last executing test programs: 11.540628083s ago: executing program 4 (id=6216): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 9.453254281s ago: executing program 4 (id=6218): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000000c0)=""/123) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff2}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x70}}, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x0, [0x3, 0x400, 0x24000]}, &(0x7f00000001c0)=0x44) 4.796105007s ago: executing program 0 (id=6281): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000001d80)={'filter\x00', 0x111, 0x4, 0x3a0, 0x0, 0x1d0, 0x1d0, 0x2b8, 0x2b8, 0x2b8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @dev={0xac, 0x14, 0x14, 0x19}, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg1\x00', 'lo\x00', {}, {}, 0x0, 0x158}, 0xc0, 0xe8, 0x0, {0xb000000}}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x2}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) (async) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) (async) close(r2) 4.443695417s ago: executing program 0 (id=6286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r4, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e25, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20, 0x3f}}], 0x1, 0xc0) r5 = socket(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0xb, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) 3.55335159s ago: executing program 0 (id=6300): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)={0x20, 0x2, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4044014) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1c, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3.243197031s ago: executing program 0 (id=6304): r0 = socket$inet(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000043000000", 0xfe60) (async, rerun: 64) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@default, @default, 0x4, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) (async) sendmsg$IPSET_CMD_HEADER(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0xc, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x24040004) 2.914127424s ago: executing program 0 (id=6308): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x63}, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffd}, {0x0, 0xeb04}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x3}}, 0xe8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000000900010073797a300000000050000000060a090400000000000000000100000008000b40000000000900010073797a300000000028000480240001800b00010072656a6563740000140002800800014000000002050002000300000014000000110001"], 0xd8}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x3, 0x18}, 0xc) close(r0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x1a, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300e0fe00010800060018000000"], 0x30}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, @in=@broadcast, 0x4e20, 0x4, 0x4e24, 0x8, 0x2, 0x0, 0x80, 0x1, 0x0, r6}, {0x4, 0x3, 0x7, 0x0, 0x7, 0x4, 0x17d, 0xfffffffffffffffe}, {0x37be, 0x44, 0x100000001, 0x101}, 0x5, 0x6e6bb2, 0x2, 0x1, 0x1, 0x3}, {{@in=@broadcast, 0x4d3, 0x33}, 0xa, @in6=@mcast1, 0x3507, 0x0, 0x3, 0x7f, 0x3, 0xeee, 0x2}}, 0xe8) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="ccfc83f0", @ANYRES16=r4, @ANYBLOB="000228bd7000fcdbdf25040000000400068034000180080006000100000008000300ffffffff08000600040000000800060008000000060005004e210000080006001800000008000300030000006000068014000400fe8000000000000000000000000000aa060005004e22000008000300000000000800060018000000060005004e200000140004000000000000000000000000000000000114000400fc020000000000000000000000000000080004000400000005000500020000000800030007000000"], 0xcc}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x118}}, 0x800) 2.825274812s ago: executing program 2 (id=6309): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f}, 0x94) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r4, 0x40046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x2f, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0}, 0x40) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r5, &(0x7f0000003580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040c1) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2a, &(0x7f0000000040)) 2.717239231s ago: executing program 3 (id=6311): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x2c, r1, 0x4a3e4f761dcd662d, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0x9, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x2c, r1, 0x4a3e4f761dcd662d, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0x9, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x0) r2 = socket(0x2a, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40080}, 0xa, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"/316], 0x13c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 2.652614517s ago: executing program 2 (id=6313): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0), &(0x7f00000001c0)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104a5270b6457000000925e8726674a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0xfffffffe}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x26020480) unshare(0x22020600) unshare(0x8060400) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800900010068617368000006000c000280080001400000000a0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000ad618b2e11803bf0b12d2e24828d7aae22c491a3fcd13bf911ba670b51ba9da2c93863a719d08ca149dc925d97e5f1ef97d53a338"], 0x74}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, 0x0, 0x0) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r4, 0xffffffffffffffff, 0x35, 0x0, @void}, 0x10) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0100008000"/20, @ANYRES32=r1, @ANYRES32=r9, @ANYBLOB="05000000010000000500000000000000"], 0x50) 2.59722541s ago: executing program 0 (id=6314): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) bind$netrom(r1, 0x0, 0x0) getsockopt$packet_int(r0, 0x107, 0x18, 0x0, &(0x7f0000000240)) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x28, 0x5, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x54, 0x2, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xffff}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xe}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x811}, 0x20000000) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000002900)=0xfffffffc, 0x4) bind$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r3, 0x0) connect$can_j1939(r3, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfc, 0x0, 0xfe, 0x7, 0x200}}, 0x1c}}, 0x40000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0xb2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xfffffffffffffe7c, 0x2, {0x0, "000000001000000000040200050000ff"}}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@bridge_getneigh={0x30, 0x1e, 0x800, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, r8, 0x21410, 0x40108}, [@IFLA_WEIGHT={0x8, 0xf, 0xfffffca9}, @IFLA_GROUP={0x8, 0x1b, 0x92}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x840) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f00000002c0), &(0x7f0000000380)=r6}, 0x20) 2.595510311s ago: executing program 3 (id=6315): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x94, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x80, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f00000000c0), 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x0, 0x2c, 0x1, @remote, @local}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x0, 0x5e, 0xbe, &(0x7f0000000300)="906a859dd2ccb2ad2156923aaf2a54a8034199fdd5576a59ed1d846a5bd2f60fdf5d91075a78490537ce88ccd1e7550c9499eb715cb5086f6f24adfeddb20713db2bdebd3d7818b1c17ec8e0997b3b672efaa113519b6ee4f8a83dcaea32", &(0x7f0000000700)=""/190, 0x1, 0x0, 0x5c, 0x61, &(0x7f0000000400)="fdb221b745da44a180ed188fb62e3ad19b1ab4ce17195824e118975801bc0565e51e695fc5e988a42471db096d6ee782772eea420506e09746437b04d765c80c4b868b80b3dd62ac26c35f951c3e98eb16dd3c4884eef169397f3491", &(0x7f0000000800)="b208910e1e667f516bf65657056d71b4e34fa7a71c33852a18a42e68b5e2ecd0150f3eef375655b14c7e0cba018dd360e958a7e9f2f7ed532118242643d714439b31afa76612e6ed2be59884061654c7ee6a28a6a2e0896c0f2f0ac680ed0abce8", 0x2, 0x0, 0x6}, 0x50) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r6, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES16=r8, @ANYBLOB="000127bd7000fcdbdf2501000000080003000700000005000500030000000500060006000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) 2.247446576s ago: executing program 3 (id=6316): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000815, &(0x7f0000b63fe4)={0xa, 0x2, 0x5}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='i2c_reply\x00', 0xffffffffffffffff, 0x0, 0xf9a6}, 0x18) 1.894560257s ago: executing program 4 (id=6221): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffffffd}]}}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000c104000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008003a"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004090}, 0x4040) 1.709345454s ago: executing program 4 (id=6317): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x94}}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18, 0x24000841}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000000)) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r2, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000600)=""/97, 0x61}, {&(0x7f0000000680)=""/114, 0x72}], 0x4}, 0x3f}], 0x2, 0x60, 0x0) 1.708567164s ago: executing program 1 (id=6318): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000b3949deb941ed04a00000a20000000000a050000000000000000000500001c0900010073797a30000000002c000000030a010facfb6a0000000000050000400900010073797a30000000000900030073797a300000000048000000060a010400000000000000000500000008000b40000000002c0004802800018008000100667764001c000280080002400000000d0800014000000016080003"], 0xbc}, 0x1, 0x0, 0x0, 0x854}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000b3949deb941ed04a00000a20000000000a050000000000000000000500001c0900010073797a30000000002c000000030a010facfb6a0000000000050000400900010073797a30000000000900030073797a300000000048000000060a010400000000000000000500000008000b40000000002c0004802800018008000100667764001c000280080002400000000d0800014000000016080003"], 0xbc}, 0x1, 0x0, 0x0, 0x854}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x44, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x7}, @TCA_CAKE_BASE_RATE64={0xc}, @TCA_CAKE_RTT={0x8, 0x7, 0x6e47}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x4}, @TCA_CAKE_MPU={0x8, 0xe, 0x1}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x5}, @TCA_CAKE_NAT={0x8}]}}]}, 0x74}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x44, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x7}, @TCA_CAKE_BASE_RATE64={0xc}, @TCA_CAKE_RTT={0x8, 0x7, 0x6e47}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x4}, @TCA_CAKE_MPU={0x8, 0xe, 0x1}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x5}, @TCA_CAKE_NAT={0x8}]}}]}, 0x74}}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000020b69c97553002677b00000c00"], 0x2c}}, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000280)='X', 0x1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "4f86685b7ab86a3c", "afb6c5b29ca2bb38d41ac2fc7ddf972d", '\x00', "bb01000000000001"}, 0x28) pipe(&(0x7f0000000000)) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socket$inet_tcp(0x2, 0x1, 0x0) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @window={0x3, 0x7}, @mss={0x2, 0xfff}], 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) 1.683737161s ago: executing program 2 (id=6319): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x5, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, r1, 0x2, {0x2}}, 0x18, &(0x7f0000000040)={0x0}}, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x1008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 1.532173197s ago: executing program 2 (id=6321): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'macsec0\x00', 0x1}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0xfdef) (async) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0xfdef) 1.417017325s ago: executing program 2 (id=6322): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) (async) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffb, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x80004b}]}}]}, 0x3c}}, 0x24000000) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x1c, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0xfffffffffffffe66}, 0x48) (rerun: 64) socket$kcm(0x29, 0x5, 0x0) 1.279411974s ago: executing program 3 (id=6323): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000001300)={'nat\x00', 0x0, [0x5, 0x88980000, 0x2, 0x7, 0xa]}, &(0x7f0000000140)=0x54) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x8, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f000000b2c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) writev(r2, &(0x7f0000002a80), 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r6, &(0x7f0000000000), 0xffffff98) splice(r5, 0x0, r2, 0x0, 0xfffffffc, 0xf) sendmsg$nl_route(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="280000001200010105000000e0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="00000000004000000800230003000000"], 0x28}}, 0xc090) 750.019715ms ago: executing program 1 (id=6324): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) bind$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x3}}, 0xdc) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000008c0)) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5d, '\x00', 0x0, 0x2}, 0x94) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x2, @private1, 0x28}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="dc", 0x1}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="140000000000000029000000430000000800000000000000c80000000000000029000000040000002f150000000000000570d00e57facb7c88d46d46872602468f8835c7377b75ef0062fea10d356d1938ba00cc9ae797b9fe8a7737e2c88b1743c844fe8b2dc684a73e0c1183f753a151df98edaec2f969461b06d89f4b5225bdc49ac3c3d34ff18a2f64a3896af2152ff36d8d4cf7c9d527f4286146207446c8b904010f0738000000000c086b4b00000080000000000400000000000000010000000000000001000000000000000300000000000000010000000000000000140000000000000029000000340000000700000000000000280000000000000029000000390000002c02020900000000fe8000000000000000000000000000aa140000000000000029000000080000000300000000000000a80000000000000029000000360000008711000000000000050200090738000000020c02040009000000000000000100000000000000f2dd072e00000000090000000000000000000000000000000100000000000000c910fe800000000000000000000000000015002b00d15a0bd955e1288db6febfb75a1e9bb04b81de87f02e131ad30c1ac50a7e6d7522f3771c2499f37a87a1030001070000000000000000010000000000001400000000000000290000003400000003000000000000002000000000000000290000003600000011000000000000000502000800000000200000000000000029000000370000002b00000000000000c20400000e5a000048"], 0x280}}], 0x1, 0x880) shutdown(r8, 0x1) (async) shutdown(r8, 0x1) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000000)={r11, 0xfffffffa}, 0x8) (async) setsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000000)={r11, 0xfffffffa}, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000b00)={r11, 0x2}, &(0x7f0000000080)=0x8) sendfile(0xffffffffffffffff, r2, &(0x7f0000000300), 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206010800000000d06b707bbca211050c0007800500150000000000050005000a000000050001000700000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b00000000ed6bc1dddb65a1e66a29094df5524888967a5bf07a5c20d9106fe31842921e53642360729da0943a7c69f0d4"], 0x58}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206010800000000d06b707bbca211050c0007800500150000000000050005000a000000050001000700000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b00000000ed6bc1dddb65a1e66a29094df5524888967a5bf07a5c20d9106fe31842921e53642360729da0943a7c69f0d4"], 0x58}}, 0x0) accept4$netrom(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @bcast}, [@rose, @rose, @default, @rose, @bcast, @default, @netrom, @bcast]}, &(0x7f0000000240)=0x48, 0x81400) (async) r12 = accept4$netrom(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @bcast}, [@rose, @rose, @default, @rose, @bcast, @default, @netrom, @bcast]}, &(0x7f0000000240)=0x48, 0x81400) bind$netrom(r12, &(0x7f0000000540)={{0x3, @null, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) (async) bind$netrom(r12, &(0x7f0000000540)={{0x3, @null, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000e0300000000000000000000000000000105002d1a40b100000000000000000003000000000100000002000000000000000061"], 0x0, 0x53}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000100f60893bada0000000000000000000000000013002c82c18c19f2659b833299e7f0af8564c82e75f54e1fb22cf1ced05a41f90a77637765796ce224bd572ec6176dd17462db3b94ad86ca54a937641cf09b5024bc7c4b626f72a9b72633b701000000000300"/118, @ANYRES32=r13, @ANYBLOB="84110000040000001c0012800b0001006d616373656300000c00028005000a0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 718.033425ms ago: executing program 4 (id=6325): getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x2cb}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010029bd7000fddbdf250218c002", @ANYRES32=r2, @ANYBLOB="08000200ffffffff14000600bbff0048cb"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async) r3 = socket(0x2d, 0x2, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x10, @private2, 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9b5d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000001700)="92", 0x1}], 0x1}}], 0x2, 0x4000090) shutdown(r4, 0x1) (async) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e3, &(0x7f0000000000)={r3}) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000390000000000502dba88d2de29ebb85e52ca7fa499bef125f009489a2995ed4da17ed17231eb34a86586e87fbe20b0c110836143bed0c2", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xda01}) (async) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000041}, 0x200088d0) (async) socket$inet6(0xa, 0x2, 0x0) (async) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0xffffffff, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x7, 0x2234, 0x7f, 0x81b, 0x800, 0x5, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x5, 0x58b, 0x85a, 0x1003ff, 0x9, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xfffffffb, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x103, 0x100006, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x4, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x4, 0x6, 0x12a, 0x80000001, 0x8, 0x1d24, 0x2, 0x5, 0x1, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x9, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x3e, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x9, 0x10001, 0x7, 0x7f, 0x5, 0x3, 0x200000a, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x2007, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x4, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0xec2, 0x6, 0x80000008, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0x3, 0x5, 0x37f, 0x30, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x46, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x40006, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xfdc4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x2, 0x365, 0x8, 0x8, 0x4000000f, 0x8, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x1000092, 0x0, 0x7, 0x1, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x200101, 0xadd9, 0x1, 0x4, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x9, 0x4, 0x3, 0x40008, 0x7, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x8d7, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x9, 0x7, 0x40000000, 0x5, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x5, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x5, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x5, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x4000003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xffffffec, 0x5, 0x0, 0xb9a6, 0x522, 0x101, 0x2, 0x900, 0x6, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dca, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xffe, 0x1, 0x89d, 0x8, 0x3, 0x710, 0xe, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x1, 0x5, 0x1, 0xdbec, {0x8, 0x1, 0x8001, 0x5, 0x7, 0x9}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x8, 0xffffffff, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r14) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) socket$unix(0x1, 0x2, 0x0) 573.087558ms ago: executing program 1 (id=6326): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x400122a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)=""/219, 0xdb}], 0x1}, 0x40000000) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)=""/219, 0xdb}], 0x1}, 0x40000000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x15, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000500000000000000060000001800000001000000000000006f000000a4bb3000080000000a1b0000ffffffffb7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000788c86aa0000b70500000800000000a5000000953b009500000000000000000000adf4c3209df1088c12b24224ed77d20a4df0cdff025e1e5b5dc3a448d912c39da9208fad8346fa9f72e16875a7f707ee938ae4624673a4ec8934f71162dd2bbe257a00000000009b6958a5460075e5fe22917b2a6049e3108622040368fd7aad80049fba61d8f9ef0d21ec270e7ba0bef6e11b9c0318f6e60f299297187627884fa7c0febf26fba9dba25aff1741b4df7355bad71a92"], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x15, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000500000000000000060000001800000001000000000000006f000000a4bb3000080000000a1b0000ffffffffb7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000788c86aa0000b70500000800000000a5000000953b009500000000000000000000adf4c3209df1088c12b24224ed77d20a4df0cdff025e1e5b5dc3a448d912c39da9208fad8346fa9f72e16875a7f707ee938ae4624673a4ec8934f71162dd2bbe257a00000000009b6958a5460075e5fe22917b2a6049e3108622040368fd7aad80049fba61d8f9ef0d21ec270e7ba0bef6e11b9c0318f6e60f299297187627884fa7c0febf26fba9dba25aff1741b4df7355bad71a92"], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x94) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r5) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000003040)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r7], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000bc0)={0x48, r6, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x310}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x3, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000400000006000000ff00000042"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x1, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x5}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000080), 0x619, r9}, 0x38) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000b080003400000000008000440000000300500020007000000240001800a0001007265646972000000140002800800014000000012080002400000000b0900010073797a30"], 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000b080003400000000008000440000000300500020007000000240001800a0001007265646972000000140002800800014000000012080002400000000b0900010073797a30"], 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 452.062448ms ago: executing program 2 (id=6327): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000040)={0x48, r1, 0x79964d8cba2f455d, 0xa070bd24, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x146}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) 376.512319ms ago: executing program 1 (id=6328): socketpair(0x2c, 0x3, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="185300000000000002000000007d88fb"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x39}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'veth1\x00'}}, 