last executing test programs: 5.573585495s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e80)=@delchain={0x1c5c, 0x65, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0xd}, {0xb, 0x10}, {0xc, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xff, 0xff}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_flow={{0x9}, {0xc70, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x3}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x9}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xfff}, @TCA_FLOW_POLICE={0xc2c, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x30, 0x0, 0x2, 0x1, 0x1, 0x7fffffff, 0x2, 0x2, 0x1, 0xffffffc0, 0x8, 0xfffffff7, 0xfffffff7, 0x8, 0x9, 0x7ff, 0xfd7d, 0x2, 0x80, 0x1000, 0x1, 0xd0a, 0x1f, 0x8, 0x9, 0x3, 0x1, 0x9, 0x0, 0x4, 0x1ff, 0x4f4, 0x4, 0x6fdd, 0x0, 0x0, 0x94, 0xffff, 0x4000000, 0xe20, 0x20, 0x3ff, 0x2, 0xffffffff, 0x0, 0x400, 0x1000, 0x4, 0x1000, 0x4, 0xde5a, 0x7, 0x8, 0x6, 0xfff, 0x1, 0x9, 0x6, 0x8, 0x2, 0xfffff800, 0xd979445, 0x20, 0x80000001, 0x20, 0x0, 0xd1e, 0x6, 0x8, 0xfffffffa, 0x8, 0x8001, 0x81, 0x80000000, 0x7, 0x10001, 0x80, 0x3, 0x4332, 0x8, 0x80, 0x80, 0x0, 0x40, 0x7fffffff, 0x7f, 0x3, 0xe665, 0xc0000000, 0x6, 0x2, 0xfffffffe, 0x10000, 0x9, 0x7ff, 0x3, 0x1ff, 0x1, 0x80000, 0x9, 0x7ff, 0x800, 0x3, 0xfffffbff, 0xefb, 0x9, 0x0, 0x6, 0x9, 0x1000, 0x4, 0x9, 0x3, 0x4, 0x2, 0x7f, 0x100, 0x7fffffff, 0xfffffe00, 0x7, 0x1, 0x6, 0x1, 0x3, 0xfff, 0x9, 0x7fffffff, 0xffffffff, 0x2, 0x3, 0x0, 0x9, 0x0, 0xfffffffa, 0xff, 0x4601011d, 0x1, 0x80000001, 0x7fffffff, 0x7697, 0x9, 0x2, 0x1, 0x3, 0x8001, 0x7, 0x0, 0x1, 0x0, 0xffffffff, 0x3, 0x0, 0x7, 0x0, 0x39, 0x5, 0xffffffff, 0x8, 0x9, 0x8, 0x1, 0x1, 0x1000, 0x9, 0x7fffffff, 0x4, 0x800, 0x2, 0x6, 0x3, 0x3, 0x9, 0xb72, 0xba15, 0x7f, 0x2, 0x1, 0x6, 0x80000000, 0x10001, 0x1, 0x8, 0x6, 0x9, 0x2, 0x8, 0x8, 0x800, 0x8, 0x7, 0x817, 0x1ff, 0xfffff0b0, 0x0, 0x1000, 0x2, 0x7, 0xbbfe92a, 0x55, 0x83, 0x9, 0x40, 0x9, 0x2, 0x40, 0x1ff, 0x5, 0x8, 0x1, 0xedd5, 0x6, 0x7ff, 0x401, 0xffff, 0x9, 0x6, 0x3f, 0x140000, 0x3ff, 0xff, 0x101, 0xffffffff, 0x7, 0x68, 0x7, 0x0, 0x3, 0x0, 0x2, 0x7fff, 0x1b38, 0x2, 0xaa, 0x9, 0x8000, 0x4, 0x1ff, 0xffffffff, 0xffff3a57, 0x8, 0x3f, 0x1, 0xffffffe2, 0xe0, 0x4, 0x9, 0x5, 0x2, 0x0, 0x6, 0x6, 0x4, 0x2, 0x200, 0x3f, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfffffff7, 0x6, 0x3ff, 0x8, 0x6, 0xc7d1, 0x31, 0x200, 0x7, 0x80, 0x69, 0x1ff, 0x8, 0x3, 0x4, 0x3ff, 0x3, 0xac, 0x8, 0x10000, 0xfffffffe, 0xabe, 0x8, 0x3, 0x9, 0x381f, 0x9, 0x800, 0x4, 0x8000, 0x200, 0x1f, 0x0, 0x9, 0x1000, 0x3, 0xfffffffd, 0x400000, 0xffff, 0x7, 0x4, 0x1000, 0x40, 0x48f5, 0x8, 0x42e5, 0x10001, 0x4, 0xfffffffc, 0x7d22, 0x0, 0x4, 0xfff, 0x5, 0x6, 0x9, 0xffff, 0x319, 0x0, 0x800000, 0x80, 0xc12, 0x4, 0x6, 0x80000000, 0xb61b, 0x5, 0x6, 0x286, 0x2, 0x40000000, 0x1, 0x3ac3, 0x9, 0x4, 0xc98, 0x3, 0x5, 0x5, 0x5, 0x6, 0x4b, 0x1, 0x9, 0x3, 0x9, 0x101, 0x6, 0x1ff, 0x6000000, 0x6, 0x8, 0xfffff001, 0xd35, 0x9, 0x8000, 0x7, 0xffff, 0x0, 0x400, 0x1, 0x1, 0x40, 0x8, 0x8b, 0x8, 0x1ff, 0xc0000000, 0x9, 0x0, 0xdc, 0x0, 0x8d, 0x4, 0x3, 0x5, 0x9, 0x0, 0x3a, 0x4, 0x81, 0x3, 0x9, 0x9, 0x20, 0x1, 0x5, 0xff, 0x9644, 0x6, 0x1, 0x2, 0xc40, 0x1, 0x3, 0x6, 0x100, 0x6, 0x6, 0x9, 0x5, 0x6, 0x6, 0x292, 0x6, 0x3, 0xfffffffb, 0x0, 0x0, 0x6, 0x9, 0xff, 0x1, 0x6, 0x4e, 0x7, 0x8, 0x20, 0xfffffffc, 0x6, 0x7, 0x40, 0x8, 0xc4, 0x3ff, 0x52d, 0x1, 0x100000, 0x7ff, 0xffff8000, 0x5, 0x1, 0x1, 0xfe, 0x8, 0x198c, 0x80, 0x1, 0x8001, 0x3ff, 0xaaa, 0xb8f, 0x1, 0xffffff80, 0x5, 0x9, 0x40, 0x8, 0x6, 0x1a1, 0x7f, 0x3, 0x5, 0x2, 0x3, 0x3, 0x10001, 0x20, 0xbbe, 0x6, 0x9, 0x101, 0x3, 0x0, 0x8, 0xffff, 0x3, 0x6, 0x4, 0x1f, 0x8, 0x4, 0x1ff, 0x4877, 0x1000, 0xffff8001, 0x1, 0x1, 0x7fff, 0x1d, 0xffff8eb5, 0x100, 0x0, 0x80000001, 0x6, 0x4, 0xcfa, 0x6, 0x5, 0x800, 0xa9, 0x800, 0xf107, 0xffff, 0x1, 0x800, 0x3, 0x933, 0x81, 0xfff, 0x1, 0x0, 0xff, 0x4, 0x80, 0x0, 0x7f, 0x2, 0x22, 0x1000, 0x7, 0x8001, 0xfff, 0x7b7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6ba00}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x2460, 0x3, 0x1, 0x6, 0x8, 0x10000, 0x0, 0x2, 0x20, 0xb53c, 0xffffff7f, 0x695, 0x0, 0x6, 0x9b7, 0x7fffffff, 0xfffffffc, 0x100, 0x4, 0x4aa, 0x3, 0xffff, 0x7f800, 0x3f, 0x1ff, 0x9, 0xfff, 0x33, 0xfff, 0x0, 0x9, 0x40, 0x31, 0x0, 0x8, 0x3, 0x7, 0xffffffc2, 0xbf, 0x7, 0x3, 0x401, 0x7, 0x2, 0x3, 0x8, 0x1, 0xfff, 0x5, 0x7fffffff, 0x7, 0x4, 0x1010, 0x1000000, 0x2, 0x5, 0x80, 0x10000, 0x1, 0xfffffffb, 0x5, 0x100, 0x3, 0x1, 0x800, 0x1, 0x9, 0x4, 0x80000001, 0x7, 0x89, 0x81, 0x561c, 0x9, 0x7fffffff, 0x1, 0xff, 0x400, 0x8, 0x1508, 0x80000000, 0x3, 0x2, 0x9, 0xfffff99d, 0x10001, 0x4, 0x1d, 0xff, 0x8, 0x400, 0x401, 0x8000, 0x10000, 0x59d2, 0xffffffe8, 0x5, 0x0, 0x800, 0x800, 0x0, 0x28c7083, 0x66b9, 0x9, 0xfffffffb, 0x3, 0x8, 0x1ff, 0x0, 0x6, 0x6e0, 0x7, 0x0, 0xffffffff, 0x40, 0xf7, 0x4, 0x3, 0x1, 0x106, 0x9, 0x3, 0x6, 0xb80000, 0xfffffff7, 0x400, 0x0, 0x1, 0x1, 0x8001, 0x8, 0xef7, 0xfff, 0x8000, 0x8, 0x5, 0x6, 0x1, 0x10000, 0x7f, 0x89d, 0xf66e, 0x6, 0x1, 0x0, 0x9, 0x89b3, 0x8a02, 0x7fffffff, 0x800000, 0x0, 0x4, 0xfffffffe, 0x3, 0x47, 0x4, 0x1, 0x2f95, 0x6, 0x80000000, 0x7fffffff, 0xfffffffe, 0xffff, 0x8001, 0x800, 0x5, 0x4ec05fe5, 0x3, 0x400, 0xc6, 0x2, 0x1000, 0x6, 0xffff, 0xb4b9, 0x1ad, 0xffffff78, 0x1, 0xac, 0x4, 0x9, 0x13, 0xffff, 0x19, 0x8a, 0x1, 0x6, 0x5, 0x7fc00000, 0xe4ce, 0x7f, 0x4, 0x8, 0x8, 0x0, 0x1, 0x9, 0x6, 0x9, 0x7, 0x10, 0x5a, 0xffffffff, 0x8, 0x7fffffff, 0x9, 0x0, 0x3, 0x81, 0x9, 0xffffffff, 0x4, 0x4, 0x7fffffff, 0x9, 0x665, 0x1, 0x4, 0x20, 0x335e, 0x9, 0x7, 0x101, 0xfffffff7, 0x8, 0x9, 0x936, 0x4, 0x21641280, 0x4, 0x5, 0xffffffff, 0x5323, 0x0, 0x6, 0x8, 0x4, 0x2, 0x7, 0x977, 0x3, 0xff, 0x3, 0x80000000, 0x5, 0x3, 0x5, 0x1, 0x1, 0x6, 0x80000000, 0x7ff, 0x3, 0x9, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]}, @TCA_FLOW_XOR={0x8, 0x7, 0x81}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0x1}}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x1f}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xbf25632271a1a8f8, 0xfff2}}]}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x2}]}}, @filter_kind_options=@f_route={{0xa}, {0x318, 0x2, [@TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]}, @TCA_ROUTE4_ACT={0x2fc, 0x6, [@m_nat={0x14c, 0x1e, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8000, 0x4, 0x8, 0x483}, @loopback, @multicast1, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x7}, @multicast1, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xfffff800, 0x0, 0x1, 0x101}, @local, @broadcast, 0x80000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x2, 0x2, 0x8}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}]}, {0x81, 0x6, "3045d5c9d2ec85fefb486e11fd85f7e3c37ea57429a53183bf9cbf0ec42ed14f3997dfe932ae5275da01cd85dd3d3329c3e259c1400ba89131c8e9a40ddca2c09e962f5f33dd8270f5ad15760bc6cdd8f27d74a943c45d5d8b4cb73aac75c3627469d48e00bf6fcde3e8812cdae670cddf50b9c83db92eaadec01c9e2f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x3}}}}, @m_nat={0xf8, 0x6, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}]}, {0xa7, 0x6, "572f081998d71b9be6012778a76f44cdaf0c9ca8aee21dbf22de17aed6732a66ac5758214609c4e0cbbedd260c0d1b028a39eddfbdd902c03a1bf5a0cb5e4fb523c87b1ea3580e4649ddee9b8375199ad654d2057bd0638f2e8b1b7df0cf0c164afc5f99c0d752373e7802291dfc77c2caaf8575c2ab2f811d58f63a334f78287bef52a06e31f8cde0f691a490896c4f8adbbe7c849ece50858b9f18f03eed9dabee7d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x50, 