conntrack attr (type=2304, max=9) [ 427.881780][T27185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.906824][T27185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.946970][T27316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5970'. [ 428.013515][T27185] team0: Port device team_slave_0 added [ 428.053757][T27185] team0: Port device team_slave_1 added [ 428.171771][T27185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.186379][T27185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.231494][T27185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.272897][T27185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.280591][T27185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.314988][T27185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.339594][ T5624] Bluetooth: hci3: command tx timeout [ 428.406187][T27355] batadv1: entered allmulticast mode [ 428.529692][T27185] hsr_slave_0: entered promiscuous mode [ 428.542651][T27185] hsr_slave_1: entered promiscuous mode [ 428.552617][T27185] debugfs: 'hsr0' already exists in 'hsr' [ 428.559872][T27185] Cannot create hsr debugfs directory [ 428.636224][T27370] ±ÿª¨úrBº“: renamed from lo (while UP) [ 428.824077][T27185] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.839922][T27185] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 428.876683][T27391] netlink: 'syz.4.5989': attribute type 29 has an invalid length. [ 428.913157][T27391] netlink: 'syz.4.5989': attribute type 29 has an invalid length. [ 428.953402][T27185] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.969887][T27185] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 428.977989][T27396] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 428.991636][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.056796][T27396] xt_hashlimit: size too large, truncated to 1048576 [ 429.147269][T27185] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.163183][T27185] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 429.940195][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.019362][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.419255][ T5624] Bluetooth: hci3: command tx timeout [ 431.059802][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.260470][T27345] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 431.272107][T27185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 431.308590][T27185] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 431.326388][T27185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 431.357092][T27185] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 431.378221][T27185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 431.405020][T27185] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 431.426718][T27185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 431.445612][T27443] __nla_validate_parse: 5 callbacks suppressed [ 431.445643][T27443] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5997'. [ 431.452250][T27185] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 431.473371][T27443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5997'. [ 431.706899][T27185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.738578][T27185] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.762938][ T5996] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.770154][ T5996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.795212][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.802393][ T5996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.828317][T27479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6007'. [ 431.846798][T27476] netlink: 'syz.1.6006': attribute type 11 has an invalid length. [ 431.861261][T27479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6007'. [ 432.037936][T27493] syzkaller1: entered promiscuous mode [ 432.076565][T27493] syzkaller1: entered allmulticast mode [ 432.101457][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.168198][T27504] syzkaller0: entered promiscuous mode [ 432.189463][T27504] syzkaller0: entered allmulticast mode [ 432.294425][T27510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6013'. [ 432.373671][T27519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.500914][ T5624] Bluetooth: hci3: command tx timeout [ 432.667512][T27524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6017'. [ 432.978257][T27550] netlink: 'syz.1.6024': attribute type 17 has an invalid length. [ 432.987956][ T8593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.003988][T27550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6024'. [ 433.013526][T27185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.022795][T27550] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6024'. [ 433.027811][T27553] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 433.051283][T27550] erspan0: entered promiscuous mode [ 433.058503][T27550] erspan0: left promiscuous mode [ 433.064863][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.088137][T27551] bond0: entered promiscuous mode [ 433.095706][T27551] bond_slave_0: entered promiscuous mode [ 433.102243][T27551] bond_slave_1: entered promiscuous mode [ 433.117782][T27551] batadv0: entered promiscuous mode [ 433.140722][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.145076][T27551] debugfs: 'hsr1' already exists in 'hsr' [ 433.167252][T27551] Cannot create hsr debugfs directory [ 433.195419][T27551] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 433.217775][T27551] bond0: left promiscuous mode [ 433.227228][T27551] bond_slave_0: left promiscuous mode [ 433.234831][T27551] bond_slave_1: left promiscuous mode [ 433.242546][T27551] batadv0: left promiscuous mode [ 433.244040][T27563] netlink: 'syz.4.6026': attribute type 21 has an invalid length. [ 433.256639][T27563] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6026'. [ 433.283513][T27563] netlink: 'syz.4.6026': attribute type 5 has an invalid length. [ 433.291886][T27563] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6026'. [ 433.318530][T27561] syzkaller0: entered promiscuous mode [ 433.329727][T27561] syzkaller0: entered allmulticast mode [ 433.394660][T27185] veth0_vlan: entered promiscuous mode [ 433.432477][T27185] veth1_vlan: entered promiscuous mode [ 433.527751][T27580] xt_CT: You must specify a L4 protocol and not use inversions on it [ 433.542642][T27185] veth0_macvtap: entered promiscuous mode [ 433.557807][T27185] veth1_macvtap: entered promiscuous mode [ 433.632233][T27185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.781290][T10803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.781416][T27185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.800514][T27595] x_tables: duplicate underflow at hook 1 [ 433.854015][ T5998] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 433.878336][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.918494][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.963873][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.985495][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.032732][T27609] tipc: Enabling of bearer rejected, already enabled [ 434.179944][T10803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.256333][T17901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.285475][T17901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.351361][ T8591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.365431][ T6008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.402331][ T6008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.473439][T27637] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 434.480032][T27637] syzkaller1: Linktype set failed because interface is up [ 434.500387][T10803] syzkaller1: tun_net_xmit 90 [ 434.579970][ T5624] Bluetooth: hci3: command tx timeout [ 434.654089][T27655] macvlan0: left promiscuous mode [ 434.697935][T27655] netlink: 'syz.2.6052': attribute type 1 has an invalid length. [ 434.715854][T27655] netlink: 'syz.2.6052': attribute type 2 has an invalid length. [ 434.771981][T27663] netlink: 'syz.0.6056': attribute type 39 has an invalid length. [ 434.831495][T27663] hsr_slave_0: left promiscuous mode [ 434.877122][T27667] syzkaller0: entered promiscuous mode [ 434.885011][ T8591] IPVS: starting estimator thread 0... [ 434.892327][T27673] netlink: 'syz.0.6056': attribute type 1 has an invalid length. [ 434.892670][T27667] syzkaller0: entered allmulticast mode [ 434.906485][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.997669][T27673] 8021q: adding VLAN 0 to HW filter on device bond12 [ 435.007092][T27675] IPVS: using max 55 ests per chain, 132000 per kthread [ 435.029170][T27682] netlink: 'syz.2.6063': attribute type 4 has an invalid length. [ 435.037121][T27684] netlink: 'syz.4.6062': attribute type 1 has an invalid length. [ 435.037804][T27681] netlink: 'syz.2.6063': attribute type 4 has an invalid length. [ 435.077970][T27663] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 435.177766][T27663] bond12: entered promiscuous mode [ 435.201509][T27663] bond12: entered allmulticast mode [ 435.293840][T27708] vlan2: entered promiscuous mode [ 435.320719][T27708] hsr0: entered promiscuous mode [ 435.338403][T27708] vlan2: entered allmulticast mode [ 435.355818][T27708] hsr0: entered allmulticast mode [ 435.368072][T27708] hsr_slave_0: entered allmulticast mode [ 435.385591][T27708] hsr_slave_1: entered allmulticast mode [ 435.531151][ T29] audit: type=1804 audit(1782005036.134:18): pid=27719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6072" name="/newroot/509/cgroup.controllers" dev="tmpfs" ino=2617 res=1 errno=0 [ 435.584574][T27715] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 435.590365][ T29] audit: type=1800 audit(1782005036.134:19): pid=27719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6072" name="cgroup.controllers" dev="tmpfs" ino=2617 res=0 errno=0 [ 435.632650][T27715] bond1 (unregistering): Released all slaves [ 435.823220][T27738] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 435.843632][T27743] vlan2: entered promiscuous mode [ 435.857114][T27743] batadv0: entered promiscuous mode [ 435.865509][T27738] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 436.102719][T27761] 8021q: adding VLAN 0 to HW filter on device bond2 [ 436.132956][T27761] macvlan2: entered promiscuous mode [ 436.139517][T27761] macvlan2: entered allmulticast mode [ 436.147697][T27761] bond2: entered promiscuous mode [ 436.154197][T27761] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 436.164018][T27761] bond2: left promiscuous mode [ 436.305610][T27770] veth3: entered promiscuous mode [ 436.394161][T27782] veth0: entered promiscuous mode [ 436.410959][T27780] veth0: left promiscuous mode [ 436.571051][T27791] __nla_validate_parse: 26 callbacks suppressed [ 436.571090][T27791] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6092'. [ 436.592796][T27797] bond1: entered promiscuous mode [ 436.598019][T27797] bond1: entered allmulticast mode [ 436.605502][T27797] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.623733][T27795] veth0_to_bridge: entered promiscuous mode [ 436.641983][T27793] veth0_to_bridge: left promiscuous mode [ 436.755015][T27802] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6095'. [ 436.797747][T27809] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6099'. [ 437.346356][T27858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6112'. [ 437.375873][ T5996] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.409713][T17901] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.423463][T17901] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.445395][T17901] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.500081][T27863] Bluetooth: MGMT ver 1.23 [ 437.520000][T27861] syzkaller0: entered promiscuous mode [ 437.536679][T27861] syzkaller0: entered allmulticast mode [ 437.562652][T27868] geneve1: entered promiscuous mode [ 437.572468][T27868] geneve1: entered allmulticast mode [ 437.581340][ T5996] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.643580][ T5996] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.656038][ T5996] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.673780][ T5998] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.822685][T27881] xt_CT: You must specify a L4 protocol and not use inversions on it [ 437.823198][T27883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6117'. [ 437.882685][T27883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6117'. [ 437.918052][T27881] gre2: entered promiscuous mode [ 437.929445][T27881] gre2: entered allmulticast mode [ 437.946421][T27883] ip6gretap0: entered promiscuous mode [ 437.962873][T27883] syz_tun: entered promiscuous mode [ 437.976453][T27883] gretap0: entered promiscuous mode [ 437.983587][T27883] debugfs: 'hsr1' already exists in 'hsr' [ 437.990165][T27883] Cannot create hsr debugfs directory [ 438.075782][T27889] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.259001][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 438.411858][T27916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6131'. [ 438.413878][T27904] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.6126'. [ 438.453369][T27923] validate_nla: 6 callbacks suppressed [ 438.453402][T27923] netlink: 'syz.0.6132': attribute type 2 has an invalid length. [ 438.602454][T27943] nbd: couldn't find a device at index 1048580 [ 438.655948][T27945] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6137'. [ 438.714125][T27947] netlink: 'syz.0.6138': attribute type 6 has an invalid length. [ 438.775607][T27950] xt_connbytes: Forcing CT accounting to be enabled [ 438.784202][T27950] xt_bpf: check failed: parse error [ 438.807311][T27954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6141'. [ 438.947885][ T8591] hid-generic 0005:046D:0440.0004: item fetching failed at offset 2/3 [ 438.959972][ T8591] hid-generic 0005:046D:0440.0004: probe with driver hid-generic failed with error -22 [ 439.265694][T27989] netlink: 'syz.3.6152': attribute type 30 has an invalid length. [ 439.632686][T28020] syzkaller0: entered promiscuous mode [ 439.650045][T28020] syzkaller0: entered allmulticast mode [ 439.700289][T28023] team0 (unregistering): Port device team_slave_0 removed [ 439.791453][T28023] team0 (unregistering): Port device team_slave_1 removed [ 439.838289][T28038] netlink: 'syz.4.6166': attribute type 7 has an invalid length. [ 439.846519][T28038] netlink: 'syz.4.6166': attribute type 8 has an invalid length. [ 439.902552][T28038] syz_tun: entered promiscuous mode [ 439.911969][T28038] ip6gretap0: entered promiscuous mode [ 439.921941][T28038] gretap0: entered promiscuous mode [ 439.941205][T28038] debugfs: 'hsr1' already exists in 'hsr' [ 439.947571][T28038] Cannot create hsr debugfs directory [ 439.973154][ T13] nci: nci_rx_work: unknown MT 0x7 [ 440.124181][ T13] bridge_slave_1: left allmulticast mode [ 440.152762][ T13] bridge_slave_1: left promiscuous mode [ 440.171254][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.402136][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 440.411082][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 440.421509][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 440.430479][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 440.438371][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 440.480195][ T13] gretap0 (unregistering): left promiscuous mode [ 440.526157][ T13] bond5 (unregistering): (slave geneve2): Releasing active interface [ 440.570928][ T13] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.582158][ T13] .