0x1e) 261.013342ms ago: executing program 3 (id=6329): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f0000000040)) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="163c54e578de1e50fc16e8d96837053510b828d49be635fd557e656255afb8592094cd319a559bad7ffb2b652e0339ff7fbddb6513da8f2b578b661ea7667dfc23d2ec3c70b99bbbbf33e39df0a831cf732d234563b4e5267737a1f2dceb69bcf2a95d1a2060fc", 0x67}, {&(0x7f0000001fc0)="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", 0x1000}], 0x2, &(0x7f0000002fc0)=[{0x90, 0x14, 0x4, "43156be34d3d89a9b7e1e4fd5d3739ef971ed282efa984dc9dc75e880fa0f5136f4d8c98b55e31f57c1c7169056d4ffc4dc8fc9683633fed1fd8ef212db16aa8758b0c7da8ec1df6fbffa3f1e0114e3d783d1450eb898d7cbf64cd803a268da79f823ad63db2e21588c47744b8f4e9bfaae78d05d1f11ce983f0af413507e8"}, {0x80, 0x29, 0x1, "ac79ccf43973c40350875a4aa5c57ecfeb65a9c11ba57e345d9b70a68685b129e7735664ee365f84e7bc5b810cc63ed51bc93b5ff507045d7fb2a03f616caf618896804e998db145ee76fea3ae96613b5bb13cf90ba9e057aa20b7dddaf60c316f300d740df4a2c3766c3dbbb6d1f62d"}, {0x100, 0x1, 0x10000, "eb94f9d31415cceca1ceab6ec7e8ef335737d40684c9a1a97a5921c269cf137e3f6d3ea611168977df63ddbec1ad28f6648e7d150955276bed0bd2bfd52776e08139577ec62499a0e36dc38408d4b9c3a0f1b650082af4bc02937eb2cfe174b6305ff655e002e03379d6c87f9ab0e79ea279f90970e2cf20a526873ed8ae4e559448b1e30355f15e32449e01bfece278d2b160513cde4eff0dc0202477abac5272bc61e4d3a0bb508553c3fa6492c4f4097a84510f338c65321bdee1809ed02379db1e13c739a7ea2ee1fa7f1ac9fd07f351b8cbdcf290fe3d656ba5a2ca65cd2b798dbff34ef30e194db317"}, {0x58, 0x6, 0x7, "bb44cefcdf3c07d131be9716237fc9bdea7f4f328ce5d84e367538cb9b24b32c95d778f97d04d397346e389dba5b598d0f5e1c7dc0d54402b3cbedd6c8b78055ac588745f546c186"}, {0x50, 0x6, 0x6, "3e75d1d091ea09019dc5017b2954fe2fa663b0d9efec21f74c49a9973406882bf6f12a9c8451d01d3b0cfdbdb4691181298c45150c336646d098f5167a"}, {0x48, 0x10e, 0x2, "b295826889d32582a2c8dab92a0e3d95ce96c8ac5ff52dbe5f4d4b385d39c89635e0ee7cc6b153dae2dd2cf346353bd077"}, {0x80, 0x103, 0xe1f, "866fc23f625e0ec2096faed30aa4164e76ce189973c26445a8e6c9710169bb2cfc140b93a94979259c100fb4978110b2dca3787efbb5f867d0ada97b2e81c6f863523e84d5eb3f48051cdf8653900b98798d98e1e82c24ba337a2e642a3f6b7ad23be20499d9160c95861b07fcd4"}, {0xd0, 0x111, 0xffff8000, "4d2a086cb3ff41b7bf1b896d6fe6c41dfbc3365ac464d7f59597991591f6409ffe51d178c1df1f792e21502e61d6b0038517b4946c98d0108a79b30fd43ee0f1e4064b06c23429cad44dadfe6ba245d54843614977b150b2ebec002eae6dc565108b5ec2fec70035c04d19b58ae9eac0f2ccfd083ead7fc695d6445cc8928753b8a5ac8df71cd972f1d027732a987591a7d7309e74bddc030af0466263b467a1f3720c630230eea0caf9c4ff4293a8f48a9226e167d94f86c7f4"}, {0xf8, 0x119, 0x3, "a277d1acf2024cc52bf336dfc45a0f0165c986cb19a3e8b378f0f04bc181d3aad4958081ea9ab409164b32b894d0cfe135e0a0665c9258cc6400a49f68ba134067e6f42a1ad2ed817fa3d298b62d66103de5bdd8cde29b522a5a66145087a80ea9fbd910c031bb4c4126ceb8997b55a510f54e5717e87ca9bb7034cd8045ecf8961f63bee65231346481976736da4c0d8dc4224f261cdaefdf77e0834b1913f23481b2ed78ec682a82ac9c6bc9c0644eae20bf4d7f69e44ebb1214e0b11c69825a0fcabad39294f8c6da13b0e0fdbbb8c05d62a90ae7e6a24d13d5e5331b276b0da66f718572"}], 0x548}, 0x10) setsockopt$inet6_mtu(r0, 0x29, 0x4e, &(0x7f0000000400)=0x2, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1f0, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x1a8, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x190, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0xb8, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x89, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bfb320865cee27f05adfbc7dae04880a34e7bf775010128401ec5a80f551da79136f2a4ff74f3588c03c976e1c54366c6747dbbdd2e1e0d6da659b84a2ea14191b4223d2b6eeb465498ad518ee2114b5e4ab0d52289fe809788321e04d9b1d9f82a03fbb49229585f49ce943"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0xa4, 0x17, 0x0, 0x0, {{0x8}, {0x4}, {0x79, 0x6, "fabf457a2783e01adba453eb6b12547e74ed3538e418b01eb76a9da3a965a965bd660b895bcde4e323c457657669f884ceb2303e38c045eabfb99180b31db5a5cedd27c3d1afe4f747fc7360d5f6b1392c380721711fe9ed4a9ad5ebc44f3515520c50cc1c0a8e07ec59e52c8a083d49257ed21038"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 214.983839ms ago: executing program 1 (id=6330): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x26, 0x0, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x96}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r3, 0x4) r4 = socket$isdn_base(0x22, 0x3, 0x0) accept(r4, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 202.962485ms ago: executing program 3 (id=6331): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xffffff, 0x0, 0xfffffffe, 0x4}, 0x10) write(r0, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000000000200000800040001000000", 0x24) r1 = socket$nl_generic(0x10, 0x3, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x700) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x40132, 0xffffffffffffffff, 0x32e64000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) unshare(0x480) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x12, @loopback={0x0, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x0, 0xe8, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000a00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000530bfbdbdf25120000000800", @ANYRES32=r5, @ANYBLOB="0a00060008021100000000000c0011800400060004000300"], 0x34}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r7 = socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='>\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf255300000008000300", @ANYRES32=r5, @ANYBLOB="0c009900ffffffff68000000"], 0x28}, 0x1, 0x0, 0x0, 0x48001}, 0x20008000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) write$tun(r8, &(0x7f0000000240)={@val={0x0, 0x9300}, @val={0x1, 0x80, 0x5, 0x8, 0x43, 0xa0}, @eth={@link_local, @random="e2ef2b7a4e17", @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x2}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @broadcast, @mcast2, @remote, @dev={0xfe, 0x80, '\x00', 0x45}}}}}}, 0x58) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 45.31071ms ago: executing program 1 (id=6332): unshare(0x26020480) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000001c0)) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000380)=""/21, 0x15}, {&(0x7f0000000280)=""/208, 0xd0}, {&(0x7f0000000080)=""/89, 0x59}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x4, 0x13, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000080), 0x4) sendmsg$802154_dgram(r3, &(0x7f0000000040)={&(0x7f0000000500)={0x24, @long}, 0x14, &(0x7f0000001880)={0x0}}, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) listen(0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="1e00000064000000000000c90fffffff00400000e03f1c270300b32e8f258f497c2719c2d5f27b36c94e94d1f6f71c82f8fdc673c9cf0949a28bcecde0ebf5214bd3fe4dfd0a3a00100000d11b3a34ed9a03000000000000003ebb272591c2551de70f93f2dfdd1011483d5c9da814da3fbf0e75175d76a55ea974fcff5197872b302487f35e0c29128f2a150fd07c284dd0989ea3a538a56358ae5437a314a182415f86c11d819591979ce5bdc277ab", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r8, @ANYRES32, @ANYBLOB="0108000002000000030000000d00"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r9, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r10 = openat$cgroup_ro(r4, &(0x7f00000004c0)='cpuset.effective_mems\x00', 0x0, 0x0) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000500)={0x2}, 0x4) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00000010001fff0000000000000000d6000000b3958aaf3873e26a036ff80dc0b309449dd8bddd009de9c12e436660dd8673c201ef9d883711cb8ad13ebba8ca44de6173187b611e27f86a720e9b8019a92d204a2a7248eca7930c0da4ce0badb7190a7847871cff1b983b428cbbc70bd34d2d37103c6409c4ed03d7200643d8df6a6b392a76c6624ca277093a9827a7ab647b90627a9063fa7c17977d767b4d4cc31ecbd5b71dc37a2b182d536069317746444135", @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0056ec3b55861f24c6d901006772654abe86a8", @ANYRES32=r5, @ANYBLOB="08000d000000000008001f0008000000"], 0x4c}}, 0x0) 0s ago: executing program 4 (id=6333): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r5, &(0x7f0000000280)='1', 0x1, 0x6040004, &(0x7f0000000200)={0x11, 0x88a8, r9, 0x1, 0x4, 0x6, @local}, 0x14) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000ffffff00000000", @ANYRES32=0x1, @ANYBLOB="4000000000000000020000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000400"/28], 0x50) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000040)) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=@deltfilter={0x3ef4, 0x2d, 0x10, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0x9}, {0x0, 0x2}, {0x2, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_fw={{0x7}, {0x3ec0, 0x2, [@TCA_FW_ACT={0x3e90, 0x4, [@m_bpf={0x5c, 0x9, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r8}]}, {0x2a, 0x6, "18be89648ba0736209d1dbc8b908c73765c0f2958f4d82f8c0f4e0889b4c5705919989a09cf1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x11c, 0x13, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}]}, {0xc9, 0x6, "934e8e19892ea2377458dc7b917bb5678f1a10b241dae401fc72b23e9f362ab93dbc5a1a108b2ed1940aef826a802ecf4a7e1d09c32d3ce8e37012d09cf7ffde0991976720e18bae4a11b30014b47ef235470937b56f3d546596684c9675fbfa74d0c6b15e58976ef4a1f39444a87cdf9a4208a8525e92764fbb5a3288db41cc80ae99706a7ac707221eff804287a14791650057aeea82bcb0b2448c472ca6bdcdca6bc01a0c8ee463723ebbfd61e9da492dc9c9d06649a8ef7130ed5429ea45d6a856f967"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_pedit={0x3d14, 0x13, 0x0, 0x0, {{0xa}, {0x3c90, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x0, 0x2, 0x1, 0x10000, 0x2}, 0x15, 0xcc, [{0x4, 0x9, 0x3, 0x0, 0x3, 0x5768acef}, {0xfffffffa, 0x1, 0xae2, 0x8, 0x4, 0xe}]}, [{0x800, 0xfffff001, 0x0, 0x1, 0x4, 0x5}, {0x8868cd9, 0x6, 0x2, 0x6a, 0xebd4, 0x3}, {0xe6, 0x1000, 0x5, 0xa09, 0x401, 0xffff}, {0x7, 0x5, 0x3, 0x5, 0x2, 0x3}, {0x400, 0x5a, 0x974c, 0x4, 0x5, 0x5}, {0x7, 0x6, 0x3, 0x1, 0x0, 0x1800}, {0x0, 0x32b0, 0x7, 0x3, 0x4, 0x8}, {0x401, 0x5, 0x9, 0xf1, 0x8, 0x2}, {0xd, 0x1, 0x82e, 0xfffffff8, 0x3, 0x8}, {0x7, 0x0, 0x3, 0x1, 0x4, 0x8e}, {0x7, 0x7, 0x60, 0x8, 0xfffffffc, 0x2}, {0x8, 0x57a, 0x9, 0x9, 0xfe00000, 0x9}, {0x1, 0xab4b, 0xfffffffa, 0x9, 0x8, 0xc}, {0x9, 0xd, 0x1e4, 0x2, 0x7, 0x6}, {0x9, 0x20d, 0x3, 0xb, 0x8, 0x1000}, {0x8, 0x1, 0x8, 0x2, 0x3, 0x8}, {0x99, 0x1, 0xe00000, 0x5, 0x6, 0xfffffff9}, {0x5, 0x1, 0xdc, 0x4, 0x1, 0x7}, {0x1, 0x3, 0x6, 0x30000000, 0x401, 0xffffffff}, {0x5, 0x4, 0x2, 0xc, 0x2, 0x4}, {0xa, 0xdde, 0x5, 0x81, 0x81, 0x2}, {0xfffffff9, 0x9, 0x2e6a, 0x0, 0x81, 0x10000}, {0x2, 0xff, 0x8, 0x4, 0x8000, 0x7}, {0x1, 0x3ac2671b, 0x401, 0x8, 0x5519, 0x63b}, {0xfff, 0x9, 0x4, 0x8, 0x6, 0x66}, {0x9, 0x0, 0x4, 0x1a, 0xc1d, 0x7}, {0x80000000, 0x1, 0x2, 0xa, 0x7, 0xd}, {0xffffffff, 0x5, 0x9, 0x81, 0x4, 0x9}, {0x5, 0x81, 0x2, 0x2, 0x8000, 0xfffffff9}, {0x2, 0xffff, 0x5, 0x8, 0x6, 0x6}, {0x7, 0x8, 0x1ff, 0x7, 0x6, 0x70b80eb5}, {0x4, 0xffffffff, 0x8000, 0x0, 0x8075, 0x3}, {0x7, 0x8c3, 0x9, 0x8ec1, 0x3, 0x3}, {0x3, 0x80, 0x3, 0xfffffffb, 0x4, 0x8}, {0xfffffff9, 0x5, 0xb, 0x10, 0x4ab, 0x9}, {0x401, 0x5d0d, 0x8, 0xfffffffb, 0x10000, 0xfffffff9}, {0x5, 0x80000000, 0x6, 0x9, 0x0, 0xd9c}, {0x4, 0x10, 0x2b, 0x8, 0x6d5, 0x5}, {0x2, 0x4, 0x2, 0xaf, 0x0, 0x9}, {0x4, 0xe, 0x5, 0x8, 0x3}, {0x8, 0x7, 0x80000001, 0x3ff, 0x1, 0xa21}, {0x852, 0x8, 0x80000001, 0x2, 0x2, 0xff}, {0x5, 0x3, 0x3, 0x7, 0x2, 0x4}, {0x0, 0x9, 0x82e, 0xc0000000, 0x5}, {0x4, 0x9eb, 0xa213, 0x8, 0xff, 0x5}, {0xd, 0x3, 0xffffffff, 0xf29d, 0x6, 0x7f}, {0x8, 0x80000001, 0x3, 0x156, 0xfffffffc, 0x8}, {0x7fffffff, 0x8, 0x5, 0x1, 0xfff, 0x6}, {0x80, 0x8, 0x6, 0x3, 0xc, 0xfffffffe}, {0x3, 0x9, 0xb, 0x8, 0x9, 0x2}, {0x6, 0x345, 0x10, 0x5, 0xfffffffa, 0x703a}, {0xffff7fff, 0x7, 0x1, 0x1, 0x6, 0x8}, {0x101, 0x8, 0x1, 0x3, 0x7, 0xfff}, {0x1000, 0x23c3, 0x401, 0x0, 0x6, 0x8}, {0x8, 0x2, 0x3a9, 0x0, 0xa, 0x2}, {0xb1f5, 0xd204, 0x1, 0x1, 0x5, 0x5}, {0x1, 0xa3, 0x4, 0x1, 0x1ff, 0x7}, {0x0, 0x10001, 0x3, 0x3, 0x80000000, 0x100}, {0x31, 0xe42, 0x6, 0x7, 0xfffffffa, 0x3}, {0xa2c, 0x7, 0x8001, 0xffff, 0x3, 0x4}, {0xd, 0x7cc3, 0xc, 0x8001, 0x6, 0x2}, {0x80, 0xe, 0x0, 0xe, 0x8, 0xfff}, {0xe, 0x7, 0x2, 0x9, 0x8c6a, 0x10}, {0x34, 0x12, 0x80000001, 0x5, 0x3, 0x9}, {0x5, 0x7, 0x81000, 0x80, 0x9, 0x2}, {0x0, 0x4, 0x800, 0x3, 0xf6c, 0x2f}, {0x646, 0x4, 0x7ff, 0x8, 0x40, 0xfe0}, {0x1, 0x8, 0x0, 0x1, 0xf, 0x5}, {0x3, 0xfffffffc, 0x0, 0x6, 0x8, 0xe}, {0xffffffff, 0x7, 0x9, 0x4, 0x28, 0x4}, {0x7, 0x8, 0x9, 0x0, 0x3, 0x10001}, {0x7fffffff, 0x3ff, 0x6, 0x101, 0x4, 0x6}, {0x4, 0x94, 0x4, 0x8, 0x7ff, 0xffff}, {0x6, 0xa50, 0x8, 0x9, 0x1, 0x66}, {0x0, 0x1, 0x9, 0xd3, 0x5, 0x10000}, {0x2, 0x401, 0x2, 0x3, 0x9, 0x4}, {0xdf7, 0x4, 0x5, 0x0, 0xffffffff, 0x80}, {0xde5, 0x0, 0x3, 0x7b5, 0x1ff, 0x357}, {0x8, 0xfff, 0x1000, 0x8, 0x8, 0x4}, {0x5, 0xffffffbd, 0x5, 0x80000000, 0x80, 0xffffffff}, {0x5, 0xc21e, 0x3, 0x4, 0x7}, {0x4, 0x8, 0x7ff, 0x9, 0xb, 0x8}, {0x800, 0x9, 0x7, 0x8, 0x8}, {0x1, 0x0, 0x9, 0x955a, 0x3, 0x53118a2f}, {0xffffffff, 0x0, 0x5, 0x8, 0x4, 0x7}, {0x26af, 0x1, 0xc74e, 0x3, 0x4, 0xc3}, {0xfff, 0xc, 0x2, 0x7, 0x9b92, 0x3}, {0xc, 0x0, 0x7, 0x5f9990f5, 0x8000, 0x3}, {0x2, 0x9, 0x425, 0x9, 0x8, 0x7}, {0x2437, 0x4, 0x8, 0xbd, 0x8, 0x400}, {0x0, 0x2, 0x4, 0x18, 0x4, 0x1}, {0xc, 0x100, 0x81, 0x2, 0xfffffff9, 0xf22}, {0x461, 0x6, 0x7, 0x0, 0x5, 0x4}, {0x9, 0x5, 0x7fff, 0x6, 0x38f, 0x580}, {0xa, 0x5, 0x9, 0x7, 0x5, 0x4}, {0x0, 0xe, 0x80000000, 0xfff, 0x6, 0x8}, {0x4, 0xe, 0xaaa, 0x4, 0x3, 0x1}, {0x59d966e0, 0x9, 0x80000001, 0x0, 0x5, 0xfff}, {0x9, 0xffffffff, 0x10001, 0x0, 0x1, 0x1ff}, {0xef, 0x7, 0x0, 0x5, 0x8000}, {0x7, 0x400, 0x2, 0x3, 0x80000000}, {0x896, 0x3, 0x1, 0x7fffffff, 0x80}, {0x3, 0x81, 0x406, 0x7, 0x9, 0x5}, {0x7, 0x48, 0xe3, 0x3ff, 0x8000, 0x9}, {0x2, 0x1, 0x8280, 0xf1d, 0x40, 0xfffffffa}, {0xfffffff9, 0xee, 0x6, 0xcea, 0x8}, {0x7, 0x20000000, 0x8, 0xb, 0x0, 0x400}, {0x9, 0x6, 0x8, 0x6, 0x9, 0x4}, {0x80000001, 0x0, 0x100, 0xa, 0x7fff, 0x7fff}, {0x8, 0x3, 0x699, 0x6, 0xfffffe01, 0xd7e2}, {0x80, 0x3, 0x7, 0x400, 0x0, 0xf1}, {0x10, 0x3, 0x8, 0x6, 0x5, 0x5}, {0xa, 0x4, 0x8, 0xa, 0xfffffffc, 0x1}, {0x800, 0x1, 0x3b568000, 0x1, 0x60000000, 0x3}, {0xfff, 0x3, 0x7c2, 0x5, 0xfffffff8, 0x4}, {0xd, 0x6db, 0xffffffff, 0xb803bd35, 0x7, 0x7}, {0xe65, 0x4, 0x200, 0x0, 0x7fff, 0xfffffffb}, {0xc6e0, 0x400, 0x7, 0x401, 0xef, 0x9}, {0x4, 0x7fff, 0x458c, 0x3, 0x3, 0x41}, {0x4, 0xfff, 0x4, 0xcd, 0xa, 0x8}, {0x1, 0xe, 0x5, 0x80000000, 0x2, 0x4}, {0x96e, 0x7, 0x9, 0xe9, 0x1, 0x9}, {0xc, 0x400, 0x0, 0x1, 0xfa22, 0xfffffff7}, {0xc111, 0x6, 0x2, 0x8, 0x4, 0x8}, {0x9, 0x3, 0x2, 0x0, 0x6, 0x522}, {0x6, 0x2e, 0x7, 0x0, 0xca7d, 0x9}, {0x1f, 0x0, 0x2e11, 0x3, 0x7, 0xffffff0b}, {0x1, 0x1800, 0xfff, 0x9, 0x5, 0xffff}], [{0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1}, {0x3}, {0x6, 0x1}, {0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x2}, {0x3}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x67ca04a6e47b0cf1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x6, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x1, 0x1}, {0x4}, {0x7, 0x1}, {0x1, 0x1}, {0xa1d63037d25d4454, 0x1}, {0x3, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x5}, {0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x2}]}}, @TCA_PEDIT_PARMS={0xe98, 0x2, {{{0x1, 0x577095c3, 0x3, 0x0, 0x80000001}, 0xf7, 0x9, [{0xfffffff7, 0x2, 0x6, 0xffff49bb, 0x5, 0xff}, {0xab21, 0xe59, 0xeab, 0x1289, 0x5, 0x3}, {0x9, 0x8, 0x6539, 0x4, 0x81, 0xfffffc01}, {0x45, 0xb0, 0x29, 0x9, 0x1}, {0x540, 0xc, 0xdf4, 0x5, 0x1, 0x8}]}, [{0x800, 0x5, 0x2, 0x101, 0x0, 0x6}, {0x8, 0x4, 0x2, 0x6, 0x0, 0x5}, {0xfffffe00, 0x7, 0x3, 0x2, 0x5, 0x800}, {0x7, 0x4, 0xb, 0x4, 0x0, 0x2}, {0x973, 0x9, 0x3, 0x3, 0x9, 0x4}, {0x9, 0x5, 0x1, 0x80000000, 0x5, 0x8}, {0x9, 0x5, 0xf10, 0x9, 0x800, 0x6}, {0x5, 0x9, 0x7, 0x1, 0x3, 0xfff}, {0x3ff, 0x66b, 0x8000, 0xd, 0x3, 0x16ea9d13}, {0xc99d, 0x9, 0xee5, 0x10000000, 0xfff, 0xfffffffa}, {0x9, 0x3, 0x9, 0x2, 0x7, 0x1}, {0x8, 0x380000, 0x2, 0xfff, 0x0, 0xffffff88}, {0x6dc, 0x3ff, 0x800, 0x6, 0x8001, 0xcfeb}, {0x6, 0x9, 0x101, 0x5, 0x3, 0x3b0c}, {0x9, 0xc, 0x3, 0x0, 0xe99, 0x7}, {0x6, 0xf7a4, 0x7ff, 0x8, 0x7f, 0xfffff001}, {0x2, 0x8, 0xe, 0x8, 0x8000, 0x1}, {0x4, 0x9, 0xffff2f3c, 0x8, 0x4, 0x80000001}, {0x6, 0x8, 0xfffffff7, 0xb, 0xf2, 0x1}, {0x80000001, 0x5, 0x5, 0x67, 0x0, 0x101}, {0x1800000, 0xfffffff0, 0xc79, 0x9427, 0x95, 0x5}, {0x4, 0x2, 0x1, 0x8, 0x40, 0x7fff}, {0x800, 0x5, 0x7fffffff, 0x4, 0x704, 0x8}, {0xfffffff3, 0x9, 0x9, 0x5, 0x6, 0x6}, {0xd, 0x2, 0x5, 0x50, 0x1000, 0x7}, {0x2, 0x2, 0x4000000, 0x187c, 0x100, 0x5}, {0x2, 0x4, 0x7ff, 0x2, 0x9, 0x80}, {0xfffffff8, 0x1, 0x0, 0x1800, 0x2, 0x7}, {0x7fffffff, 0x5, 0x200, 0x2, 0x2b90, 0xc15}, {0x5, 0x5, 0xfffffffa, 0x0, 0xfff}, {0xd, 0x10000, 0x6e, 0x800, 0x9, 0xff}, {0x8000, 0x3ff, 0x6, 0x80000001, 0x88, 0x7}, {0x5, 0x8, 0x3ff, 0xfffffff7, 0x2, 0x3}, {0x4, 0x5a, 0x0, 0x8, 0x6, 0x1}, {0x8, 0x8, 0x9, 0x7, 0xe, 0x1}, {0x10001, 0xf11e, 0x8, 0x7fffffff, 0xf0, 0x5}, {0x80, 0xffffffff, 0x4, 0x2, 0x10001, 0x5}, {0x2, 0x1, 0x7, 0x5, 0x2, 0x79}, {0x9, 0xc56b, 0x1cef, 0x6, 0x2, 0x5}, {0x2f9e, 0xc7, 0x1, 0x40, 0x80, 0x2f}, {0x2d4, 0x6, 0x295f9d79, 0x2, 0x1, 0x1}, {0x8, 0x200, 0x7fff, 0x7, 0x6, 0x3}, {0x10000, 0xa8, 0x200, 0xa, 0x4, 0x8000}, {0x0, 0x0, 0x8, 0x1db, 0x6}, {0x2, 0x9, 0x7fffffff, 0x9, 0x1, 0x9}, {0x2, 0x400, 0x7, 0x4, 0xd4b, 0xfffff800}, {0x2, 0x2, 0x4, 0x3, 0xae, 0xe}, {0xff, 0x9, 0xfff, 0xa53, 0x3a1, 0x4acd}, {0x2, 0x4, 0x0, 0x0, 0x1000, 0x7}, {0xe8, 0x2, 0x7, 0x7, 0x40, 0x2}, {0x4, 0xfffe000, 0x0, 0x100, 0x0, 0x9676}, {0xb, 0x2, 0xb2, 0xec6, 0x80000001, 0x6}, {0x3ff, 0x9, 0x9, 0xffff4b53, 0x1edc, 0x8}, {0x5015, 0xff, 0x3, 0xfffffff7, 0xe, 0x7}, {0x5, 0x5, 0x0, 0x5, 0x9, 0xfffffffb}, {0x5bd0, 0x0, 0x0, 0x1, 0x10000, 0x10001}, {0x7, 0x4, 0x7fffffff, 0xc, 0xfffffff7, 0x7fff}, {0x6, 0x8, 0x7, 0x1, 0x81, 0x200}, {0x6, 0xa41, 0x5, 0xc, 0x6, 0x3ff}, {0x800, 0x3, 0x9, 0xfffffffe, 0xcea, 0xd733}, {0x3, 0x2, 0x8, 0x100, 0x6, 0xfff}, {0xfff, 0x3, 0x8d, 0x9, 0x6, 0x470f}, {0x8, 0x0, 0x8, 0x5, 0x0, 0x7}, {0x6, 0x2b, 0x80000000, 0x10000, 0x2, 0xf}, {0x6d, 0x4, 0x7fff, 0x0, 0x7, 0xff}, {0x600, 0xffffc4b0, 0x81, 0x8001, 0xfffff001, 0xc}, {0x5285, 0x7, 0x7, 0x9, 0x8, 0x7}, {0x8, 0x3, 0x2, 0x4, 0x380682ba, 0x5}, {0x7fffffff, 0xe0c, 0x9, 0x8001, 0x8, 0x6}, {0xfff, 0x101, 0x81, 0x5, 0xfff00000, 0x4}, {0x8, 0x3, 0x401, 0x10000, 0x689b, 0x200}, {0x2, 0x1cd, 0xf85, 0x6, 0x4, 0x4}, {0x6, 0xfffffffd, 0xf7, 0xffffffff, 0x9, 0x800}, {0xfffff801, 0x7fffffff, 0x4, 0x4, 0x2, 0x92}, {0x1, 0x7, 0x6, 0x6, 0x6, 0x80000000}, {0x2, 0x4565, 0x5, 0x4, 0xfffffffb, 0x4}, {0x9, 0x3, 0x3, 0x4, 0xfffffff7, 0xf94}, {0xc8, 0xfffffff8, 0x5, 0x2, 0xa, 0x188}, {0x2, 0x1ff, 0x9, 0x8, 0x7fff, 0x8}, {0x3, 0xffff6871, 0x5, 0xb, 0x3ff, 0x6}, {0x4, 0x5, 0x10000, 0x58, 0x4a4d, 0x4}, {0x3, 0x9, 0x0, 0xd, 0xa4, 0xe400}, {0x2, 0x10, 0x5, 0x3ff, 0x7fff, 0x5}, {0x5, 0xdd0, 0x4, 0x80000000, 0x9, 0xffffa7cf}, {0x4, 0x80000001, 0x2, 0x800, 0x6, 0x3}, {0x7f, 0x4, 0xa5c, 0x7, 0x811, 0x7a12}, {0x8, 0x80000000, 0x0, 0x684a7002, 0x6}, {0x5, 0xcb, 0x95b, 0x5, 0x6, 0x400}, {0x9, 0x4, 0x5, 0x5, 0x4, 0x6}, {0x6, 0x0, 0xf, 0xffff, 0x845, 0x2}, {0x7f, 0x8001, 0x9, 0x3, 0x7, 0xfffffffa}, {0xe, 0x0, 0x5, 0x2, 0xfffffffb, 0x3}, {0x4, 0xf12e, 0xae6, 0xfffffffa, 0x0, 0xffffffe4}, {0x26, 0x4, 0x5, 0x1, 0xa616, 0x8}, {0x80000000, 0xfff0, 0x7, 0x1, 0x2, 0x7fffffff}, {0xfffffff9, 0x9, 0x9, 0x6, 0x7ff, 0x1}, {0x3, 0x80, 0x4, 0x6, 0x8, 0x6}, {0x7fff, 0x7, 0x7, 0x0, 0xe58, 0x694}, {0x8, 0x2, 0x7, 0xc, 0x9, 0x401}, {0x5, 0x5, 0x6, 0xff, 0xd60}, {0xb055, 0x101, 0x1, 0x0, 0x81, 0x1}, {0x8000, 0xd9a7, 0x8001, 0x0, 0x3, 0x10000}, {0xf4, 0xf, 0x4, 0x10001, 0x27, 0xba}, {0x4, 0x76, 0x1aff, 0x1000, 0x400, 0x4}, {0xffff615b, 0x1, 0x6a, 0x8, 0x5, 0x1}, {0x0, 0x2dc, 0x2, 0x2, 0x9, 0x1ff}, {0xfffffff2, 0x10001, 0x4, 0xceb, 0x1, 0xac1}, {0xbd2, 0x0, 0x9, 0xd, 0x800, 0x8}, {0xf7000000, 0xc, 0x10001, 0xa, 0x3, 0x4}, {0x9, 0x1, 0x7ff, 0x7f, 0x2, 0x1}, {0xffffffff, 0x80000000, 0x3, 0x8, 0xfffff652, 0x7}, {0x1, 0x9, 0x4eeb, 0x8001, 0xae}, {0xe, 0x0, 0x370, 0xd, 0x2, 0x7}, {0x7, 0x9, 0xfff, 0x9, 0x13f7, 0x101}, {0x7, 0x9, 0x7, 0x69b, 0xfffffff7, 0x7}, {0x33, 0x5, 0x401, 0xd39, 0x72ce, 0xf}, {0x8, 0x1, 0xfffffff9, 0x400, 0x1, 0x4}, {0x2, 0x3, 0x36f, 0x5, 0xa, 0x9}, {0xe, 0x7f, 0x3, 0x7, 0x6, 0x7}, {0x9, 0x976d, 0xfffffffe, 0x8b, 0x8001, 0xfd8}, {0xfffffc01, 0x1, 0x1, 0x1000, 0x9}, {0x340000, 0x40, 0xfffffffd, 0xffff210e, 0x0, 0x7}, {0x424f, 0x2, 0x4, 0x401, 0x4, 0x78}, {0x8, 0x6, 0xc, 0xeeb, 0x7, 0x6}, {0x2, 0x3445fe00, 0x2, 0x6, 0x3, 0xfffffffc}, {0x2, 0x84, 0x1, 0x4, 0xffff, 0xe}, {0x72, 0x3, 0x5, 0x6b1, 0x429, 0x8}, {0x80000001, 0x3d00841a, 0x7b, 0x8, 0x6, 0x4}], [{0x2}, {0x5, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x2}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x1}, {0x2}, {0x4}, {}, {0x1, 0x1}, {0x2}, {0x5}, {0x4}, {0x83e1ce23c49ce6ee}, {}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x3, 0x16ca2811ffa79e3d}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x5, 0x1}, {}, {0x4}, {0x5}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x1}, {0x2}, {}, {0x2}, {0x2}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x5}], 0x1}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x3, 0x9, 0x6, 0x3, 0x4}, 0x2, 0x4, [{0x6b, 0x2, 0x9, 0xfffffffd, 0x9, 0x2}, {0x8, 0x3, 0x9, 0x0, 0x6b391946, 0x1}]}, [{0xb, 0x7e, 0x7fffffff, 0x5, 0x40, 0xffffff03}, {0x73f, 0xfffffffd, 0xfffffff8, 0x36490dff, 0x8000, 0x4}, {0x0, 0x8, 0xde, 0x5, 0x6, 0x8563}, {0x9, 0x3206, 0x0, 0x6, 0xffffff43}, {0x8, 0xb, 0x1000, 0x2, 0xd88, 0xa77a}, {0x3, 0x9, 0x8, 0x40, 0x101, 0x3}, {0x3ff, 0xac, 0x0, 0x6, 0x8, 0x2}, {0xe, 0x4, 0x7, 0x7a7d, 0x4, 0x5000000}, {0x9a, 0xbd, 0x8, 0x3ff, 0x7, 0x80000001}, {0x4, 0x8, 0x10, 0xf56f, 0x80, 0x5}, {0xf, 0x8b6f, 0x9, 0x0, 0x316, 0x3}, {0x1, 0x5, 0x3, 0x5, 0x8, 0xd}, {0x3, 0x98, 0x6, 0x1, 0x0, 0x2}, {0xd43, 0xfffffffa, 0x8, 0x0, 0x800, 0x3}, {0x4b, 0x4, 0x3, 0x9, 0x3, 0x9}, {0x1, 0x10000, 0x3, 0x1, 0x1, 0x52e}, {0x6, 0x5, 0x7fffffff, 0x9, 0x6, 0xf37}, {0x2, 0x9, 0x5a8, 0xea8, 0x7, 0x5900}, {0x4, 0x10000, 0x80000000, 0x40, 0x6, 0x6}, {0xffffffff, 0x1, 0xc, 0x6, 0x6, 0x6}, {0x7fffffff, 0x6, 0xb, 0x100, 0x3357a5f5, 0x1c00000}, {0x1, 0x9, 0x101, 0x2, 0x1, 0x5}, {0xf5b, 0x7, 0x7, 0x2, 0x7fff, 0x9}, {0xc, 0x1, 0xd3, 0x1, 0x1, 0xffffffff}, {0xc05d, 0x9, 0x4, 0x80000001, 0x40, 0xfffffff7}, {0x8, 0x0, 0x6, 0x101, 0x53b, 0x1ff}, {0x4, 0x9, 0x9, 0x4, 0x4, 0x9}, {0xcaa4, 0x1, 0x10, 0x4, 0x401, 0x7}, {0x4, 0x9, 0x1, 0xff, 0x80000000, 0x72}, {0x73e3, 0x8, 0x4, 0x1, 0x4, 0xfffffff2}, {0x0, 0xfffffffc, 0x8, 0xfffffe00, 0xffffffff, 0x200}, {0x7fffffff, 0x6, 0x0, 0x7, 0x3, 0x80}, {0x35, 0x3, 0x5, 0x5, 0xfffffffa, 0x9}, {0xfffffffb, 0x0, 0x9, 0x6, 0x6, 0x455}, {0x1, 0x1, 0x9, 0x2, 0x7fffffff, 0x3}, {0xffff37a4, 0xffffffff, 0x10, 0x91, 0x1, 0x4e}, {0xc042, 0x6, 0x29, 0xff, 0x401, 0x7}, {0x7f, 0x5, 0x400, 0x7f, 0x72, 0x9}, {0x3a, 0x3c1, 0x0, 0x1, 0x2, 0x8}, {0x5, 0xffff2736, 0x400, 0x2, 0xc, 0x6}, {0x3, 0x8, 0x80000001, 0x7, 0x0, 0x1}, {0xe, 0x0, 0x2, 0x6, 0xb, 0x8}, {0x1, 0x0, 0x1000, 0x6, 0x5a18, 0xb}, {0x1, 0x6, 0x6, 0x6, 0x6, 0x8}, {0xaab, 0x75ff8850, 0x3, 0x8, 0xe96, 0x3ff}, {0x101, 0xffff, 0x1ff, 0x3ff, 0xfa, 0x93c}, {0x5, 0x7, 0x2, 0x200, 0x80000001, 0xffffffff}, {0xa47, 0x9, 0x8, 0xfffffff9, 0x1, 0x6}, {0x8, 0x4, 0xfffffffe, 0x53c, 0x10, 0x9}, {0xd, 0x8, 0x4, 0x37, 0x2, 0x3}, {0x1, 0x4, 0x3, 0x5, 0xa000000, 0x1}, {0x80000001, 0x8556652, 0x1, 0x10000, 0xc44f, 0x76}, {0x2, 0x6, 0x1, 0x666, 0x3610, 0x8}, {0x6, 0x1, 0x6, 0x6000000, 0x80000001, 0x7873}, {0x6, 0x3, 0x3ff, 0x45a, 0xffffff08, 0x200}, {0x8000, 0xde, 0x5, 0x2, 0x6, 0x4844}, {0x8, 0x10, 0x3, 0xa, 0x10, 0x10}, {0x1ff, 0x10000, 0x3, 0x2c70, 0x1, 0x7fffffff}, {0x0, 0x9, 0x0, 0x9, 0xffff, 0x4}, {0x6, 0x7, 0x1000, 0x1, 0x0, 0x5}, {0x1, 0xa, 0x1000, 0x1, 0x2, 0x80}, {0x2, 0x75fe5e3d, 0x7, 0x3, 0x5, 0x5}, {0xffffffc0, 0xda, 0x2, 0x6, 0x7fff, 0x4}, {0x1, 0x0, 