0x0, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x64, 0x0, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x2}]}, {0x30, 0x6, "6228a1106cc919fd626431890eed5b5ed3a6310eb6a70aae0494b27b1ef67c1f680a4edeea8adf2dc58ece0b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, @TCA_ROUTE4_FROM={0x8}]}}, @filter_kind_options=@f_fw={{0x7}, {0x4}}, @filter_kind_options=@f_basic={{0xa}, {0xc58, 0x2, [@TCA_BASIC_EMATCHES={0x1e8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x154, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x2c, 0x0, 0x0, 0x0, {{0x3, 0x0, 0x100}, "cc73841ed32fe2b43cb28e0d15828209cc4de76339bc04bfcfcf1acaf270c8"}}, @TCF_EM_META={0x4c, 0x2, 0x0, 0x0, {{0x3, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_VAR="989b67014f07", @TCF_META_TYPE_VAR="18148fca3739", @TCF_META_TYPE_VAR="e2fd3e37874376", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9ef, 0x9, 0x2}, {0x5, 0x80}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1}, {0xfff, 0x4, 0x1}}}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x5}, {0x9, 0x1, 0x9, 0x0, 0x0, 0x0, 0x2}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x3, 0x2, 0x101}, {0x40, 0x1, 0x1, ':'}}}, @TCF_EM_IPT={0x68, 0x2, 0x0, 0x0, {{0x6, 0x9, 0x37f}, [@TCA_EM_IPT_MATCH_DATA={0x31, 0x5, "1385de5a7fc4a9cab0d110a6ca06f6e29c8a15702de9c3f94ce42cc75fb0405e84e8277a67f65382d574c0e4f1"}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}, @TCF_EM_IPT={0x2c, 0x2, 0x0, 0x0, {{0xfff, 0x9, 0x20}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x100, 0x2, 0x80}, {0x9, 0x7, 0x2, "8443cc275eb463"}}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x3, 0x1000}, {0xfffffffa, 0xffffffd5, 0x3b, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x68, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x48, 0x3, 0x0, 0x0, {{0x4, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x20}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xfcfb, 0x3, 0xfc01}, {0xffffff00, 0x4, 0x1, 0x80000001}}}]}]}, @TCA_BASIC_POLICE={0x818, 0x4, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0x8, 0x0, 0x6, 0x7, 0x2, 0x0, 0x6, 0xffffff7f, 0x4, 0x3, 0x0, 0x80, 0x3ff, 0xf83, 0x200, 0x0, 0x2, 0x1, 0x1000, 0x1, 0x7, 0x4645, 0x800, 0x6, 0x101, 0x4, 0x0, 0xffff, 0x9, 0xffffffff, 0x6, 0x8, 0x0, 0x983, 0x2, 0x3, 0x552, 0x20, 0x6, 0x0, 0x6, 0x2, 0x2, 0x6, 0x9, 0x1, 0x7, 0x81, 0x2c4d, 0x9, 0x4, 0x4, 0x7f, 0x2, 0x3, 0x8001, 0x3, 0x89d, 0x7, 0x8, 0x7d, 0x80, 0x6, 0x24, 0x0, 0x8, 0xff, 0x8, 0x0, 0x0, 0x0, 0x5, 0x8, 0x7fff, 0x1, 0x0, 0x4, 0x4, 0xeb, 0x20a, 0x10001, 0x6, 0xe62d, 0x0, 0x8, 0xdb, 0x1, 0x1000, 0x2, 0x0, 0xa0, 0x10000, 0x9, 0x1f, 0x3f, 0x4, 0x2, 0x6, 0x4, 0x7fff, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x383, 0x8001, 0x0, 0x0, 0x6, 0x1, 0x0, 0x8, 0x80, 0x101, 0x0, 0x7, 0x9, 0x5, 0x1, 0x1ff, 0x3ff, 0x0, 0x5, 0x6, 0x5, 0x9, 0x7, 0xff, 0x5, 0x63ab9c, 0xfffffffe, 0x0, 0x10001, 0x8000, 0x9, 0x7, 0x0, 0x0, 0x3f, 0xf54c, 0x6, 0x0, 0x3, 0x3ff, 0x2, 0x0, 0x401, 0x0, 0x8, 0x7, 0xffff, 0xfffffffb, 0x4, 0xb75d, 0xd74d, 0x1f, 0x0, 0x10000000, 0x8, 0xfffffffd, 0x0, 0x3, 0x4, 0x3, 0x101, 0x4, 0x2, 0x2, 0x0, 0x1000, 0x1, 0x4, 0x3, 0x0, 0x2, 0x0, 0x3, 0x7, 0x5, 0x8fb, 0xfffffffa, 0xffffffff, 0x200, 0x80000001, 0x81, 0x17ad12f6, 0xffff, 0x0, 0x5, 0xabb746e, 0xfffffff7, 0x4, 0x6, 0xe1, 0x2, 0x1, 0x3, 0x0, 0xc7, 0x3f0f, 0x2, 0x8, 0x20, 0xff, 0x0, 0x0, 0xa000, 0xfffffffb, 0x5, 0x8, 0x6, 0x80000001, 0xc3, 0x81, 0x6, 0x1, 0x0, 0x4, 0x3, 0xffff, 0xfff, 0x1, 0xb474, 0x7, 0x2d3f, 0x0, 0x4, 0x0, 0xfffffff7, 0x8, 0x80000000, 0x0, 0x5, 0x1, 0x80, 0x1e, 0x0, 0x200, 0x4, 0x0, 0x8000, 0xffffffff, 0x1, 0x0, 0x80000001, 0x7, 0x20, 0x101, 0x401, 0x8, 0xfffffffd]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0x800, 0x81, 0xd5, 0xe13, 0x0, 0x57, 0x4ef8000, 0x15, 0x800, 0x0, 0x2, 0x1, 0x800, 0x3, 0x1, 0x2, 0xffff, 0x3ff, 0x9, 0x200, 0x10001, 0x3, 0x0, 0x10001, 0xffffffae, 0x0, 0x0, 0x8000, 0x7ff, 0x0, 0xfffffbff, 0x8, 0x65, 0x0, 0x0, 0x6, 0x1, 0x101, 0x0, 0x6, 0x2, 0x80000000, 0x8001, 0x0, 0x0, 0xffffff59, 0x6, 0x400, 0xc2, 0x8, 0x9, 0xfff, 0x41ae, 0x80000001, 0x17fe7829, 0x8, 0xfffffff4, 0x0, 0x101, 0x9, 0x3, 0xfff, 0x0, 0x1, 0x1000, 0x4, 0x1f, 0xffffff1e, 0x4, 0x20, 0xf3c2, 0x3, 0x7fff, 0x1, 0xe3, 0x7, 0x0, 0x90de, 0x8, 0x8000, 0xffffffff, 0x0, 0x0, 0x1ad, 0x0, 0x9, 0x55d, 0x10, 0x0, 0x5, 0x9, 0x10000, 0xfffff136, 0x1000, 0x5, 0x0, 0x5, 0x0, 0x4, 0x0, 0x2cbdaedb, 0x401, 0xfb4, 0x400, 0xcdf, 0x6, 0x7f, 0x2, 0x8, 0x24e7ddbe, 0x0, 0xc90, 0x1, 0xd4ef939, 0x7, 0x3, 0x3, 0x2, 0x1, 0x5, 0x1ff, 0x1d30, 0x800, 0x5, 0x7, 0x0, 0x9, 0x0, 0x7f, 0x200, 0x5, 0x6, 0x5, 0x7307, 0x3, 0x3, 0x30b7, 0x8001, 0x400, 0xffffff27, 0x40, 0x9ac3, 0x38000, 0x6, 0xfff, 0x1, 0x5, 0x6, 0x8, 0x8, 0x0, 0x9, 0x3, 0x40, 0x7, 0x8, 0x3, 0x0, 0x3, 0x9, 0xffff0000, 0x7fff, 0x9742, 0xac5, 0xfffffffe, 0x200, 0x1, 0x7, 0x6, 0x1129, 0x200, 0xbe2e, 0x9, 0x10001, 0xffffffff, 0x2, 0x1000, 0x2, 0x7f, 0x10000, 0x0, 0x1, 0x1, 0xfffffff7, 0x7ff, 0x0, 0x5, 0x4, 0x998, 0x40, 0x1, 0x1, 0x0, 0x7fffffff, 0xfffffffb, 0x0, 0xf4f463d, 0x0, 0xffff, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x1cd9baa8, 0x4, 0xfe, 0x80000001, 0x800, 0xffffffff, 0x0, 0x10000, 0x7, 0x9, 0x0, 0x3, 0x3, 0x7, 0x9, 0x2, 0x800, 0xfffffffe, 0x0, 0x100, 0x0, 0x221, 0x2, 0x100, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x7, 0x0, 0x6, 0x57, 0x8, 0x5e, 0x6, 0x9, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x4, 0xffff8001]}]}, @TCA_BASIC_ACT={0x254, 0x3, [@m_nat={0x100, 0x1d, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @private}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x0, 0x20000000, 0x1, 0x9}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0xff}}]}, {0x87, 0x6, "eb120a50795dbd41797d62b306ca1f41c7e69c5e1ac17af21297f2fbb685b0ec5394402640643f608763880904ad140b6b5c88cd6ceaa6a5f5a0d8b091acf03905d26854d3756929c399e4437d30f5fa4eb193aa86b658738f0e5e51fe5feba9bde4f6ee7698431dd9f17a346b9eff30b470577d68c76cfbafee6c8d1151b55144c697"}, {0xc}, {0xc}}}, @m_tunnel_key={0x9c, 0x16, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x4, 0x4, 0x1ff, 0x2}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}]}, {0x22, 0x6, "ef89cfa3d24b9fbe79554cf739e92272f1121bb64e4a04baa908d22a48f7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_ct={0x78, 0xf, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_LABELS={0x14, 0x7, "02cdc395efec0cf8284a7a8c1fa0a51f"}, @TCA_CT_PARMS={0x18, 0x1, {0x4, 0x0, 0x8, 0x0, 0xffffffff}}]}, {0x7, 0x6, "87d9ce"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_skbmod={0x3c, 0x0, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @random="a985dc007bff"}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x1c5c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000d00)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 3.47913025s ago: executing program 4: ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x81, 0x6, 0x10001, 0x8, 0x1, 0xdfa, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @private2, 0x80, 0x6, 0x942c, 0x400, 0x8, 0x4400080}) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r8 = accept(r7, 0x0, 