` (unregistering): Released all slaves [ 440.591756][ T13] bond1 (unregistering): Released all slaves [ 440.604167][ T13] bond2 (unregistering): Released all slaves [ 440.616076][ T13] bond3 (unregistering): Released all slaves [ 440.632312][ T13] bond4 (unregistering): Released all slaves [ 440.644172][ T13] bond5 (unregistering): Released all slaves [ 440.656019][ T13] bond0 (unregistering): Released all slaves [ 440.673652][ T13] bond6 (unregistering): Released all slaves [ 440.685974][ T13] bond7 (unregistering): Released all slaves [ 440.698182][ T13] bond8 (unregistering): Released all slaves [ 440.710803][ T13] bond9 (unregistering): Released all slaves [ 440.723221][ T13] bond10 (unregistering): Released all slaves [ 440.737603][ T13] bond11 (unregistering): Released all slaves [ 440.770352][T15663] bond8: (slave syz_tun): Removing an active aggregator [ 440.786457][T15663] bond8: (slave syz_tun): Releasing backup interface [ 440.857764][ T13] : left promiscuous mode [ 440.940991][ T13] tipc: Left network mode [ 441.197354][T28073] lo speed is unknown, defaulting to 1000 [ 441.393104][ T13] veth1_to_team: left promiscuous mode [ 441.403325][ T13] hsr_slave_0: left promiscuous mode [ 441.410558][ T13] hsr_slave_1: left promiscuous mode [ 441.417513][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.426655][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.440345][ T13] veth1_vlan: left allmulticast mode [ 441.445842][ T13] veth1_macvtap: left promiscuous mode [ 441.452522][ T13] veth0_macvtap: left promiscuous mode [ 441.458092][ T13] veth1_vlan: left promiscuous mode [ 441.742375][ T13] team0 (unregistering): Port device team_slave_1 removed [ 441.764884][ T13] team0 (unregistering): Port device team_slave_0 removed [ 441.866306][T28073] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.882698][T28073] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.890877][T28073] bridge_slave_0: entered allmulticast mode [ 441.898200][T28073] bridge_slave_0: entered promiscuous mode [ 441.909967][T28073] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.917832][T28073] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.926970][T28073] bridge_slave_1: entered allmulticast mode [ 441.935882][T28073] bridge_slave_1: entered promiscuous mode [ 441.979636][T28073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.994776][T28073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.040970][T28073] team0: Port device team_slave_0 added [ 442.051096][T28073] team0: Port device team_slave_1 added [ 442.088040][T28073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.097926][T28073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.126532][T28073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.142467][ T13] IPVS: stop unused estimator thread 0... [ 442.155542][T28073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.170386][T28073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.199966][T28073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.260556][T28073] hsr_slave_0: entered promiscuous mode [ 442.280845][T28073] hsr_slave_1: entered promiscuous mode [ 442.287961][T28073] debugfs: 'hsr0' already exists in 'hsr' [ 442.295232][T28073] Cannot create hsr debugfs directory [ 442.499268][ T5628] Bluetooth: hci4: command tx timeout [ 442.905814][T28043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 442.925574][T28073] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 442.967647][T28073] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 443.002912][T28073] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 443.037361][T28073] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 443.072463][T28073] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 443.140000][T28168] __nla_validate_parse: 9 callbacks suppressed [ 443.140019][T28168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6180'. [ 443.171734][T28073] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 443.198069][T28073] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 443.245367][T28073] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 443.532265][T28073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.610652][T28073] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.668506][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.676085][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.728712][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.736304][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.774914][T28227] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6194'. [ 443.803926][T28227] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6194'. [ 444.025897][T28244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6196'. [ 444.140939][T28253] net_ratelimit: 3 callbacks suppressed [ 444.140957][T28253] openvswitch: netlink: EtherType 50a is less than min 600 [ 444.423772][T28269] Bluetooth: MGMT ver 1.23 [ 444.580682][ T5628] Bluetooth: hci4: command tx timeout [ 444.645561][T28279] netlink: 'syz.0.6205': attribute type 1 has an invalid length. [ 444.830121][T28285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.915377][T28285] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 445.010329][T28073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.059785][T28306] syzkaller0: entered promiscuous mode [ 445.085022][T28306] syzkaller0: entered allmulticast mode [ 445.141896][T28306] tipc: Started in network mode [ 445.149907][T28306] tipc: Node identity c27a31cac5a, cluster identity 4711 [ 445.186096][T28306] tipc: Enabled bearer , priority 0 [ 445.237100][T28305] tipc: Resetting bearer [ 445.270316][T28305] tipc: Disabling bearer [ 445.324465][T28073] veth0_vlan: entered promiscuous mode [ 445.382688][T28073] veth1_vlan: entered promiscuous mode [ 445.478489][T28073] veth0_macvtap: entered promiscuous mode [ 445.510244][T28073] veth1_macvtap: entered promiscuous mode [ 445.578592][T28073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.644055][T28073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.690686][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.727723][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.735597][T28347] netlink: 'syz.1.6223': attribute type 1 has an invalid length. [ 445.774925][T28347] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6223'. [ 445.791158][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.801908][T28347] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6223'. [ 445.829753][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.852198][T28347] netlink: 'syz.1.6223': attribute type 1 has an invalid length. [ 445.911137][T28347] netlink: 'syz.1.6223': attribute type 8 has an invalid length. [ 445.941808][T28347] netlink: 606 bytes leftover after parsing attributes in process `syz.1.6223'. [ 446.205432][ T5996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.205453][T28378] bond0: Error: CAN devices cannot be enslaved [ 446.237450][ T5996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.256669][T28359] netlink: 284 bytes leftover after parsing attributes in process `syz.4.6224'. [ 446.354443][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.395068][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.516068][T28395] ipt_REJECT: ECHOREPLY no longer supported. [ 446.662035][ T5628] Bluetooth: hci4: command tx timeout [ 446.705214][T28407] sctp: [Deprecated]: syz.3.6230 (pid 28407) Use of int in max_burst socket option. [ 446.705214][T28407] Use struct sctp_assoc_value instead [ 446.915608][T28403] syzkaller0: entered promiscuous mode [ 446.924909][T28403] syzkaller0: entered allmulticast mode [ 447.018486][T28428] netlink: 'syz.3.6236': attribute type 23 has an invalid length. [ 447.139273][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 447.178151][T28425] vlan2: left promiscuous mode [ 447.185115][T28425] hsr0: left promiscuous mode [ 447.194227][T28432] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6237'. [ 447.265611][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.273203][ T5996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.587014][T28451] netlink: 'syz.0.6244': attribute type 3 has an invalid length. [ 447.655944][T28458] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6246'. [ 447.697896][T28462] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 447.881894][T28468] netlink: 'syz.3.6249': attribute type 1 has an invalid length. [ 447.955203][T28468] bond2: entered promiscuous mode [ 447.965169][T28468] 8021q: adding VLAN 0 to HW filter on device bond2 [ 448.001125][T28468] 8021q: adding VLAN 0 to HW filter on device bond2 [ 448.010805][T28468] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 448.024522][T28468] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 448.037544][T28468] bond2: (slave vti0): making interface the new active one [ 448.046334][T28468] vti0: entered promiscuous mode [ 448.056824][T28468] vti0: left promiscuous mode [ 448.066480][T28487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.087117][T28487] syzkaller0: entered promiscuous mode [ 448.093640][T28487] syzkaller0: entered allmulticast mode [ 448.155701][T28491] syz_tun: entered allmulticast mode [ 448.164693][T28490] syz_tun: left allmulticast mode [ 448.303224][T28499] netlink: 45 bytes leftover after parsing attributes in process `syz.4.6262'. [ 448.306971][T28497] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6259'. [ 448.328238][T28499] syzkaller0: entered promiscuous mode [ 448.344555][T28499] syzkaller0: entered allmulticast mode [ 448.606624][T28523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6271'. [ 448.627567][T28525] syzkaller0: entered promiscuous mode [ 448.634914][T28525] syzkaller0: entered allmulticast mode [ 448.645318][T28525] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6272'. [ 448.691178][T28528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6273'. [ 448.701337][T28528] openvswitch: netlink: Missing key (keys=40, expected=80) [ 448.738834][ T5628] Bluetooth: hci4: command tx timeout [ 448.774292][T28532] netlink: 'syz.0.6276': attribute type 4 has an invalid length. [ 448.863779][T28541] netlink: 'syz.1.6277': attribute type 1 has an invalid length. [ 448.910265][T28541] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 448.910940][T28546] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6279'. [ 448.936849][T28546] netlink: 184020 bytes leftover after parsing attributes in process `syz.0.6279'. [ 448.987463][T28556] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20002 [ 449.013485][T28556] netlink: 'syz.2.6282': attribute type 58 has an invalid length. [ 449.032420][T28556] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6282'. [ 449.072406][T28558] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 449.260178][T28574] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.6285'. [ 449.327726][T28579] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6289'. [ 449.488316][ T5996] nci: nci_ntf_packet: unknown ntf opcode 0x25 [ 449.739892][T28610] netlink: 'syz.2.6300': attribute type 1 has an invalid length. [ 449.784004][T28612] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 449.827644][T28612] syzkaller0: entered promiscuous mode [ 449.833793][T28612] syzkaller0: entered allmulticast mode [ 449.971396][T28623] FAULT_INJECTION: forcing a failure. [ 449.971396][T28623] name failslab, interval 1, probability 0, space 0, times 0 [ 449.985264][T28623] CPU: 1 UID: 0 PID: 28623 Comm: syz.4.6303 Not tainted syzkaller #0 PREEMPT(full) [ 449.985288][T28623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 449.985301][T28623] Call Trace: [ 449.985312][T28623] [ 449.985319][T28623] dump_stack_lvl+0xe8/0x150 [ 449.985342][T28623] should_fail_ex+0x40c/0x560 [ 449.985361][T28623] should_failslab+0xa8/0x100 [ 449.985385][T28623] __kmalloc_cache_noprof+0x88/0x660 [ 449.985404][T28623] ? __kasan_kmalloc+0x93/0xb0 [ 449.985425][T28623] ? fl_init+0x53/0x1d0 [ 449.985442][T28623] fl_init+0x53/0x1d0 [ 449.985458][T28623] tcf_proto_create+0x248/0x330 [ 449.985476][T28623] tc_new_tfilter+0x13c9/0x1850 [ 449.985503][T28623] ? __pfx_tc_new_tfilter+0x10/0x10 [ 449.985525][T28623] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 449.985544][T28623] ? rcu_is_watching+0x15/0xb0 [ 449.985561][T28623] ? rcu_is_watching+0x15/0xb0 [ 449.985576][T28623] ? __pfx_tc_new_tfilter+0x10/0x10 [ 449.985589][T28623] ? lock_release+0x4b/0x3c0 [ 449.985607][T28623] ? bpf_lsm_capable+0x9/0x20 [ 449.985623][T28623] ? security_capable+0x7e/0x2c0 [ 449.985648][T28623] ? __pfx_tc_new_tfilter+0x10/0x10 [ 449.985661][T28623] rtnetlink_rcv_msg+0x802/0xc00 [ 449.985682][T28623] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 449.985700][T28623] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 449.985718][T28623] ? ref_tracker_free+0x689/0x830 [ 449.985737][T28623] ? __pfx_ref_tracker_free+0x10/0x10 [ 449.985758][T28623] netlink_rcv_skb+0x226/0x4a0 [ 449.985779][T28623] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 449.985807][T28623] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 449.985834][T28623] ? netlink_deliver_tap+0x2e/0x1b0 [ 449.985858][T28623] netlink_unicast+0x7bb/0x940 [ 449.985882][T28623] netlink_sendmsg+0x813/0xb40 [ 449.985907][T28623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.985930][T28623] ? aa_sock_msg_perm+0xf1/0x1b0 [ 449.985946][T28623] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 449.985964][T28623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.985986][T28623] ____sys_sendmsg+0x9b9/0xa20 [ 449.986012][T28623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 449.986034][T28623] ? lock_release+0x4b/0x3c0 [ 449.986056][T28623] ? import_iovec+0x73/0xa0 [ 449.986077][T28623] ___sys_sendmsg+0x2a5/0x360 [ 449.986097][T28623] ? _parse_integer_limit+0x1ae/0x1f0 [ 449.986114][T28623] ? __pfx____sys_sendmsg+0x10/0x10 [ 449.986136][T28623] ? kstrtouint+0x6e/0xe0 [ 449.986162][T28623] ? rcu_is_watching+0x15/0xb0 [ 449.986178][T28623] ? lock_release+0x4b/0x3c0 [ 449.986198][T28623] ? __might_fault+0xcb/0x130 [ 449.986218][T28623] __sys_sendmmsg+0x273/0x4d0 [ 449.986241][T28623] ? __pfx___sys_sendmmsg+0x10/0x10 [ 449.986266][T28623] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 449.986293][T28623] ? ksys_write+0x242/0x270 [ 449.986313][T28623] ? __pfx_ksys_write+0x10/0x10 [ 449.986331][T28623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.986351][T28623] __x64_sys_sendmmsg+0xa0/0xc0 [ 449.986371][T28623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.986386][T28623] do_syscall_64+0x174/0x580 [ 449.986405][T28623] ? trace_irq_disable+0x3b/0x140 [ 449.986423][T28623] ? clear_bhb_loop+0x40/0x90 [ 449.986440][T28623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.986453][T28623] RIP: 0033:0x7fafd659ce59 [ 449.986468][T28623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.986481][T28623] RSP: 002b:00007fafd47ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 449.986498][T28623] RAX: ffffffffffffffda RBX: 00007fafd6815fa0 RCX: 00007fafd659ce59 [ 449.986509][T28623] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 449.986519][T28623] RBP: 00007fafd47ee090 R08: 0000000000000000 R09: 0000000000000000 [ 449.986528][T28623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 449.986537][T28623] R13: 00007fafd6816038 R14: 00007fafd6815fa0 R15: 00007ffd5d5e4408 [ 449.986554][T28623] [ 450.402441][T28587] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 450.473637][T28606] netlink: 'syz.0.6297': attribute type 1 has an invalid length. [ 450.566430][T28630] netlink: 'syz.1.6305': attribute type 1 has an invalid length. [ 450.575642][T28630] netlink: 'syz.1.6305': attribute type 2 has an invalid length. [ 450.885689][T28655] netlink: 'syz.0.6315': attribute type 1 has an invalid length. [ 450.933268][T28655] 8021q: adding VLAN 0 to HW filter on device bond13 [ 450.973195][T28655] bond13: (slave geneve3): making interface the new active one [ 450.984733][T28655] bond13: (slave geneve3): Enslaving as an active interface with an up link [ 450.990602][T28664] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 451.000763][T28664] IPv6: NLM_F_CREATE should be set when creating new route [ 451.061888][ T5628] Bluetooth: hci4: command tx timeout [ 451.103834][T28674] netlink: 'syz.0.6320': attribute type 1 has an invalid length. [ 451.136520][T28674] netlink: 'syz.0.6320': attribute type 1 has an invalid length. [ 451.153641][T28674] netlink: 'syz.0.6320': attribute type 2 has an invalid length. [ 451.195966][T28681] netlink: 'syz.4.6323': attribute type 11 has an invalid length. [ 451.944751][T28721] veth9: entered allmulticast mode [ 452.059834][T28728] syzkaller0: entered promiscuous mode [ 452.068561][T28728] syzkaller0: entered allmulticast mode [ 452.103715][T28743] syzkaller1: entered promiscuous mode [ 452.110199][T28743] syzkaller1: entered allmulticast mode [ 452.241643][T28751] nbd: must specify an index to disconnect [ 452.616566][T28768] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 452.626684][T28761] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 452.712433][T28780] netlink: 'syz.2.6355': attribute type 12 has an invalid length. [ 453.146526][T28820] netlink: 'syz.3.6364': attribute type 61 has an invalid length. [ 453.169905][T28822] FAULT_INJECTION: forcing a failure. [ 453.169905][T28822] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 453.186561][T28822] CPU: 1 UID: 0 PID: 28822 Comm: syz.0.6365 Not tainted syzkaller #0 PREEMPT(full) [ 453.186586][T28822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 453.186596][T28822] Call Trace: [ 453.186602][T28822] [ 453.186609][T28822] dump_stack_lvl+0xe8/0x150 [ 453.186632][T28822] should_fail_ex+0x40c/0x560 [ 453.186652][T28822] _copy_from_user+0x2d/0xb0 [ 453.186673][T28822] ___sys_sendmsg+0x1c6/0x360 [ 453.186695][T28822] ? _parse_integer_limit+0x1ae/0x1f0 [ 453.186712][T28822] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.186735][T28822] ? kstrtouint+0x6e/0xe0 [ 453.186763][T28822] ? rcu_is_watching+0x15/0xb0 [ 453.186779][T28822] ? lock_release+0x4b/0x3c0 [ 453.186800][T28822] ? __might_fault+0xcb/0x130 [ 453.186820][T28822] __sys_sendmmsg+0x273/0x4d0 [ 453.186843][T28822] ? __pfx___sys_sendmmsg+0x10/0x10 [ 453.186868][T28822] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 453.186896][T28822] ? ksys_write+0x242/0x270 [ 453.186917][T28822] ? __pfx_ksys_write+0x10/0x10 [ 453.186939][T28822] __x64_sys_sendmmsg+0xa0/0xc0 [ 453.186959][T28822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.186975][T28822] do_syscall_64+0x174/0x580 [ 453.186994][T28822] ? trace_irq_disable+0x3b/0x140 [ 453.187013][T28822] ? clear_bhb_loop+0x40/0x90 [ 453.187030][T28822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.187045][T28822] RIP: 0033:0x7ff02dd9ce59 [ 453.187060][T28822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.187073][T28822] RSP: 002b:00007ff02ebc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 453.187090][T28822] RAX: ffffffffffffffda RBX: 00007ff02e015fa0 RCX: 00007ff02dd9ce59 [ 453.187102][T28822] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 453.187113][T28822] RBP: 00007ff02ebc8090 R08: 0000000000000000 R09: 0000000000000000 [ 453.187123][T28822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 453.187132][T28822] R13: 00007ff02e016038 R14: 00007ff02e015fa0 R15: 00007ffe2b90d7b8 [ 453.187152][T28822] [ 453.201666][T28824] veth0_macvtap: entered allmulticast mode [ 453.418500][T28824] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 453.441598][T28831] syzkaller0: entered promiscuous mode [ 453.447388][T28831] syzkaller0: entered allmulticast mode [ 453.643627][T28847] IPVS: set_ctl: invalid protocol: 0 172.20.20.36:20001 [ 453.661662][T28847] __nla_validate_parse: 36 callbacks suppressed [ 453.661684][T28847] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6371'. [ 453.750137][T28856] tunl0: entered promiscuous mode [ 453.767027][T28856] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6372'. [ 453.783062][T28856] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6372'. [ 453.813023][T28856] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6372'. [ 453.833846][T28842] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 453.850634][T28863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6375'. [ 453.861801][T28856] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6372'. [ 453.877352][T28838] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 453.893580][T28856] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6372'. [ 453.930088][T28856] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6372'. [ 453.946424][T28856] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6372'. [ 453.957880][T28856] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6372'. [ 453.981785][T28868] syz_tun: entered allmulticast mode [ 453.990879][T28867] syz_tun: left allmulticast mode [ 454.120544][T28878] IPv6: NLM_F_CREATE should be specified when creating new route [ 454.623875][T28916] bond1: entered promiscuous mode [ 454.646194][T28916] bond1: entered allmulticast mode [ 454.669755][T28916] syzkaller0: entered promiscuous mode [ 454.690634][T28916] syzkaller0: entered allmulticast mode [ 455.322852][T28982] syzkaller0: entered promiscuous mode [ 455.353476][T28982] syzkaller0: entered allmulticast mode [ 455.440353][T28996] vlan2: entered allmulticast mode [ 455.457810][T28996] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 455.591850][T29010] validate_nla: 70 callbacks suppressed [ 455.591883][T29010] netlink: 'syz.0.6412': attribute type 1 has an invalid length. [ 455.628540][T29010] netlink: 'syz.0.6412': attribute type 1 has an invalid length. [ 455.641527][T29010] netlink: 'syz.0.6412': attribute type 8 has an invalid length. [ 455.765996][T29025] netlink: 'syz.4.6416': attribute type 11 has an invalid length. [ 456.003713][T29046] netlink: 'syz.2.6421': attribute type 10 has an invalid length. [ 456.051667][T29046] team0: Port device geneve1 added [ 456.252871][T29074] netlink: 'syz.3.6433': attribute type 2 has an invalid length. [ 456.407763][T29087] ip6t_srh: unknown srh match flags 4000 [ 456.471089][T29094] ipt_REJECT: TCP_RESET invalid for non-tcp [ 456.897110][T29130] syzkaller0: entered promiscuous mode [ 456.906346][T29130] syzkaller0: entered allmulticast mode [ 457.573942][T29142] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.582050][T29142] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.190268][T29142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.251661][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 458.259543][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 458.260750][T29142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.277963][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 458.292572][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 458.300965][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 458.502512][T29142] vlan2: left allmulticast mode [ 458.507718][T29142] hsr0: left allmulticast mode [ 458.516233][T29142] hsr_slave_0: left allmulticast mode [ 458.525349][T29142] hsr_slave_1: left allmulticast mode [ 458.594664][T29153] netlink: 'syz.2.6459': attribute type 3 has an invalid length. [ 458.662686][ T35] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.705235][ T35] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.737765][ T35] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.769716][ T35] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.780859][ T35] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.790814][ T35] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.808004][T29177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.838363][ T35] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.862327][ T35] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.931317][T29193] block nbd2: Unsupported socket: should be TCP or UNIX. [ 459.054346][T29200] syzkaller0: entered promiscuous mode [ 459.073094][T29200] syzkaller0: entered allmulticast mode [ 459.106349][T29200] __nla_validate_parse: 73 callbacks suppressed [ 459.106379][T29200] netlink: 236 bytes leftover after parsing attributes in process `syz.3.6468'. [ 459.125180][T29210] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6470'. [ 459.127527][T29211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6470'. [ 459.146372][T29200] netlink: 236 bytes leftover after parsing attributes in process `syz.3.6468'. [ 459.251729][T29216] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6472'. [ 459.263741][T29167] lo speed is unknown, defaulting to 1000 [ 459.266449][T29220] netlink: 'syz.2.6473': attribute type 5 has an invalid length. [ 459.829985][T29252] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 459.848514][T29252] bond3 (unregistering): Released all slaves [ 459.902514][T29270] netlink: 412 bytes leftover after parsing attributes in process `syz.2.6479'. [ 459.912503][T29270] openvswitch: netlink: Flow key attr not present in new flow. [ 460.150441][T29296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6485'. [ 460.217431][T29167] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.235776][T29167] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.252005][T29167] bridge_slave_0: entered allmulticast mode [ 460.264279][T29167] bridge_slave_0: entered promiscuous mode [ 460.273354][T29167] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.281160][T29167] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.289547][T29167] bridge_slave_1: entered allmulticast mode [ 460.297343][T29167] bridge_slave_1: entered promiscuous mode [ 460.339416][ T5628] Bluetooth: hci5: command tx timeout [ 460.341745][T29167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.378457][T29167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.411737][T29167] team0: Port device team_slave_0 added [ 460.421750][T29167] team0: Port device team_slave_1 added [ 460.455679][T29167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.476888][T29167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.504679][T29317] openvswitch: netlink: Key 7 has unexpected len 2 expected 12 [ 460.515194][T29316] netlink: 'syz.2.6493': attribute type 83 has an invalid length. [ 