0x0, 0x120, 0x1, 0x1}, {0x7fff, 0x2, 0x4, 0x85f1, 0x5b, 0x3e}, {0x8bb3, 0x3ff, 0xfffffeff, 0x9, 0x4, 0x101}, {0xc24, 0x400, 0x5, 0x995, 0x80000001, 0xfffffffc}, {0x3, 0x1, 0x34b, 0x87, 0x2, 0x7}, {0xc9aa, 0x2, 0x7, 0x3, 0x4, 0x5}, {0x4, 0xdf, 0x1c00, 0x401, 0x80, 0x3}, {0x6b, 0x3, 0x101, 0x8001, 0x9296, 0xff}, {0x1ff, 0x2, 0x1f, 0x3, 0xe69}, {0x2, 0x9, 0x1, 0x5f0, 0x0, 0x2}, {0x5, 0x2, 0x80000000, 0x7, 0x7e9, 0x200}, {0x101, 0x2, 0x6, 0x0, 0x4, 0x5}, {0x2, 0x0, 0xd9, 0x401, 0xe69, 0x8}, {0x7, 0x8, 0x9f1, 0x0, 0xfffeffff, 0x80000001}, {0xd634, 0x99, 0x100, 0x1ff, 0x81, 0x2}, {0xfffff8ff, 0x100, 0x1, 0x81, 0x401, 0x5}, {0x0, 0x3, 0xfff, 0x62e, 0x7, 0xaf}, {0x3, 0x401, 0xfffffffe, 0x733ead6e, 0x3, 0x400}, {0x3, 0x800, 0x9, 0x4, 0x7}, {0x1000, 0x2, 0xa, 0x3, 0x5, 0xc}, {0x7ff, 0x7ff, 0x7fff, 0x44c71174, 0x7fffffff, 0x5}, {0xffffff00, 0x7, 0x0, 0x2, 0xffff8000, 0x3}, {0x0, 0x3, 0x8, 0xcc4, 0x0, 0x9}, {0x9, 0x9d5, 0x80000001, 0x6, 0x0, 0xffffffff}, {0xf, 0x1, 0xfffffe00, 0x6, 0x6, 0x9}, {0x6, 0xfff, 0x400, 0xffffff2b, 0x6, 0x1}, {0x5, 0x4, 0x0, 0xfffffffe, 0xfff}, {0x7fff, 0xc4000000, 0x2, 0x0, 0x2, 0x4}, {0x321, 0x40, 0x0, 0x2, 0x8, 0x3}, {0x80, 0x1000, 0x401, 0x92, 0x648033b8, 0x8}, {0xa, 0x1, 0x5, 0x1, 0xe, 0x3}, {0x1000, 0x5d9a, 0x5, 0x1000, 0x40, 0x137d}, {0x100, 0x8, 0x4, 0xfff, 0xd205, 0x4}, {0x10, 0x7, 0xc, 0x4ccf, 0x6, 0xb}, {0xf, 0x8, 0x9, 0xd, 0x6, 0xe310}, {0xfffffffe, 0x5ba7, 0x400, 0x2, 0x8, 0x48}, {0x4, 0xbf08, 0x6, 0x7f, 0x2, 0x4f3}, {0x9, 0x2, 0x7adc, 0x4c, 0x7afda124, 0x7fff}, {0x3, 0x2, 0x2, 0x40, 0x2, 0xfff}, {0x8, 0xfffff459, 0x1, 0xe, 0x7, 0x5}, {0x8, 0x0, 0x6, 0xfff, 0x100, 0x3}, {0x7, 0xffff, 0x0, 0x6, 0x4, 0x3}, {0xfffffff8, 0x4, 0x6, 0x26d6e2c0, 0x10001}, {0x1b, 0x3ef0, 0x7, 0xfe9, 0x9, 0x1}, {0x9, 0x7fff, 0x7ff, 0x4, 0xfffffff9}, {0x100, 0x7fff, 0xf7, 0x1, 0x0, 0x4}, {0x2, 0x1, 0x80000000, 0xffffffff, 0x9, 0x2}, {0x9, 0x1, 0x0, 0x401, 0x8, 0x1}, {0x8, 0x1, 0x4, 0x9, 0x1, 0x9}, {0x5, 0x12, 0x4c, 0xec, 0xffffffff, 0x2}, {0x6, 0x8c5, 0x9, 0x9, 0x3, 0xc}, {0x31e6, 0x3, 0x2, 0xe1, 0xfffffff1, 0x4}, {0x3103bbc5, 0x601, 0x0, 0x2, 0x0, 0x2}, {0xffffff81, 0x9, 0x0, 0x4, 0x9, 0x30e2}, {0x7, 0xb, 0x4, 0x10000, 0xffffff24, 0x5}, {0x64, 0x7f6, 0x1, 0x7, 0x9, 0x3}, {0x92d, 0x8, 0x1, 0x2, 0x9, 0x6}, {0x3, 0x0, 0xfffff514, 0x8, 0x5, 0x1}, {0x3, 0x5, 0x80, 0x9, 0xf0f1, 0xffffff6e}, {0xfffffffe, 0x7fffffff, 0x8, 0x2, 0x6, 0x6}, {0x0, 0x3, 0x10, 0x6b, 0x6, 0x7}, {0x3, 0x8, 0x80000001, 0x1, 0x6, 0x6}, {0x7ff, 0x6, 0x7, 0xd, 0x8, 0x8}, {0x7, 0x1, 0x6, 0x0, 0x5dec, 0x4b}, {0x400, 0x7, 0x101, 0x4, 0xff, 0x8a}], [{0x1}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x4}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x4}, {0x1}, {0x5}, {0x5}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5}, {0x3, 0x1}, {0xa3cdd3717b52dfd1, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x2}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0xf}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x2}, {0x3}, {0x3}, {0x4, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x47db0c92c637d837}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {}, {0x4}, {0x4}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x4}, {0x4}, {0x0, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x2, 0x3a499ee7ac5cfa43}, {0x1}, {0x2}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x150, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0xfc, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}, @TCA_PEDIT_KEYS_EX={0x58, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x4, 0x450a, 0x4, 0x8, 0x4}, 0x7f, 0x13, [{0x20d, 0x2ff, 0x5, 0x8, 0x81, 0xc}, {0x73, 0x200, 0xc, 0x7fffffff, 0x9, 0x2}, {0x3, 0x19c9ea5a, 0x5ae, 0x7, 0x10001, 0x2}, {0x0, 0x4, 0x6, 0x10000, 0x1, 0x9}, {0x8, 0x5, 0x5, 0x9, 0xb8, 0x7fff}, {0x5, 0x200, 0x7, 0x7, 0xffffffff, 0x6}]}, [{0x1, 0x3, 0x10, 0x1, 0x8, 0x8}, {0x765, 0x3, 0x5, 0x7, 0x100, 0x2}, {0x1, 0x2, 0x6, 0x7, 0xe, 0x2}, {0x10001, 0x8000, 0x0, 0x8, 0x3, 0x2}, {0x1000, 0x0, 0x6, 0x5, 0xc07, 0x7fffffff}, {0x4, 0x3, 0x8, 0x7, 0x6, 0x1}, {0x7d, 0x401, 0x10001, 0x94c, 0x1, 0x3}, {0x0, 0x90e3, 0xa00, 0x1ff, 0x84ad}, {0x1, 0x9, 0x4, 0x800, 0x4, 0x1ff}, {0x200, 0x2, 0x0, 0x9, 0x4, 0xe472}, {0x5, 0xe894, 0x5, 0x6, 0x1, 0x8}, {0x4, 0xfff, 0xec000000, 0x6, 0x0, 0x6}, {0x7ff, 0x8, 0x0, 0x6, 0x8}, {0xfffffffb, 0x8, 0x22, 0xffff0f31, 0x7f, 0xda}, {0xa, 0x3, 0x5, 0x6, 0x9, 0xa7e}, {0x8b6e, 0x0, 0xd3, 0x5, 0x0, 0x5}, {0xe5, 0x2, 0x6, 0x6, 0x4, 0x81}, {0x800, 0x1a63, 0xfa0, 0x1, 0x0, 0x5}, {0x8001, 0x3, 0x56, 0x1, 0x3, 0xff}, {0x1, 0x8, 0x1, 0xed9, 0x8, 0x2}, {0x2, 0x2, 0x81, 0x9, 0x80, 0xd6}, {0x8001, 0x6, 0x9, 0x2, 0xfffffffc, 0x2}, {0x1, 0x8001, 0x7f, 0xf, 0x7, 0x7}, {0x9, 0x2, 0x0, 0xaa, 0x2, 0x9}, {0x5, 0x4, 0x8, 0x4, 0x5408, 0x4}, {0x63, 0x5, 0x1, 0x401, 0x5, 0x800}, {0x7fe, 0x5, 0xffffffff, 0x7, 0x7, 0x6}, {0x1, 0x10, 0x5, 0x2, 0x5, 0x7}, {0x5, 0x2dc, 0x9, 0xe493, 0xbea4, 0x9}, {0x6ef18e0c, 0x4b8a, 0x4, 0x4, 0xffffffff, 0xb15}, {0xffffffff, 0x0, 0x4796, 0x1, 0x3, 0x4}, {0x75, 0x0, 0x91, 0x4, 0x6, 0x9}, {0x5, 0x0, 0x3, 0xc6, 0x0, 0x401}, {0x1000, 0x2, 0x2, 0x8, 0x400, 0x10}, {0xd, 0x5ce, 0x101, 0xffff, 0x1, 0xfffffff8}, {0x7, 0x3, 0x8, 0x8, 0x7, 0x8}, {0x7ba0, 0x6, 0xfffff68e, 0x0, 0x437, 0xdbd}, {0x2, 0x6, 0x0, 0x8, 0x3, 0x1}, {0x7fffffff, 0x16ed, 0x0, 0xff, 0x9, 0x2}, {0x97c, 0x0, 0x1, 0x5, 0x9, 0x7}, {0xffffe0ca, 0x8, 0x7, 0x3, 0xfffffff9, 0x1}, {0x1, 0x8, 0x6, 0x3, 0xd5, 0x5d4}, {0xcff1, 0x27, 0x4, 0x0, 0x9}, {0x7, 0x7, 0xfffffbff, 0xffffffff, 0x800, 0x4b4}, {0xa, 0xe, 0x0, 0x3, 0x5, 0x5}, {0x800, 0x8000, 0x9, 0x5, 0x1, 0x4}, {0x7e, 0x6934, 0x4, 0x7, 0x7, 0x5}, {0x5e3, 0x0, 0x8, 0xb368, 0x10001, 0x3}, {0x5, 0x9, 0xb8, 0x2, 0xdbf, 0x5}, {0x7fffffff, 0x6, 0x2, 0x4bf00, 0x0, 0x10}, {0x7, 0xbee, 0x2, 0xbc4c, 0x5, 0x7}, {0x7, 0xb, 0xffff51d4, 0x3, 0x80000000, 0x4}, {0x4, 0x7, 0xad, 0x80, 0x833, 0x4}, {0x2, 0x2, 0xfffffffd, 0x9, 0xe3b3, 0x69e8}, {0x6, 0x8, 0x10001, 0x4, 0x0, 0x1}, {0xe49, 0xfffffff9, 0xf4, 0x7, 0x0, 0x7}, {0x4, 0x81, 0x3, 0xffffffff, 0x6, 0x200}, {0x5, 0x1, 0x1, 0x7, 0x2, 0x20000}, {0x8, 0x7, 0x0, 0x4, 0x80000000, 0x3}, {0x7, 0x1, 0xfffffff7, 0x7, 0x80000001, 0x5}, {0x4, 0x5, 0xb, 0xb, 0x8, 0x5}, {0x0, 0x3, 0xc0000000, 0x8, 0x1000}, {0x1, 0xfff, 0x4, 0x7, 0x8, 0x7}, {0x100, 0x6d5e, 0xfffffffb, 0x6, 0x0, 0x6}, {0x6, 0x1, 0x80000000, 0x10, 0x8, 0xff}, {0x2, 0x8d, 0x9, 0xe6, 0x0, 0x4}, {0x1, 0x8, 0x8, 0x9, 0x8, 0xac}, {0xffff, 0x7, 0x3e84, 0x29, 0xffffffff}, {0xe, 0xcb, 0x6, 0x9, 0x3}, {0x2, 0xaed1242, 0x79, 0x497, 0x37f3, 0x3}, {0x8, 0x6, 0x10, 0x800000, 0x400, 0x7}, {0xa9e4, 0x4, 0x6, 0x7, 0x7}, {0x8, 0xfff, 0x8, 0xe, 0x7ff, 0x8}, {0x1, 0x480, 0x8, 0x5, 0x7f, 0x1}, {0x800, 0x81, 0xfffffff8, 0x3, 0xff1, 0x9}, {0x6960, 0x8, 0x5, 0x0, 0x4, 0x8}, {0x0, 0x4, 0x9, 0x7ff, 0x1, 0xd0dc}, {0x5, 0x5032d32c, 0x0, 0x400, 0x2, 0x81}, {0x8, 0x3, 0x4bbc, 0xa4d, 0x6, 0x401}, {0x48, 0x9, 0x9, 0x4, 0x8, 0xb335}, {0xb12, 0x803d, 0x8000, 0x80000000, 0x3, 0x5}, {0xe35b, 0x40, 0xffff0001, 0x0, 0x6018, 0x4}, {0xfcb, 0xd0c1, 0x704, 0xfff, 0x2}, {0x4, 0x3, 0x0, 0x4, 0x2, 0x43d}, {0x9293, 0x2, 0xd8d, 0x89, 0x5, 0xfffffff8}, {0x1, 0x6, 0x400, 0x4, 0x8000, 0x5}, {0x9, 0x7, 0x30, 0x2, 0x8, 0x572}, {0x7, 0x2, 0x1, 0x6, 0xfff, 0xdf}, {0xfffffff0, 0xa, 0x3, 0xfffffffe, 0x3, 0x7}, {0x9, 0x649c, 0x765f, 0x200, 0x1ff, 0x3}, {0x3, 0x4, 0x6, 0x8, 0x8, 0x7}, {0x2, 0x101, 0x6, 0x4000000, 0x5, 0x8}, {0xcf0e, 0xf, 0x2, 0x9, 0x81, 0x59ca}, {0x2, 0x10, 0x7, 0x100, 0x2, 0x9d}, {0x2, 0x1b, 0x2, 0xff, 0x8000}, {0x0, 0x4, 0x1000, 0x9, 0x1f15ed4e, 0x3}, {0x9d, 0xc, 0x0, 0x1000, 0x1000, 0x38000}, {0x0, 0x4, 0x7, 0xbf, 0x1ff, 0x1}, {0x7f, 0x7, 0xfffffffa, 0xa000, 0x6c, 0xd75}, {0xf38, 0xb, 0xd22, 0x80, 0x8, 0x4}, {0x4, 0x0, 0x3, 0x2, 0x8, 0x5}, {0x3, 0x6, 0x7, 0x1, 0x6267, 0x1000}, {0x1, 0x1c, 0x1, 0x49c4, 0xffff79d5, 0x7}, {0x1, 0x5bae, 0x8, 0x2, 0x8, 0x9}, {0x1, 0x6, 0x2, 0x6, 0x10001, 0x7}, {0x8001, 0x10, 0x8, 0x4, 0x1000, 0xc}, {0x5, 0x505, 0x1, 0x401, 0xb, 0x6}, {0x0, 0x5, 0x5884, 0x0, 0x9, 0x3}, {0x101, 0x9b, 0xfffffffe, 0x9, 0x800}, {0x800, 0x9, 0x2, 0x9, 0x9, 0x80000001}, {0x0, 0x6, 0x9, 0x6, 0xbe3f, 0x9}, {0x7, 0x3, 0x7062, 0x1ff, 0x101, 0x26}, {0xb9, 0x7, 0x1, 0x7, 0x7, 0x85db}, {0x5, 0xffff, 0x4, 0x3, 0x4, 0x5}, {0x1, 0x1, 0x9, 0x8, 0x3ff, 0xffff0000}, {0x2, 0x6, 0x3, 0x77, 0x7ff, 0x4}, {0xf, 0x10001, 0x9, 0x8001, 0x51a, 0x9}, {0xfffffffd, 0x3, 0x9, 0x8000, 0x6, 0x8}, {0x1ff, 0x1ff, 0x0, 0xa, 0x8001, 0x401}, {0xe, 0x5, 0x81, 0x3, 0x1, 0x1b6ea60d}, {0x7, 0x81, 0x14, 0x31, 0x8, 0x1}, {0x8, 0x0, 0xffff, 0x1000, 0xffff, 0xffff}, {0x5, 0xb8, 0x2, 0x101, 0x1, 0xc}, {0x80000000, 0x80000000, 0x8, 0x6, 0x9, 0x200}, {0x3, 0x2, 0xfffffff9, 0x2, 0x1f09, 0xd27}, {0x8, 0x1, 0xfffffd03, 0x8, 0x2, 0x3}, {0x5, 0x0, 0x9, 0x4, 0x8, 0x413f}, {0x7, 0x49e1, 0x7ff, 0x9, 0x3, 0x7}], [{0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x2}, {}, {0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x5e6ce6040cc7a17, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x4}, {}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0xb95d6f845063c238, 0x1}, {0x2, 0x4d06b666283373e}, {0x1}, {0x4, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x1}, {0x6, 0x1}, {0x4}, {}, {0x3, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x3}, {0x1, 0x1}, {0x3, 0x1}, {}, {}, {0x4, 0x1}, {}, {0x1}, {0x2}, {0x5}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x5}, {0x4}, {0x7}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {}, {0x5, 0x1}, {}, {0xd26af8e54c925f20, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x4}], 0x1}}]}, {0x59, 0x6, "d81056a777b93f27874eb262931684dbdf8af48e55935c66d2bd29dd90112a8a61268883890e0f2c50cb47ae1b954a00cd4f9945edecc6be4a33836a00e73a63868097ab27f6811c1cd18572078d9a7e22cbf0a762"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'tunl0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x3, 0x7}}, @TCA_FW_CLASSID={0x8, 0x1, {0x3, 0x5}}, @TCA_FW_CLASSID={0x8, 0x1, {0xd, 0xe}}]}}]}, 0x3ef4}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) kernel console output (not intermixed with test programs): ipt_REJECT: TCP_RESET invalid for non-tcp [ 440.595854][T20572] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 440.990155][T20585] veth5: entered promiscuous mode [ 441.009985][T20585] veth5: entered allmulticast mode [ 441.172678][T20585] bridge0: entered allmulticast mode [ 441.308622][T20622] netlink: 'syz.3.3979': attribute type 1 has an invalid length. [ 441.463136][T20622] 8021q: adding VLAN 0 to HW filter on device bond2 [ 441.869328][T20658] netlink: 'syz.2.3990': attribute type 1 has an invalid length. [ 442.045446][T20658] 8021q: adding VLAN 0 to HW filter on device bond3 [ 442.145523][T20668] gretap1: entered promiscuous mode [ 442.317095][T20675] __nla_validate_parse: 13 callbacks suppressed [ 442.317115][T20675] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3993'. [ 442.574423][T20694] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3999'. [ 442.709363][T10638] IPVS: starting estimator thread 0... [ 442.793245][T20697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4001'. [ 442.808934][T20701] IPVS: using max 25 ests per chain, 60000 per kthread [ 443.167883][T20729] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4006'. [ 443.211825][T20731] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4008'. [ 443.253536][T20735] Bluetooth: MGMT ver 1.23 [ 443.277218][T20729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4006'. [ 443.457748][T20746] batadv0: entered allmulticast mode [ 443.475323][T20746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.526169][T20060] udevd[20060]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 443.708095][T20758] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4015'. [ 443.746241][T20763] dvmrp6: entered allmulticast mode [ 443.793247][T20763] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 443.809865][T20763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.233208][T20793] Cannot find add_set index 2 as target [ 444.382316][T20809] netlink: 'syz.2.4025': attribute type 75 has an invalid length. [ 444.658592][T20819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.669336][T20824] xt_ecn: cannot match TCP bits for non-tcp packets [ 444.912311][T20824] tipc: Started in network mode [ 444.925103][T20824] tipc: Node identity d699e0a48753, cluster identity 4711 [ 444.934053][T20824] tipc: Enabled bearer , priority 0 [ 444.956008][T20830] syzkaller0: entered promiscuous mode [ 444.964989][T20830] syzkaller0: entered allmulticast mode [ 444.971499][T20835] netlink: 'syz.0.4033': attribute type 12 has an invalid length. [ 444.974790][T20824] tipc: Resetting bearer [ 444.995914][T20824] netlink: 'syz.1.4030': attribute type 21 has an invalid length. [ 445.019915][T20835] bond4: option primary_reselect: invalid value (255) [ 445.030255][T20835] bond4 (unregistering): Released all slaves [ 445.057504][T20836] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 445.092664][T20822] tipc: Resetting bearer [ 445.189690][T20846] netlink: del zone limit has 8 unknown bytes [ 445.197214][T20822] tipc: Disabling bearer [ 445.516921][T20866] netlink: 165 bytes leftover after parsing attributes in process `syz.0.4042'. [ 445.955622][T20897] tipc: Enabled bearer , priority 0 [ 446.001862][T20895] tipc: Enabling of bearer rejected, already enabled [ 446.032645][T20897] syzkaller0: entered promiscuous mode [ 446.047298][T20897] syzkaller0: entered allmulticast mode [ 446.080165][T20905] mac80211_hwsim hwsim46 syzkaller0: entered promiscuous mode [ 446.102323][T20905] mac80211_hwsim hwsim46 syzkaller0: entered allmulticast mode [ 446.121879][T20898] tipc: Started in network mode [ 446.126829][T20898] tipc: Node identity 080211, cluster identity 4711 [ 446.155264][T20898] tipc: Enabled bearer , priority 0 [ 446.165565][T20902] netlink: 516 bytes leftover after parsing attributes in process `syz.3.4050'. [ 446.190973][T20895] tipc: Resetting bearer [ 446.205200][T20914] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4053'. [ 446.263698][T20894] tipc: Resetting bearer [ 446.291392][T20919] xt_hashlimit: size too large, truncated to 1048576 [ 446.360095][T20894] tipc: Disabling bearer [ 446.374679][T20898] tipc: Resetting bearer [ 446.376218][T20925] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 446.559570][T20927] only policy match revision 0 supported [ 446.559590][T20927] unable to load match [ 446.619443][T20937] netlink: 'syz.2.4058': attribute type 83 has an invalid length. [ 446.691968][T20941] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 446.825815][T20949] netlink: 'syz.3.4062': attribute type 1 has an invalid length. [ 446.852471][T20949] netlink: 'syz.3.4062': attribute type 3 has an invalid length. [ 447.238366][ T8343] tipc: Node number set to 134353152 [ 447.343141][T20060] udevd[20060]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 447.366012][T20060] udevd[20060]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 447.426295][T20985] __nla_validate_parse: 39 callbacks suppressed [ 447.426315][T20985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4076'. [ 447.471317][T20983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4075'. [ 447.488819][T20990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4077'. [ 448.324779][T21034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4089'. [ 448.339941][T21034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.441863][T21045] nbd: must specify at least one socket [ 448.455518][T21041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4092'. [ 448.582787][T21049] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4095'. [ 448.686579][T21062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4099'. [ 448.853684][T21068] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4101'. [ 449.402144][T21109] netlink: 'syz.3.4114': attribute type 11 has an invalid length. [ 449.470390][T21114] netlink: 'syz.3.4115': attribute type 11 has an invalid length. [ 449.479638][T21114] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4115'. [ 449.492919][T21115] netlink: 'syz.3.4115': attribute type 11 has an invalid length. [ 449.501487][T21115] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4115'. [ 449.547635][T21119] ksmbd: Unknown IPC event: 0, ignore. [ 450.146280][T21152] xfrm1: entered promiscuous mode [ 450.162261][T21152] xfrm1: entered allmulticast mode [ 450.186067][T21132] lo speed is unknown, defaulting to 1000 [ 450.465321][T21166] bond0: entered promiscuous mode [ 450.475271][T21168] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 450.490662][T21166] batadv0: entered promiscuous mode [ 450.501740][T21166] debugfs: 'hsr1' already exists in 'hsr' [ 450.507870][T21166] Cannot create hsr debugfs directory [ 450.517789][T21166] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 450.529710][T21166] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 450.793890][T21176] netlink: 'syz.1.4133': attribute type 23 has an invalid length. [ 450.833079][T21132] wg1 speed is unknown, defaulting to 1000 [ 451.077190][T21190] vlan3: entered promiscuous mode [ 451.086218][T21190] vlan3: entered allmulticast mode [ 451.105352][T21190] hsr_slave_1: entered allmulticast mode [ 451.551009][T21217] syzkaller0: entered promiscuous mode [ 451.566896][T21217] syzkaller0: entered allmulticast mode [ 451.711304][T21224] !: renamed from bond_slave_0 (while UP) [ 452.023011][T21238] netlink: 'syz.1.4150': attribute type 5 has an invalid length. [ 452.705278][T21286] vlan2: entered promiscuous mode [ 452.729143][T21287] __nla_validate_parse: 12 callbacks suppressed [ 452.729163][T21287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4164'. [ 452.905471][T21298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4167'. [ 453.037123][T21304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4171'. [ 453.052153][T21306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4170'. [ 453.201109][T21316] x_tables: duplicate underflow at hook 2 [ 453.218559][T21317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4174'. [ 453.253943][T21316] netlink: 'syz.2.4176': attribute type 39 has an invalid length. [ 453.273374][T21321] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4175'. [ 453.471633][T21324] netlink: 'syz.3.4178': attribute type 1 has an invalid length. [ 453.636867][T21332] netlink: 'syz.0.4181': attribute type 8 has an invalid length. [ 453.698403][T21333] openvswitch: netlink: Key type 64 is out of range max 32 [ 453.724997][T21341] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4185'. [ 454.096664][T21362] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 454.269769][T21372] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4197'. [ 454.551629][T21395] geneve4: entered promiscuous mode [ 454.582258][T21395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4204'. [ 454.596731][T21396] netlink: 'syz.3.4203': attribute type 10 has an invalid length. [ 454.639786][T21396] bridge_slave_1: entered promiscuous mode [ 454.649550][T21396] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 454.704151][T21408] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 454.819213][T21415] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4209'. [ 455.071041][T21428] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 455.084411][T21434] netlink: 'syz.0.4217': attribute type 1 has an invalid length. [ 455.091765][T21428] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 455.103654][T21428] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 455.225481][T21442] bond4: (slave geneve3): making interface the new active one [ 455.233983][T21442] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 455.307519][ T6822] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 455.342636][ T6822] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 455.420024][ T6822] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 455.462797][ T6822] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 456.030637][T21498] vlan4: entered allmulticast mode [ 456.058557][T21436] lo speed is unknown, defaulting to 1000 [ 456.114517][T21496] syzkaller1: entered promiscuous mode [ 456.121754][T21496] syzkaller1: entered allmulticast mode [ 456.157745][T21505] netlink: 'syz.2.4235': attribute type 1 has an invalid length. [ 456.182469][T21496] netlink: 'syz.1.4232': attribute type 1 has an invalid length. [ 456.193279][T21505] netlink: 'syz.2.4235': attribute type 4 has an invalid length. [ 456.211142][T21511] SET target dimension over the limit! [ 456.419473][T21518] netlink: 'syz.4.4238': attribute type 1 has an invalid length. [ 456.611413][T21527] netlink: 'syz.0.4242': attribute type 10 has an invalid length. [ 456.647144][T21527] team0: Port device geneve0 added [ 456.681961][T21502] lo speed is unknown, defaulting to 1000 [ 456.689783][T21436] wg1 speed is unknown, defaulting to 1000 [ 457.042911][T21502] wg1 speed is unknown, defaulting to 1000 [ 457.482110][T21551] bridge_slave_0: invalid flags given to default FDB implementation [ 458.014721][T21574] __nla_validate_parse: 10 callbacks suppressed [ 458.014738][T21574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4254'. [ 458.080217][T21574] netlink: 'syz.4.4254': attribute type 1 has an invalid length. [ 458.112577][T21574] netlink: 'syz.4.4254': attribute type 2 has an invalid length. [ 458.242583][T21582] syzkaller1: entered promiscuous mode [ 458.248121][T21582] syzkaller1: entered allmulticast mode [ 458.265856][T21585] batman_adv: batadv0: Adding interface: dummy0 [ 458.273760][T21585] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.300697][T21585] batman_adv: batadv0: Interface activated: dummy0 [ 458.377699][T21589] batadv0: mtu less than device minimum [ 458.386746][T21589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 458.399067][T21589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 458.410943][T21589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 458.423004][T21589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 458.434920][T21589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 458.446854][T21589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 458.458872][T21589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 458.470769][T21589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 458.606448][T21601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4265'. [ 458.739207][T21611] Bluetooth: MGMT ver 1.23 [ 458.808924][T11800] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 458.838596][T11800] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 458.847002][T11800] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 20004 - 0 [ 458.867991][T11800] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 458.899472][T11800] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 458.907893][T11800] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 20004 - 0 [ 458.923995][T21612] netlink: 'syz.2.4267': attribute type 3 has an invalid length. [ 459.005104][T11800] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 459.019728][T11800] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 459.031456][T11800] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 20004 - 0 [ 459.041545][T21621] tipc: Enabled bearer , priority 0 [ 459.170013][T21614] syzkaller0: entered promiscuous mode [ 459.175768][T21614] syzkaller0: entered allmulticast mode [ 459.183491][T21614] tipc: Resetting bearer [ 459.191085][T11800] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 459.202161][T11800] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 459.211655][T11800] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 20004 - 0 [ 459.226091][T21613] tipc: Resetting bearer [ 460.892438][T21613] tipc: Disabling bearer [ 460.906491][T21631] dvmrp0: entered allmulticast mode [ 460.925440][T21640] dvmrp0: left allmulticast mode [ 460.963139][ T8338] tipc: Node number set to 220349552 [ 461.135806][T21654] net_ratelimit: 11 callbacks suppressed [ 461.135823][T21654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.146332][T21655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4279'. [ 461.163886][T21657] syzkaller0: entered allmulticast mode [ 461.440426][T21676] tipc: Enabling of bearer rejected, failed to enable media [ 461.533488][T21688] netlink: 'syz.0.4289': attribute type 11 has an invalid length. [ 461.684571][T21697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4291'. [ 461.704218][T21697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4291'. [ 461.733370][T21694] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 461.745689][T21694] bond3 (unregistering): Released all slaves [ 461.899033][T21706] netlink: 'syz.1.4294': attribute type 10 has an invalid length. [ 462.654031][T21741] syzkaller1: entered promiscuous mode [ 462.664643][T21741] syzkaller1: entered allmulticast mode [ 462.773383][T21755] netlink: 'syz.3.4309': attribute type 10 has an invalid length. [ 462.773514][T21749] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 462.797941][T21749] bond3 (unregistering): Released all slaves [ 462.855675][T21753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4308'. [ 462.867009][T21755] bridge0: port 1(team0) entered blocking state [ 462.889581][T21755] bridge0: port 1(team0) entered disabled state [ 462.896099][T21755] team0: entered allmulticast mode [ 462.941574][T21755] team0: entered promiscuous mode [ 463.100648][T21775] IPVS: set_ctl: invalid protocol: 8 224.0.0.1:20001 [ 463.457730][T21791] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4319'. [ 463.458871][T21769] lo speed is unknown, defaulting to 1000 [ 463.812119][T21804] netlink: 'syz.4.4325': attribute type 21 has an invalid length. [ 463.822157][T21804] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4325'. [ 463.884108][T21769] wg1 speed is unknown, defaulting to 1000 [ 464.088120][T21812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4328'. [ 464.214574][T21832] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4332'. [ 464.239177][T21832] mac80211_hwsim hwsim46 syzkaller0: left promiscuous mode [ 464.246563][T21832] mac80211_hwsim hwsim46 syzkaller0: left allmulticast mode [ 464.282275][T21836] bond6: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 464.295313][T21836] bond6 (unregistering): Released all slaves [ 464.832476][T21863] netlink: 596 bytes leftover after parsing attributes in process `syz.2.4343'. [ 464.849319][T21868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4343'. [ 464.849437][T21863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4343'. [ 464.919146][T21875] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4347'. [ 465.013637][T21878] erspan0: entered promiscuous mode [ 465.035040][T21878] vlan4: entered promiscuous mode [ 465.114886][T21885] netlink: 'syz.0.4350': attribute type 29 has an invalid length. [ 465.454257][T21907] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4354'. [ 465.551326][T21911] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4355'. [ 465.802361][T21923] team0: left allmulticast mode [ 465.844121][T21923] team0: left promiscuous mode [ 465.878538][T21923] bridge0: port 1(team0) entered disabled state [ 466.027934][T21943] netlink: 'syz.3.4360': attribute type 1 has an invalid length. [ 466.407072][T21947] netlink: 'syz.4.4364': attribute type 1 has an invalid length. [ 466.531703][T21947] veth5: entered promiscuous mode [ 466.623457][T21956] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 466.798644][T21969] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 466.811715][T21969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.135172][T21989] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 467.217635][T21989] bond5: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 467.240348][T21989] bond5 (unregistering): Released all slaves [ 467.468943][T22015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.887868][T22045] x_tables: duplicate underflow at hook 2 [ 467.887868][T22044] x_tables: duplicate underflow at hook 2 [ 468.467499][T22082] xt_socket: unknown flags 0x50 [ 468.705066][T22099] __nla_validate_parse: 13 callbacks suppressed [ 468.705087][T22099] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4410'. [ 468.722527][T22099] bridge0: port 3(syz_tun) entered blocking state [ 468.730445][T22099] bridge0: port 3(syz_tun) entered disabled state [ 468.737494][T22099] syz_tun: entered allmulticast mode [ 468.749881][T22099] syz_tun: entered promiscuous mode [ 468.755484][T22099] bridge0: adding interface syz_tun with same address as a received packet (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 468.792234][T22099] bridge0: adding interface syz_tun with same address as a received packet (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 468.817940][T22104] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4410'. [ 468.876891][T22108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4413'. [ 468.955299][T22114] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4415'. [ 469.106182][T22118] netlink: 'syz.3.4416': attribute type 13 has an invalid length. [ 469.114322][T22118] netlink: 'syz.3.4416': attribute type 17 has an invalid length. [ 469.140876][T22118] gre0: left promiscuous mode [ 469.202271][T22130] netlink: 'syz.4.4417': attribute type 3 has an invalid length. [ 469.220433][T22130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4417'. [ 469.238359][T22130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4417'. [ 469.267808][T22135] netlink: 'syz.0.4411': attribute type 10 has an invalid length. [ 469.530198][T22118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 469.537761][T22144] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4421'. [ 469.550508][T22123] netlink: 'syz.4.4417': attribute type 2 has an invalid length. [ 469.560733][T22144] nbd: illegal input index -8454144 [ 469.569632][T22135] wlan1: mtu less than device minimum [ 469.575322][T22135] `: (slave wlan1): Error -22 calling dev_set_mtu [ 469.730020][T22148] tipc: Enabling of bearer rejected, failed to enable media [ 469.794080][T22150] netlink: 'syz.2.4424': attribute type 29 has an invalid length. [ 469.821574][T22150] netlink: 'syz.2.4424': attribute type 29 has an invalid length. [ 469.842278][T22150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4424'. [ 469.857747][T22150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4424'. [ 469.954261][T22160] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4426'. [ 469.971493][T22160] 0{X: renamed from gretap0 (while UP) [ 470.035386][T22160] 0{X: entered allmulticast mode [ 470.051199][T22160] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 470.111061][T22168] netlink: ct family unspecified [ 470.125308][T22168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.413969][T22185] batadv2: entered allmulticast mode [ 470.485527][T22190] xt_TPROXY: Can be used only with -p tcp or -p udp [ 470.556377][T22193] SET target dimension over the limit! [ 470.750914][T22205] tipc: Invalid UDP bearer configuration [ 470.750969][T22205] tipc: Enabling of bearer rejected, failed to enable media [ 471.259396][T22237] netlink: 'syz.1.4448': attribute type 1 has an invalid length. [ 471.299192][T22241] netlink: 'syz.3.4450': attribute type 1 has an invalid length. [ 471.372504][T22246] netlink: 'syz.3.4450': attribute type 1 has an invalid length. [ 471.533243][T22251] bond4: option coupled_control: invalid value (52) [ 471.545745][T22251] bond4 (unregistering): Released all slaves [ 471.674895][T22264] IPVS: Error connecting to the multicast addr [ 472.005209][T22285] xt_hashlimit: overflow, try lower: 3/0 [ 472.025480][T22283] geneve5: entered promiscuous mode [ 472.039444][T22283] geneve5: entered allmulticast mode [ 472.055228][ T6822] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 472.070483][ T6822] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 472.090292][ T6822] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 472.111979][ T6822] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 472.488830][T22304] af_packet: tpacket_rcv: packet too big, clamped from 64 to 4294967272. macoff=96 [ 472.542185][T22318] sctp: [Deprecated]: syz.2.4468 (pid 22318) Use of int in max_burst socket option. [ 472.542185][T22318] Use struct sctp_assoc_value instead [ 472.562489][T22315] mac80211_hwsim hwsim46 syzkaller0: entered promiscuous mode [ 472.571966][T22315] mac80211_hwsim hwsim46 syzkaller0: entered allmulticast mode [ 472.639436][T22323] x_tables: duplicate underflow at hook 1 [ 473.336605][T22369] sctp: [Deprecated]: syz.2.4482 (pid 22369) Use of int in maxseg socket option. [ 473.336605][T22369] Use struct sctp_assoc_value instead [ 473.621209][T22385] openvswitch: netlink: Missing key (keys=40, expected=80) [ 473.731788][T22395] __nla_validate_parse: 26 callbacks suppressed [ 473.731811][T22395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4493'. [ 473.753571][T22395] xfrm1: entered promiscuous mode [ 473.760066][T22395] xfrm1: entered allmulticast mode [ 473.767099][T22395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4493'. [ 473.780148][T22394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4491'. [ 474.187968][T22423] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20003 [ 474.260656][T22421] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 474.271975][T22421] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 474.281537][T22421] gretap1: entered promiscuous mode [ 474.286783][T22421] gretap1: entered allmulticast mode [ 474.310769][T22431] veth1_macvtap: left promiscuous mode [ 474.320166][T22431] macsec0: entered promiscuous mode [ 474.331263][T22431] macsec0: entered allmulticast mode [ 474.342734][T22431] veth1_macvtap: entered promiscuous mode [ 474.361608][T22431] veth1_macvtap: entered allmulticast mode [ 474.379697][T22431] macsec0: left promiscuous mode [ 474.386060][T22431] macsec0: left allmulticast mode [ 474.396211][T22431] veth1_macvtap: left allmulticast mode [ 474.447291][T22441] validate_nla: 5 callbacks suppressed [ 474.447309][T22441] netlink: 'syz.3.4507': attribute type 1 has an invalid length. [ 474.571855][T22452] netlink: 'syz.0.4510': attribute type 10 has an invalid length. [ 474.577041][T22451] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4511'. [ 474.580699][T22452] netlink: 'syz.0.4510': attribute type 10 has an invalid length. [ 474.599233][T22452] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4510'. [ 474.784174][T22462] macvlan2: entered promiscuous mode [ 474.795008][T22462] macvlan2: entered allmulticast mode [ 474.803684][T22462] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 474.860291][T22471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4517'. [ 474.961679][T22478] sctp: [Deprecated]: syz.4.4518 (pid 22478) Use of int in max_burst socket option deprecated. [ 474.961679][T22478] Use struct sctp_assoc_value instead [ 475.093435][T22484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4522'. [ 475.127820][T22487] tipc: Enabled bearer , priority 0 [ 475.141002][T22487] tipc: Resetting bearer [ 475.192138][T22486] tipc: Disabling bearer [ 475.405150][T22507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4529'. [ 475.535472][T22511] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4532'. [ 475.545062][T22511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4532'. [ 475.783800][T22526] netlink: 'syz.1.4536': attribute type 1 has an invalid length. [ 475.872902][T22526] 8021q: adding VLAN 0 to HW filter on device bond5 [ 475.876709][T22532] netlink: 'syz.4.4537': attribute type 83 has an invalid length. [ 475.942050][T22530] veth7: entered promiscuous mode [ 475.971245][T22530] bond5: (slave veth7): Enslaving as an active interface with an up link [ 476.009304][T22534] policy can only be matched on NF_INET_PRE_ROUTING [ 476.009324][T22534] unable to load match [ 476.115729][T22546] netlink: 'syz.2.4541': attribute type 1 has an invalid length. [ 476.125807][T22543] syzkaller0: entered promiscuous mode [ 476.131726][T22543] syzkaller0: entered allmulticast mode [ 476.139374][T22545] veth1_to_bond: entered allmulticast mode [ 476.180435][T22545] bond0: (slave bond_slave_1): Releasing backup interface [ 476.207028][T22545] bond_slave_1 (unregistering): left promiscuous mode [ 476.242557][T22545] veth1_to_bond (unregistering): left allmulticast mode [ 476.382889][T22559] IPVS: Error connecting to the multicast addr [ 476.420031][T22567] netlink: 'syz.1.4548': attribute type 13 has an invalid length. [ 476.469148][T22567] macvtap0: entered allmulticast mode [ 476.479247][T22567] macvtap0: refused to change device tx_queue_len [ 476.544363][T22577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.712396][T22588] sctp: [Deprecated]: syz.1.4553 (pid 22588) Use of int in maxseg socket option. [ 476.712396][T22588] Use struct sctp_assoc_value instead [ 477.297020][T22633] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 477.328686][T22624] tipc: Enabled bearer , priority 13 [ 477.555265][T22655] xt_limit: Overflow, try lower: 271964/0 [ 477.582715][T22653] netlink: 'syz.3.4574': attribute type 8 has an invalid length. [ 478.026758][T22688] netlink: 'syz.4.4582': attribute type 33 has an invalid length. [ 478.363297][T22703] netlink: 'syz.1.4592': attribute type 11 has an invalid length. [ 478.390687][T22699] bridge_slave_1 (unregistering): left allmulticast mode [ 478.420446][T22699] bridge_slave_1 (unregistering): left promiscuous mode [ 478.438735][T22699] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.482548][ T8336] tipc: Node number set to 2587535903 [ 478.550282][T22674] lo speed is unknown, defaulting to 1000 [ 478.757292][T22727] __nla_validate_parse: 18 callbacks suppressed [ 478.757310][T22727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4599'. [ 478.814086][T22735] sctp: [Deprecated]: syz.0.4600 (pid 22735) Use of int in max_burst socket option. [ 478.814086][T22735] Use struct sctp_assoc_value instead [ 478.993544][T22740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4603'. [ 479.217811][T22752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4606'. [ 479.218769][T22750] netlink: zone id is out of range [ 479.233006][T22750] netlink: zone id is out of range [ 479.238329][T22750] netlink: zone id is out of range [ 479.243433][T22674] wg1 speed is unknown, defaulting to 1000 [ 479.249933][T22750] netlink: zone id is out of range [ 479.255074][T22750] netlink: zone id is out of range [ 479.290037][T22750] netlink: zone id is out of range [ 479.304633][T22750] netlink: zone id is out of range [ 479.310929][T22750] netlink: zone id is out of range [ 479.319947][T22750] netlink: zone id is out of range [ 479.325178][T22750] netlink: zone id is out of range [ 479.491841][T22767] netlink: 'syz.1.4609': attribute type 4 has an invalid length. [ 479.965872][T22781] lo: entered promiscuous mode [ 479.993845][T22781] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 480.612135][T22806] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4623'. [ 480.633224][T22806] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4623'. [ 480.721106][T22811] tipc: Enabling of bearer rejected, already enabled [ 480.806047][T22816] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4627'. [ 480.861005][T22817] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4628'. [ 480.865353][T22816] netlink: 18 bytes leftover after parsing attributes in process `syz.0.4627'. [ 480.887512][T22822] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4628'. [ 481.044348][T22830] sctp: [Deprecated]: syz.4.4632 (pid 22830) Use of struct sctp_assoc_value in delayed_ack socket option. [ 481.044348][T22830] Use struct sctp_sack_info instead [ 481.205468][T22843] x_tables: duplicate underflow at hook 3 [ 481.290957][T22850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4637'. [ 481.336866][T22850] 8021q: adding VLAN 0 to HW filter on device bond3 [ 481.606263][T22865] syzkaller0: entered promiscuous mode [ 481.662354][T22865] syzkaller0: entered allmulticast mode [ 481.724209][T22879] netlink: 'syz.3.4643': attribute type 4 has an invalid length. [ 482.116895][T22905] macsec1: entered promiscuous mode [ 482.155936][T22908] IPVS: ip_vs_add_dest(): server weight less than zero [ 482.332014][T22917] syzkaller0: entered promiscuous mode [ 482.342932][T22917] syzkaller0: entered allmulticast mode [ 482.372233][T22921] netlink: 'syz.0.4657': attribute type 8 has an invalid length. [ 482.532365][T22931] xt_NFQUEUE: number of queues (16) out of range (got 65549) [ 482.808758][T22944] macvtap1: entered promiscuous mode [ 482.814123][T22944] vlan0: entered promiscuous mode [ 482.851151][T22944] macvtap1: entered allmulticast mode [ 482.856675][T22944] vlan0: entered allmulticast mode [ 482.869706][T22952] netlink: 'syz.0.4666': attribute type 4 has an invalid length. [ 482.877921][T22944] veth0_vlan: entered allmulticast mode [ 482.970308][T22957] team0: Device ipvlan1 failed to register rx_handler [ 483.479630][T22983] veth9: entered allmulticast mode [ 483.595781][T22989] netlink: 'syz.3.4676': attribute type 1 has an invalid length. [ 483.684620][T22994] tipc: Enabling of bearer rejected, failed to enable media [ 483.819147][T23009] __nla_validate_parse: 16 callbacks suppressed [ 483.819168][T23009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4681'. [ 483.843325][T23008] netlink: 212356 bytes leftover after parsing attributes in process `syz.2.4680'. [ 483.936968][T22953] lo speed is unknown, defaulting to 1000 [ 483.999389][T23016] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4684'. [ 484.229421][T23029] SET target dimension over the limit! [ 484.251965][T23033] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4689'. [ 484.403239][T23029] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4688'. [ 484.534050][T23046] netlink: 'syz.3.4692': attribute type 1 has an invalid length. [ 484.579931][T23046] netlink: 'syz.3.4692': attribute type 3 has an invalid length. [ 484.623378][T23046] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4692'. [ 484.642497][T23046] NCSI netlink: No device for ifindex 813332851 [ 484.653631][T23048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4693'. [ 484.680430][T23048] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 484.690920][T23046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4692'. [ 484.710217][T23054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4693'. [ 484.777592][T23048] team1: entered promiscuous mode [ 484.850126][T23048] team1: entered allmulticast mode [ 484.928922][T23068] netlink: 'syz.3.4692': attribute type 4 has an invalid length. [ 485.002724][T23046] netlink: 'syz.3.4692': attribute type 4 has an invalid length. [ 485.058364][T22953] wg1 speed is unknown, defaulting to 1000 [ 485.129175][T23074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4698'. [ 485.545603][T22961] lo speed is unknown, defaulting to 1000 [ 485.607095][T13692] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.638474][T13692] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.647510][T13692] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.670398][T13692] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.702873][T13692] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.713065][T13692] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.723516][T23090] syzkaller1: entered promiscuous mode [ 485.730778][T23090] syzkaller1: entered allmulticast mode [ 485.739678][T13692] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.750425][T13692] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.913484][T23100] netdevsim netdevsim1 : renamed from netdevsim0 [ 485.961766][T23100] syzkaller0: entered promiscuous mode [ 485.967286][T23100] syzkaller0: entered allmulticast mode [ 486.032198][T23100] tipc: Enabled bearer , priority 0 [ 486.045613][T23099] tipc: Resetting bearer [ 486.072587][T23099] tipc: Disabling bearer [ 486.236069][T23113] sctp: [Deprecated]: syz.2.4710 (pid 23113) Use of struct sctp_assoc_value in delayed_ack socket option. [ 486.236069][T23113] Use struct sctp_sack_info instead [ 486.255878][T22961] wg1 speed is unknown, defaulting to 1000 [ 487.341329][T23170] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 487.956007][T23210] siw: device registration error -23 [ 488.013661][T23210] pimreg3: entered allmulticast mode [ 488.367455][T23236] syzkaller1: entered promiscuous mode [ 488.379618][T23236] syzkaller1: entered allmulticast mode [ 488.602974][T23245] netlink: 'syz.2.4753': attribute type 1 has an invalid length. [ 488.718715][T23250] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 488.743836][T23250] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 488.754531][T23250] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 488.837748][T23245] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 488.851913][T23255] __nla_validate_parse: 14 callbacks suppressed [ 488.851943][T23255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4757'. [ 488.860591][T23261] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4758'. [ 488.868953][T23255] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4757'. [ 488.878277][T23245] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 488.889240][T23255] netlink: 'syz.4.4757': attribute type 5 has an invalid length. [ 488.904235][T23256] netlink: 'syz.4.4757': attribute type 10 has an invalid length. [ 488.933729][T23262] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4756'. [ 488.934523][T23256] bond0: (slave wlan1): Opening slave failed [ 488.951627][T23254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.313718][T23278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4765'. [ 489.379059][T23278] netlink: 'syz.2.4765': attribute type 5 has an invalid length. [ 489.390572][T23278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4765'. [ 489.620682][T23302] netlink: 'syz.3.4771': attribute type 10 has an invalid length. [ 489.663865][T23302] veth1_macvtap: left promiscuous mode [ 489.674344][T23302] team0: Device veth1_macvtap failed to register rx_handler [ 489.816504][T23316] netlink: 'syz.4.4775': attribute type 1 has an invalid length. [ 489.930993][T23328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4777'. [ 490.108960][T23338] xt_addrtype: ipv6 does not support BROADCAST matching [ 490.249335][T23344] netlink: 'syz.4.4784': attribute type 1 has an invalid length. [ 490.389543][T23344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4784'. [ 490.415808][T23353] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4788'. [ 490.527625][T23364] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4791'. [ 490.882295][T23387] netlink: 'syz.0.4799': attribute type 1 has an invalid length. [ 490.900113][T23387] netlink: 'syz.0.4799': attribute type 11 has an invalid length. [ 490.955336][T23394] netlink: 'syz.4.4801': attribute type 39 has an invalid length. [ 491.043464][T23399] netlink: 'syz.2.4803': attribute type 2 has an invalid length. [ 491.087363][T23403] gre0: entered promiscuous mode [ 491.094621][T23403] gre0: entered allmulticast mode [ 491.213229][T23407] netlink: 'syz.0.4806': attribute type 6 has an invalid length. [ 491.253604][T23407] netlink: 'syz.0.4806': attribute type 6 has an invalid length. [ 491.282835][T23416] netlink: 'syz.0.4806': attribute type 6 has an invalid length. [ 491.334350][T23415] tipc: New replicast peer: 255.255.255.255 [ 491.356913][T23415] tipc: Enabled bearer , priority 10 [ 491.879902][T23448] nbd0: detected capacity