0x0) sendmmsg$inet6(r8, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="291f4607208c52023d9f90c087e562f10810d82c38748f8faf41bfd5881033ca3a440fcde810d52983a5892a9086f8fad4136ee1394018af7b4a1dc1c1fe9518304668e5534437492774f4a945d7b157096b5318d5952b8e3fdead674f06e2e8ca9e578e655e0ecf1fc16770a05ce2adbe6252c4c577f7cff8fff0275d865692a21d7d0729b60a49c0fb6f2e97312639fad7ecd135bf31953bfbed7804dcb596c339c7ef2b8db41077d91e7d04f8162bc6632677bfb90fdedd", 0xb9}, {&(0x7f0000000600)="9804cb64109ac2d104edc6c32ccdc005ad666358251f13dc65aa3a9746ce0acb913333cee78ddc54160fdbfa7b061d4bd66a40be0cc1ff4646454e81d43132b8174c42e16317", 0x46}, {&(0x7f00000006c0)="8c", 0x1}], 0x3}}], 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x7, 0x81000000}]}}}]}, 0x3c}}, 0x0) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r9) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r9, 0x3c, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0xffffff00, 0x4, 0x4, 0x1800, r0, 0x2, '\x00', r10, r11, 0x0, 0x3, 0x1, 0x1}, 0x48) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x800) shutdown(r1, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) 3.20584297s ago: executing program 4: socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) unshare(0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f0000000480), &(0x7f0000000580)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080)='&', &(0x7f0000000140)=@tcp}, 0x20) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r0, 0x1}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x19e1b4, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 2.94854531s ago: executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x20, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x3000000}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24009240}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x100, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x48015) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r0) 2.796104965s ago: executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000340)="6682799a6c80638c60010adfc7e325ca47c62e0d0c59cafe3c", 0x19}], 0x1}}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff00000000000000050000000a004e200e8a34c38f", @ANYRES16=r0, @ANYRES8=r0, @ANYRESHEX=r1], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/227, 0x4}], 0x10) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 2.6125976s ago: executing program 0: socket$nl_route(0x10, 0x3, 0x0) unshare(0x8040480) socket$packet(0x11, 0x4000000000002, 0x300) unshare(0x68060200) 2.578962787s ago: executing program 1: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x34}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x118, r1, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x42}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc83a}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x61}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x20004050) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000040), 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'erspan0\x00'}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f00000000c0)="cc", 0x1, 0x4000805, 0x0, 0x0) recvfrom$inet(r3, 0x0, 0xfffffe27, 0x40000060, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x48, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_HT_CAPABILITY={0x1e}]}, 0x48}}, 0x0) recvfrom$inet(r3, &(0x7f00000001c0)=""/249, 0xf9, 0x42, 0x0, 0x0) 2.264738924s ago: executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000180)=']', 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x48) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000007, 0x13, r1, 0x66974000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=0x473, 0x12) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20048004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f00000023c0)={'#! ', './file0'}, 0xfffffdef) getsockopt$inet_opts(r0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000340)=0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) 1.892451609s ago: executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) 1.645730967s ago: executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000780)="5c000c0013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020004000200060000000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.559260384s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x7e87e60b9a9e954c, 0x40000}}}}}}]}, 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f}, 0x48) socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r1 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="be"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x77, r2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="010000000000000000003f00000008000300", @ANYRES32], 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) 1.32443428s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e80)=@delchain={0x1c5c, 0x65, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0xd}, {0xb, 0x10}, {0xc, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xff, 0xff}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_flow={{0x9}, {0xc70, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x3}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x9}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xfff}, @TCA_FLOW_POLICE={0xc2c, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x30, 0x0, 0x2, 0x1, 0x1, 0x7fffffff, 0x2, 0x2, 0x1, 0xffffffc0, 0x8, 0xfffffff7, 0xfffffff7, 0x8, 0x9, 0x7ff, 0xfd7d, 0x2, 0x80, 0x1000, 0x1, 0xd0a, 0x1f, 0x8, 0x9, 0x3, 0x1, 0x9, 0x0, 0x4, 0x1ff, 0x4f4, 0x4, 0x6fdd, 0x0, 0x0, 0x94, 0xffff, 0x4000000, 0xe20, 0x20, 0x3ff, 0x2, 0xffffffff, 0x0, 0x400, 0x1000, 0x4, 0x1000, 0x4, 0xde5a, 0x7, 0x8, 0x6, 0xfff, 0x1, 0x9, 0x6, 0x8, 0x2, 0xfffff800, 0xd979445, 0x20, 0x80000001, 0x20, 0x0, 0xd1e, 0x6, 0x8, 0xfffffffa, 0x8, 0x8001, 0x81, 0x80000000, 0x7, 0x10001, 0x80, 0x3, 0x4332, 0x8, 0x80, 0x80, 0x0, 0x40, 0x7fffffff, 0x7f, 0x3, 0xe665, 0xc0000000, 0x6, 0x2, 0xfffffffe, 0x10000, 0x9, 0x7ff, 0x3, 0x1ff, 0x1, 0x80000, 0x9, 0x7ff, 0x800, 0x3, 0xfffffbff, 0xefb, 0x9, 0x0, 0x6, 0x9, 0x1000, 0x4, 0x9, 0x3, 0x4, 0x2, 0x7f, 0x100, 0x7fffffff, 0xfffffe00, 0x7, 0x1, 0x6, 0x1, 0x3, 0xfff, 0x9, 0x7fffffff, 0xffffffff, 0x2, 0x3, 0x0, 0x9, 0x0, 0xfffffffa, 0xff, 0x4601011d, 0x1, 0x80000001, 0x7fffffff, 0x7697, 0x9, 0x2, 0x1, 0x3, 0x8001, 0x7, 0x0, 0x1, 0x0, 0xffffffff, 0x3, 0x0, 0x7, 0x0, 0x39, 0x5, 0xffffffff, 0x8, 0x9, 0x8, 0x1, 0x1, 0x1000, 0x9, 0x7fffffff, 0x4, 0x800, 0x2, 0x6, 0x3, 0x3, 0x9, 0xb72, 0xba15, 0x7f, 0x2, 0x1, 0x6, 0x80000000, 0x10001, 0x1, 0x8, 0x6, 0x9, 0x2, 0x8, 0x8, 0x800, 0x8, 0x7, 0x817, 0x1ff, 0xfffff0b0, 0x0, 0x1000, 0x2, 0x7, 0xbbfe92a, 0x55, 0x83, 0x9, 0x40, 0x9, 0x2, 0x40, 0x1ff, 0x5, 0x8, 0x1, 0xedd5, 0x6, 0x7ff, 0x401, 0xffff, 0x9, 0x6, 0x3f, 0x140000, 0x3ff, 0xff, 0x101, 0xffffffff, 0x7, 0x68, 0x7, 0x0, 0x3, 0x0, 0x2, 0x7fff, 0x1b38, 0x2, 0xaa, 0x9, 0x8000, 0x4, 0x1ff, 0xffffffff, 0xffff3a57, 0x8, 0x3f, 0x1, 0xffffffe2, 0xe0, 0x4, 0x9, 0x5, 0x2, 0x0, 0x6, 0x6, 0x4, 0x2, 0x200, 0x3f, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfffffff7, 0x6, 0x3ff, 0x8, 0x6, 0xc7d1, 0x31, 0x200, 0x7, 0x80, 0x69, 0x1ff, 0x8, 0x3, 0x4, 0x3ff, 0x3, 0xac, 0x8, 0x10000, 0xfffffffe, 0xabe, 0x8, 0x3, 0x9, 0x381f, 0x9, 0x800, 0x4, 0x8000, 0x200, 0x1f, 0x0, 0x9, 0x1000, 0x3, 0xfffffffd, 0x400000, 0xffff, 0x7, 0x4, 0x1000, 0x40, 0x48f5, 0x8, 0x42e5, 0x10001, 0x4, 0xfffffffc, 0x7d22, 0x0, 0x4, 0xfff, 0x5, 0x6, 0x9, 0xffff, 0x319, 0x0, 0x800000, 0x80, 0xc12, 0x4, 0x6, 