460.519257][T29167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.550033][T29316] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6493'. [ 460.552039][T29322] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6495'. [ 460.582570][T29167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.598218][T29167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.648468][T29326] netlink: 'syz.1.6497': attribute type 1 has an invalid length. [ 460.658259][T29167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.715959][T29333] netlink: 'syz.3.6500': attribute type 1 has an invalid length. [ 460.726530][T29333] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6500'. [ 460.744622][T29326] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.852033][T29167] hsr_slave_0: entered promiscuous mode [ 460.859645][T29167] hsr_slave_1: entered promiscuous mode [ 460.865980][T29167] debugfs: 'hsr0' already exists in 'hsr' [ 460.873154][T29167] Cannot create hsr debugfs directory [ 460.911860][T29326] bond1: (slave veth5): Enslaving as an active interface with a down link [ 460.928469][T29344] syzkaller1: entered promiscuous mode [ 460.935150][T29344] syzkaller1: entered allmulticast mode [ 460.960776][T29330] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 460.968539][T29330] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 461.154873][T29167] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.171060][T29167] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.230871][T29167] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.268183][T29167] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.346778][T29167] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.380036][T29167] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.456386][T29389] netlink: 'syz.4.6515': attribute type 23 has an invalid length. [ 461.472544][T29167] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.484408][T29167] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.626590][T29167] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 461.638320][T29167] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 461.661435][T29167] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 461.687153][T29167] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 461.704977][T29404] xt_l2tp: wrong L2TP version: 0 [ 461.728111][T29167] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 461.820420][T29408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.834736][T29167] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 461.852525][T29167] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 461.873461][T29167] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 462.076849][T29430] x_tables: duplicate underflow at hook 2 [ 462.087106][T29167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.138068][T29167] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.181876][T17901] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.189445][T17901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.207510][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.214681][ T5996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.227593][T29434] syzkaller0: entered promiscuous mode [ 462.234705][T29434] syzkaller0: entered allmulticast mode [ 462.422337][ T5628] Bluetooth: hci5: command tx timeout [ 462.463218][T29459] netlink: 'syz.2.6530': attribute type 1 has an invalid length. [ 462.505252][T29459] netlink: 'syz.2.6530': attribute type 1 has an invalid length. [ 462.554799][T29450] netlink: 'syz.2.6530': attribute type 1 has an invalid length. [ 462.563849][T29450] netlink: 'syz.2.6530': attribute type 1 has an invalid length. [ 462.715468][T29476] nbd: couldn't find a device at index 4 [ 462.905529][T29490] netlink: 'syz.1.6541': attribute type 1 has an invalid length. [ 462.972998][T29490] bond2: entered promiscuous mode [ 462.987736][T29490] 8021q: adding VLAN 0 to HW filter on device bond2 [ 463.042991][T29490] bond2: entered allmulticast mode [ 463.050373][T29504] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 463.053666][T29167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.123827][T29490] bond2: (slave bridge1): making interface the new active one [ 463.143000][T29490] bridge1: entered promiscuous mode [ 463.154843][T29490] bridge1: entered allmulticast mode [ 463.173523][T29490] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 463.278457][T29167] veth0_vlan: entered promiscuous mode [ 463.294597][T29167] veth1_vlan: entered promiscuous mode [ 463.387380][T29167] veth0_macvtap: entered promiscuous mode [ 463.414612][T29167] veth1_macvtap: entered promiscuous mode [ 463.456470][T29167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.492472][T29167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.507911][T29550] syzkaller0: entered promiscuous mode [ 463.519820][T29550] syzkaller0: entered allmulticast mode [ 463.525711][T29557] netlink: 'syz.3.6556': attribute type 1 has an invalid length. [ 463.561558][T29557] bond3: entered promiscuous mode [ 463.566960][T29557] 8021q: adding VLAN 0 to HW filter on device bond3 [ 463.581115][ T82] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.594732][T29557] bond3: entered allmulticast mode [ 463.603683][ T82] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.627606][T29557] bond3: (slave bridge1): making interface the new active one [ 463.636957][T29557] bridge1: entered promiscuous mode [ 463.643006][T29557] bridge1: entered allmulticast mode [ 463.650830][T29557] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 463.664466][ T82] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.674185][ T82] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.792725][T29568] netlink: 'syz.3.6559': attribute type 4 has an invalid length. [ 464.419486][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 464.499287][ T5628] Bluetooth: hci5: command tx timeout [ 466.350916][T29539] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 466.408003][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.431423][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.461438][T29584] dvmrp0: entered allmulticast mode [ 466.477887][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.491373][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.579861][ T5628] Bluetooth: hci5: command tx timeout [ 466.694934][T29605] __nla_validate_parse: 25 callbacks suppressed [ 466.694951][T29605] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6570'. [ 466.725052][T29604] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 466.744619][T29612] syzkaller0: entered promiscuous mode [ 466.754947][T29612] syzkaller0: entered allmulticast mode [ 466.942476][T29617] bridge0: entered promiscuous mode [ 466.957277][T29617] bridge0: entered allmulticast mode [ 467.203498][T29642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.434753][T29655] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6586'. [ 467.477197][T29657] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6587'. [ 467.506256][T29658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6587'. [ 467.516796][T29658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6587'. [ 467.581643][T29665] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6589'. [ 467.754135][T29671] team_slave_1: entered promiscuous mode [ 467.784866][T29671] team0: Port device team_slave_1 removed [ 467.791762][T29678] netlink: 'syz.3.6592': attribute type 11 has an invalid length. [ 467.814389][T29678] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6592'. [ 467.838244][T29675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 467.871796][T29678] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6592'. [ 467.907722][T29681] netlink: 'syz.1.6594': attribute type 2 has an invalid length. [ 468.052565][T29692] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6599'. [ 468.434598][ T29] audit: type=1800 audit(1782005069.044:20): pid=29724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6606" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1060 res=0 errno=0 [ 468.552387][T29731] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6608'. [ 468.796708][T29748] netlink: 'syz.4.6613': attribute type 1 has an invalid length. [ 468.999817][T29767] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 470.230379][T29698] Set syz1 is full, maxelem 65536 reached [ 470.310145][T29785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.689481][T29741] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 471.857321][T29800] tipc: New replicast peer: 0.0.0.0 [ 471.867756][T29800] tipc: Enabled bearer , priority 10 [ 471.911161][T29800] __nla_validate_parse: 34 callbacks suppressed [ 471.911193][T29800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6626'. [ 471.976077][T29809] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6625'. [ 472.083884][T29817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6631'. [ 472.104961][T29817] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6631'. [ 472.116919][T29817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6631'. [ 472.254486][T29827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6632'. [ 473.009416][T29820] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 473.166071][T29848] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6640'. [ 473.179508][T29848] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6640'. [ 473.597087][T11804] tipc: Node number set to 131740106 [ 473.792755][T29865] siw: device registration error -23 [ 473.914938][T29870] netlink: 'syz.2.6647': attribute type 1 has an invalid length. [ 473.939510][T29870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6647'. [ 474.534911][T29908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6660'. [ 475.259811][T29958] erspan0: entered promiscuous mode [ 477.542777][T29910] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 477.556815][T29940] __nla_validate_parse: 2 callbacks suppressed [ 477.556832][T29940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6668'. [ 477.629779][T29965] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6677'. [ 477.635640][T29964] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 477.648374][T29966] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6677'. [ 477.875590][T29980] netlink: 'syz.2.6681': attribute type 2 has an invalid length. [ 477.903413][T29980] netlink: 'syz.2.6681': attribute type 2 has an invalid length. [ 478.006752][T29994] netlink: 'syz.4.6687': attribute type 3 has an invalid length. [ 478.084674][T30000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6691'. [ 478.253930][T30013] syzkaller0: entered promiscuous mode [ 478.279913][T30013] syzkaller0: entered allmulticast mode [ 478.336610][T30027] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6693'. [ 478.402864][T30028] netlink: 232 bytes leftover after parsing attributes in process `syz.3.6697'. [ 478.403592][T30030] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6699'. [ 478.457293][T30033] netlink: 'syz.1.6700': attribute type 1 has an invalid length. [ 478.490717][T30033] bond4: entered promiscuous mode [ 478.496591][T30033] 8021q: adding VLAN 0 to HW filter on device bond4 [ 478.589525][T30039] 8021q: adding VLAN 0 to HW filter on device bond4 [ 478.597580][T30039] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 478.620096][T30039] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 478.643173][T30039] bond4: (slave vti0): making interface the new active one [ 478.651812][T30039] vti0: entered promiscuous mode [ 478.659874][T30039] vti0: left promiscuous mode [ 478.715405][T30043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6702'. [ 478.742984][T30043] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6702'. [ 478.755365][T30043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6702'. [ 478.766178][T30045] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 478.861524][T30034] syzkaller0: entered promiscuous mode [ 478.867142][T30034] syzkaller0: entered allmulticast mode [ 479.209014][T30080] netlink: 'syz.4.6715': attribute type 178 has an invalid length. [ 479.452229][T30098] bridge_slave_0: left allmulticast mode [ 479.461709][T30098] bridge_slave_0: left promiscuous mode [ 479.468222][T30098] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.525853][T30098] bridge_slave_1: left allmulticast mode [ 479.553652][T30098] bridge_slave_1: left promiscuous mode [ 479.567777][T30098] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.600220][T30098] bond0: (slave bond_slave_0): Releasing backup interface [ 479.617525][T30098] bond0: (slave bond_slave_1): Releasing backup interface [ 479.637669][T30098] team0: Port device team_slave_0 removed [ 479.657469][T30098] team0: Port device team_slave_1 removed [ 479.667885][T30098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.676926][T30098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.690434][T30098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.700882][T30098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.714351][T30098] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 479.744407][T30104] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 480.009270][T30134] 8021q: adding VLAN 0 to HW filter on device bond4 [ 480.017930][T30134] bridge0: port 3(bond4) entered blocking state [ 480.027696][T30134] bridge0: port 3(bond4) entered disabled state [ 480.035385][T30134] bond4: entered allmulticast mode [ 480.045130][T30134] bond4: entered promiscuous mode [ 480.053842][T30134] bridge0: port 3(bond4) entered blocking state [ 480.060710][T30134] bridge0: port 3(bond4) entered forwarding state [ 480.103804][ T35] bridge0: port 3(bond4) entered disabled state [ 480.176072][T30155] netlink: 'syz.0.6734': attribute type 1 has an invalid length. [ 480.187862][T30155] netlink: 'syz.0.6734': attribute type 2 has an invalid length. [ 480.356493][T30170] bridge0: left promiscuous