change from 0 to 31551 [ 491.906997][ T5847] block nbd0: Receive control failed (result -104) [ 492.011133][T23459] bond4: option xmit_hash_policy: invalid value (64) [ 492.022290][T23459] bond4 (unregistering): Released all slaves [ 492.093509][T23464] 8021q: adding VLAN 0 to HW filter on device bond5 [ 492.214432][T23473] 8021q: adding VLAN 0 to HW filter on device bond5 [ 492.231714][T23478] IPVS: length: 8 != 1152 [ 492.236675][T23473] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 492.252576][T23473] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 492.316753][T23464] veth5: entered promiscuous mode [ 492.333453][T23464] bond5: (slave veth5): Enslaving as an active interface with a down link [ 492.367550][T23479] vlan1: entered allmulticast mode [ 492.373727][T23479] bond5: entered allmulticast mode [ 492.406315][T10638] tipc: Node number set to 1372250276 [ 492.534332][T23492] bond5: (slave bridge7): making interface the new active one [ 492.555761][T23492] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 492.724197][T23509] 8021q: adding VLAN 0 to HW filter on device bond4 [ 492.822656][T23509] gretap0: entered promiscuous mode [ 492.880679][T23519] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 492.894026][T23519] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 493.070173][T23532] 8021q: VLANs not supported on ip_vti0 [ 493.457629][T23565] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 493.465058][T23565] IPv6: NLM_F_CREATE should be set when creating new route [ 493.472348][T23565] IPv6: NLM_F_CREATE should be set when creating new route [ 493.488745][T23565] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 494.124916][T23608] netlink: 'syz.0.4865': attribute type 11 has an invalid length. [ 494.246118][T23614] __nla_validate_parse: 10 callbacks suppressed [ 494.246137][T23614] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4870'. [ 494.792293][T23652] tc_dump_action: action bad kind [ 494.907120][T23657] dvmrp0: entered allmulticast mode [ 495.731933][T23715] validate_nla: 5 callbacks suppressed [ 495.731953][T23715] netlink: 'syz.0.4917': attribute type 23 has an invalid length. [ 495.757118][T23715] IPv6: NLM_F_CREATE should be specified when creating new route [ 496.158681][T23743] xt_limit: Overflow, try lower: 2147483649/3300 [ 496.799845][T23788] netlink: 'syz.4.4951': attribute type 3 has an invalid length. [ 496.840155][T23788] netlink: 'syz.4.4951': attribute type 3 has an invalid length. [ 497.127784][T23810] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4962'. [ 497.139948][T23810] gretap0: entered promiscuous mode [ 497.145429][T23810] netlink: 15 bytes leftover after parsing attributes in process `syz.0.4962'. [ 497.166167][T23814] netlink: 45 bytes leftover after parsing attributes in process `syz.3.4964'. [ 497.403786][T23824] IPv6: sit1: Disabled Multicast RS [ 497.505719][T23834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4974'. [ 497.796360][T23855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4984'. [ 498.289512][T23891] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5001'. [ 498.555955][T23906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5008'. [ 499.231903][T23959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5034'. [ 499.252845][T23958] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 499.533514][T23981] xt_addrtype: ipv6 does not support BROADCAST matching [ 499.853239][T23998] netlink: 'syz.1.5052': attribute type 11 has an invalid length. [ 500.114510][T24017] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5059'. [ 500.567874][T24046] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 501.811482][T24128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5105'. [ 504.209465][T24288] tap0: tun_chr_ioctl cmd 1074025681 [ 505.282707][T24341] IPVS: length: 31 != 24 [ 505.464369][T24354] xt_limit: Overflow, try lower: 604147548/4200216962 [ 505.475954][T24353] netlink: 'syz.0.5205': attribute type 5 has an invalid length. [ 505.539349][T24362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5207'. [ 505.701923][T24370] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5211'. [ 505.820089][T24378] netem: incorrect gi model size [ 505.825578][T24378] netem: change failed [ 505.913412][T24378] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 505.926868][T24378] bond6 (unregistering): Released all slaves [ 505.986872][T24388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5215'. [ 506.056880][T24388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5215'. [ 506.083400][T24393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5218'. [ 506.104516][T24388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5215'. [ 506.117272][T24393] vxcan2: entered allmulticast mode [ 506.167424][T24388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5215'. [ 506.208941][T24388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5215'. [ 506.238750][T24388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5215'. [ 506.247924][T24388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5215'. [ 506.441049][T24405] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20003 [ 506.505047][T24409] net_ratelimit: 4 callbacks suppressed [ 506.505066][T24409] openvswitch: netlink: Flow actions attr not present in new flow. [ 506.652176][T24423] netlink: 'syz.4.5227': attribute type 21 has an invalid length. [ 507.102909][T24454] netlink: 'syz.2.5237': attribute type 11 has an invalid length. [ 507.110914][T24453] vlan2: entered promiscuous mode [ 507.110937][T24453] geneve1: entered promiscuous mode [ 507.111106][T24453] vlan2: entered allmulticast mode [ 507.111120][T24453] geneve1: entered allmulticast mode [ 507.283433][T24467] netlink: 'syz.3.5241': attribute type 4 has an invalid length. [ 507.593136][T24491] gtp1: entered promiscuous mode [ 507.598370][T24491] gtp1: entered allmulticast mode [ 507.905888][T24514] netlink: 'syz.4.5258': attribute type 21 has an invalid length. [ 507.937091][T24514] netlink: 'syz.4.5258': attribute type 1 has an invalid length. [ 507.971828][T24514] netlink: 'syz.4.5258': attribute type 21 has an invalid length. [ 507.986819][T24514] netlink: 'syz.4.5258': attribute type 1 has an invalid length. [ 507.986986][T24517] netlink: 'syz.2.5259': attribute type 1 has an invalid length. [ 508.137864][T24523] bond6: (slave bridge6): making interface the new active one [ 508.157972][T24523] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 508.685049][T24560] xt_CT: You must specify a L4 protocol and not use inversions on it [ 508.958518][T24583] netlink: 'syz.2.5278': attribute type 2 has an invalid length. [ 508.970320][T24583] netlink: 'syz.2.5278': attribute type 2 has an invalid length. [ 509.141602][T24596] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 509.206544][T24604] team0: Cannot enslave team device to itself [ 509.282596][T24607] SET target dimension over the limit! [ 509.291126][T24607] openvswitch: netlink: Missing key (keys=40, expected=80) [ 509.700491][T24638] 8021q: VLANs not supported on ipvlan1 [ 510.404572][T24687] 8021q: VLANs not supported on ip6tnl0 [ 510.574205][T24695] __nla_validate_parse: 46 callbacks suppressed [ 510.574225][T24695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5311'. [ 510.599238][T24701] veth7: entered promiscuous mode [ 510.604434][T24701] veth7: entered allmulticast mode [ 510.766909][T24714] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5318'. [ 510.918565][T24730] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 510.965104][ T8336] IPVS: starting estimator thread 0... [ 511.058307][T24737] IPVS: using max 26 ests per chain, 62400 per kthread [ 511.222202][T24751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5328'. [ 511.235575][T24751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5328'. [ 511.259268][T24759] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5332'. [ 511.344657][T24761] validate_nla: 6 callbacks suppressed [ 511.344677][T24761] netlink: 'syz.1.5333': attribute type 10 has an invalid length. [ 511.361647][T24765] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 511.372441][T24765] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 511.381936][T24765] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 511.393928][T24766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5331'. [ 511.421919][T24768] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5335'. [ 511.432215][T24768] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5335'. [ 511.443502][T24768] syzkaller0: entered promiscuous mode [ 511.452771][T24768] syzkaller0: entered allmulticast mode [ 511.547557][T24770] netlink: 'syz.1.5336': attribute type 1 has an invalid length. [ 511.555913][T24770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5336'. [ 511.708401][T24779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5338'. [ 511.880783][T24786] netlink: 'syz.4.5341': attribute type 14 has an invalid length. [ 512.086913][T24797] netlink: 'syz.4.5344': attribute type 13 has an invalid length. [ 512.342388][T24807] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 512.439999][T24815] bridge_slave_0: default FDB implementation only supports local addresses [ 512.660275][T24830] netlink: 'syz.4.5355': attribute type 1 has an invalid length. [ 512.669642][T24830] netlink: 'syz.4.5355': attribute type 1 has an invalid length. [ 512.833544][T24838] tipc: Enabled bearer , priority 0 [ 512.873617][T24838] syzkaller0: entered promiscuous mode [ 512.898677][T24838] syzkaller0: entered allmulticast mode [ 512.931167][T24838] tipc: Resetting bearer [ 512.954736][T24845] vlan1: entered allmulticast mode [ 513.043065][T24837] tipc: Resetting bearer [ 513.070823][T24837] tipc: Disabling bearer [ 513.223485][T24870] netlink: 'syz.2.5365': attribute type 1 has an invalid length. [ 513.461841][T24884] bond6: (slave gre0): Device is not bonding slave [ 513.468933][T24884] bond6: option active_slave: invalid value (gre0) [ 513.480029][T24884] bond6 (unregistering): Released all slaves [ 513.509996][T24883] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 513.558444][T24891] bridge0: entered allmulticast mode [ 513.601771][T24891] syz_tun: left allmulticast mode [ 513.611762][T24891] syz_tun: left promiscuous mode [ 513.617468][T24891] bridge0: port 3(syz_tun) entered disabled state [ 513.703317][T24891] bridge_slave_1: left allmulticast mode [ 513.715567][T24891] bridge_slave_1: left promiscuous mode [ 513.729146][T24891] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.764297][T24891] bridge_slave_0: left promiscuous mode [ 513.772922][T24891] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.942481][T24916] tipc: Enabled bearer , priority 13 [ 513.977255][T24922] netlink: 'syz.1.5382': attribute type 3 has an invalid length. [ 514.236299][T24927] bond0: (slave bridge_slave_1): Releasing backup interface [ 514.246028][T24927] bridge_slave_1 (unregistering): left promiscuous mode [ 515.153143][T24950] netlink: 'syz.4.5391': attribute type 4 has an invalid length. [ 515.255347][T25004] netlink: 'syz.0.5403': attribute type 3 has an invalid length. [ 515.566683][T25025] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 515.595346][T25025] __nla_validate_parse: 23 callbacks suppressed [ 515.595365][T25025] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5409'. [ 515.651332][T25025] sctp: [Deprecated]: syz.0.5409 (pid 25025) Use of struct sctp_assoc_value in delayed_ack socket option. [ 515.651332][T25025] Use struct sctp_sack_info instead [ 516.085608][T25063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5420'. [ 516.331648][T25077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.526967][T25086] syzkaller1: entered promiscuous mode [ 516.546175][T25086] syzkaller1: entered allmulticast mode [ 516.574769][T25086] netlink: 'syz.2.5425': attribute type 11 has an invalid length. [ 517.275456][T25107] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.325781][T25107] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.403362][T25110] tap0: tun_chr_ioctl cmd 2148553947 [ 517.539829][T25135] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5436'. [ 517.552077][T25107] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.578012][T25107] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.724793][T25107] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.736788][T25107] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.817264][T25107] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.836125][T25107] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.908683][T25154] netlink: 'syz.2.5441': attribute type 3 has an invalid length. [ 517.949686][T25154] tipc: Enabled bearer , priority 10 [ 518.081813][T11800] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.096986][T11800] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.132158][T25166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5444'. [ 518.134171][T11800] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.150793][T11800] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.171550][T11800] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.183722][T11800] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.201019][T25167] syzkaller0: entered promiscuous mode [ 518.209346][T25167] syzkaller0: entered allmulticast mode [ 518.240958][T25169] bridge8: entered promiscuous mode [ 518.246398][T25169] bridge8: entered allmulticast mode [ 518.274118][T25172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5445'. [ 518.311814][T11800] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.320460][T11800] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.351068][T25167] tipc: Enabled bearer , priority 0 [ 518.469035][T25179] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5447'. [ 518.484042][T25182] netlink: 'syz.4.5449': attribute type 4 has an invalid length. [ 518.485661][T25179] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5447'. [ 518.502264][T25179] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5447'. [ 519.606541][T25213] netlink: 'syz.1.5457': attribute type 10 has an invalid length. [ 519.617759][T25213] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5457'. [ 520.650690][T25163] tipc: Resetting bearer [ 520.667858][T25163] tipc: Disabling bearer [ 520.692348][T25213] geneve0: entered promiscuous mode [ 520.698980][T25213] team0: Port device geneve0 added [ 520.860995][T25226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5461'. [ 521.055744][T25236] "syz.3.5463" (25236) uses obsolete ecb(arc4) skcipher [ 521.065850][T25236] "syz.3.5463" (25236) uses obsolete ecb(arc4) skcipher [ 521.119450][T25246] tipc: Enabled bearer , priority 10 [ 521.143496][T25246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5467'. [ 521.209566][T25246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5467'. [ 521.231519][T25250] mac80211_hwsim hwsim46 syzkaller0: left promiscuous mode [ 521.249628][T25250] mac80211_hwsim hwsim46 syzkaller0: left allmulticast mode [ 521.275947][T25250] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5468'. [ 521.485046][T25268] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5472'. [ 521.877029][T25304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5478'. [ 521.897753][T25304] netlink: 'syz.2.5478': attribute type 1 has an invalid length. [ 521.907000][T25304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.950570][T25310] x_tables: duplicate underflow at hook 2 [ 521.990826][T25313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5478'. [ 522.018422][ T11] block nbd0: Possible stuck request ffff88803f210000: control (read@0,1024B). Runtime 30 seconds [ 522.031103][ T11] block nbd0: Possible stuck request ffff88803f2101c0: control (read@1024,1024B). Runtime 30 seconds [ 522.043136][ T11] block nbd0: Possible stuck request ffff88803f210380: control (read@2048,1024B). Runtime 30 seconds [ 522.054329][ T11] block nbd0: Possible stuck request ffff88803f210540: control (read@3072,1024B). Runtime 30 seconds [ 522.190724][T25324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5485'. [ 522.325805][T25336] openvswitch: netlink: Key 2 has unexpected len 16 expected 4 [ 522.340108][T25341] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 522.617263][T25357] geneve0: Device is already in use. [ 522.754510][T25369] : renamed from hsr0 [ 523.120920][T25400] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5507'. [ 523.162186][T25406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5507'. [ 523.452988][T25428] netlink: 'syz.4.5514': attribute type 2 has an invalid length. [ 523.530295][T25433] netlink: 'syz.2.5515': attribute type 10 has an invalid length. [ 523.563331][T25433] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 523.580473][T25431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.683929][T25446] netlink: 'syz.4.5521': attribute type 1 has an invalid length. [ 523.736631][T25446] 8021q: adding VLAN 0 to HW filter on device bond6 [ 523.744869][T25446] netlink: 'syz.4.5521': attribute type 1 has an invalid length. [ 523.753886][T25446] netlink: 'syz.4.5521': attribute type 1 has an invalid length. [ 524.092425][T25473] netlink: 'syz.1.5530': attribute type 28 has an invalid length. [ 524.100770][T25473] netlink: 'syz.1.5530': attribute type 3 has an invalid length. [ 524.351791][T25491] netlink: 'syz.1.5537': attribute type 2 has an invalid length. [ 524.381664][T25489] xt_l2tp: missing protocol rule (udp|l2tpip) [ 524.396769][T25491] 9: entered promiscuous mode [ 524.425010][T25495] netlink: 'syz.0.5538': attribute type 1 has an invalid length. [ 524.651963][T25504] bond0: Device is already in use. [ 525.273975][T25511] syzkaller0: entered promiscuous mode [ 525.290957][T25511] syzkaller0: entered allmulticast mode [ 547.624712][ T6822] batadv3: left allmulticast mode [ 547.630254][ T6822] batadv3: left promiscuous mode [ 547.635353][ T6822] bridge0: port 2(batadv3) entered disabled state [ 547.644212][ T6822] batadv2: left allmulticast mode [ 547.651388][ T6822] batadv2: left promiscuous mode [ 547.656489][ T6822] bridge0: port 1(batadv2) entered disabled state [ 548.805700][ T6822] bond0 (unregistering): (slave gretap1): Releasing active interface [ 548.840349][ T6822] bond3 (unregistering): (slave gretap3): Releasing active interface [ 549.078832][ T6822] bond0 (unregistering): (slave bridge2): Releasing active interface [ 549.087117][ T6822] bridge2 (unregistering): left allmulticast mode [ 549.383286][ T6822] bond0 (unregistering): Released all slaves [ 549.395622][ T6822] bond1 (unregistering): Released all slaves [ 549.514031][ T6822] bond2 (unregistering): Released all slaves [ 549.526441][ T6822] bond3 (unregistering): Released all slaves [ 549.648445][ T6822] bond4 (unregistering): Released all slaves [ 549.769721][ T6822] bond5 (unregistering): Released all slaves [ 549.868971][ T6822] : left promiscuous mode [ 549.909627][ T6822] : left promiscuous mode [ 549.959703][ T6822] : left promiscuous mode [ 550.041322][ T6822] tipc: Disabling bearer [ 550.046669][ T6822] tipc: Disabling bearer [ 550.057066][ T6822] tipc: Left network mode [ 550.431553][ T6822] hsr_slave_0: left promiscuous mode [ 550.437969][ T6822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.445882][ T6822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.799693][ T6822] team0 (unregistering): Port device team_slave_1 removed [ 550.842475][ T6822] team0 (unregistering): Port device team_slave_0 removed [ 551.544840][ T6822] IPVS: stop unused estimator thread 0... [ 552.089606][ T11] block nbd0: Possible stuck request ffff88803f210000: control (read@0,1024B). Runtime 60 seconds [ 552.100331][ T11] block nbd0: Possible stuck request ffff88803f2101c0: control (read@1024,1024B). Runtime 60 seconds [ 552.111507][ T11] block nbd0: Possible stuck request ffff88803f210380: control (read@2048,1024B). Runtime 60 seconds [ 552.122575][ T11] block nbd0: Possible stuck request ffff88803f210540: control (read@3072,1024B). Runtime 60 seconds [ 554.558331][ T5200] udevd[5200]: worker [22676] /devices/virtual/block/nbd0 is taking a long time [ 582.168998][ T11] block nbd0: Possible stuck request ffff88803f210000: control (read@0,1024B). Runtime 90 seconds [ 582.179874][ T11] block nbd0: Possible stuck request ffff88803f2101c0: control (read@1024,1024B). Runtime 90 seconds [ 582.190990][ T11] block nbd0: Possible stuck request ffff88803f210380: control (read@2048,1024B). Runtime 90 seconds [ 582.202150][ T11] block nbd0: Possible stuck request ffff88803f210540: control (read@3072,1024B). Runtime 90 seconds [ 586.766412][T25545] __nla_validate_parse: 13 callbacks suppressed [ 586.766428][T25545] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5553'. [ 587.304625][T25579] netlink: 284 bytes leftover after parsing attributes in process `syz.4.5564'. [ 587.393831][T25589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5564'. [ 587.443991][T25596] sctp: [Deprecated]: syz.3.5569 (pid 25596) Use of struct sctp_assoc_value in delayed_ack socket option. [ 587.443991][T25596] Use struct sctp_sack_info instead [ 587.507527][T25596] sctp: [Deprecated]: syz.3.5569 (pid 25596) Use of struct sctp_assoc_value in delayed_ack socket option. [ 587.507527][T25596] Use struct sctp_sack_info instead [ 587.697651][T25610] netlink: 'syz.0.5571': attribute type 1 has an invalid length. [ 587.814580][T25623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5578'. [ 587.862544][T25626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5579'. [ 588.088786][T25648] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5585'. [ 588.099167][T25648] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5585'. [ 588.109536][T25648] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5585'. [ 588.119257][T25648] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5585'. [ 588.128739][T25648] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5585'. [ 588.686053][T25687] netlink: 'syz.0.5595': attribute type 1 has an invalid length. [ 588.714279][T25689] netlink: 'syz.3.5597': attribute type 2 has an invalid length. [ 588.731511][T25690] batadv_slave_0: entered promiscuous mode [ 588.737416][T25690] batadv_slave_0: entered allmulticast mode [ 589.058608][T25714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.476539][T25741] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 589.494139][T25741] bond6 (unregistering): Released all slaves [ 589.658410][T25757] bond7: Unable to set peer notification delay as MII monitoring is disabled [ 589.669721][T25757] bond7 (unregistering): Released all slaves [ 589.776726][T25761] netlink: 'syz.0.5619': attribute type 1 has an invalid length. [ 589.979500][T25761] 8021q: adding VLAN 0 to HW filter on device bond6 [ 589.994223][T25766] macvlan4: entered promiscuous mode [ 589.999765][T25766] macvlan4: entered allmulticast mode [ 590.005806][T25766] bond0: (slave macvlan4): Error -98 calling set_mac_address [ 590.024157][T25760] lo speed is unknown, defaulting to 1000 [ 590.047864][T25761] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 590.215541][T25770] bond6: (slave veth9): Enslaving as an active interface with a down link [ 590.285220][T25761] bond6: (slave veth11): Enslaving as an active interface with a down link [ 590.302629][T25760] wg1 speed is unknown, defaulting to 1000 [ 590.304503][T25775] syzkaller0: entered promiscuous mode [ 590.315353][T25775] syzkaller0: entered allmulticast mode [ 590.367581][T25783] IPv6: Can't replace route, no match found [ 590.401859][T25781] No such timeout policy "syz0" [ 590.547193][T25793] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 590.818979][T25793] netlink: 