0x80000000, 0xb61b, 0x5, 0x6, 0x286, 0x2, 0x40000000, 0x1, 0x3ac3, 0x9, 0x4, 0xc98, 0x3, 0x5, 0x5, 0x5, 0x6, 0x4b, 0x1, 0x9, 0x3, 0x9, 0x101, 0x6, 0x1ff, 0x6000000, 0x6, 0x8, 0xfffff001, 0xd35, 0x9, 0x8000, 0x7, 0xffff, 0x0, 0x400, 0x1, 0x1, 0x40, 0x8, 0x8b, 0x8, 0x1ff, 0xc0000000, 0x9, 0x0, 0xdc, 0x0, 0x8d, 0x4, 0x3, 0x5, 0x9, 0x0, 0x3a, 0x4, 0x81, 0x3, 0x9, 0x9, 0x20, 0x1, 0x5, 0xff, 0x9644, 0x6, 0x1, 0x2, 0xc40, 0x1, 0x3, 0x6, 0x100, 0x6, 0x6, 0x9, 0x5, 0x6, 0x6, 0x292, 0x6, 0x3, 0xfffffffb, 0x0, 0x0, 0x6, 0x9, 0xff, 0x1, 0x6, 0x4e, 0x7, 0x8, 0x20, 0xfffffffc, 0x6, 0x7, 0x40, 0x8, 0xc4, 0x3ff, 0x52d, 0x1, 0x100000, 0x7ff, 0xffff8000, 0x5, 0x1, 0x1, 0xfe, 0x8, 0x198c, 0x80, 0x1, 0x8001, 0x3ff, 0xaaa, 0xb8f, 0x1, 0xffffff80, 0x5, 0x9, 0x40, 0x8, 0x6, 0x1a1, 0x7f, 0x3, 0x5, 0x2, 0x3, 0x3, 0x10001, 0x20, 0xbbe, 0x6, 0x9, 0x101, 0x3, 0x0, 0x8, 0xffff, 0x3, 0x6, 0x4, 0x1f, 0x8, 0x4, 0x1ff, 0x4877, 0x1000, 0xffff8001, 0x1, 0x1, 0x7fff, 0x1d, 0xffff8eb5, 0x100, 0x0, 0x80000001, 0x6, 0x4, 0xcfa, 0x6, 0x5, 0x800, 0xa9, 0x800, 0xf107, 0xffff, 0x1, 0x800, 0x3, 0x933, 0x81, 0xfff, 0x1, 0x0, 0xff, 0x4, 0x80, 0x0, 0x7f, 0x2, 0x22, 0x1000, 0x7, 0x8001, 0xfff, 0x7b7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6ba00}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x2460, 0x3, 0x1, 0x6, 0x8, 0x10000, 0x0, 0x2, 0x20, 0xb53c, 0xffffff7f, 0x695, 0x0, 0x6, 0x9b7, 0x7fffffff, 0xfffffffc, 0x100, 0x4, 0x4aa, 0x3, 0xffff, 0x7f800, 0x3f, 0x1ff, 0x9, 0xfff, 0x33, 0xfff, 0x0, 0x9, 0x40, 0x31, 0x0, 0x8, 0x3, 0x7, 0xffffffc2, 0xbf, 0x7, 0x3, 0x401, 0x7, 0x2, 0x3, 0x8, 0x1, 0xfff, 0x5, 0x7fffffff, 0x7, 0x4, 0x1010, 0x1000000, 0x2, 0x5, 0x80, 0x10000, 0x1, 0xfffffffb, 0x5, 0x100, 0x3, 0x1, 0x800, 0x1, 0x9, 0x4, 0x80000001, 0x7, 0x89, 0x81, 0x561c, 0x9, 0x7fffffff, 0x1, 0xff, 0x400, 0x8, 0x1508, 0x80000000, 0x3, 0x2, 0x9, 0xfffff99d, 0x10001, 0x4, 0x1d, 0xff, 0x8, 0x400, 0x401, 0x8000, 0x10000, 0x59d2, 0xffffffe8, 0x5, 0x0, 0x800, 0x800, 0x0, 0x28c7083, 0x66b9, 0x9, 0xfffffffb, 0x3, 0x8, 0x1ff, 0x0, 0x6, 0x6e0, 0x7, 0x0, 0xffffffff, 0x40, 0xf7, 0x4, 0x3, 0x1, 0x106, 0x9, 0x3, 0x6, 0xb80000, 0xfffffff7, 0x400, 0x0, 0x1, 0x1, 0x8001, 0x8, 0xef7, 0xfff, 0x8000, 0x8, 0x5, 0x6, 0x1, 0x10000, 0x7f, 0x89d, 0xf66e, 0x6, 0x1, 0x0, 0x9, 0x89b3, 0x8a02, 0x7fffffff, 0x800000, 0x0, 0x4, 0xfffffffe, 0x3, 0x47, 0x4, 0x1, 0x2f95, 0x6, 0x80000000, 0x7fffffff, 0xfffffffe, 0xffff, 0x8001, 0x800, 0x5, 0x4ec05fe5, 0x3, 0x400, 0xc6, 0x2, 0x1000, 0x6, 0xffff, 0xb4b9, 0x1ad, 0xffffff78, 0x1, 0xac, 0x4, 0x9, 0x13, 0xffff, 0x19, 0x8a, 0x1, 0x6, 0x5, 0x7fc00000, 0xe4ce, 0x7f, 0x4, 0x8, 0x8, 0x0, 0x1, 0x9, 0x6, 0x9, 0x7, 0x10, 0x5a, 0xffffffff, 0x8, 0x7fffffff, 0x9, 0x0, 0x3, 0x81, 0x9, 0xffffffff, 0x4, 0x4, 0x7fffffff, 0x9, 0x665, 0x1, 0x4, 0x20, 0x335e, 0x9, 0x7, 0x101, 0xfffffff7, 0x8, 0x9, 0x936, 0x4, 0x21641280, 0x4, 0x5, 0xffffffff, 0x5323, 0x0, 0x6, 0x8, 0x4, 0x2, 0x7, 0x977, 0x3, 0xff, 0x3, 0x80000000, 0x5, 0x3, 0x5, 0x1, 0x1, 0x6, 0x80000000, 0x7ff, 0x3, 0x9, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]}, @TCA_FLOW_XOR={0x8, 0x7, 0x81}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0x1}}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x1f}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xbf25632271a1a8f8, 0xfff2}}]}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x2}]}}, @filter_kind_options=@f_route={{0xa}, {0x318, 0x2, [@TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]}, @TCA_ROUTE4_ACT={0x2fc, 0x6, [@m_nat={0x14c, 0x1e, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8000, 0x4, 0x8, 0x483}, @loopback, @multicast1, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x7}, @multicast1, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xfffff800, 0x0, 0x1, 0x101}, @local, @broadcast, 0x80000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x2, 0x2, 0x8}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}]}, {0x81, 0x6, "3045d5c9d2ec85fefb486e11fd85f7e3c37ea57429a53183bf9cbf0ec42ed14f3997dfe932ae5275da01cd85dd3d3329c3e259c1400ba89131c8e9a40ddca2c09e962f5f33dd8270f5ad15760bc6cdd8f27d74a943c45d5d8b4cb73aac75c3627469d48e00bf6fcde3e8812cdae670cddf50b9c83db92eaadec01c9e2f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x3}}}}, @m_nat={0xf8, 0x6, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}]}, {0xa7, 0x6, "572f081998d71b9be6012778a76f44cdaf0c9ca8aee21dbf22de17aed6732a66ac5758214609c4e0cbbedd260c0d1b028a39eddfbdd902c03a1bf5a0cb5e4fb523c87b1ea3580e4649ddee9b8375199ad654d2057bd0638f2e8b1b7df0cf0c164afc5f99c0d752373e7802291dfc77c2caaf8575c2ab2f811d58f63a334f78287bef52a06e31f8cde0f691a490896c4f8adbbe7c849ece50858b9f18f03eed9dabee7d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x50, 0x0, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x64, 0x0, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x2}]}, {0x30, 0x6, "6228a1106cc919fd626431890eed5b5ed3a6310eb6a70aae0494b27b1ef67c1f680a4edeea8adf2dc58ece0b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, @TCA_ROUTE4_FROM={0x8}]}}, @filter_kind_options=@f_fw={{0x7}, {0x4}}, @filter_kind_options=@f_basic={{0xa}, {0xc58, 0x2, [@TCA_BASIC_EMATCHES={0x1e8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x154, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x2c, 0x0, 0x0, 0x0, {{0x3, 0x0, 0x100}, "cc73841ed32fe2b43cb28e0d15828209cc4de76339bc04bfcfcf1acaf270c8"}}, @TCF_EM_META={0x4c, 0x2, 0x0, 0x0, {{0x3, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_VAR="989b67014f07", @TCF_META_TYPE_VAR="18148fca3739", @TCF_META_TYPE_VAR="e2fd3e37874376", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9ef, 0x9, 0x2}, {0x5, 0x80}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1}, {0xfff, 0x4, 0x1}}}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x5}, {0x9, 0x1, 0x9, 0x0, 0x0, 0x0, 0x2}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x3, 0x2, 0x101}, {0x40, 0x1, 0x1, ':'}}}, @TCF_EM_IPT={0x68, 0x2, 0x0, 0x0, {{0x6, 0x9, 0x37f}, [@TCA_EM_IPT_MATCH_DATA={0x31, 0x5, "1385de5a7fc4a9cab0d110a6ca06f6e29c8a15702de9c3f94ce42cc75fb0405e84e8277a67f65382d574c0e4f1"}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}, @TCF_EM_IPT={0x2c, 0x2, 0x0, 0x0, {{0xfff, 0x9, 0x20}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x100, 0x2, 0x80}, {0x9, 0x7, 0x2, "8443cc275eb463"}}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x3, 0x1000}, {0xfffffffa, 0xffffffd5, 0x3b, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x68, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x48, 0x3, 0x0, 0x0, {{0x4, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x20}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xfcfb, 0x3, 0xfc01}, {0xffffff00, 0x4, 0x1, 0x80000001}}}]}]}, @TCA_BASIC_POLICE={0x818, 0x4, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0x8, 0x0, 0x6, 0x7, 0x2, 0x0, 0x6, 0xffffff7f, 0x4, 0x3, 0x0, 0x80, 0x3ff, 0xf83, 0x200, 0x0, 0x2, 0x1, 0x1000, 0x1, 0x7, 0x4645, 0x800, 0x6, 0x101, 0x4, 0x0, 0xffff, 0x9, 0xffffffff, 0x6, 0x8, 0x0, 0x983, 0x2, 0x3, 0x552, 0x20, 0x6, 0x0, 0x6, 0x2, 0x2, 0x6, 0x9, 0x1, 0x7, 0x81, 0x2c4d, 0x9, 0x4, 0x4, 0x7f, 0x2, 0x3, 0x8001, 0x3, 0x89d, 0x7, 0x8, 0x7d, 0x80, 0x6, 0x24, 0x0, 0x8, 0xff, 0x8, 0x0, 0x0, 0x0, 0x5, 0x8, 0x7fff, 0x1, 0x0, 0x4, 0x4, 0xeb, 0x20a, 0x10001, 0x6, 0xe62d, 0x0, 0x8, 0xdb, 0x1, 0x1000, 0x2, 0x0, 0xa0, 0x10000, 0x9, 0x1f, 0x3f, 0x4, 0x2, 0x6, 0x4, 