mode [ 480.363642][T30170] bridge0: left allmulticast mode [ 480.384706][T30170] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 480.456969][T30165] syzkaller0: entered promiscuous mode [ 480.484553][T30165] syzkaller0: entered allmulticast mode [ 480.611019][T30180] tipc: Started in network mode [ 480.621893][T30180] tipc: Node identity aea3190aef7b, cluster identity 4711 [ 480.652012][T30180] tipc: Enabled bearer , priority 0 [ 480.701205][T30184] netlink: 'syz.4.6742': attribute type 3 has an invalid length. [ 480.731599][T30180] syzkaller0: entered promiscuous mode [ 480.731705][T30184] netlink: 'syz.4.6742': attribute type 3 has an invalid length. [ 480.744173][T30180] syzkaller0: entered allmulticast mode [ 480.865762][T30190] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 480.966122][T30198] tipc: Resetting bearer [ 481.005277][T30180] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 481.368034][T30222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.469808][ T5628] Bluetooth: hci3: command tx timeout [ 481.490076][T30179] tipc: Resetting bearer [ 481.532666][ T35] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xa [ 481.682378][T30179] tipc: Disabling bearer [ 481.734236][T30237] team0 (unregistering): Port device team_slave_0 removed [ 481.806709][T30236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.907002][T30245] netlink: 'syz.1.6759': attribute type 1 has an invalid length. [ 482.064582][T30259] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 482.409100][T30304] netlink: 'syz.4.6775': attribute type 2 has an invalid length. [ 482.467399][T30310] xt_hashlimit: size too large, truncated to 1048576 [ 482.533930][T30318] bridge_slave_0 (unregistering): left allmulticast mode [ 482.548523][T30318] bridge_slave_0 (unregistering): left promiscuous mode [ 482.561132][T30318] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.582118][T30322] __nla_validate_parse: 12 callbacks suppressed [ 482.582137][T30322] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6779'. [ 482.609848][T30322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6779'. [ 482.816821][T30340] xt_TCPMSS: Only works on TCP SYN packets [ 483.012248][T30355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6787'. [ 483.026895][T30355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.044303][T30355] netlink: 'syz.4.6787': attribute type 27 has an invalid length. [ 483.063344][T30355] netlink: 'syz.4.6787': attribute type 4 has an invalid length. [ 483.072195][T30355] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6787'. [ 483.083121][T30348] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6786'. [ 483.092917][T30348] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6786'. [ 483.209955][T30368] netlink: 'syz.0.6791': attribute type 1 has an invalid length. [ 483.311241][T30379] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6793'. [ 483.397703][T30387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6796'. [ 483.429554][T30387] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6796'. [ 483.538419][T30393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.763811][T30408] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6799'. [ 483.842019][T30420] ipvlan2: entered allmulticast mode [ 483.847682][T30420] batadv_slave_1: entered allmulticast mode [ 483.857587][T30420] batman_adv: batadv0: Adding interface: ipvlan2 [ 483.884510][T30420] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.913976][T30420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.968473][T30420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.980351][T30420] batman_adv: batadv0: Interface activated: ipvlan2 [ 484.045166][T30430] IPv6: addrconf: prefix option has invalid lifetime [ 484.087199][T30432] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 484.396767][T30457] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 484.404224][T30461] validate_nla: 3 callbacks suppressed [ 484.404242][T30461] netlink: 'syz.1.6818': attribute type 64 has an invalid length. [ 484.526912][T30481] openvswitch: netlink: Key type 218 is out of range max 32 [ 484.810754][T30504] IPv6: NLM_F_CREATE should be specified when creating new route [ 484.819408][ T5628] Bluetooth: hci5: command 0x0405 tx timeout [ 484.852065][T30512] tipc: Enabling of bearer rejected, failed to enable media [ 484.934019][T24294] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.952926][T24294] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.995657][T24294] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.006272][T24294] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.393446][T30550] 8021q: adding VLAN 0 to HW filter on device bond4 [ 485.407250][T30542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 485.463188][T30556] netlink: 'syz.1.6843': attribute type 63 has an invalid length. [ 485.505257][T30550] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 485.514770][T30560] x_tables: duplicate underflow at hook 4 [ 485.535143][T30560] netlink: 'syz.1.6843': attribute type 63 has an invalid length. [ 485.639557][T30559] syzkaller0: entered promiscuous mode [ 485.678151][T30559] syzkaller0: entered allmulticast mode [ 485.765572][T30575] netlink: 'syz.2.6849': attribute type 1 has an invalid length. [ 485.812521][T30575] syzkaller0: entered promiscuous mode [ 485.818314][T30575] syzkaller0: entered allmulticast mode [ 486.002643][T30584] xt_CT: You must specify a L4 protocol and not use inversions on it [ 486.034638][T30591] tipc: Started in network mode [ 486.116752][T30591] tipc: Node identity ac14140f, cluster identity 4711 [ 486.150442][T30591] tipc: New replicast peer: 255.255.255.255 [ 486.190712][T30591] tipc: Enabled bearer , priority 10 [ 486.369864][T30612] netlink: 'syz.4.6854': attribute type 1 has an invalid length. [ 486.382256][T30609] syzkaller0: entered promiscuous mode [ 486.392377][T30615] netlink: 'syz.2.6858': attribute type 1 has an invalid length. [ 486.412718][T30609] syzkaller0: entered allmulticast mode [ 486.806876][T30648] syzkaller0: entered promiscuous mode [ 486.820375][T30648] syzkaller0: entered allmulticast mode [ 486.856023][T30650] netlink: 'syz.2.6870': attribute type 30 has an invalid length. [ 487.497192][ T8583] tipc: Node number set to 2886997007 [ 487.596501][T30705] netlink: 'syz.4.6885': attribute type 97 has an invalid length. [ 487.621660][T30693] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 487.647233][T30693] bond5 (unregistering): Released all slaves [ 487.705228][T30715] rdma_op ffff8880774a41f0 conn xmit_rdma 0000000000000000 [ 487.721599][T30703] 8021q: VLANs not supported on gre0 [ 487.833596][T30725] netlink: 'syz.3.6891': attribute type 12 has an invalid length. [ 488.102365][T30749] __nla_validate_parse: 33 callbacks suppressed [ 488.102384][T30749] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6896'. [ 488.234179][T30758] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6897'. [ 488.281949][T30753] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6898'. [ 488.312048][T30758] syzkaller1: entered promiscuous mode [ 488.329846][T30758] syzkaller1: entered allmulticast mode [ 488.544117][T30817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6901'. [ 488.580223][T30817] netlink: 'syz.2.6901': attribute type 8 has an invalid length. [ 488.647725][T30826] bridge2: entered allmulticast mode [ 488.877458][T30889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6909'. [ 489.012186][T30906] 8021q: VLANs not supported on ip_vti0 [ 489.244597][T30913] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 489.251466][T30913] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 489.374264][T30923] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6920'. [ 489.435248][T30929] ipt_REJECT: TCP_RESET invalid for non-tcp [ 489.526951][T30936] netlink: 'syz.4.6925': attribute type 49 has an invalid length. [ 489.542119][T30934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6924'. [ 489.551806][T30936] ip6gretap0: left promiscuous mode [ 489.600790][T30936] ip6gretap0: entered promiscuous mode [ 489.610321][T30936] ip6gretap0: entered allmulticast mode [ 489.786593][T30947] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6927'. [ 489.799081][T30947] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6927'. [ 489.810781][T30947] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6927'. [ 489.955131][T30953] vlan0: entered allmulticast mode [ 489.978983][T30953] veth0_vlan: entered allmulticast mode [ 490.222858][T30972] ip6erspan0: entered allmulticast mode [ 490.262914][T30976] mac80211_hwsim hwsim72 wlan0: entered promiscuous mode [ 490.418084][T30991] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 490.505466][T30998] Cannot find set identified by id 65534 to match [ 490.555985][T31000] xt_TCPMSS: Only works on TCP SYN packets [ 490.861774][T31017] can: request_module (can-proto-0) failed. [ 490.872754][T31022] veth0_macvtap: left promiscuous mode [ 491.054660][T31034] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 491.140759][T31038] nbd: must specify a size in bytes for the device [ 491.642538][ T6008] syzkaller0: tun_net_xmit 76 [ 491.661178][T31060] syzkaller0: create flow: hash 398833595 index 2 [ 491.671223][ T6008] syzkaller0: tun_net_xmit 48 [ 491.676203][ T8595] syzkaller0: tun_net_xmit 76 [ 491.718816][T31059] syzkaller0: delete flow: hash 398833595 index 2 [ 491.738813][ T8595] syzkaller0: tun_net_xmit 76 [ 491.901877][T31082] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.221391][T31097] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 492.452601][T31125] netlink: 'syz.2.6974': attribute type 11 has an invalid length. [ 492.546518][T31134] netlink: 'syz.1.6978': attribute type 12 has an invalid length. [ 492.721620][T31150] netlink: 'syz.3.6982': attribute type 1 has an invalid length. [ 492.730270][T31150] netlink: 'syz.3.6982': attribute type 1 has an invalid length. [ 492.753154][T31150] policy can only be matched on NF_INET_PRE_ROUTING [ 492.753172][T31150] unable to load match [ 492.910980][T31155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.925187][T31155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.008418][T31155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.020672][T31155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.090001][T31155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.100917][T31155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.159183][T31155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.173371][T31155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.286085][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.295069][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.322005][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.336948][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.355745][ T5998] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.358040][T31178] openvswitch: netlink: IP tunnel dst address not specified [ 493.365317][ T5998] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.394126][ T5998] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.403098][ T5998] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.446916][T31178] __nla_validate_parse: 20 callbacks suppressed [ 493.446933][T31178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6988'. [ 493.536596][T31187] netlink: 116 bytes leftover after parsing attributes in process `syz.1.6990'. [ 493.684263][T31197] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6992'. [ 493.711123][T31198] syzkaller0: entered promiscuous mode [ 493.723567][T31198] syzkaller0: entered allmulticast mode [ 493.749417][T31201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6994'. [ 493.772593][T31201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6994'. [ 493.862108][T31212] netlink: 'syz.1.7000': attribute type 2 has an invalid length. [ 493.873906][T31212] netlink: 'syz.1.7000': attribute type 2 has an invalid length. [ 493.876253][T31215] openvswitch: netlink: Missing valid actions attribute. [ 493.892470][T31215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.900254][T31216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6998'. [ 494.051446][T31227] netlink: 'syz.3.7004': attribute type 39 has an invalid length. [ 494.145839][T31236] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7007'. [ 494.155816][T31236] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7007'. [ 494.201897][T31240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.216309][T31240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7009'. [ 494.501137][T31254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7014'. [ 494.715077][T31266] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 494.734512][T31266] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.742026][T31266] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.065449][T31290] bridge_slave_1: left allmulticast mode [ 495.091479][T31290] bridge_slave_1: left promiscuous mode [ 495.098695][T31290] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.131641][T31297] netlink: 'syz.1.7026': attribute type 4 has an invalid length. [ 495.163947][T31301] tipc: Started in network mode [ 495.176779][T31301] tipc: Node identity 8a06fb75dc0b, cluster identity 4711 [ 495.188515][T31301] tipc: Enabled bearer , priority 0 [ 495.198069][T31301] syzkaller0: entered promiscuous mode [ 495.206823][T31301] syzkaller0: entered allmulticast mode [ 495.366803][T31301] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 495.383909][T31301] sit0: mtu less than device minimum [ 495.408595][T31292] tipc: Resetting bearer [ 495.452296][T31292] tipc: Disabling bearer [ 495.649394][T31337] pimreg: entered allmulticast mode [ 495.841880][T31356] syzkaller0: entered promiscuous mode [ 495.847505][T31356] syzkaller0: entered allmulticast mode [ 496.231387][T31383] netlink: 'syz.4.7051': attribute type 10 has an invalid