'syz.0.5630': attribute type 3 has an invalid length. [ 590.905966][T25821] mac80211_hwsim hwsim46 syzkaller0: entered promiscuous mode [ 590.915382][T25821] mac80211_hwsim hwsim46 syzkaller0: entered allmulticast mode [ 591.241523][T25838] macsec2: entered promiscuous mode [ 591.268003][T25838] macsec2: entered allmulticast mode [ 591.301396][T25838] bond7: (slave macsec2): Error -34 calling dev_set_mtu [ 591.650734][T25845] syzkaller0: entered promiscuous mode [ 591.656733][T25845] syzkaller0: entered allmulticast mode [ 592.800580][T25898] netlink: 'syz.3.5655': attribute type 10 has an invalid length. [ 593.494839][T25872] tc_dump_action: action bad kind [ 593.515932][T25898] veth0_virt_wifi: entered allmulticast mode [ 593.525751][T25898] team0: Port device veth0_virt_wifi added [ 593.659428][T25903] netlink: 'syz.4.5656': attribute type 10 has an invalid length. [ 593.860106][T25915] syz_tun: entered allmulticast mode [ 593.876281][T25914] syz_tun: left allmulticast mode [ 594.026268][T25921] sit1: entered promiscuous mode [ 594.032979][T25921] sit1: entered allmulticast mode [ 594.041878][T25889] lo speed is unknown, defaulting to 1000 [ 594.131383][T25928] netlink: 'syz.2.5666': attribute type 1 has an invalid length. [ 594.146087][T25924] __nla_validate_parse: 47 callbacks suppressed [ 594.146105][T25924] netlink: 5792 bytes leftover after parsing attributes in process `syz.3.5665'. [ 594.149973][T25928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5666'. [ 594.153199][T25924] openvswitch: netlink: Flow key attr not present in new flow. [ 594.219788][T25928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5666'. [ 594.292784][T25934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5667'. [ 594.528563][T25925] lo speed is unknown, defaulting to 1000 [ 594.580004][T25945] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20004 [ 594.601313][T25889] wg1 speed is unknown, defaulting to 1000 [ 594.706016][T25948] IPVS: Error connecting to the multicast addr [ 594.801448][T25925] wg1 speed is unknown, defaulting to 1000 [ 595.865232][T25979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5682'. [ 595.882387][T25979] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5682'. [ 595.917572][T25979] geneve6: entered promiscuous mode [ 595.958772][T25979] geneve6: entered allmulticast mode [ 596.121235][T25992] veth4: entered promiscuous mode [ 596.305821][T26007] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5692'. [ 596.327307][T26010] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5692'. [ 596.606878][T26028] netlink: 'syz.2.5699': attribute type 4 has an invalid length. [ 596.619101][T26028] netlink: 'syz.2.5699': attribute type 4 has an invalid length. [ 596.644138][T26028] netlink: 'syz.2.5699': attribute type 4 has an invalid length. [ 597.007686][T26045] netlink: 'syz.0.5698': attribute type 21 has an invalid length. [ 597.249913][T26070] netlink: 'syz.1.5709': attribute type 10 has an invalid length. [ 597.258118][T26066] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5708'. [ 597.267632][T26070] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5709'. [ 597.278541][T26070] !: entered promiscuous mode [ 597.296954][T26070] bridge0: port 3(0!) entered blocking state [ 597.306670][T26070] bridge0: port 3(0!) entered disabled state [ 597.315150][T26070] !: entered allmulticast mode [ 597.369118][T26077] netlink: 'syz.4.5712': attribute type 10 has an invalid length. [ 597.491679][T26085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 597.793269][T26105] syzkaller0: entered promiscuous mode [ 597.801568][T26105] syzkaller0: entered allmulticast mode [ 598.157387][T26124] sctp: [Deprecated]: syz.4.5726 (pid 26124) Use of int in max_burst socket option deprecated. [ 598.157387][T26124] Use struct sctp_assoc_value instead [ 598.347555][T26142] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 598.563190][T26162] netlink: 'syz.1.5738': attribute type 4 has an invalid length. [ 598.693185][T26168] netlink: 'syz.2.5742': attribute type 12 has an invalid length. [ 598.876528][T26184] bond6 (unregistering): Released all slaves [ 606.186449][T26226] __nla_validate_parse: 5 callbacks suppressed [ 606.186470][T26226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5758'. [ 606.331552][T26234] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5761'. [ 606.430323][T26243] xt_bpf: check failed: parse error [ 606.522960][T26247] tipc: Enabling of bearer rejected, media not registered [ 606.532199][T26247] tipc: Enabling of bearer rejected, media not registered [ 606.541100][T26247] tipc: Enabling of bearer rejected, media not registered [ 606.552032][T26247] tipc: Enabling of bearer rejected, media not registered [ 606.561289][T26247] tipc: Enabling of bearer rejected, media not registered [ 606.570203][T26247] tipc: Enabling of bearer rejected, media not registered [ 606.583196][T26247] tipc: Enabling of bearer rejected, media not registered [ 606.598451][T26247] tipc: Enabling of bearer rejected, media not registered [ 606.607117][T26247] tipc: Enabling of bearer rejected, media not registered [ 606.618237][T26247] tipc: Enabling of bearer rejected, media not registered [ 606.626952][T26247] tipc: Enabling of bearer rejected, media not registered [ 606.637647][T26247] tipc: Enabling of bearer rejected, media not registered [ 606.646440][T26247] tipc: Enabling of bearer rejected, media not registered [ 606.656491][T26247] tipc: Enabling of bearer rejected, media not registered [ 606.656779][T26253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5767'. [ 606.665470][T26247] tipc: Enabling of bearer rejected, media not registered [ 606.685159][T26247] tipc: Enabling of bearer rejected, media not registered [ 606.694429][T26247] tipc: Enabling of bearer rejected, media not registered [ 606.703121][T26247] tipc: Enabling of bearer rejected, media not registered [ 606.711378][T26252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5767'. [ 606.721811][T26247] tipc: Enabling of bearer rejected, media not registered [ 606.731544][T26247] tipc: Enabling of bearer rejected, media not registered [ 606.750171][T26247] tipc: Enabling of bearer rejected, media not registered [ 606.759602][T26247] tipc: Enabling of bearer rejected, media not registered [ 606.773786][T26247] tipc: Enabling of bearer rejected, media not registered [ 606.783129][T26247] tipc: Enabling of bearer rejected, media not registered [ 606.792240][T26247] tipc: Enabling of bearer rejected, media not registered [ 606.807200][T26259] pim6reg: entered allmulticast mode [ 606.813213][T26247] tipc: Enabling of bearer rejected, media not registered [ 606.827787][T26247] tipc: Enabling of bearer rejected, media not registered [ 606.836673][T26259] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 606.849065][T26247] tipc: Enabling of bearer rejected, media not registered [ 606.870676][T26247] tipc: Enabling of bearer rejected, media not registered [ 606.879738][T26247] tipc: Enabling of bearer rejected, media not registered [ 606.888303][T26247] tipc: Enabling of bearer rejected, media not registered [ 606.896837][T26247] tipc: Enabling of bearer rejected, media not registered [ 606.906614][T26247] tipc: Enabling of bearer rejected, media not registered [ 607.082733][T26272] bond7: Unable to set up delay as MII monitoring is disabled [ 607.096274][T26279] netlink: 'syz.4.5772': attribute type 11 has an invalid length. [ 607.115404][T26272] bond7 (unregistering): Released all slaves [ 607.186402][T26276] bond7: Unable to set up delay as MII monitoring is disabled [ 607.207444][T26276] bond7 (unregistering): Released all slaves [ 607.384076][T26295] IPVS: length: 240 != 24 [ 607.391621][T26295] IPVS: length: 240 != 24 [ 607.632258][T26321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5786'. [ 607.652768][T26302] netlink: 'syz.0.5781': attribute type 1 has an invalid length. [ 607.663098][T26302] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5781'. [ 607.826798][T26329] Unsupported ieee802154 address type: 0 [ 608.014522][T26348] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 608.129178][T26354] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5798'. [ 608.138614][T26352] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5798'. [ 608.280889][T26370] nbd: couldn't find a device at index 2 [ 608.410499][T26363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 608.453462][T26382] netlink: 'syz.1.5806': attribute type 1 has an invalid length. [ 608.539376][T26385] netlink: 312 bytes leftover after parsing attributes in process `syz.3.5808'. [ 608.574103][T26382] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 608.595840][T13692] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 608.611093][T26382] 8021q: adding VLAN 0 to HW filter on device bond6 [ 608.635937][T26382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5806'. [ 608.689165][T26387] netlink: 'syz.1.5806': attribute type 1 has an invalid length. [ 608.704135][T26382] veth13: entered promiscuous mode [ 608.722595][ T3489] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 608.841029][T26405] sctp: [Deprecated]: syz.1.5813 (pid 26405) Use of int in max_burst socket option. [ 608.841029][T26405] Use struct sctp_assoc_value instead [ 608.907389][T26410] netlink: 'syz.4.5815': attribute type 1 has an invalid length. [ 608.916150][T26410] netlink: 'syz.4.5815': attribute type 2 has an invalid length. [ 608.932443][T26412] netlink: 'syz.4.5815': attribute type 1 has an invalid length. [ 608.942413][T26412] netlink: 'syz.4.5815': attribute type 2 has an invalid length. [ 609.168895][T26423] netlink: 'syz.1.5819': attribute type 1 has an invalid length. [ 609.379448][T26433] netlink: 'syz.1.5823': attribute type 13 has an invalid length. [ 610.080018][T26464] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 610.223315][T26471] IPVS: length: 175 != 24 [ 611.127832][T26554] sctp: [Deprecated]: syz.0.5862 (pid 26554) Use of int in max_burst socket option. [ 611.127832][T26554] Use struct sctp_assoc_value instead [ 611.171658][T26554] IPVS: set_ctl: invalid protocol: 33 172.20.20.45:20000 [ 611.298094][T26564] nbd: illegal input index 2958377 [ 611.414965][T26571] __nla_validate_parse: 12 callbacks suppressed [ 611.414984][T26571] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5868'. [ 611.587341][T26571] bond0 (unregistering): (slave 1!): Releasing backup interface [ 611.613744][T26571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.646218][T26571] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 611.667671][T26571] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 611.685529][T26571] bond0 (unregistering): Released all slaves [ 612.066554][T26603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5878'. [ 612.082649][T26603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5878'. [ 612.249589][ T11] block nbd0: Possible stuck request ffff88803f210000: control (read@0,1024B). Runtime 120 seconds [ 612.260906][ T11] block nbd0: Possible stuck request ffff88803f2101c0: control (read@1024,1024B). Runtime 120 seconds [ 612.273000][ T11] block nbd0: Possible stuck request ffff88803f210380: control (read@2048,1024B). Runtime 120 seconds [ 612.284581][ T11] block nbd0: Possible stuck request ffff88803f210540: control (read@3072,1024B). Runtime 120 seconds [ 612.620832][T26628] syzkaller0: entered promiscuous mode [ 612.623815][T26630] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5887'. [ 612.638623][T26628] syzkaller0: entered allmulticast mode [ 612.868716][T26646] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5891'. [ 612.893177][T26646] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5891'. [ 612.992516][T26651] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5893'. [ 613.031996][T26653] bond8: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 613.046501][T26653] bond8 (unregistering): Released all slaves [ 613.102519][T26656] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5894'. [ 613.129169][T26656] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5894'. [ 613.167176][T26656] tc_dump_action: action bad kind [ 613.743810][T26680] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5903'. [ 613.746855][T26689] delete_channel: no stack [ 613.824079][T26680] bridge_slave_1 (unregistering): left allmulticast mode [ 613.835673][T26680] bridge_slave_1 (unregistering): left promiscuous mode [ 613.850197][T26680] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.863200][T26695] openvswitch: netlink: Missing key (keys=40, expected=100) [ 614.446028][T26733] syzkaller0: entered promiscuous mode [ 614.452369][T26733] syzkaller0: entered allmulticast mode [ 616.497281][T26782] validate_nla: 12 callbacks suppressed [ 616.497300][T26782] netlink: 'syz.2.5931': attribute type 62 has an invalid length. [ 616.736600][T26791] __nla_validate_parse: 8 callbacks suppressed [ 616.736622][T26791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5936'. [ 616.764941][T26791] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5936'. [ 616.897604][T26805] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5940'. [ 616.909759][T26805] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5940'. [ 617.062493][T26824] netlink: 'syz.0.5933': attribute type 29 has an invalid length. [ 617.071206][T26824] netlink: 'syz.0.5933': attribute type 29 has an invalid length. [ 617.177531][T26831] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5945'. [ 617.187353][T26831] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5945'. [ 617.237512][T26836] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5947'. [ 617.301716][T26839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5947'. [ 617.703692][T26841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5948'. [ 617.859330][T26853] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5952'. [ 617.872891][T26854] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 617.981822][T26857] vlan3: entered promiscuous mode [ 617.994291][T26857] bond0: (slave vlan3): Opening slave failed [ 618.244824][T26882] netlink: 'syz.0.5957': attribute type 29 has an invalid length. [ 618.255124][T26882] netlink: 'syz.0.5957': attribute type 29 has an invalid length. [ 619.084627][ T5150] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 619.096369][ T5150] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 619.111783][ T5150] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 619.119975][ T5150] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 619.130020][ T5150] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 619.167173][T26922] openvswitch: netlink: Missing key (keys=40, expected=100) [ 619.324007][ T3489] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.342936][ T3489] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 619.353726][ T3489] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 619.477962][ T3489] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.492708][ T3489] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 619.504014][ T3489] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 619.515850][T26946] netlink: 'syz.2.5979': attribute type 1 has an invalid length. [ 619.525546][T26946] netlink: 'syz.2.5979': attribute type 11 has an invalid length. [ 619.723861][ T3489] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.765392][ T3489] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 619.773852][T26965] sock: sock_timestamping_bind_phc: sock not bind to device [ 619.797718][ T3489] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 619.946529][ T3489] netdevsim netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.961305][ T3489] netdevsim netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 619.972947][ T3489] netdevsim netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 620.026625][T26972] netlink: 'syz.3.5988': attribute type 11 has an invalid length. [ 620.045706][T26972] netlink: 'syz.3.5988': attribute type 11 has an invalid length. [ 620.205829][T26923] lo speed is unknown, defaulting to 1000 [ 620.349308][ T3489] !: left allmulticast mode [ 620.363573][ T3489] bridge0: port 3(0!) entered disabled state [ 620.411039][ T3489] bridge_slave_0: left allmulticast mode [ 620.426721][ T3489] bridge_slave_0: left promiscuous mode [ 620.437230][T26984] netlink: 'syz.0.5990': attribute type 4 has an invalid length. [ 620.452084][ T3489] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.499235][T26999] netlink: 'syz.0.5990': attribute type 4 has an invalid length. [ 620.703911][T27014] netlink: 'syz.0.5990': attribute type 10 has an invalid length. [ 620.801625][ T3489] bond6 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 620.813577][ T3489] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface [ 621.122477][ T3489] bond2 (unregistering): (slave geneve2): Releasing active interface [ 621.157019][ T3489] geneve0 (unregistering): left promiscuous mode [ 621.165887][ T3489] team0: Port device geneve0 removed [ 621.209450][ T5847] Bluetooth: hci0: command tx timeout [ 621.385192][ T3489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.394716][ T3489] bond_slave_0: left promiscuous mode [ 621.400672][ T3489] bond0 (unregistering): Released all slaves [ 621.414280][ T3489] bond1 (unregistering): Released all slaves [ 621.517844][ T3489] bond2 (unregistering): Released all slaves [ 621.621939][ T3489] bond3 (unregistering): Released all slaves [ 621.634759][ T3489] bond4 (unregistering): Released all slaves [ 621.747131][ T3489] bond5 (unregistering): (slave veth7): Releasing backup interface [ 621.756778][ T3489] bond5 (unregistering): Released all slaves [ 621.862142][ T3489] bond6 (unregistering): Released all slaves [ 621.875267][ T3489] bond7 (unregistering): Released all slaves [ 621.911379][T26923] wg1 speed is unknown, defaulting to 1000 [ 622.116959][T27035] __nla_validate_parse: 10 callbacks suppressed [ 622.116979][T27035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5999'. [ 622.224736][T27042] : renamed from xfrm0 [ 623.123258][T27064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6003'. [ 623.148311][T27064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6003'. [ 623.194383][T27075] tap0: tun_chr_ioctl cmd 1074025677 [ 623.201976][T27075] tap0: linktype set to 65534 [ 623.266792][T26923] chnl_net:caif_netlink_parms(): no params data found [ 623.300286][ T5847] Bluetooth: hci0: command tx timeout [ 623.484083][ T3489] 9: left promiscuous mode [ 623.534212][T27092] tipc: Enabling of bearer rejected, already enabled [ 623.574064][ T3489] tipc: Disabling bearer [ 623.599212][ T3489] tipc: Left network mode [ 623.628712][T27097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6006'. [ 623.902210][T26923] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.921235][T26923] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.936796][T26923] bridge_slave_0: entered allmulticast mode [ 623.949123][T26923] bridge_slave_0: entered promiscuous mode [ 623.991238][T26923] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.003398][T26923] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.012506][T26923] bridge_slave_1: entered allmulticast mode [ 624.024589][T26923] bridge_slave_1: entered promiscuous mode [ 624.305830][T27121] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6011'. [ 624.419897][T26923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.454777][T26923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.635164][T27137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.662662][T27138] netlink: 544 bytes leftover after parsing attributes in process `syz.3.6014'. [ 624.677081][T26923] team0: Port device team_slave_0 added [ 624.762798][T26923] team0: Port device team_slave_1 added [ 624.924792][T27159] tap0: tun_chr_ioctl cmd 1074025678 [ 624.941895][T27159] tap0: group set to 0 [ 624.982246][T26923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.992377][T26923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.027781][T26923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.066862][T27158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6018'. [ 625.108767][T26923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.115852][T26923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.177935][T26923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.370399][ T5847] Bluetooth: hci0: command tx timeout [ 625.516589][T26923] hsr_slave_0: entered promiscuous mode [ 625.583183][T26923] hsr_slave_1: entered promiscuous mode [ 625.627597][T27193] netlink: 'syz.2.6026': attribute type 27 has an invalid length. [ 625.635930][T26923] debugfs: 'hsr0' already exists in 'hsr' [ 625.650057][T26923] Cannot create hsr debugfs directory [ 625.652472][T27193] netlink: 'syz.2.6026': attribute type 4 has an invalid length. [ 625.675352][T27193] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6026'. [ 625.706075][T27195] netlink: 332 bytes leftover after parsing attributes in process `syz.2.6026'. [ 626.072837][ T3489] team0: left promiscuous mode [ 626.090161][ T3489] team_slave_0: left promiscuous mode [ 626.095800][ T3489] team_slave_1: left promiscuous mode [ 626.148056][ T3489] hsr_slave_0: left promiscuous mode [ 626.206748][ T3489] hsr_slave_1: left promiscuous mode [ 626.217307][ T3489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.238977][ T3489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.487449][T27239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6038'. [ 626.828604][ T3489] team0 (unregistering): Port device team_slave_1 removed [ 626.870498][ T3489] team0 (unregistering): Port device team_slave_0 removed [ 627.320191][T27252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 627.456503][ T5847] Bluetooth: hci0: command tx timeout [ 627.492905][T27260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6043'. [ 627.684695][T27268] netlink: 'syz.2.6046': attribute type 10 has an invalid length. [ 627.699809][T27268] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6046'. [ 627.879455][T27268] geneve0: entered promiscuous mode [ 627.893018][T27268] geneve0: entered allmulticast mode [ 627.908784][T27268] team0: Port device geneve0 added [ 628.043275][ T3489] IPVS: stop unused estimator thread 0... [ 628.047050][T27283] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6050'. [ 628.279858][T27299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6052'. [ 628.307193][T27299] netlink: 71 bytes leftover after parsing attributes in process `syz.3.6052'. [ 628.424694][T27308] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6054'. [ 628.659074][T26923] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 628.693137][T26923] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 628.735598][T26923] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 628.846802][T27328] : renamed from hsr0 (while UP) [ 628.862543][T26923] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 628.873668][T27331] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6062'. [ 629.074010][T27344] nbd: socks must be embedded in a SOCK_ITEM attr [ 629.074864][T26923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.138093][T27329] dvmrp0: entered allmulticast mode [ 629.206150][T26923] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.248576][T13692] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.255794][T13692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.292309][T27360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6066'. [ 629.365322][T27366] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6067'. [ 629.383043][T13692] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.390969][T13692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.644219][T27376] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 