0x7fff, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x383, 0x8001, 0x0, 0x0, 0x6, 0x1, 0x0, 0x8, 0x80, 0x101, 0x0, 0x7, 0x9, 0x5, 0x1, 0x1ff, 0x3ff, 0x0, 0x5, 0x6, 0x5, 0x9, 0x7, 0xff, 0x5, 0x63ab9c, 0xfffffffe, 0x0, 0x10001, 0x8000, 0x9, 0x7, 0x0, 0x0, 0x3f, 0xf54c, 0x6, 0x0, 0x3, 0x3ff, 0x2, 0x0, 0x401, 0x0, 0x8, 0x7, 0xffff, 0xfffffffb, 0x4, 0xb75d, 0xd74d, 0x1f, 0x0, 0x10000000, 0x8, 0xfffffffd, 0x0, 0x3, 0x4, 0x3, 0x101, 0x4, 0x2, 0x2, 0x0, 0x1000, 0x1, 0x4, 0x3, 0x0, 0x2, 0x0, 0x3, 0x7, 0x5, 0x8fb, 0xfffffffa, 0xffffffff, 0x200, 0x80000001, 0x81, 0x17ad12f6, 0xffff, 0x0, 0x5, 0xabb746e, 0xfffffff7, 0x4, 0x6, 0xe1, 0x2, 0x1, 0x3, 0x0, 0xc7, 0x3f0f, 0x2, 0x8, 0x20, 0xff, 0x0, 0x0, 0xa000, 0xfffffffb, 0x5, 0x8, 0x6, 0x80000001, 0xc3, 0x81, 0x6, 0x1, 0x0, 0x4, 0x3, 0xffff, 0xfff, 0x1, 0xb474, 0x7, 0x2d3f, 0x0, 0x4, 0x0, 0xfffffff7, 0x8, 0x80000000, 0x0, 0x5, 0x1, 0x80, 0x1e, 0x0, 0x200, 0x4, 0x0, 0x8000, 0xffffffff, 0x1, 0x0, 0x80000001, 0x7, 0x20, 0x101, 0x401, 0x8, 0xfffffffd]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0x800, 0x81, 0xd5, 0xe13, 0x0, 0x57, 0x4ef8000, 0x15, 0x800, 0x0, 0x2, 0x1, 0x800, 0x3, 0x1, 0x2, 0xffff, 0x3ff, 0x9, 0x200, 0x10001, 0x3, 0x0, 0x10001, 0xffffffae, 0x0, 0x0, 0x8000, 0x7ff, 0x0, 0xfffffbff, 0x8, 0x65, 0x0, 0x0, 0x6, 0x1, 0x101, 0x0, 0x6, 0x2, 0x80000000, 0x8001, 0x0, 0x0, 0xffffff59, 0x6, 0x400, 0xc2, 0x8, 0x9, 0xfff, 0x41ae, 0x80000001, 0x17fe7829, 0x8, 0xfffffff4, 0x0, 0x101, 0x9, 0x3, 0xfff, 0x0, 0x1, 0x1000, 0x4, 0x1f, 0xffffff1e, 0x4, 0x20, 0xf3c2, 0x3, 0x7fff, 0x1, 0xe3, 0x7, 0x0, 0x90de, 0x8, 0x8000, 0xffffffff, 0x0, 0x0, 0x1ad, 0x0, 0x9, 0x55d, 0x10, 0x0, 0x5, 0x9, 0x10000, 0xfffff136, 0x1000, 0x5, 0x0, 0x5, 0x0, 0x4, 0x0, 0x2cbdaedb, 0x401, 0xfb4, 0x400, 0xcdf, 0x6, 0x7f, 0x2, 0x8, 0x24e7ddbe, 0x0, 0xc90, 0x1, 0xd4ef939, 0x7, 0x3, 0x3, 0x2, 0x1, 0x5, 0x1ff, 0x1d30, 0x800, 0x5, 0x7, 0x0, 0x9, 0x0, 0x7f, 0x200, 0x5, 0x6, 0x5, 0x7307, 0x3, 0x3, 0x30b7, 0x8001, 0x400, 0xffffff27, 0x40, 0x9ac3, 0x38000, 0x6, 0xfff, 0x1, 0x5, 0x6, 0x8, 0x8, 0x0, 0x9, 0x3, 0x40, 0x7, 0x8, 0x3, 0x0, 0x3, 0x9, 0xffff0000, 0x7fff, 0x9742, 0xac5, 0xfffffffe, 0x200, 0x1, 0x7, 0x6, 0x1129, 0x200, 0xbe2e, 0x9, 0x10001, 0xffffffff, 0x2, 0x1000, 0x2, 0x7f, 0x10000, 0x0, 0x1, 0x1, 0xfffffff7, 0x7ff, 0x0, 0x5, 0x4, 0x998, 0x40, 0x1, 0x1, 0x0, 0x7fffffff, 0xfffffffb, 0x0, 0xf4f463d, 0x0, 0xffff, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x1cd9baa8, 0x4, 0xfe, 0x80000001, 0x800, 0xffffffff, 0x0, 0x10000, 0x7, 0x9, 0x0, 0x3, 0x3, 0x7, 0x9, 0x2, 0x800, 0xfffffffe, 0x0, 0x100, 0x0, 0x221, 0x2, 0x100, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x7, 0x0, 0x6, 0x57, 0x8, 0x5e, 0x6, 0x9, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x4, 0xffff8001]}]}, @TCA_BASIC_ACT={0x254, 0x3, [@m_nat={0x100, 0x1d, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @private}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x0, 0x20000000, 0x1, 0x9}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0xff}}]}, {0x87, 0x6, "eb120a50795dbd41797d62b306ca1f41c7e69c5e1ac17af21297f2fbb685b0ec5394402640643f608763880904ad140b6b5c88cd6ceaa6a5f5a0d8b091acf03905d26854d3756929c399e4437d30f5fa4eb193aa86b658738f0e5e51fe5feba9bde4f6ee7698431dd9f17a346b9eff30b470577d68c76cfbafee6c8d1151b55144c697"}, {0xc}, {0xc}}}, @m_tunnel_key={0x9c, 0x16, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x4, 0x4, 0x1ff, 0x2}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}]}, {0x22, 0x6, "ef89cfa3d24b9fbe79554cf739e92272f1121bb64e4a04baa908d22a48f7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_ct={0x78, 0xf, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_LABELS={0x14, 0x7, "02cdc395efec0cf8284a7a8c1fa0a51f"}, @TCA_CT_PARMS={0x18, 0x1, {0x4, 0x0, 0x8, 0x0, 0xffffffff}}]}, {0x7, 0x6, "87d9ce"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_skbmod={0x3c, 0x0, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @random="a985dc007bff"}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x1c5c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000d00)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.283135853s ago: executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x30, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xb4840, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'team_slave_1\x00', 0x1a00}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x76}, 0x90) 1.129060755s ago: executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x1f000008}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000080000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="9c00000002070101"], 0x9c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYBLOB="e0000002ac1414aa01"], 0x18) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}}, 0x0) r7 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10, 0x1000) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000100)={0x0, @multicast2, @dev}, &(0x7f0000000140)=0xc) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f00000001c0), 0x4) 1.089556028s ago: executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x12, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'veth1_macvtap\x00', {0x2, 0x0, @empty}}) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0xc, 0x9, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='svcsock_tcp_recv_short\x00', r5}, 0x10) r7 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r7, r6, 0x0, 0x17, 0xfffffffffffffffe}, 0x16) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xe1868721c8c1843d}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5e}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10041}, 0x44040) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 943.387439ms ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="000000000000000008001680040001"], 0x2c}}, 0x0) 905.762028ms ago: executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000001000007b1a4b18145160504f5e451353bffb922398c746c9cae5d6617e86565c1f341747c5a00c7405f3fb937ed48aa0121ddcaa0ea2824c9e7526f333dc30a4133a9fe4326dfe5a161eb381468801", @ANYRES32, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x47, 0x7fe2, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000000)={r6, 0x0, 0x0}, 0x20) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r7, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000001800)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 873.20869ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r2, r3}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2, r1}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r2, r0}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r2, r0}, 0xc) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000420005"], 0x14}}, 0x0) recvmmsg(r5, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001d80)=""/4106, 0x100a}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x1}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0xfd3162b2a90d9318}, @assoc={0x18}], 0x30}, 0x0) sendto(r6, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x5c9}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f00000003c0)=@bpq0, 0x10) 791.540123ms ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x7c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3e}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0xc0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa}]}}}]}, 