length. [ 496.240313][T31383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.250873][T31383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.288199][T31381] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 496.294732][T31381] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 496.303197][T31381] hsr_slave_0: left promiscuous mode [ 496.309867][T31381] hsr_slave_1: left promiscuous mode [ 496.387197][T31387] bond0: entered promiscuous mode [ 496.397162][T31387] batadv0: entered promiscuous mode [ 496.403360][T31387] debugfs: 'hsr0' already exists in 'hsr' [ 496.409432][T31387] Cannot create hsr debugfs directory [ 496.415100][T31387] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 496.433327][T31387] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 496.449433][T31387] bond0: left promiscuous mode [ 496.455635][T31387] batadv0: left promiscuous mode [ 497.699846][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 498.635755][T31337] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 498.730446][T31421] __nla_validate_parse: 13 callbacks suppressed [ 498.730467][T31421] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7061'. [ 498.916990][T31440] netlink: 'syz.4.7066': attribute type 39 has an invalid length. [ 498.940817][T31441] netlink: 'syz.4.7066': attribute type 39 has an invalid length. [ 498.963609][T31441] syz_tun (unregistering): left promiscuous mode [ 499.042914][T31451] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7068'. [ 499.053760][T31451] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7068'. [ 499.112407][T31449] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 499.119304][T31449] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 499.151184][ T5628] block nbd7: Receive control failed (result -32) [ 499.521487][T31495] sctp: [Deprecated]: syz.3.7082 (pid 31495) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.521487][T31495] Use struct sctp_sack_info instead [ 499.541445][T31495] sctp: [Deprecated]: syz.3.7082 (pid 31495) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.541445][T31495] Use struct sctp_sack_info instead [ 499.571297][T31495] sctp: [Deprecated]: syz.3.7082 (pid 31495) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.571297][T31495] Use struct sctp_sack_info instead [ 499.588493][T31495] sctp: [Deprecated]: syz.3.7082 (pid 31495) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.588493][T31495] Use struct sctp_sack_info instead [ 499.607117][T31495] sctp: [Deprecated]: syz.3.7082 (pid 31495) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.607117][T31495] Use struct sctp_sack_info instead [ 499.672092][T31495] sctp: [Deprecated]: syz.3.7082 (pid 31495) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.672092][T31495] Use struct sctp_sack_info instead [ 499.712989][T31495] sctp: [Deprecated]: syz.3.7082 (pid 31495) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.712989][T31495] Use struct sctp_sack_info instead [ 499.730639][T31495] sctp: [Deprecated]: syz.3.7082 (pid 31495) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.730639][T31495] Use struct sctp_sack_info instead [ 499.750180][T31495] sctp: [Deprecated]: syz.3.7082 (pid 31495) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.750180][T31495] Use struct sctp_sack_info instead [ 499.767970][T31495] sctp: [Deprecated]: syz.3.7082 (pid 31495) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.767970][T31495] Use struct sctp_sack_info instead [ 499.794233][T31510] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7086'. [ 499.805004][T31510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7086'. [ 500.011020][T31524] netlink: 'syz.1.7093': attribute type 1 has an invalid length. [ 500.054555][T31521] 8021q: adding VLAN 0 to HW filter on device bond5 [ 500.063315][T31521] bridge0: port 4(bond5) entered blocking state [ 500.070794][T31521] bridge0: port 4(bond5) entered disabled state [ 500.077528][T31521] bond5: entered allmulticast mode [ 500.085575][T31521] bond5: entered promiscuous mode [ 500.089208][T31534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7092'. [ 500.092832][T31521] bridge0: port 4(bond5) entered blocking state [ 500.106143][T31521] bridge0: port 4(bond5) entered forwarding state [ 500.168219][T31532] syzkaller0: entered promiscuous mode [ 500.190443][T31532] syzkaller0: entered allmulticast mode [ 500.310953][T31545] syzkaller0: entered promiscuous mode [ 500.325270][T31545] syzkaller0: entered allmulticast mode [ 500.336667][T31532] netlink: 'syz.4.7094': attribute type 5 has an invalid length. [ 500.351583][T31545] bond0: entered allmulticast mode [ 500.357612][T31545] bond_slave_0: entered allmulticast mode [ 500.365273][T31545] bond_slave_1: entered allmulticast mode [ 500.433731][T31554] netlink: 'syz.2.7100': attribute type 9 has an invalid length. [ 500.701170][T31589] syzkaller1: entered promiscuous mode [ 500.724182][T31589] syzkaller1: entered allmulticast mode [ 500.754217][T31581] tc action pedit unable to extract header offset for header type (0x5) [ 500.763809][T31581] netlink: 'syz.2.7108': attribute type 9 has an invalid length. [ 500.764374][T31593] veth0: entered promiscuous mode [ 500.837831][T31593] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7111'. [ 500.887868][T31602] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7113'. [ 500.971006][T31609] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7113'. [ 500.981289][ T82] bridge0: port 4(bond5) entered disabled state [ 500.998501][T31592] veth0: left promiscuous mode [ 501.107021][T31617] syzkaller0: entered promiscuous mode [ 501.114720][T31617] syzkaller0: entered allmulticast mode [ 501.193291][T31621] team0: Device ipvlan2 is already an upper device of the team interface [ 501.416279][T31634] syzkaller0: entered promiscuous mode [ 501.435373][T31634] syzkaller0: entered allmulticast mode [ 501.562861][T31651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 501.587955][T31651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 501.622462][T31651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 501.655644][T31655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7128'. [ 501.666265][T31651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 501.697721][T31651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 501.720331][T31651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 501.743980][T31651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 501.773909][T31651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 501.817736][ T5624] block nbd8: Receive control failed (result -107) [ 501.821930][T31651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 501.853112][T31651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 501.874418][T31650] nbd8: detected capacity change from 0 to 63 [ 501.886056][ T5628] block nbd8: Receive control failed (result -32) [ 501.895757][T30183] block nbd8: Dead connection, failed to find a fallback [ 501.914492][T30183] block nbd8: shutting down sockets [ 501.928810][T30183] blk_print_req_error: 138 callbacks suppressed [ 501.928843][T30183] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.947959][T30183] buffer_io_error: 138 callbacks suppressed [ 501.947989][T30183] Buffer I/O error on dev nbd8, logical block 0, async page read [ 501.980827][T30183] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 502.010811][T30183] Buffer I/O error on dev nbd8, logical block 1, async page read [ 502.030538][T30183] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 502.051367][T30183] Buffer I/O error on dev nbd8, logical block 2, async page read [ 502.078339][T30183] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 502.121033][T30183] Buffer I/O error on dev nbd8, logical block 3, async page read [ 502.152864][T30183] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 502.188044][T30183] Buffer I/O error on dev nbd8, logical block 0, async page read [ 502.219962][T30183] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 502.240315][T30183] Buffer I/O error on dev nbd8, logical block 1, async page read [ 502.250867][T30183] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 502.262600][T30183] Buffer I/O error on dev nbd8, logical block 2, async page read [ 502.272138][T30183] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 502.283971][T30183] Buffer I/O error on dev nbd8, logical block 3, async page read [ 502.294215][T30183] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 502.332064][T30183] Buffer I/O error on dev nbd8, logical block 0, async page read [ 502.369786][T30183] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 502.386271][T30183] Buffer I/O error on dev nbd8, logical block 1, async page read [ 502.415830][T31705] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20002 [ 502.452098][T30183] ldm_validate_partition_table(): Disk read failed. [ 502.471642][T30183] Dev nbd8: unable to read RDB block 0 [ 502.482541][T30183] nbd8: unable to read partition table [ 502.497104][T30183] ldm_validate_partition_table(): Disk read failed. [ 502.526656][T30183] Dev nbd8: unable to read RDB block 0 [ 502.543927][T30183] nbd8: unable to read partition table [ 502.675464][T31713] xfrm1: entered promiscuous mode [ 502.698304][T31713] xfrm1: entered allmulticast mode [ 502.752351][T31734] syzkaller1: entered promiscuous mode [ 502.777920][T31734] syzkaller1: entered allmulticast mode [ 502.811048][T31729] xt_ipcomp: unknown flags 1D [ 502.915875][T31750] set match dimension is over the limit! [ 502.940774][T31741] syzkaller0: entered promiscuous mode [ 502.957616][T31741] syzkaller0: entered allmulticast mode [ 503.275037][T31774] netlink: 'syz.4.7155': attribute type 1 has an invalid length. [ 503.362813][T31774] 8021q: adding VLAN 0 to HW filter on device bond5 [ 503.404203][T31780] bond5: (slave veth3): Enslaving as an active interface with a down link [ 503.439827][T31774] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 503.502845][T31774] bond5: (slave veth5): Enslaving as an active interface with a down link [ 503.513617][T31774] netlink: 'syz.4.7155': attribute type 1 has an invalid length. [ 503.524715][T31774] netlink: 'syz.4.7155': attribute type 2 has an invalid length. [ 503.605245][T31806] netlink: 'syz.1.7163': attribute type 1 has an invalid length. [ 503.608367][T31807] netlink: 'syz.1.7163': attribute type 1 has an invalid length. [ 503.618780][T31784] nbd9: detected capacity change from 0 to 63 [ 503.644426][T31806] 8021q: adding VLAN 0 to HW filter on device bond5 [ 503.694245][T31806] bond5: (slave veth9): Enslaving as an active interface with a down link [ 503.723506][ T5628] block nbd9: Receive control failed (result -104) [ 503.730679][T31807] bond5: (slave veth0_to_bond): making interface the new active one [ 503.731606][T31807] veth0_to_bond: entered promiscuous mode [ 503.739860][ T5624] block nbd9: Receive control failed (result -32) [ 503.745213][T31807] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 503.840227][T31806] bond5: (slave veth11): Enslaving as an active interface with a down link [ 503.872725][T31806] netlink: 'syz.1.7163': attribute type 1 has an invalid length. [ 503.913883][T31806] netlink: 'syz.1.7163': attribute type 2 has an invalid length. [ 503.979643][T31826] __nla_validate_parse: 4 callbacks suppressed [ 503.979660][T31826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7168'. [ 504.002128][T31826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7168'. [ 504.077319][T31827] sctp: [Deprecated]: syz.2.7169 (pid 31827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 504.077319][T31827] Use struct sctp_sack_info instead [ 504.111961][T31827] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7169'. [ 504.359533][T31853] bond3: option packets_per_slave: invalid value (18446744073709551613) [ 504.367990][T31853] bond3: option packets_per_slave: allowed values 0 - 65535 [ 504.378322][T31853] bond3 (unregistering): Released all slaves [ 504.417395][T31857] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7177'. [ 504.437255][T31857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7177'. [ 504.578543][T31869] netlink: 'syz.2.7180': attribute type 11 has an invalid length. [ 504.649986][T31880] syzkaller0: entered promiscuous mode [ 504.663162][T31880] syzkaller0: entered allmulticast mode [ 504.877451][T31893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7187'. [ 504.963102][T31903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.016738][T31911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7193'. [ 505.022261][T31901] bond3: (slave gre0): Device is not bonding slave [ 505.033045][T31901] bond3: option active_slave: invalid value (gre0) [ 505.045382][T31901] bond3 (unregistering): Released all slaves [ 505.086690][T31916] tipc: Enabled bearer , priority 9 [ 505.117469][T31911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7193'. [ 505.187847][T31921] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7195'. [ 505.202494][T31921] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7195'. [ 505.668263][T11804] IPVS: starting estimator thread 0... [ 505.683630][T31975] validate_nla: 1 callbacks suppressed [ 505.683646][T31975] netlink: 'syz.0.7207': attribute type 30 has an invalid length. [ 505.770237][T31977] IPVS: using max 47 ests per chain, 112800 per kthread [ 506.215367][ T8595] tipc: Node number set to 1443756917 [ 506.433221][T32025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.471650][T32036] veth0: entered promiscuous mode [ 506.495947][T32035] veth0: left promiscuous mode [ 506.696392][T32058] bond1: entered promiscuous mode [ 506.703138][T32058] bond1: entered allmulticast mode [ 506.709400][T32058] 8021q: adding VLAN 0 to HW filter on device bond1 [ 506.848575][T32071] nbd: couldn't find a device at index 4 [ 506.938980][T32076] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 506.972451][T32076] netlink: 'syz.0.7239': attribute type 5 has