629.700430][T27375] tipc: New replicast peer: 255.255.255.255 [ 629.706971][T27375] tipc: Enabled bearer , priority 10 [ 629.722945][T27379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 629.940608][T26923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.136249][T26923] veth0_vlan: entered promiscuous mode [ 630.163319][T27404] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6074'. [ 630.193855][T26923] veth1_vlan: entered promiscuous mode [ 630.291214][T27410] nbd: must specify a size in bytes for the device [ 630.356687][T26923] veth0_macvtap: entered promiscuous mode [ 630.374158][T26923] veth1_macvtap: entered promiscuous mode [ 630.399340][T27415] xt_TCPMSS: Only works on TCP SYN packets [ 630.425330][T26923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.450681][T26923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.483551][T11801] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.509457][T11801] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.554295][T11801] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.583610][T11801] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.717831][T27435] netlink: 'syz.2.6083': attribute type 1 has an invalid length. [ 630.734769][T27435] netlink: 'syz.2.6083': attribute type 4 has an invalid length. [ 630.956878][ T3489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.990966][ T3489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.080357][T11778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.102031][T11778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.214464][T27466] team0: left allmulticast mode [ 631.222348][T27466] team_slave_0: left allmulticast mode [ 631.227962][T27466] team_slave_1: left allmulticast mode [ 631.234845][T27466] geneve0: left allmulticast mode [ 631.240294][T27466] team0: left promiscuous mode [ 631.245167][T27466] team_slave_0: left promiscuous mode [ 631.265085][T27466] team_slave_1: left promiscuous mode [ 631.273622][T27468] netlink: 'syz.2.6089': attribute type 10 has an invalid length. [ 631.294902][T27466] geneve0: left promiscuous mode [ 631.306288][T27466] bridge0: port 3(team0) entered disabled state [ 631.316844][T27466] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.998508][T27516] block nbd0: reconnected socket [ 632.109329][ T5847] block nbd0: Receive control failed (result -32) [ 632.315270][T27531] sctp: [Deprecated]: syz.1.6102 (pid 27531) Use of struct sctp_assoc_value in delayed_ack socket option. [ 632.315270][T27531] Use struct sctp_sack_info instead [ 632.385894][T27531] tipc: Started in network mode [ 632.393560][T27531] tipc: Node identity 1a57e3ccc67d, cluster identity 4711 [ 632.403016][T27531] tipc: Enabled bearer , priority 0 [ 632.497065][T27531] syzkaller0: entered promiscuous mode [ 632.503079][T27531] syzkaller0: entered allmulticast mode [ 632.531756][T27531] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 632.643016][T27531] tipc: Resetting bearer [ 632.675092][T27531] netlink: 'syz.1.6102': attribute type 4 has an invalid length. [ 632.712897][T27553] IPVS: persistence engine module ip_vs_pe_ not found [ 632.765741][T27531] mac80211_hwsim hwsim69 wlan1: entered allmulticast mode [ 632.801337][T27528] tipc: Resetting bearer [ 632.873175][T27528] tipc: Disabling bearer [ 632.907122][T27564] netlink: 'syz.3.6109': attribute type 10 has an invalid length. [ 633.183507][T27574] __nla_validate_parse: 7 callbacks suppressed [ 633.183526][T27574] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6111'. [ 633.445804][ T5150] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 633.460844][ T5150] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 633.470976][ T5150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 633.481628][ T5150] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 633.491243][ T5150] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 633.586569][T11803] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.599630][T11803] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.772970][T11803] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.785455][T11803] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.816214][T27601] netlink: 'syz.4.6118': attribute type 4 has an invalid length. [ 633.841409][T27601] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6118'. [ 633.922043][T11803] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.953497][T11803] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.069227][T27601] `: renamed from bond0 (while UP) [ 634.214182][T27617] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6122'. [ 634.237095][T11803] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.283730][T11803] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.316006][T27623] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 634.385879][T27623] netlink: 248 bytes leftover after parsing attributes in process `syz.4.6123'. [ 634.448503][T27582] lo speed is unknown, defaulting to 1000 [ 634.538973][T27638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6127'. [ 634.832643][T27645] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6128'. [ 634.891487][T27649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6130'. [ 634.951028][T27649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6130'. [ 635.140252][T27659] xt_hashlimit: size too large, truncated to 1048576 [ 635.611679][ T5150] Bluetooth: hci2: command tx timeout [ 636.127106][T11803] dvmrp0 (unregistering): left allmulticast mode [ 636.181982][T11803] team0: Port device geneve0 removed [ 636.243317][T11803] bond2 (unregistering): (slave bridge1): Releasing active interface [ 636.470194][T11803] bond6 (unregistering): (slave bridge6): Releasing active interface [ 636.754529][T11803] bond1 (unregistering): Released all slaves [ 636.767836][T11803] bond2 (unregistering): Released all slaves [ 636.875548][T11803] bond3 (unregistering): Released all slaves [ 636.889191][T11803] bond4 (unregistering): Released all slaves [ 636.995916][T11803] bond5 (unregistering): (slave veth5): Releasing active interface [ 637.005864][T11803] bond5 (unregistering): Released all slaves [ 637.020309][T11803] bond6 (unregistering): Released all slaves [ 637.033039][T11803] bond7 (unregistering): Released all slaves [ 637.485431][T27582] chnl_net:caif_netlink_parms(): no params data found [ 637.658773][T27582] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.665949][T27582] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.673453][T27582] bridge_slave_0: entered allmulticast mode [ 637.682781][T27582] bridge_slave_0: entered promiscuous mode [ 637.693315][T27582] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.700664][T27582] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.704381][ T5150] Bluetooth: hci2: command tx timeout [ 637.708017][T27582] bridge_slave_1: entered allmulticast mode [ 637.722567][T27582] bridge_slave_1: entered promiscuous mode [ 637.910754][T27741] sctp: [Deprecated]: syz.0.6141 (pid 27741) Use of int in max_burst socket option. [ 637.910754][T27741] Use struct sctp_assoc_value instead [ 637.944325][T27582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.994531][T27582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.179130][T27582] team0: Port device team_slave_0 added [ 638.192079][T27761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 638.205567][T27582] team0: Port device team_slave_1 added [ 638.219812][T27761] netlink: 'syz.4.6148': attribute type 4 has an invalid length. [ 638.237089][T27762] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6141'. [ 638.264905][T27766] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6149'. [ 638.306868][T27758] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6148'. [ 638.346838][T27758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6148'. [ 638.356922][T27758] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6148'. [ 638.377134][T27582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.396573][T27582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.451217][T27582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.465085][T27582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.474356][T27582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.515267][T27772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6149'. [ 638.524580][T27582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.819570][T27796] netlink: 'syz.0.6155': attribute type 12 has an invalid length. [ 638.859472][T27772] team0 (unregistering): Port device team_slave_0 removed [ 638.872299][T27772] team0 (unregistering): Port device team_slave_1 removed [ 638.895504][T27800] x_tables: duplicate underflow at hook 2 [ 638.955465][T27796] bond7: option primary_reselect: invalid value (255) [ 638.964432][T27796] bond7 (unregistering): Released all slaves [ 639.013654][T27582] hsr_slave_0: entered promiscuous mode [ 639.025819][T27582] hsr_slave_1: entered promiscuous mode [ 639.060013][T27804] netlink: 'syz.1.6159': attribute type 1 has an invalid length. [ 639.096152][T27806] netlink: 'syz.4.6160': attribute type 3 has an invalid length. [ 639.127084][T27806] netlink: 'syz.4.6160': attribute type 1 has an invalid length. [ 639.319611][T27804] veth3: entered promiscuous mode [ 639.350849][T27813] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6163'. [ 639.362594][T11803] tipc: Disabling bearer [ 639.398003][T11803] tipc: Disabling bearer [ 639.431393][T11803] tipc: Left network mode [ 639.479348][T27826] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.6165'. [ 639.639685][T27840] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6168'. [ 639.778767][ T5150] Bluetooth: hci2: command tx timeout [ 639.833522][T27849] bond0: Removing last arp target with arp_interval on [ 640.200713][T27873] xt_time: unknown flags 0xf4 [ 640.331248][T27877] netlink: 356 bytes leftover after parsing attributes in process `syz.3.6177'. [ 640.543763][T27882] bridge11: entered promiscuous mode [ 640.550193][T27882] bridge11: entered allmulticast mode [ 641.338560][T11803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 641.347789][T11803] batadv0: mtu less than device minimum [ 641.363496][T11803] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 641.375869][T11803] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 641.387925][T11803] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 641.399930][T11803] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 641.412014][T11803] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 641.423997][T11803] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 641.436074][T11803] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 641.448008][T11803] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 641.480049][T11803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.489658][T11803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 641.530561][T11803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.545299][T11803] batman_adv: batadv0: Interface deactivated: dummy0 [ 641.552465][T11803] batman_adv: batadv0: Removing interface: dummy0 [ 641.585409][T11803] vlan0: left allmulticast mode [ 641.591351][T11803] veth0_vlan: left allmulticast mode [ 641.597451][T11803] vlan0: left promiscuous mode [ 641.603398][T11803] veth1_macvtap: left promiscuous mode [ 641.609185][T11803] veth0_macvtap: left promiscuous mode [ 641.614961][T11803] veth1_vlan: left promiscuous mode [ 641.620871][T11803] veth0_vlan: left promiscuous mode [ 641.862436][ T5150] Bluetooth: hci2: command tx timeout [ 642.094697][T11803] team0 (unregistering): Port device team_slave_1 removed [ 642.142370][T11803] team0 (unregistering): Port device team_slave_0 removed [ 642.330753][ T11] block nbd0: Possible stuck request ffff88803f210000: control (read@0,1024B). Runtime 150 seconds [ 642.342361][ T11] block nbd0: Possible stuck request ffff88803f2101c0: control (read@1024,1024B). Runtime 150 seconds [ 642.354415][ T11] block nbd0: Possible stuck request ffff88803f210380: control (read@2048,1024B). Runtime 150 seconds [ 642.365997][ T11] block nbd0: Possible stuck request ffff88803f210540: control (read@3072,1024B). Runtime 150 seconds [ 642.378740][ T96] block nbd0: Dead connection, failed to find a fallback [ 642.386144][ T96] block nbd0: shutting down sockets [ 642.395852][ T96] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 642.413893][ T96] Buffer I/O error on dev nbd0, logical block 2, async page read [ 642.422367][ T96] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 642.431702][ T96] Buffer I/O error on dev nbd0, logical block 1, async page read [ 642.439614][ T96] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 642.449167][ T96] Buffer I/O error on dev nbd0, logical block 0, async page read [ 642.457096][ T96] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 642.466991][ T96] Buffer I/O error on dev nbd0, logical block 3, async page read [ 642.477384][T22676] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 642.490860][T22676] Buffer I/O error on dev nbd0, logical block 0, async page read [ 642.499984][T22676] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 642.510320][T22676] Buffer I/O error on dev nbd0, logical block 1, async page read [ 642.518348][T22676] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 642.527517][T22676] Buffer I/O error on dev nbd0, logical block 2, async page read [ 642.535680][T22676] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 642.544954][T22676] Buffer I/O error on dev nbd0, logical block 3, async page read [ 642.553254][T22676] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 642.563433][T22676] Buffer I/O error on dev nbd0, logical block 0, async page read [ 642.573909][T22676] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 642.583058][T22676] Buffer I/O error on dev nbd0, logical block 1, async page read [ 642.602148][T22676] ldm_validate_partition_table(): Disk read failed. [ 642.618335][T22676] Dev nbd0: unable to read RDB block 0 [ 642.626070][T22676] nbd0: unable to read partition table [ 642.662461][T22676] ldm_validate_partition_table(): Disk read failed. [ 642.671187][T22676] Dev nbd0: unable to read RDB block 0 [ 642.678956][T22676] nbd0: unable to read partition table [ 642.828008][T27940] bond7: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 642.871106][T27582] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 642.948038][T27582] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 643.007015][T27582] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 643.056738][T27582] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 643.339874][T27582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.365844][T27972] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 643.395607][T27973] xt_hashlimit: invalid interval [ 643.424719][T27582] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.444240][T13692] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.451473][T13692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.475238][T13692] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.482454][T13692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.567831][T27978] __nla_validate_parse: 2 callbacks suppressed [ 643.567848][T27978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6198'. [ 643.577968][T11803] IPVS: stop unused estimator thread 0... [ 643.900366][T27582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.909916][T27996] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6201'. [ 643.966092][T27996] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6201'. [ 644.013450][T27582] veth0_vlan: entered promiscuous mode [ 644.055404][T27582] veth1_vlan: entered promiscuous mode [ 644.159293][T27582] veth0_macvtap: entered promiscuous mode [ 644.177609][T28005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6203'. [ 644.193744][T28005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6203'. [ 644.203811][T28005] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6203'. [ 644.222601][T27582] veth1_macvtap: entered promiscuous mode [ 644.232381][T28005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6203'. [ 644.259249][T28005] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6203'. [ 644.271809][T27582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.336602][T27582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 644.429175][T11800] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.441547][T11800] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.465715][T11800] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.498702][T28013] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 644.586502][T11800] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.637435][T28020] bridge12: entered promiscuous mode [ 644.643612][T28020] bridge12: entered allmulticast mode [ 644.660096][T28020] bridge13: entered promiscuous mode [ 644.666147][T28020] bridge13: entered allmulticast mode [ 644.684200][T28020] bridge14: entered promiscuous mode [ 644.689926][T28020] bridge14: entered allmulticast mode [ 644.709163][T28020] bridge15: entered promiscuous mode [ 644.714734][T28020] bridge15: entered allmulticast mode [ 644.776875][T28020] bridge16: entered promiscuous mode [ 644.782899][T28020] bridge16: entered allmulticast mode [ 644.859572][T28042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6211'. [ 644.859934][T28038] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6210'. [ 644.905912][T28020] bridge17: entered promiscuous mode [ 644.911447][T28020] bridge17: entered allmulticast mode [ 645.004611][T28042] 8021q: adding VLAN 0 to HW filter on device bond8 [ 645.100577][T28020] bridge18: entered promiscuous mode [ 645.114079][T28020] bridge18: entered allmulticast mode [ 645.249998][T28020] bridge19: entered promiscuous mode [ 645.264402][T28020] bridge19: entered allmulticast mode [ 645.331188][ T3489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.346277][ T3489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.357297][T11778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.388248][T11778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.427976][T28091] tap0: tun_chr_ioctl cmd 2148553947 [ 648.295720][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 648.311893][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 648.322189][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 648.343368][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 648.363096][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 648.613273][T28145] net_ratelimit: 31 callbacks suppressed [ 648.613294][T28145] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 648.912918][T28163] syzkaller1: entered promiscuous mode [ 648.928832][T28163] syzkaller1: entered allmulticast mode [ 648.946100][T28135] lo speed is unknown, defaulting to 1000 [ 648.991128][T28166] netlink: 'syz.2.6240': attribute type 10 has an invalid length. [ 649.022296][T28166] veth0_virt_wifi: entered allmulticast mode [ 649.047103][T28166] team0: Port device veth0_virt_wifi added [ 649.146864][T28175] netlink: 'syz.1.6243': attribute type 11 has an invalid length. [ 649.155649][T28175] __nla_validate_parse: 6 callbacks suppressed [ 649.155667][T28175] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6243'. [ 649.211958][T28179] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6244'. [ 649.221481][T28178] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6244'. [ 649.361792][T28183] syzkaller0: entered promiscuous mode [ 649.372395][T28183] syzkaller0: entered allmulticast mode [ 649.699422][T28191] syzkaller0: entered promiscuous mode [ 649.737428][T28191] syzkaller0: entered allmulticast mode [ 649.792145][T28135] chnl_net:caif_netlink_parms(): no params data found [ 650.169743][T28222] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.177522][T28222] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.319991][T28222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 650.337904][T28222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 650.409040][ T5847] Bluetooth: hci3: command tx timeout [ 650.604374][T28239] bridge0: port 1(ipvlan2) entered blocking state [ 650.642254][T28239] bridge0: port 1(ipvlan2) entered disabled state [ 650.653781][T28239] ipvlan2: entered allmulticast mode [ 650.659983][T28239] bridge0: entered allmulticast mode [ 650.671803][T28239] ipvlan2: left allmulticast mode [ 650.677069][T28239] bridge0: left allmulticast mode [ 650.698206][T11800] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.707701][T11800] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.738056][T28135] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.747550][T28135] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.760704][T28135] bridge_slave_0: entered allmulticast mode [ 650.770424][T28135] bridge_slave_0: entered promiscuous mode [ 650.786979][T11800] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.804992][T28251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6263'. [ 650.808491][T11800] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.830902][T28135] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.839220][T28135] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.846684][T28135] bridge_slave_1: entered allmulticast mode [ 650.855695][T28135] bridge_slave_1: entered promiscuous mode [ 650.932586][T28135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.952119][T28135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.072579][T28135] team0: Port device team_slave_0 added [ 651.081710][T28135] team0: Port device team_slave_1 added [ 651.127788][T28135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.136265][T28135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.163420][T28135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.185156][T28135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.192911][T28135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.222245][T28135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.239596][T28270] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6269'. [ 651.316103][T28135] hsr_slave_0: entered promiscuous mode [ 651.333584][T28135] hsr_slave_1: entered promiscuous mode [ 651.342228][T28135] debugfs: 'hsr0' already exists in 'hsr' [ 651.347990][T28135] Cannot create hsr debugfs directory [ 651.622894][T28282] tipc: Enabling of bearer rejected, media not registered [ 651.659414][T28135] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.674295][T28135] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.684524][T28284] netlink: 596 bytes leftover after parsing attributes in process `syz.1.6274'. [ 651.735632][T28288] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6276'. [ 651.748723][T28135] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.775636][T28290] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6274'. [ 651.782359][T28135] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.811820][T28290] syzkaller0: entered promiscuous mode [ 651.817449][T28290] syzkaller0: entered allmulticast mode [ 651.872385][T28135] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.911147][T28135] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.957897][T28298] netlink: 412 bytes leftover after parsing attributes in process `syz.3.6279'. [ 652.030054][T28135] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.042919][T28135] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.096249][T28304] x_tables: unsorted underflow at hook 4 [ 652.269840][T28135] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 