0x40}}, 0x0) 712.304472ms ago: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@snprintf={{}, {0x3, 0x3, 0x6, 0x2, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x69}}]}, &(0x7f0000000300)='GPL\x00', 0x4, 0xff7, &(0x7f0000001e00)=""/4087}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socket(0x1d, 0x800, 0xfffff5e9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000008500000086000000850000005000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_allocate_blocks\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 670.168718ms ago: executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r2, 0x90d, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x28}}, 0x0) 582.423301ms ago: executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x3b}]}, &(0x7f00000006c0)='syzkaller\x00'}, 0x90) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xffffffffffffff69, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) 573.948875ms ago: executing program 3: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0xb}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x1a000, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket(0x21, 0x80000, 0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000004ec0)=ANY=[@ANYBLOB="1800000000000000000000000000000895"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='sched_kthread_work_execute_end\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="540100001000130700"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004000700000000000000ff020000000000000000000000000001"], 0x154}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e003020028000b05d25a806f8c6394f90524fc600d00090003000100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f0000000400), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) close(r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/5107], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xe, 0x0, &(0x7f0000000140)="d510faffffdb674c5ae4000b0094", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0xd00, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003000000008000300", @ANYRES32=r12], 0x24}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 535.370598ms ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4888, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x3c}}, 0x0) 494.383284ms ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e80)=@delchain={0x1c5c, 0x65, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0xd}, {0xb, 0x10}, {0xc, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xff, 0xff}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_flow={{0x9}, {0xc70, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x3}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x9}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xfff}, @TCA_FLOW_POLICE={0xc2c, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x30, 0x0, 0x2, 0x1, 0x1, 0x7fffffff, 0x2, 0x2, 0x1, 0xffffffc0, 0x8, 0xfffffff7, 0xfffffff7, 0x8, 0x9, 0x7ff, 0xfd7d, 0x2, 0x80, 0x1000, 0x1, 0xd0a, 0x1f, 0x8, 0x9, 0x3, 0x1, 0x9, 0x0, 0x4, 0x1ff, 0x4f4, 0x4, 0x6fdd, 0x0, 0x0, 0x94, 0xffff, 0x4000000, 0xe20, 0x20, 0x3ff, 0x2, 0xffffffff, 0x0, 0x400, 0x1000, 0x4, 0x1000, 0x4, 0xde5a, 0x7, 0x8, 0x6, 0xfff, 0x1, 0x9, 0x6, 0x8, 0x2, 0xfffff800, 0xd979445, 0x20, 0x80000001, 0x20, 0x0, 0xd1e, 0x6, 0x8, 0xfffffffa, 0x8, 0x8001, 0x81, 0x80000000, 0x7, 0x10001, 0x80, 0x3, 0x4332, 0x8, 0x80, 0x80, 0x0, 0x40, 0x7fffffff, 0x7f, 0x3, 0xe665, 0xc0000000, 0x6, 0x2, 0xfffffffe, 0x10000, 0x9, 0x7ff, 0x3, 0x1ff, 0x1, 0x80000, 0x9, 0x7ff, 0x800, 0x3, 0xfffffbff, 0xefb, 0x9, 0x0, 0x6, 0x9, 0x1000, 0x4, 0x9, 0x3, 0x4, 0x2, 0x7f, 0x100, 0x7fffffff, 0xfffffe00, 0x7, 0x1, 0x6, 0x1, 0x3, 0xfff, 0x9, 0x7fffffff, 0xffffffff, 0x2, 0x3, 0x0, 0x9, 0x0, 0xfffffffa, 0xff, 0x4601011d, 0x1, 0x80000001, 0x7fffffff, 0x7697, 0x9, 0x2, 0x1, 0x3, 0x8001, 0x7, 0x0, 0x1, 0x0, 0xffffffff, 0x3, 0x0, 0x7, 0x0, 0x39, 0x5, 0xffffffff, 0x8, 0x9, 0x8, 0x1, 0x1, 0x1000, 0x9, 0x7fffffff, 0x4, 0x800, 0x2, 0x6, 0x3, 0x3, 0x9, 0xb72, 0xba15, 0x7f, 0x2, 0x1, 0x6, 0x80000000, 0x10001, 0x1, 0x8, 0x6, 0x9, 0x2, 0x8, 0x8, 0x800, 0x8, 0x7, 0x817, 0x1ff, 0xfffff0b0, 0x0, 0x1000, 0x2, 0x7, 0xbbfe92a, 0x55, 0x83, 0x9, 0x40, 0x9, 0x2, 0x40, 0x1ff, 0x5, 0x8, 0x1, 0xedd5, 0x6, 0x7ff, 0x401, 0xffff, 0x9, 0x6, 0x3f, 0x140000, 0x3ff, 0xff, 0x101, 0xffffffff, 0x7, 0x68, 0x7, 0x0, 0x3, 0x0, 0x2, 0x7fff, 0x1b38, 0x2, 0xaa, 0x9, 0x8000, 0x4, 0x1ff, 0xffffffff, 0xffff3a57, 0x8, 0x3f, 0x1, 0xffffffe2, 0xe0, 0x4, 0x9, 0x5, 0x2, 0x0, 0x6, 0x6, 0x4, 0x2, 0x200, 0x3f, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfffffff7, 0x6, 0x3ff, 0x8, 0x6, 0xc7d1, 0x31, 0x200, 0x7, 0x80, 0x69, 0x1ff, 0x8, 0x3, 0x4, 0x3ff, 0x3, 0xac, 0x8, 0x10000, 0xfffffffe, 0xabe, 0x8, 0x3, 0x9, 0x381f, 0x9, 0x800, 0x4, 0x8000, 0x200, 0x1f, 0x0, 0x9, 0x1000, 0x3, 0xfffffffd, 0x400000, 0xffff, 0x7, 0x4, 0x1000, 0x40, 0x48f5, 0x8, 0x42e5, 0x10001, 0x4, 0xfffffffc, 0x7d22, 0x0, 0x4, 0xfff, 0x5, 0x6, 0x9, 0xffff, 0x319, 0x0, 0x800000, 0x80, 0xc12, 0x4, 0x6, 0x80000000, 0xb61b, 0x5, 0x6, 0x286, 0x2, 0x40000000, 0x1, 0x3ac3, 0x9, 0x4, 0xc98, 0x3, 0x5, 0x5, 0x5, 0x6, 0x4b, 0x1, 0x9, 0x3, 0x9, 0x101, 0x6, 0x1ff, 0x6000000, 0x6, 0x8, 0xfffff001, 0xd35, 0x9, 0x8000, 0x7, 0xffff, 0x0, 0x400, 0x1, 0x1, 0x40, 0x8, 0x8b, 0x8, 0x1ff, 0xc0000000, 0x9, 0x0, 0xdc, 0x0, 0x8d, 0x4, 0x3, 0x5, 0x9, 0x0, 0x3a, 0x4, 0x81, 0x3, 0x9, 0x9, 0x20, 0x1, 0x5, 0xff, 0x9644, 0x6, 0x1, 0x2, 0xc40, 0x1, 0x3, 0x6, 0x100, 0x6, 0x6, 0x9, 0x5, 0x6, 0x6, 0x292, 0x6, 0x3, 0xfffffffb, 0x0, 0x0, 0x6, 0x9, 0xff, 0x1, 0x6, 0x4e, 0x7, 0x8, 0x20, 0xfffffffc, 0x6, 0x7, 0x40, 0x8, 0xc4, 0x3ff, 0x52d, 0x1, 0x100000, 0x7ff, 0xffff8000, 0x5, 0x1, 0x1, 0xfe, 0x8, 0x198c, 0x80, 0x1, 0x8001, 0x3ff, 0xaaa, 0xb8f, 0x1, 0xffffff80, 0x5, 0x9, 0x40, 0x8, 0x6, 0x1a1, 0x7f, 0x3, 0x5, 0x2, 0x3, 0x3, 0x10001, 0x20, 0xbbe, 0x6, 0x9, 0x101, 0x3, 0x0, 0x8, 0xffff, 0x3, 0x6, 0x4, 0x1f, 0x8, 0x4, 0x1ff, 0x4877, 0x1000, 0xffff8001, 0x1, 0x1, 0x7fff, 0x1d, 0xffff8eb5, 0x100, 0x0, 0x80000001, 0x6, 0x4, 0xcfa, 0x6, 0x5, 0x800, 0xa9, 0x800, 0xf107, 0xffff, 0x1, 0x800, 0x3, 0x933, 0x81, 0xfff, 0x1, 0x0, 0xff, 0x4, 0x80, 0x0, 0x7f, 0x2, 0x22, 0x1000, 0x7, 0x8001, 0xfff, 0x7b7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6ba00}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x2460, 0x3, 0x1, 0x6, 0x8, 0x10000, 0x0, 0x2, 0x20, 0xb53c, 0xffffff7f, 0x695, 0x0, 0x6, 0x9b7, 0x7fffffff, 0xfffffffc, 0x100, 0x4, 0x4aa, 0x3, 0xffff, 0x7f800, 0x3f, 0x1ff, 0x9, 0xfff, 0x33, 0xfff, 0x0, 0x9, 0x40, 0x31, 0x0, 0x8, 0x3, 0x7, 0xffffffc2, 0xbf, 0x7, 0x3, 0x401, 0x7, 0x2, 0x3, 0x8, 0x1, 0xfff, 0x5, 0x7fffffff, 0x7, 0x4, 0x1010, 0x1000000, 0x2, 0x5, 0x80, 0x10000, 0x1, 0xfffffffb, 0x5, 0x100, 0x3, 0x1, 0x800, 0x1, 0x9, 0x4, 0x80000001, 0x7, 0x89, 0x81, 0x561c, 0x9, 0x7fffffff, 0x1, 0xff, 0x400, 0x8, 0x1508, 0x80000000, 0x3, 0x2, 0x9, 0xfffff99d, 0x10001, 0x4, 0x1d, 0xff, 0x8, 0x400, 0x401, 0x8000, 0x10000, 0x59d2, 0xffffffe8, 0x5, 0x0, 0x800, 0x800, 0x0, 0x28c7083, 0x66b9, 0x9, 0xfffffffb, 0x3, 0x8, 0x1ff, 0x0, 0x6, 0x6e0, 0x7, 0x0, 0xffffffff, 0x40, 0xf7, 0x4, 0x3, 0x1, 0x106, 0x9, 0x3, 0x6, 0xb80000, 0xfffffff7, 0x400, 0x0, 0x1, 0x1, 0x8001, 0x8, 0xef7, 0xfff, 0x8000, 0x8, 0x5, 0x6, 0x1, 0x10000, 0x7f, 0x89d, 0xf66e, 0x6, 0x1, 0x0, 0x9, 0x89b3, 0x8a02, 0x7fffffff, 0x800000, 0x0, 0x4, 