an invalid length. [ 507.130077][T32083] syzkaller0: entered promiscuous mode [ 507.136232][T32083] syzkaller0: entered allmulticast mode [ 507.157225][T32087] net_ratelimit: 112 callbacks suppressed [ 507.157242][T32087] openvswitch: netlink: Message has 8 unknown bytes. [ 507.172108][T32083] lo speed is unknown, defaulting to 1000 [ 507.188094][T32087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.294996][T32038] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 507.312276][T32038] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 507.508195][T32112] tipc: Enabled bearer , priority 0 [ 507.605527][T32112] syzkaller0: entered promiscuous mode [ 507.612793][T32112] syzkaller0: entered allmulticast mode [ 507.620461][T32112] tipc: Resetting bearer [ 507.642721][T32108] tipc: Resetting bearer [ 507.713047][T32108] tipc: Disabling bearer [ 507.873352][T32117] syzkaller0: entered promiscuous mode [ 507.897482][T32117] syzkaller0: entered allmulticast mode [ 508.239406][T32160] netlink: 'syz.4.7262': attribute type 1 has an invalid length. [ 508.392568][ T5624] Bluetooth: hci5: link tx timeout [ 508.398394][ T5624] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 508.409191][ T5628] Bluetooth: hci5: link tx timeout [ 508.414975][ T5628] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 508.568282][T32187] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 508.587795][T32187] openvswitch: netlink: Message has 8 unknown bytes. [ 508.599364][T32187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.728021][T32196] netlink: 'syz.3.7274': attribute type 1 has an invalid length. [ 508.817376][T32198] syzkaller0: entered promiscuous mode [ 508.827177][T32198] syzkaller0: entered allmulticast mode [ 508.892772][T32196] 8021q: adding VLAN 0 to HW filter on device bond6 [ 509.096306][T32216] __nla_validate_parse: 20 callbacks suppressed [ 509.096338][T32216] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7277'. [ 509.135931][T32197] infiniband syz0: set active [ 509.142131][T32197] infiniband syz0: added veth0_vlan [ 509.179816][T32197] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 509.229550][T32197] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 509.250583][T32197] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 509.293234][T32197] RDS/IB: syz0: added [ 509.319790][T32197] smc: adding ib device syz0 with port count 1 [ 509.342670][T32197] smc: ib device syz0 port 1 has no pnetid [ 509.354374][T32234] netlink: 'syz.0.7282': attribute type 1 has an invalid length. [ 509.371571][T32234] netlink: 'syz.0.7282': attribute type 2 has an invalid length. [ 509.384862][T32234] netlink: 'syz.0.7282': attribute type 1 has an invalid length. [ 509.405417][T32234] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7282'. [ 509.439607][T32234] netlink: 'syz.0.7282': attribute type 4 has an invalid length. [ 509.462583][T32242] netlink: 'syz.3.7284': attribute type 10 has an invalid length. [ 510.063040][T32229] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 510.077778][T32247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7285'. [ 510.178469][T32257] netlink: 'syz.2.7288': attribute type 1 has an invalid length. [ 510.194094][T32257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7288'. [ 510.231296][T32257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7288'. [ 510.254279][T32261] syzkaller0: entered promiscuous mode [ 510.273239][T32261] syzkaller0: entered allmulticast mode [ 510.418775][ T5628] Bluetooth: hci5: command 0x0405 tx timeout [ 510.900460][T32298] tipc: Started in network mode [ 510.910674][T32298] tipc: Node identity ac14142f, cluster identity 4711 [ 510.918055][T32298] tipc: New replicast peer: 0.0.0.0 [ 510.928226][T32298] tipc: Enabled bearer , priority 10 [ 510.937511][T32305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7299'. [ 511.213474][T32319] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7305'. [ 511.495067][T32337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7311'. [ 511.668244][T32346] can: request_module (can-proto-0) failed. [ 511.739638][T32346] validate_nla: 3 callbacks suppressed [ 511.739657][T32346] netlink: 'syz.3.7316': attribute type 3 has an invalid length. [ 511.845960][T32360] 8021q: VLANs not supported on sit0 [ 511.883783][T32360] batman_adv: batadv0: Adding interface: dummy0 [ 511.903607][T32360] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.981365][T32360] batman_adv: batadv0: Interface activated: dummy0 [ 512.001486][T32351] batadv0: mtu less than device minimum [ 512.049521][T11804] tipc: Node number set to 2886997039 [ 512.145963][T32371] team0: entered promiscuous mode [ 512.157134][T32375] block nbd0: reconnected socket [ 512.157173][ T5624] block nbd0: Receive control failed (result -107) [ 512.178035][T32373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7325'. [ 512.179388][T32371] team_slave_0: entered promiscuous mode [ 512.195085][T32371] team_slave_1: entered promiscuous mode [ 512.255090][T32373] Bluetooth: MGMT ver 1.23 [ 512.275455][T32379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7329'. [ 512.286168][T32379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.378774][T32392] tipc: Failed to remove unknown binding: 66,0,0/131740106:1990069499/1990069501 [ 512.389768][T32392] tipc: Failed to remove unknown binding: 66,0,0/131740106:1990069499/1990069500 [ 512.402694][T32392] tipc: Failed to remove unknown binding: 66,0,0/131740106:1990069499/1990069501 [ 512.413485][T32392] tipc: Failed to remove unknown binding: 66,0,0/131740106:1990069499/1990069500 [ 512.553140][T32403] syzkaller0: entered promiscuous mode [ 512.571229][T32403] syzkaller0: entered allmulticast mode [ 512.667037][T32415] Cannot find map_set index 135 as target [ 512.683540][T32413] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 512.695654][T32413] bond2 (unregistering): Released all slaves [ 513.275999][T32462] netlink: 'syz.1.7353': attribute type 15 has an invalid length. [ 513.445469][T32480] openvswitch: netlink: IPv4 tunnel dst address is zero [ 513.714616][T32496] nbd: must specify a device to reconfigure [ 513.975937][T32493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.022298][T32493] team_slave_1: left promiscuous mode [ 514.037051][T32493] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 514.048591][T32493] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 514.064475][T32493] veth1_vlan: left promiscuous mode [ 514.071631][T32493] veth0_vlan: left promiscuous mode [ 514.077741][T32493] veth0_vlan: entered promiscuous mode [ 514.086542][T32493] veth1_vlan: entered promiscuous mode [ 514.102857][T32493] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 514.114388][T32493] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 514.136395][T32493] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 514.163476][T32493] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 514.177148][T32493] mac80211_hwsim hwsim72 wlan0: left promiscuous mode [ 514.197753][T32493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 514.212718][T32493] 8021q: adding VLAN 0 to HW filter on device bond2 [ 514.252862][T32493] 8021q: adding VLAN 0 to HW filter on device bond3 [ 514.263741][T32493] xfrm1: left promiscuous mode [ 514.324396][T32506] geneve2: entered promiscuous mode [ 514.330482][T32506] geneve2: entered allmulticast mode [ 514.336051][T32507] netlink: 'syz.3.7366': attribute type 12 has an invalid length. [ 514.347293][T32507] netlink: 'syz.3.7366': attribute type 29 has an invalid length. [ 514.366895][T32507] __nla_validate_parse: 8 callbacks suppressed [ 514.366913][T32507] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7366'. [ 514.401779][T32507] netlink: 'syz.3.7366': attribute type 1 has an invalid length. [ 514.414826][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.442111][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.458572][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.469121][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.485204][T32519] vlan3: entered allmulticast mode [ 514.507944][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.516962][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.529808][ T82] bond5: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 514.541142][ T82] bond5: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 514.551774][ T82] bond5: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 514.561569][ T82] bond5: (slave veth3): making interface the new active one [ 514.570844][ T82] bond5: active interface up! [ 514.595335][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.617967][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.636711][T32534] netlink: 'syz.0.7373': attribute type 1 has an invalid length. [ 514.738061][T32534] 8021q: adding VLAN 0 to HW filter on device bond2 [ 514.791094][T32541] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 514.804013][T32541] bond7 (unregistering): Released all slaves [ 514.840014][ T5998] veth0_to_bond: left promiscuous mode [ 514.928499][T32547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7379'. [ 515.657804][T32609] xt_CT: No such helper "snmp_trap" [ 515.711684][T32615] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 515.809670][T32625] netlink: 'syz.4.7398': attribute type 22 has an invalid length. [ 515.825534][T32622] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7399'. [ 515.843179][T32625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7398'. [ 515.886210][T32630] sock: sock_timestamping_bind_phc: sock not bind to device [ 515.891218][T32622] syzkaller0: entered promiscuous mode [ 515.899915][T32622] syzkaller0: entered allmulticast mode [ 515.910199][T32625] netlink: 'syz.4.7398': attribute type 22 has an invalid length. [ 515.918295][T32625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7398'. [ 516.243483][T32649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7408'. [ 516.281649][T32650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7406'. [ 516.332623][T32650] netlink: 'syz.1.7406': attribute type 1 has an invalid length. [ 516.367117][T32657] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7410'. [ 516.406060][T32650] 8021q: adding VLAN 0 to HW filter on device bond6 [ 516.522173][T32650] bond6: (slave geneve2): making interface the new active one [ 516.580826][T32650] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 516.627939][T32674] tipc: Trying to set illegal importance in message [ 516.751872][T32680] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7414'. [ 516.806645][T32680] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7414'. [ 516.912634][T32694] tipc: Disabling bearer [ 517.291113][T32725] netlink: 'syz.1.7430': attribute type 11 has an invalid length. [ 517.297568][T32728] netlink: 'syz.0.7431': attribute type 9 has an invalid length. [ 517.332017][T32724] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 517.407965][T32733] lo: entered promiscuous mode [ 517.428943][T32733] tunl0: entered promiscuous mode [ 517.462236][T32733] gre0: entered promiscuous mode [ 517.486853][T32733] gretap0: entered promiscuous mode [ 517.516693][T32733] erspan0: entered promiscuous mode [ 517.534167][T32733] ip_vti0: entered promiscuous mode [ 517.552151][T32735] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 517.579267][T32735] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 517.604482][T32735] gretap1: entered promiscuous mode [ 517.617237][T32735] gretap1: entered allmulticast mode [ 517.625560][T32740] C: renamed from lo [ 517.643619][T32740] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 517.811840][ T302] veth1_macvtap: left promiscuous mode [ 518.165102][ T330] netlink: 'syz.4.7453': attribute type 1 has an invalid length. [ 518.178248][ T333] netlink: 'syz.3.7452': attribute type 10 has an invalid length. [ 518.178579][ T330] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 518.191406][ T333] batman_adv: batadv0: Interface deactivated: dummy0 [ 518.212188][ T333] batman_adv: batadv0: Removing interface: dummy0 [ 518.285303][ T343] syzkaller0: entered promiscuous mode [ 518.292282][ T343] syzkaller0: entered allmulticast mode [ 518.460203][ T356] syzkaller0: entered promiscuous mode [ 518.465737][ T356] syzkaller0: entered allmulticast mode [ 521.014036][ T315] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 521.024202][ T372] __nla_validate_parse: 9 callbacks suppressed [ 521.024229][ T372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7461'. [ 521.094273][ T395] netlink: 'syz.4.7469': attribute type 32 has an invalid length. [ 521.111620][ T395] batadv_slave_1: entered promiscuous mode [ 521.147705][ T395] netlink: 'syz.4.7469': attribute type 32 has an invalid length. [ 521.276608][ T409] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7474'. [ 521.293063][ T404] netlink: 'syz.4.7473': attribute type 15 has an invalid length. [ 521.316617][ T404] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7473'. [ 521.319875][ T397] pim6reg: entered allmulticast mode [ 521.342343][ T411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7475'. [ 521.378535][ T416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7477'. [ 521.546850][ T426] xt_hl: Unknown Hop Limit match mode: 206 [ 521.682205][ T437] netlink: 668 bytes leftover after parsing attributes in process `syz.3.7483'. [ 521.709326][ T441] netlink: 668 bytes leftover after parsing attributes in process `syz.3.7483'. [ 522.160483][ T477] netlink: 'syz.3.7493': attribute type 3 has an invalid length. [ 522.181949][ T477] netlink: 666 bytes leftover after parsing attributes in process `syz.3.7493'. [ 522.293967][ T486] xt_TCPMSS: Only works on TCP SYN packets [ 522.311462][ T490] netlink: 276 bytes leftover after parsing attributes in process `syz.2.7499'. [ 522.344411][ T494] batadv_slave_0: entered promiscuous mode [ 522.351597][ T494] batadv_slave_0: entered allmulticast mode [ 