652.289435][T28135] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 652.305729][T28310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6283'. [ 652.310169][T28135] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 652.360133][T28135] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 652.488861][ T5847] Bluetooth: hci3: command tx timeout [ 652.626037][T28336] ip6gre1: entered promiscuous mode [ 652.634993][T28336] ip6gre1: entered allmulticast mode [ 652.642756][T11800] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 652.651835][T28336] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 652.659690][T11800] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 652.670233][ T8339] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 652.734676][T11803] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.761564][T28336] xt_CT: No such helper "pptp" [ 652.777018][T11803] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.800199][T11803] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.820785][T11803] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.845540][T28135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.880750][T28135] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.895355][T11803] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.902758][T11803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.931146][T11800] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.938331][T11800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.015139][T28355] xt_NFQUEUE: number of total queues is 0 [ 653.060848][T28135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 653.158824][ T8339] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 653.270230][T28371] IPv6: NLM_F_CREATE should be specified when creating new route [ 653.443938][T28135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.485182][T28381] netlink: 'syz.1.6302': attribute type 4 has an invalid length. [ 653.495993][T28381] netlink: 'syz.1.6302': attribute type 1 has an invalid length. [ 653.514831][T28383] openvswitch: netlink: Unknown key attributes 2 [ 653.551164][T28381] bond1 (unregistering): Released all slaves [ 653.572206][T28388] netlink: 'syz.0.6300': attribute type 1 has an invalid length. [ 653.590964][T28389] ip6tnl1: entered promiscuous mode [ 653.597149][T28389] ip6tnl1: entered allmulticast mode [ 653.688990][ T8333] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 653.765834][T28401] netlink: 'syz.1.6306': attribute type 13 has an invalid length. [ 653.776209][T28401] netlink: 'syz.1.6306': attribute type 17 has an invalid length. [ 653.877338][T28401] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 654.014496][T28135] veth0_vlan: entered promiscuous mode [ 654.032193][T28135] veth1_vlan: entered promiscuous mode [ 654.091522][T28414] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 654.129689][T28414] bond1: (slave lo): Enslaving as a backup interface with an up link [ 654.143271][T28414] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 654.180280][T28135] veth0_macvtap: entered promiscuous mode [ 654.257049][T28135] veth1_macvtap: entered promiscuous mode [ 654.316563][T28135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.386337][T28135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.437020][T11800] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.462343][T11800] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.483529][T11800] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.504761][T28427] __nla_validate_parse: 2 callbacks suppressed [ 654.504781][T28427] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6314'. [ 654.530402][T11800] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.569677][ T5847] Bluetooth: hci3: command tx timeout [ 654.726484][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.752156][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.852352][T11800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.864260][T11800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.187214][T28460] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6317'. [ 655.223440][T28463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6319'. [ 655.234754][T28463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6319'. [ 655.257524][T28465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6318'. [ 655.925891][ T5150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 655.938572][ T5150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 655.965150][ T5150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 655.975190][ T5150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 655.986942][ T5150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 656.180953][T28496] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6324'. [ 656.328501][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 656.384313][T28505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6326'. [ 656.659326][ T5150] Bluetooth: hci3: command tx timeout [ 656.709159][T28490] lo speed is unknown, defaulting to 1000 [ 656.900562][T28530] netlink: 'syz.1.6332': attribute type 39 has an invalid length. [ 656.990768][T28512] [ 656.993285][T28512] ====================================================== [ 657.000410][T28512] WARNING: possible circular locking dependency detected [ 657.007454][T28512] syzkaller #0 Not tainted [ 657.011973][T28512] ------------------------------------------------------ [ 657.019346][T28512] syz.2.6327/28512 is trying to acquire lock: [ 657.025523][T28512] ffff888024db40c8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1e5/0x4c0 [ 657.034966][T28512] [ 657.034966][T28512] but task is already holding lock: [ 657.042328][T28512] ffff888024db3b88 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: elevator_change+0x1ca/0x4c0 [ 657.053322][T28512] [ 657.053322][T28512] which lock already depends on the new lock. [ 657.053322][T28512] [ 657.064257][T28512] [ 657.064257][T28512] the existing dependency chain (in reverse order) is: [ 657.073292][T28512] [ 657.073292][T28512] -> #6 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 657.081992][T28512] lock_acquire+0x120/0x360 [ 657.087011][T28512] blk_alloc_queue+0x538/0x620 [ 657.092311][T28512] __blk_mq_alloc_disk+0x15c/0x340 [ 657.098121][T28512] nbd_dev_add+0x46c/0xae0 [ 657.103144][T28512] nbd_init+0x1c6/0x240 [ 657.107811][T28512] do_one_initcall+0x236/0x820 [ 657.113093][T28512] do_initcall_level+0x104/0x190 [ 657.118544][T28512] do_initcalls+0x59/0xa0 [ 657.123400][T28512] kernel_init_freeable+0x334/0x4b0 [ 657.129206][T28512] kernel_init+0x1d/0x1d0 [ 657.134048][T28512] ret_from_fork+0x4bc/0x870 [ 657.139149][T28512] ret_from_fork_asm+0x1a/0x30 [ 657.144431][T28512] [ 657.144431][T28512] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 657.151731][T28512] lock_acquire+0x120/0x360 [ 657.156753][T28512] fs_reclaim_acquire+0x72/0x100 [ 657.162340][T28512] __kmalloc_cache_node_noprof+0x45/0x6f0 [ 657.168609][T28512] create_worker+0x112/0x720 [ 657.173757][T28512] workqueue_prepare_cpu+0xe4/0x170 [ 657.179493][T28512] cpuhp_invoke_callback+0x445/0x860 [ 657.185398][T28512] _cpu_up+0x2c9/0x580 [ 657.189977][T28512] cpu_up+0x1d2/0x220 [ 657.194555][T28512] cpuhp_bringup_mask+0xb2/0x1a0 [ 657.200186][T28512] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 657.206656][T28512] bringup_nonboot_cpus+0x17/0x30 [ 657.212290][T28512] smp_init+0x32/0x110 [ 657.216961][T28512] kernel_init_freeable+0x316/0x4b0 [ 657.223116][T28512] kernel_init+0x1d/0x1d0 [ 657.227988][T28512] ret_from_fork+0x4bc/0x870 [ 657.233263][T28512] ret_from_fork_asm+0x1a/0x30 [ 657.238561][T28512] [ 657.238561][T28512] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 657.246306][T28512] lock_acquire+0x120/0x360 [ 657.251326][T28512] cpus_read_lock+0x42/0x160 [ 657.256458][T28512] static_key_slow_inc+0x12/0x30 [ 657.261915][T28512] nbd_genl_reconfigure+0x10d8/0x1a50 [ 657.267801][T28512] genl_family_rcv_msg_doit+0x215/0x300 [ 657.273865][T28512] genl_rcv_msg+0x60e/0x790 [ 657.278979][T28512] netlink_rcv_skb+0x208/0x470 [ 657.284360][T28512] genl_rcv+0x28/0x40 [ 657.288861][T28512] netlink_unicast+0x82f/0x9e0 [ 657.294227][T28512] netlink_sendmsg+0x805/0xb30 [ 657.299505][T28512] __sock_sendmsg+0x21c/0x270 [ 657.304699][T28512] ____sys_sendmsg+0x505/0x830 [ 657.309985][T28512] ___sys_sendmsg+0x21f/0x2a0 [ 657.315201][T28512] __x64_sys_sendmsg+0x19b/0x260 [ 657.320735][T28512] do_syscall_64+0xfa/0xfa0 [ 657.325758][T28512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.332162][T28512] [ 657.332162][T28512] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 657.339801][T28512] lock_acquire+0x120/0x360 [ 657.344816][T28512] __mutex_lock+0x187/0x1350 [ 657.349929][T28512] nbd_queue_rq+0x257/0xf10 [ 657.355034][T28512] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 657.361100][T28512] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 657.367948][T28512] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 657.374619][T28512] blk_mq_run_hw_queue+0x348/0x4f0 [ 657.380245][T28512] blk_mq_dispatch_list+0xd0c/0xe00 [ 657.385970][T28512] blk_mq_flush_plug_list+0x469/0x550 [ 657.391886][T28512] __blk_flush_plug+0x3d3/0x4b0 [ 657.397278][T28512] __submit_bio+0x2d3/0x5a0 [ 657.402295][T28512] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 657.408450][T28512] block_read_full_folio+0x599/0x830 [ 657.414250][T28512] filemap_read_folio+0x117/0x380 [ 657.420138][T28512] do_read_cache_folio+0x350/0x590 [ 657.425760][T28512] read_part_sector+0xb6/0x2b0 [ 657.431048][T28512] adfspart_check_ICS+0xa4/0xa50 [ 657.436503][T28512] bdev_disk_changed+0x75f/0x14b0 [ 657.442043][T28512] blkdev_get_whole+0x380/0x510 [ 657.447438][T28512] bdev_open+0x31e/0xd30 [ 657.452204][T28512] blkdev_open+0x457/0x600 [ 657.457137][T28512] do_dentry_open+0x953/0x13f0 [ 657.462413][T28512] vfs_open+0x3b/0x340 [ 657.467094][T28512] path_openat+0x2ee5/0x3830 [ 657.472223][T28512] do_filp_open+0x1fa/0x410 [ 657.477246][T28512] do_sys_openat2+0x121/0x1c0 [ 657.482437][T28512] __x64_sys_openat+0x138/0x170 [ 657.488159][T28512] do_syscall_64+0xfa/0xfa0 [ 657.493198][T28512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.499621][T28512] [ 657.499621][T28512] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 657.506848][T28512] lock_acquire+0x120/0x360 [ 657.511869][T28512] __mutex_lock+0x187/0x1350 [ 657.516990][T28512] nbd_queue_rq+0xc8/0xf10 [ 657.522033][T28512] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 657.528295][T28512] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 657.535196][T28512] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 657.541698][T28512] blk_mq_run_hw_queue+0x348/0x4f0 [ 657.547845][T28512] blk_mq_dispatch_list+0xd0c/0xe00 [ 657.553562][T28512] blk_mq_flush_plug_list+0x469/0x550 [ 657.559465][T28512] __blk_flush_plug+0x3d3/0x4b0 [ 657.564831][T28512] __submit_bio+0x2d3/0x5a0 [ 657.569839][T28512] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 657.575983][T28512] block_read_full_folio+0x599/0x830 [ 657.581786][T28512] filemap_read_folio+0x117/0x380 [ 657.587320][T28512] do_read_cache_folio+0x350/0x590 [ 657.592945][T28512] read_part_sector+0xb6/0x2b0 [ 657.598226][T28512] adfspart_check_ICS+0xa4/0xa50 [ 657.603692][T28512] bdev_disk_changed+0x75f/0x14b0 [ 657.609236][T28512] blkdev_get_whole+0x380/0x510 [ 657.614609][T28512] bdev_open+0x31e/0xd30 [ 657.619367][T28512] blkdev_open+0x457/0x600 [ 657.624289][T28512] do_dentry_open+0x953/0x13f0 [ 657.629562][T28512] vfs_open+0x3b/0x340 [ 657.634141][T28512] path_openat+0x2ee5/0x3830 [ 657.639243][T28512] do_filp_open+0x1fa/0x410 [ 657.644302][T28512] do_sys_openat2+0x121/0x1c0 [ 657.649508][T28512] __x64_sys_openat+0x138/0x170 [ 657.654871][T28512] do_syscall_64+0xfa/0xfa0 [ 657.659895][T28512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.666656][T28512] [ 657.666656][T28512] -> #1 (set->srcu){.+.+}-{0:0}: [ 657.673772][T28512] lock_sync+0xba/0x160 [ 657.678436][T28512] __synchronize_srcu+0x96/0x3a0 [ 657.683883][T28512] elevator_switch+0x12b/0x640 [ 657.689164][T28512] elevator_change+0x315/0x4c0 [ 657.694443][T28512] elevator_set_default+0x186/0x260 [ 657.700158][T28512] blk_register_queue+0x34e/0x3f0 [ 657.705697][T28512] __add_disk+0x677/0xd50 [ 657.710537][T28512] add_disk_fwnode+0xfc/0x480 [ 657.715740][T28512] nbd_dev_add+0x717/0xae0 [ 657.720691][T28512] nbd_init+0x1c6/0x240 [ 657.725412][T28512] do_one_initcall+0x236/0x820 [ 657.730743][T28512] do_initcall_level+0x104/0x190 [ 657.736204][T28512] do_initcalls+0x59/0xa0 [ 657.741045][T28512] kernel_init_freeable+0x334/0x4b0 [ 657.746766][T28512] kernel_init+0x1d/0x1d0 [ 657.751605][T28512] ret_from_fork+0x4bc/0x870 [ 657.756708][T28512] ret_from_fork_asm+0x1a/0x30 [ 657.761982][T28512] [ 657.761982][T28512] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 657.769796][T28512] validate_chain+0xb9b/0x2140 [ 657.775101][T28512] __lock_acquire+0xab9/0xd20 [ 657.780283][T28512] lock_acquire+0x120/0x360 [ 657.785500][T28512] __mutex_lock+0x187/0x1350 [ 657.790608][T28512] elevator_change+0x1e5/0x4c0 [ 657.795897][T28512] elevator_set_none+0x42/0xb0 [ 657.801267][T28512] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 657.807605][T28512] nbd_start_device+0x17f/0xb10 [ 657.813085][T28512] nbd_genl_connect+0x135b/0x18f0 [ 657.818635][T28512] genl_family_rcv_msg_doit+0x215/0x300 [ 657.824792][T28512] genl_rcv_msg+0x60e/0x790 [ 657.829814][T28512] netlink_rcv_skb+0x208/0x470 [ 657.835094][T28512] genl_rcv+0x28/0x40 [ 657.839596][T28512] netlink_unicast+0x82f/0x9e0 [ 657.844893][T28512] netlink_sendmsg+0x805/0xb30 [ 657.850184][T28512] __sock_sendmsg+0x21c/0x270 [ 657.855387][T28512] ____sys_sendmsg+0x505/0x830 [ 657.860664][T28512] ___sys_sendmsg+0x21f/0x2a0 [ 657.865853][T28512] __x64_sys_sendmsg+0x19b/0x260 [ 657.871299][T28512] do_syscall_64+0xfa/0xfa0 [ 657.876325][T28512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.882723][T28512] [ 657.882723][T28512] other info that might help us debug this: [ 657.882723][T28512] [ 657.892935][T28512] Chain exists of: [ 657.892935][T28512] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#53 [ 657.892935][T28512] [ 657.906706][T28512] Possible unsafe locking scenario: [ 657.906706][T28512] [ 657.914151][T28512] CPU0 CPU1 [ 657.919521][T28512] ---- ---- [ 657.924887][T28512] lock(&q->q_usage_counter(io)#53); [ 657.930276][T28512] lock(fs_reclaim); [ 657.936770][T28512] lock(&q->q_usage_counter(io)#53); [ 657.944661][T28512] lock(&q->elevator_lock); [ 657.949331][T28512] [ 657.949331][T28512] *** DEADLOCK *** [ 657.949331][T28512] [ 657.957474][T28512] 6 locks held by syz.2.6327/28512: [ 657.962666][T28512] #0: ffffffff8f331bd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 657.970879][T28512] #1: ffffffff8f3319e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 657.979866][T28512] #2: ffff888024f651c8 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1ab0 [ 657.991409][T28512] #3: ffff888024f650d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1ab0 [ 658.002389][T28512] #4: ffff888024db3b88 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: elevator_change+0x1ca/0x4c0 [ 658.013034][T28512] #5: ffff888024db3bc0 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: elevator_change+0x1ca/0x4c0 [ 658.023923][T28512] [ 658.023923][T28512] stack backtrace: [ 658.029813][T28512] CPU: 0 UID: 0 PID: 28512 Comm: syz.2.6327 Not tainted syzkaller #0 PREEMPT(full) [ 658.029835][T28512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 658.029849][T28512] Call Trace: [ 658.029856][T28512] [ 658.029862][T28512] dump_stack_lvl+0x189/0x250 [ 658.029895][T28512] ? __pfx_dump_stack_lvl+0x10/0x10 [ 658.029916][T28512] ? __pfx__printk+0x10/0x10 [ 658.029933][T28512] ? print_lock_name+0xde/0x100 [ 658.029950][T28512] print_circular_bug+0x2ee/0x310 [ 658.029971][T28512] check_noncircular+0x134/0x160 [ 658.029994][T28512] validate_chain+0xb9b/0x2140 [ 658.030021][T28512] __lock_acquire+0xab9/0xd20 [ 658.030039][T28512] ? elevator_change+0x1e5/0x4c0 [ 658.030061][T28512] lock_acquire+0x120/0x360 [ 658.030075][T28512] ? elevator_change+0x1e5/0x4c0 [ 658.030103][T28512] __mutex_lock+0x187/0x1350 [ 658.030127][T28512] ? elevator_change+0x1e5/0x4c0 [ 658.030151][T28512] ? xa_find_after+0xae/0x430 [ 658.030168][T28512] ? xa_find_after+0x402/0x430 [ 658.030183][T28512] ? elevator_change+0x1e5/0x4c0 [ 658.030205][T28512] ? xa_find_after+0xae/0x430 [ 658.030221][T28512] ? __pfx___mutex_lock+0x10/0x10 [ 658.030246][T28512] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 658.030266][T28512] elevator_change+0x1e5/0x4c0 [ 658.030298][T28512] elevator_set_none+0x42/0xb0 [ 658.030322][T28512] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 658.030347][T28512] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 658.030370][T28512] ? sysfs_add_file_mode_ns+0x259/0x300 [ 658.030391][T28512] nbd_start_device+0x17f/0xb10 [ 658.030411][T28512] ? device_create_file+0xf4/0x1c0 [ 658.030431][T28512] nbd_genl_connect+0x135b/0x18f0 [ 658.030450][T28512] ? __pfx_nbd_genl_connect+0x10/0x10 [ 658.030469][T28512] ? rcu_is_watching+0x15/0xb0 [ 658.030488][T28512] ? __nla_parse+0x40/0x60 [ 658.030505][T28512] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 658.030532][T28512] genl_family_rcv_msg_doit+0x215/0x300 [ 658.030556][T28512] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 658.030582][T28512] ? stack_trace_save+0x9c/0xe0 [ 658.030605][T28512] genl_rcv_msg+0x60e/0x790 [ 658.030627][T28512] ? __pfx_genl_rcv_msg+0x10/0x10 [ 658.030646][T28512] ? __pfx_nbd_genl_connect+0x10/0x10 [ 658.030667][T28512] netlink_rcv_skb+0x208/0x470 [ 658.030681][T28512] ? __lock_acquire+0xab9/0xd20 [ 658.030696][T28512] ? __pfx_genl_rcv_msg+0x10/0x10 [ 658.030717][T28512] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 658.030739][T28512] ? down_read+0x1ad/0x2e0 [ 658.030754][T28512] genl_rcv+0x28/0x40 [ 658.030772][T28512] netlink_unicast+0x82f/0x9e0 [ 658.030798][T28512] ? __pfx_netlink_unicast+0x10/0x10 [ 658.030822][T28512] ? netlink_sendmsg+0x642/0xb30 [ 658.030837][T28512] ? skb_put+0x11b/0x210 [ 658.030853][T28512] netlink_sendmsg+0x805/0xb30 [ 658.030872][T28512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 658.030889][T28512] ? aa_sock_msg_perm+0xf1/0x1d0 [ 658.030913][T28512] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 658.030929][T28512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 658.030945][T28512] __sock_sendmsg+0x21c/0x270 [ 658.030983][T28512] ____sys_sendmsg+0x505/0x830 [ 658.031003][T28512] ? __pfx_____sys_sendmsg+0x10/0x10 [ 658.031023][T28512] ? import_iovec+0x74/0xa0 [ 658.031045][T28512] ___sys_sendmsg+0x21f/0x2a0 [ 658.031063][T28512] ? __pfx____sys_sendmsg+0x10/0x10 [ 658.031092][T28512] ? __fget_files+0x2a/0x420 [ 658.031107][T28512] ? __fget_files+0x3a0/0x420 [ 658.031125][T28512] __x64_sys_sendmsg+0x19b/0x260 [ 658.031143][T28512] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 658.031167][T28512] ? do_syscall_64+0xbe/0xfa0 [ 658.031191][T28512] do_syscall_64+0xfa/0xfa0 [ 658.031213][T28512] ? lockdep_hardirqs_on+0x9c/0x150 [ 658.031235][T28512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.031251][T28512] ? clear_bhb_loop+0x60/0xb0 [ 658.031268][T28512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.031293][T28512] RIP: 0033:0x7fc36298f749 [ 658.031308][T28512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.031324][T28512] RSP: 002b:00007fc3637dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 658.031341][T28512] RAX: ffffffffffffffda RBX: 00007fc362be5fa0 RCX: 00007fc36298f749 [ 658.031353][T28512] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 658.031364][T28512] RBP: 00007fc362a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 658.031375][T28512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 658.031384][T28512] R13: 00007fc362be6038 R14: 00007fc362be5fa0 R15: 00007ffcb5000278 [ 658.031403][T28512] [ 658.474694][ T5150] Bluetooth: hci4: command tx timeout [ 658.609820][T28525] lo speed is unknown, defaulting to 1000 [ 658.706034][ T5847] block nbd4: Receive control failed (result -32) [ 658.714379][ T5150] block nbd4: Receive control failed (result -32) [ 658.982319][T28490] chnl_net:caif_netlink_parms(): no params data found [ 659.197316][T28490] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.218338][T28490] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.237283][T28490] bridge_slave_0: entered allmulticast mode [ 659.245218][T28490] bridge_slave_0: entered promiscuous mode [ 659.256216][T28490] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.265578][T28490] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.273441][T28490] bridge_slave_1: entered allmulticast mode [ 659.280670][T28490] bridge_slave_1: entered promiscuous mode [ 659.318073][T28490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.331093][T28490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.374468][T28490] team0: Port device team_slave_0 added [ 659.382207][T28490] team0: Port device team_slave_1 added [ 659.409591][T28490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.416674][T28490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.444124][T28490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.457264][T28490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.464560][T28490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.493221][T28490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.539542][T28490] hsr_slave_0: entered promiscuous mode [ 659.546356][T28490] hsr_slave_1: entered promiscuous mode [ 659.553846][T28490] debugfs: 'hsr0' already exists in 'hsr' [ 659.560221][T28490] Cannot create hsr debugfs directory [ 659.844710][T28490] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 659.861236][T28490] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 659.871553][T28490] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 659.884965][T28490] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 659.964284][T28490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.983372][T28490] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.994814][T13692] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.002057][T13692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.014699][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.022121][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.141312][T28490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.176049][T28490] veth0_vlan: entered promiscuous mode [ 660.185767][T28490] veth1_vlan: entered promiscuous mode [ 660.207729][T28490] veth0_macvtap: entered promiscuous mode [ 660.215959][T28490] veth1_macvtap: entered promiscuous mode [ 660.231303][T28490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.243892][T28490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.263436][T11778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.273102][T11778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.282805][T11778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.292789][T11778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.313409][T28490] ieee80211 phy76: Selected rate control algorithm 'minstrel_ht' [ 660.334635][T13692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.336303][T28490] ieee80211 phy77: Selected rate control algorithm 'minstrel_ht' [ 660.343504][T13692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.376997][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.385579][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.488854][ T5847] Bluetooth: hci4: command tx timeout [ 662.568393][ T5847] Bluetooth: hci4: command tx timeout [ 663.448298][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 664.648400][ T5847] Bluetooth: hci4: command tx timeout