0xfffffffe, 0x3, 0x47, 0x4, 0x1, 0x2f95, 0x6, 0x80000000, 0x7fffffff, 0xfffffffe, 0xffff, 0x8001, 0x800, 0x5, 0x4ec05fe5, 0x3, 0x400, 0xc6, 0x2, 0x1000, 0x6, 0xffff, 0xb4b9, 0x1ad, 0xffffff78, 0x1, 0xac, 0x4, 0x9, 0x13, 0xffff, 0x19, 0x8a, 0x1, 0x6, 0x5, 0x7fc00000, 0xe4ce, 0x7f, 0x4, 0x8, 0x8, 0x0, 0x1, 0x9, 0x6, 0x9, 0x7, 0x10, 0x5a, 0xffffffff, 0x8, 0x7fffffff, 0x9, 0x0, 0x3, 0x81, 0x9, 0xffffffff, 0x4, 0x4, 0x7fffffff, 0x9, 0x665, 0x1, 0x4, 0x20, 0x335e, 0x9, 0x7, 0x101, 0xfffffff7, 0x8, 0x9, 0x936, 0x4, 0x21641280, 0x4, 0x5, 0xffffffff, 0x5323, 0x0, 0x6, 0x8, 0x4, 0x2, 0x7, 0x977, 0x3, 0xff, 0x3, 0x80000000, 0x5, 0x3, 0x5, 0x1, 0x1, 0x6, 0x80000000, 0x7ff, 0x3, 0x9, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]}, @TCA_FLOW_XOR={0x8, 0x7, 0x81}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0x1}}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x1f}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xbf25632271a1a8f8, 0xfff2}}]}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x2}]}}, @filter_kind_options=@f_route={{0xa}, {0x318, 0x2, [@TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]}, @TCA_ROUTE4_ACT={0x2fc, 0x6, [@m_nat={0x14c, 0x1e, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8000, 0x4, 0x8, 0x483}, @loopback, @multicast1, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x7}, @multicast1, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xfffff800, 0x0, 0x1, 0x101}, @local, @broadcast, 0x80000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x2, 0x2, 0x8}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}]}, {0x81, 0x6, "3045d5c9d2ec85fefb486e11fd85f7e3c37ea57429a53183bf9cbf0ec42ed14f3997dfe932ae5275da01cd85dd3d3329c3e259c1400ba89131c8e9a40ddca2c09e962f5f33dd8270f5ad15760bc6cdd8f27d74a943c45d5d8b4cb73aac75c3627469d48e00bf6fcde3e8812cdae670cddf50b9c83db92eaadec01c9e2f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x3}}}}, @m_nat={0xf8, 0x6, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}]}, {0xa8, 0x6, "572f081998d71b9be6012778a76f44cdaf0c9ca8aee21dbf22de17aed6732a66ac5758214609c4e0cbbedd260c0d1b028a39eddfbdd902c03a1bf5a0cb5e4fb523c87b1ea3580e4649ddee9b8375199ad654d2057bd0638f2e8b1b7df0cf0c164afc5f99c0d752373e7802291dfc77c2caaf8575c2ab2f811d58f63a334f78287bef52a06e31f8cde0f691a490896c4f8adbbe7c849ece50858b9f18f03eed9dabee7dc5"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x50, 0x0, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x64, 0x0, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x2}]}, {0x30, 0x6, "6228a1106cc919fd626431890eed5b5ed3a6310eb6a70aae0494b27b1ef67c1f680a4edeea8adf2dc58ece0b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, @TCA_ROUTE4_FROM={0x8}]}}, @filter_kind_options=@f_fw={{0x7}, {0x4}}, @filter_kind_options=@f_basic={{0xa}, {0xc58, 0x2, [@TCA_BASIC_EMATCHES={0x1e8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x154, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x2c, 0x0, 0x0, 0x0, {{0x3, 0x0, 0x100}, "cc73841ed32fe2b43cb28e0d15828209cc4de76339bc04bfcfcf1acaf270c8"}}, @TCF_EM_META={0x4c, 0x2, 0x0, 0x0, {{0x3, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_VAR="989b67014f07", @TCF_META_TYPE_VAR="18148fca3739", @TCF_META_TYPE_VAR="e2fd3e37874376", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9ef, 0x9, 0x2}, {0x5, 0x80}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1}, {0xfff, 0x4, 0x1}}}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x5}, {0x9, 0x1, 0x9, 0x0, 0x0, 0x0, 0x2}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x3, 0x2, 0x101}, {0x40, 0x1, 0x1, ':'}}}, @TCF_EM_IPT={0x68, 0x2, 0x0, 0x0, {{0x6, 0x9, 0x37f}, [@TCA_EM_IPT_MATCH_DATA={0x31, 0x5, "1385de5a7fc4a9cab0d110a6ca06f6e29c8a15702de9c3f94ce42cc75fb0405e84e8277a67f65382d574c0e4f1"}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}, @TCF_EM_IPT={0x2c, 0x2, 0x0, 0x0, {{0xfff, 0x9, 0x20}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x100, 0x2, 0x80}, {0x9, 0x7, 0x2, "8443cc275eb463"}}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x3, 0x1000}, {0xfffffffa, 0xffffffd5, 0x3b, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x68, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x48, 0x3, 0x0, 0x0, {{0x4, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x20}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xfcfb, 0x3, 0xfc01}, {0xffffff00, 0x4, 0x1, 0x80000001}}}]}]}, @TCA_BASIC_POLICE={0x818, 0x4, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0x8, 0x0, 0x6, 0x7, 0x2, 0x0, 0x6, 0xffffff7f, 0x4, 0x3, 0x0, 0x80, 0x3ff, 0xf83, 0x200, 0x0, 0x2, 0x1, 0x1000, 0x1, 0x7, 0x4645, 0x800, 0x6, 0x101, 0x4, 0x0, 0xffff, 0x9, 0xffffffff, 0x6, 0x8, 0x0, 0x983, 0x2, 0x3, 0x552, 0x20, 0x6, 0x0, 0x6, 0x2, 0x2, 0x6, 0x9, 0x1, 0x7, 0x81, 0x2c4d, 0x9, 0x4, 0x4, 0x7f, 0x2, 0x3, 0x8001, 0x3, 0x89d, 0x7, 0x8, 0x7d, 0x80, 0x6, 0x24, 0x0, 0x8, 0xff, 0x8, 0x0, 0x0, 0x0, 0x5, 0x8, 0x7fff, 0x1, 0x0, 0x4, 0x4, 0xeb, 0x20a, 0x10001, 0x6, 0xe62d, 0x0, 0x8, 0xdb, 0x1, 0x1000, 0x2, 0x0, 0xa0, 0x10000, 0x9, 0x1f, 0x3f, 0x4, 0x2, 0x6, 0x4, 0x7fff, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x383, 0x8001, 0x0, 0x0, 0x6, 0x1, 0x0, 0x8, 0x80, 0x101, 0x0, 0x7, 0x9, 0x5, 0x1, 0x1ff, 0x3ff, 0x0, 0x5, 0x6, 0x5, 0x9, 0x7, 0xff, 0x5, 0x63ab9c, 0xfffffffe, 0x0, 0x10001, 0x8000, 0x9, 0x7, 0x0, 0x0, 0x3f, 0xf54c, 0x6, 0x0, 0x3, 0x3ff, 0x2, 0x0, 0x401, 0x0, 0x8, 0x7, 0xffff, 0xfffffffb, 0x4, 0xb75d, 0xd74d, 0x1f, 0x0, 0x10000000, 0x8, 0xfffffffd, 0x0, 0x3, 0x4, 0x3, 0x101, 0x4, 0x2, 0x2, 0x0, 0x1000, 0x1, 0x4, 0x3, 0x0, 0x2, 0x0, 0x3, 0x7, 0x5, 0x8fb, 0xfffffffa, 0xffffffff, 0x200, 0x80000001, 0x81, 0x17ad12f6, 0xffff, 0x0, 0x5, 0xabb746e, 0xfffffff7, 0x4, 0x6, 0xe1, 0x2, 0x1, 0x3, 0x0, 0xc7, 0x3f0f, 0x2, 0x8, 0x20, 0xff, 0x0, 0x0, 0xa000, 0xfffffffb, 0x5, 0x8, 0x6, 0x80000001, 0xc3, 0x81, 0x6, 0x1, 0x0, 0x4, 0x3, 0xffff, 0xfff, 0x1, 0xb474, 0x7, 0x2d3f, 0x0, 0x4, 0x0, 0xfffffff7, 0x8, 0x80000000, 0x0, 0x5, 0x1, 0x80, 0x1e, 0x0, 0x200, 0x4, 0x0, 0x8000, 0xffffffff, 0x1, 0x0, 0x80000001, 0x7, 0x20, 0x101, 0x401, 0x8, 0xfffffffd]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0x800, 0x81, 0xd5, 0xe13, 0x0, 0x57, 0x4ef8000, 0x15, 0x800, 0x0, 0x2, 0x1, 0x800, 0x3, 0x1, 0x2, 0xffff, 0x3ff, 0x9, 0x200, 0x10001, 0x3, 0x0, 0x10001, 0xffffffae, 0x0, 0x0, 0x8000, 0x7ff, 0x0, 0xfffffbff, 0x8, 0x65, 0x0, 0x0, 0x6, 0x1, 0x101, 0x0, 0x6, 0x2, 0x80000000, 0x8001, 0x0, 0x0, 0xffffff59, 0x6, 0x400, 0xc2, 0x8, 0x9, 0xfff, 0x41ae, 0x80000001, 0x17fe7829, 0x8, 0xfffffff4, 0x0, 0x101, 0x9, 0x3, 0xfff, 0x0, 0x1, 0x1000, 0x4, 0x1f, 0xffffff1e, 0x4, 0x20, 0xf3c2, 0x3, 0x7fff, 0x1, 0xe3, 0x7, 0x0, 0x90de, 0x8, 0x8000, 0xffffffff, 0x0, 0x0, 0x1ad, 0x0, 0x9, 0x55d, 0x10, 0x0, 0x5, 0x9, 0x10000, 0xfffff136, 0x1000, 0x5, 0x0, 0x5, 0x0, 0x4, 0x0, 0x2cbdaedb, 0x401, 0xfb4, 0x400, 0xcdf, 0x6, 0x7f, 0x2, 0x8, 0x24e7ddbe, 0x0, 0xc90, 0x1, 0xd4ef939, 0x7, 0x3, 0x3, 0x2, 0x1, 0x5, 0x1ff, 0x1d30, 0x800, 0x5, 0x7, 0x0, 0x9, 0x0, 0x7f, 0x200, 0x5, 0x6, 0x5, 0x7307, 0x3, 0x3, 0x30b7, 0x8001, 0x400, 0xffffff27, 0x40, 0x9ac3, 0x38000, 0x6, 0xfff, 0x1, 0x5, 0x6, 0x8, 0x8, 0x0, 0x9, 0x3, 0x40, 0x7, 0x8, 0x3, 0x0, 0x3, 0x9, 0xffff0000, 0x7fff, 0x9742, 0xac5, 0xfffffffe, 0x200, 0x1, 0x7, 0x6, 0x1129, 0x200, 0xbe2e, 0x9, 0x10001, 0xffffffff, 0x2, 0x1000, 0x2, 0x7f, 0x10000, 0x0, 0x1, 0x1, 0xfffffff7, 0x7ff, 0x0, 0x5, 0x4, 0x998, 0x40, 0x1, 