522.433906][ T499] netlink: 'syz.1.7501': attribute type 2 has an invalid length. [ 522.467315][ T499] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7501'. [ 522.656753][ T508] netlink: 'syz.2.7504': attribute type 3 has an invalid length. [ 522.674618][ T508] netlink: 'syz.2.7504': attribute type 3 has an invalid length. [ 522.850837][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 522.895212][ T531] vcan1: entered promiscuous mode [ 522.907530][ T540] netlink: 'syz.3.7511': attribute type 21 has an invalid length. [ 522.941104][ T540] bond7: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 522.955102][ T540] bond7 (unregistering): Released all slaves [ 523.616156][ T588] syzkaller0: entered promiscuous mode [ 523.630079][ T589] netlink: 'syz.3.7529': attribute type 1 has an invalid length. [ 523.645536][ T588] syzkaller0: entered allmulticast mode [ 523.652069][ T589] netlink: 'syz.3.7529': attribute type 1 has an invalid length. [ 523.859903][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 523.884876][ T613] 8021q: VLANs not supported on sit0 [ 524.475859][ T675] netlink: 'syz.3.7555': attribute type 2 has an invalid length. [ 524.485647][ T675] netlink: 'syz.3.7555': attribute type 8 has an invalid length. [ 524.495633][ T677] syzkaller0: entered promiscuous mode [ 524.504491][ T677] syzkaller0: entered allmulticast mode [ 524.520290][ T675] netlink: 'syz.3.7555': attribute type 2 has an invalid length. [ 524.548042][ T675] netlink: 'syz.3.7555': attribute type 8 has an invalid length. [ 524.597060][ T672] openvswitch: netlink: IP tunnel dst address not specified [ 525.304079][ T740] geneve3: entered promiscuous mode [ 525.318452][ T740] geneve3: entered allmulticast mode [ 525.330933][ T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 525.372304][ T740] geneve4: entered promiscuous mode [ 525.404754][ T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 525.414679][ T13] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 49072 - 0 [ 525.424518][ T742] tipc: Enabled bearer , priority 0 [ 525.432688][ T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 525.444839][ T745] x_tables: duplicate entry at hook 1 [ 525.463198][ T13] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 49072 - 0 [ 525.486602][ T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 525.497882][ T13] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 49072 - 0 [ 525.510169][ T13] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 49072 - 0 [ 525.520784][T17902] bond0: (slave bond_slave_0): interface is now down [ 525.529732][ T751] syzkaller0: entered promiscuous mode [ 525.539603][T17902] bond0: (slave bond_slave_1): interface is now down [ 525.548414][ T751] syzkaller0: entered allmulticast mode [ 525.579577][ T742] tipc: Resetting bearer [ 525.673563][ T774] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 525.762517][ T764] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 526.024764][ T741] tipc: Resetting bearer [ 526.043029][ T741] tipc: Disabling bearer [ 526.147029][ T797] 8021q: adding VLAN 0 to HW filter on device bond7 [ 526.357765][ T814] 8021q: VLANs not supported on gre0 [ 526.555636][ T839] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 526.691079][ T847] tipc: Enabled bearer , priority 0 [ 526.810294][ T846] tipc: Disabling bearer [ 526.847017][ T860] __nla_validate_parse: 28 callbacks suppressed [ 526.847050][ T860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7602'. [ 526.866094][ T860] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7602'. [ 527.007635][ T869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.094501][ T887] syz_tun: entered allmulticast mode [ 527.124043][ T886] syz_tun: left allmulticast mode [ 527.267023][ T902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7610'. [ 527.269764][ T904] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7615'. [ 527.282651][ T902] ------------[ cut here ]------------ [ 527.292284][ T902] !sock_allow_reclassification(sk) [ 527.292345][ T902] WARNING: drivers/block/nbd.c:1249 at nbd_add_socket+0xf35/0x12c0, CPU#0: syz.2.7610/902 [ 527.310256][ T902] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 527.316212][ T902] CPU: 0 UID: 0 PID: 902 Comm: syz.2.7610 Not tainted syzkaller #0 PREEMPT(full) [ 527.327415][ T902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 527.340794][ T902] RIP: 0010:nbd_add_socket+0xf35/0x12c0 [ 527.347144][ T902] Code: f7 e8 6f b5 20 fc bf e0 01 00 00 49 03 3e 48 c7 c6 40 02 55 8c e8 2b a8 1b fb b8 f0 ff ff ff e9 b2 fd ff ff e8 ac 60 b5 fb 90 <0f> 0b 90 e9 16 f8 ff ff e8 5e 3e 97 05 44 89 e9 80 e1 07 fe c1 38 [ 527.369486][ T902] RSP: 0018:ffffc9000dbcf160 EFLAGS: 00010283 [ 527.376462][ T902] RAX: ffffffff86109574 RBX: 1ffff1100c3768a9 RCX: 0000000000080000 [ 527.385606][ T902] RDX: ffffc90014f72000 RSI: 0000000000003431 RDI: 0000000000003432 [ 527.394659][ T902] RBP: ffffc9000dbcf250 R08: ffff888052ba765f R09: 1ffff1100a574ecb [ 527.404837][ T902] R10: dffffc0000000000 R11: ffffed100a574ecc R12: ffff888061bb4380 [ 527.413896][ T902] R13: 1ffff92001b79e38 R14: dffffc0000000000 R15: 0000000000000001 [ 527.422906][ T902] FS: 00007f2b4521f6c0(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000 [ 527.433877][ T902] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 527.441449][ T902] CR2: 00007fafd734da08 CR3: 0000000023e0e000 CR4: 00000000003526f0 [ 527.450494][ T902] Call Trace: [ 527.454225][ T902] [ 527.457509][ T902] ? __pfx_nbd_add_socket+0x10/0x10 [ 527.464708][ T902] ? __nla_parse+0x40/0x60 [ 527.469885][ T902] nbd_genl_connect+0x133d/0x1c10 [ 527.475636][ T902] ? __pfx_nbd_genl_connect+0x10/0x10 [ 527.481761][ T902] ? rcu_is_watching+0x15/0xb0 [ 527.487117][ T902] ? trace_kmalloc+0x2a/0xf0 [ 527.493553][ T902] ? __nla_parse+0x40/0x60 [ 527.498666][ T902] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 527.505835][ T902] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 527.513085][ T902] genl_family_rcv_msg_doit+0x233/0x340 [ 527.520559][ T902] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 527.527721][ T902] ? genl_rcv_msg+0x5f2/0x7a0 [ 527.532841][ T902] genl_rcv_msg+0x614/0x7a0 [ 527.538344][ T902] ? __pfx_genl_rcv_msg+0x10/0x10 [ 527.545143][ T902] ? __pfx_nbd_genl_connect+0x10/0x10 [ 527.551362][ T902] ? __netlink_lookup+0xc6/0x8b0 [ 527.558376][ T902] ? rcu_is_watching+0x15/0xb0 [ 527.563834][ T902] netlink_rcv_skb+0x226/0x4a0 [ 527.569143][ T902] ? __pfx_genl_rcv_msg+0x10/0x10 [ 527.574776][ T902] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 527.581347][ T902] ? down_read+0x2be/0x330 [ 527.586055][ T902] genl_rcv+0x28/0x40 [ 527.590537][ T902] netlink_unicast+0x7bb/0x940 [ 527.595623][ T902] netlink_sendmsg+0x813/0xb40 [ 527.600934][ T902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.606559][ T902] ? futex_unqueue+0x22/0x240 [ 527.612199][ T902] ? aa_sock_msg_perm+0xf1/0x1b0 [ 527.617435][ T902] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 527.623415][ T902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.629425][ T902] ____sys_sendmsg+0x9b9/0xa20 [ 527.634519][ T902] ? __pfx_____sys_sendmsg+0x10/0x10 [ 527.640890][ T902] ? lock_release+0x4b/0x3c0 [ 527.645995][ T902] ? import_iovec+0x73/0xa0 [ 527.651096][ T902] ___sys_sendmsg+0x2a5/0x360 [ 527.656075][ T902] ? __pfx____sys_sendmsg+0x10/0x10 [ 527.661788][ T902] ? futex_wait+0x2a2/0x390 [ 527.666634][ T902] ? __fget_files+0x2a/0x420 [ 527.672489][ T902] ? __fget_files+0x3a2/0x420 [ 527.677479][ T902] __x64_sys_sendmsg+0x1b1/0x290 [ 527.682952][ T902] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 527.688991][ T902] ? rcu_is_watching+0x15/0xb0 [ 527.694251][ T902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.702118][ T902] do_syscall_64+0x174/0x580 [ 527.707140][ T902] ? clear_bhb_loop+0x40/0x90 [ 527.712289][ T902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.718531][ T902] RIP: 0033:0x7f2b4439ce59 [ 527.723420][ T902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.744811][ T902] RSP: 002b:00007f2b4521f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.753905][ T902] RAX: ffffffffffffffda RBX: 00007f2b44616180 RCX: 00007f2b4439ce59 [ 527.762510][ T902] RDX: 0000000000004000 RSI: 00002000000027c0 RDI: 0000000000000008 [ 527.771537][ T902] RBP: 00007f2b44432e6f R08: 0000000000000000 R09: 0000000000000000 [ 527.781486][ T902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 527.790430][ T902] R13: 00007f2b44616218 R14: 00007f2b44616180 R15: 00007ffeb7fa0008 [ 527.799652][ T902] [ 527.802896][ T902] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 527.810178][ T902] CPU: 0 UID: 0 PID: 902 Comm: syz.2.7610 Not tainted syzkaller #0 PREEMPT(full) [ 527.819367][ T902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 527.829418][ T902] Call Trace: [ 527.832698][ T902] [ 527.835622][ T902] vpanic+0x56c/0xa60 [ 527.839599][ T902] ? __pfx__printk+0x10/0x10 [ 527.844184][ T902] ? __pfx_vpanic+0x10/0x10 [ 527.848677][ T902] ? is_bpf_text_address+0x292/0x2b0 [ 527.853954][ T902] ? is_bpf_text_address+0x26/0x2b0 [ 527.859166][ T902] panic+0xc5/0xd0 [ 527.862932][ T902] ? __pfx_panic+0x10/0x10 [ 527.867349][ T902] __warn+0x315/0x4c0 [ 527.871362][ T902] ? nbd_add_socket+0xf35/0x12c0 [ 527.876294][ T902] ? nbd_add_socket+0xf35/0x12c0 [ 527.881226][ T902] __report_bug+0x331/0x530 [ 527.885728][ T902] ? nbd_add_socket+0xf35/0x12c0 [ 527.890661][ T902] ? __pfx___report_bug+0x10/0x10 [ 527.895719][ T902] ? rcu_is_watching+0x15/0xb0 [ 527.900477][ T902] ? trace_irq_enable+0x3b/0x140 [ 527.905411][ T902] ? irqentry_exit+0x218/0x8f0 [ 527.910173][ T902] ? trace_irq_disable+0x3b/0x140 [ 527.915278][ T902] ? nbd_add_socket+0xf35/0x12c0 [ 527.920206][ T902] report_bug+0x16a/0x220 [ 527.924528][ T902] ? nbd_add_socket+0xf35/0x12c0 [ 527.929451][ T902] ? nbd_add_socket+0xf37/0x12c0 [ 527.934725][ T902] handle_bug+0x9c/0x200 [ 527.938971][ T902] exc_invalid_op+0x1a/0x50 [ 527.943495][ T902] asm_exc_invalid_op+0x1a/0x20 [ 527.948338][ T902] RIP: 0010:nbd_add_socket+0xf35/0x12c0 [ 527.953871][ T902] Code: f7 e8 6f b5 20 fc bf e0 01 00 00 49 03 3e 48 c7 c6 40 02 55 8c e8 2b a8 1b fb b8 f0 ff ff ff e9 b2 fd ff ff e8 ac 60 b5 fb 90 <0f> 0b 90 e9 16 f8 ff ff e8 5e 3e 97 05 44 89 e9 80 e1 07 fe c1 38 [ 527.973473][ T902] RSP: 0018:ffffc9000dbcf160 EFLAGS: 00010283 [ 527.979536][ T902] RAX: ffffffff86109574 RBX: 1ffff1100c3768a9 RCX: 0000000000080000 [ 527.987502][ T902] RDX: ffffc90014f72000 RSI: 0000000000003431 RDI: 0000000000003432 [ 527.995465][ T902] RBP: ffffc9000dbcf250 R08: ffff888052ba765f R09: 1ffff1100a574ecb [ 528.003435][ T902] R10: dffffc0000000000 R11: ffffed100a574ecc R12: ffff888061bb4380 [ 528.011400][ T902] R13: 1ffff92001b79e38 R14: dffffc0000000000 R15: 0000000000000001 [ 528.019369][ T902] ? nbd_add_socket+0xf34/0x12c0 [ 528.024312][ T902] ? __pfx_nbd_add_socket+0x10/0x10 [ 528.029504][ T902] ? __nla_parse+0x40/0x60 [ 528.033915][ T902] nbd_genl_connect+0x133d/0x1c10 [ 528.039025][ T902] ? __pfx_nbd_genl_connect+0x10/0x10 [ 528.044410][ T902] ? rcu_is_watching+0x15/0xb0 [ 528.049164][ T902] ? trace_kmalloc+0x2a/0xf0 [ 528.053751][ T902] ? __nla_parse+0x40/0x60 [ 528.058164][ T902] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 528.064489][ T902] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 528.070814][ T902] genl_family_rcv_msg_doit+0x233/0x340 [ 528.076379][ T902] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 528.082641][ T902] ? genl_rcv_msg+0x5f2/0x7a0 [ 528.087408][ T902] genl_rcv_msg+0x614/0x7a0 [ 528.091909][ T902] ? __pfx_genl_rcv_msg+0x10/0x10 [ 528.096962][ T902] ? __pfx_nbd_genl_connect+0x10/0x10 [ 528.102341][ T902] ? __netlink_lookup+0xc6/0x8b0 [ 528.107270][ T902] ? rcu_is_watching+0x15/0xb0 [ 528.112116][ T902] netlink_rcv_skb+0x226/0x4a0 [ 528.116883][ T902] ? __pfx_genl_rcv_msg+0x10/0x10 [ 528.121898][ T902] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 528.127186][ T902] ? down_read+0x2be/0x330 [ 528.131595][ T902] genl_rcv+0x28/0x40 [ 528.135564][ T902] netlink_unicast+0x7bb/0x940 [ 528.140417][ T902] netlink_sendmsg+0x813/0xb40 [ 528.145183][ T902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 528.150493][ T902] ? futex_unqueue+0x22/0x240 [ 528.155343][ T902] ? aa_sock_msg_perm+0xf1/0x1b0 [ 528.160297][ T902] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 528.165587][ T902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 528.170868][ T902] ____sys_sendmsg+0x9b9/0xa20 [ 528.175643][ T902] ? __pfx_____sys_sendmsg+0x10/0x10 [ 528.180925][ T902] ? lock_release+0x4b/0x3c0 [ 528.185519][ T902] ? import_iovec+0x73/0xa0 [ 528.190019][ T902] ___sys_sendmsg+0x2a5/0x360 [ 528.194696][ T902] ? __pfx____sys_sendmsg+0x10/0x10 [ 528.199889][ T902] ? futex_wait+0x2a2/0x390 [ 528.204401][ T902] ? __fget_files+0x2a/0x420 [ 528.208990][ T902] ? __fget_files+0x3a2/0x420 [ 528.213670][ T902] __x64_sys_sendmsg+0x1b1/0x290 [ 528.218605][ T902] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 528.224070][ T902] ? rcu_is_watching+0x15/0xb0 [ 528.228831][ T902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.234914][ T902] do_syscall_64+0x174/0x580 [ 528.239499][ T902] ? clear_bhb_loop+0x40/0x90 [ 528.244255][ T902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.250135][ T902] RIP: 0033:0x7f2b4439ce59 [ 528.254546][ T902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.274256][ T902] RSP: 002b:00007f2b4521f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 528.282667][ T902] RAX: ffffffffffffffda RBX: 00007f2b44616180 RCX: 00007f2b4439ce59 [ 528.290721][ T902] RDX: 0000000000004000 RSI: 00002000000027c0 RDI: 0000000000000008 [ 528.298687][ T902] RBP: 00007f2b44432e6f R08: 0000000000000000 R09: 0000000000000000 [ 528.306692][ T902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.314675][ T902] R13: 00007f2b44616218 R14: 00007f2b44616180 R15: 00007ffeb7fa0008 [ 528.322753][ T902] [ 528.326376][ T902] Kernel Offset: disabled [ 528.330715][ T902] Rebooting in 86400 seconds..