0x1, 0x0, 0x7fffffff, 0xfffffffb, 0x0, 0xf4f463d, 0x0, 0xffff, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x1cd9baa8, 0x4, 0xfe, 0x80000001, 0x800, 0xffffffff, 0x0, 0x10000, 0x7, 0x9, 0x0, 0x3, 0x3, 0x7, 0x9, 0x2, 0x800, 0xfffffffe, 0x0, 0x100, 0x0, 0x221, 0x2, 0x100, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x7, 0x0, 0x6, 0x57, 0x8, 0x5e, 0x6, 0x9, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x4, 0xffff8001]}]}, @TCA_BASIC_ACT={0x254, 0x3, [@m_nat={0x100, 0x1d, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @private}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x0, 0x20000000, 0x1, 0x9}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0xff}}]}, {0x87, 0x6, "eb120a50795dbd41797d62b306ca1f41c7e69c5e1ac17af21297f2fbb685b0ec5394402640643f608763880904ad140b6b5c88cd6ceaa6a5f5a0d8b091acf03905d26854d3756929c399e4437d30f5fa4eb193aa86b658738f0e5e51fe5feba9bde4f6ee7698431dd9f17a346b9eff30b470577d68c76cfbafee6c8d1151b55144c697"}, {0xc}, {0xc}}}, @m_tunnel_key={0x9c, 0x16, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x4, 0x4, 0x1ff, 0x2}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}]}, {0x22, 0x6, "ef89cfa3d24b9fbe79554cf739e92272f1121bb64e4a04baa908d22a48f7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_ct={0x78, 0xf, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_LABELS={0x14, 0x7, "02cdc395efec0cf8284a7a8c1fa0a51f"}, @TCA_CT_PARMS={0x18, 0x1, {0x4, 0x0, 0x8, 0x0, 0xffffffff}}]}, {0x7, 0x6, "87d9ce"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_skbmod={0x3c, 0x0, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @random="a985dc007bff"}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x1c5c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000d00)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 330.384251ms ago: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000540)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x4000010, r0, 0xd05a0000) 283.14023ms ago: executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x3) syz_emit_ethernet(0xa2, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd60000000006c0600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b0e2000090780000080a0000000000000000030a0000000000000000fe08f989e8e82b84fe11f9891d6b93e7e59658ded8a032b667030300fe0bf98900408000000000fe06e2d4c3d902040000210ff989b23ffdd7f7f3000000002204039600"], 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000040)=ANY=[], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000100)="e0b9547ed3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$x25(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x4) r4 = socket$kcm(0x10, 0x0, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='t\x00\x00\x00VQ/>\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000000000000000008000c00040007004c001a804800048014000700ff01000000000000000000000000000114000700fc01000000000000000000000000000014000700fe80000000000000000000000000000005000b"], 0x74}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10001100", 0x33fe0}], 0x1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000200)={@local}, &(0x7f0000000480)=0x14) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x8000}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/2219], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000180)=r6) write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe800000000000"], 0xffdd) sendto$l2tp(r0, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000300)=0x5, 0x4) 259.995785ms ago: executing program 4: socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) unshare(0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f0000000480), &(0x7f0000000580)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080)='&', &(0x7f0000000140)=@tcp}, 0x20) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r0, 0x1}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x19e1b4, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 141.110449ms ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000100001000000", @ANYRES32=r1, @ANYBLOB="000000000000000008001680040001"], 0x2c}}, 0x0) 0s ago: executing program 0: socket$nl_route(0x10, 0x3, 0x0) unshare(0x8040480) socket$packet(0x11, 0x4000000000002, 0x300) unshare(0x68060200) kernel console output (not intermixed with test programs): ble media [ 95.533273][ T5755] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.0'. [ 95.564459][ T5753] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 95.736504][ T5751] trusted_key: syz-executor.1 sent an empty control message without MSG_MORE. [ 96.319153][ T5781] warning: `syz-executor.0' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.877404][ T5808] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 96.971472][ T5811] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 97.218366][ T5817] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 97.304747][ T5817] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 97.320961][ T5823] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 97.453768][ T5825] net_ratelimit: 120 callbacks suppressed [ 97.453789][ T5825] dccp_invalid_packet: invalid packet type [ 97.656896][ T5834] tipc: Enabling of bearer rejected, failed to enable media [ 98.021346][ T5847] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.4'. [ 98.058914][ T5849] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 98.181292][ T5853] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 98.237713][ T5855] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 98.241880][ T5854] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 98.283884][ T5854] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 98.341675][ T5854] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 98.586405][ T5872] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3952. macoff=96 [ 99.068312][ T5888] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 99.941364][ T5926] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 100.087980][ T5934] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 100.180638][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 100.230899][ T5939] team_slave_0: entered promiscuous mode [ 100.237090][ T5939] team_slave_1: entered promiscuous mode [ 100.252349][ T5939] macsec1: entered promiscuous mode [ 100.262503][ T5939] team0: entered promiscuous mode [ 100.279131][ T5939] macsec1: entered allmulticast mode [ 100.293501][ T5939] team0: entered allmulticast mode [ 100.303275][ T5939] team_slave_0: entered allmulticast mode [ 100.320907][ T5939] team_slave_1: entered allmulticast mode [ 100.334436][ T5944] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 100.367201][ T5939] team0: left allmulticast mode [ 100.381102][ T5939] team_slave_0: left allmulticast mode [ 100.393835][ T5944] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 100.405353][ T5939] team_slave_1: left allmulticast mode [ 100.414001][ T5939] team0: left promiscuous mode [ 100.423762][ T5944] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 100.438540][ T5939] team_slave_0: left promiscuous mode [ 100.444918][ T5939] team_slave_1: left promiscuous mode [ 100.534251][ T5936] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 100.573694][ T5936] team_slave_0: entered promiscuous mode [ 100.579513][ T5936] team_slave_1: entered promiscuous mode [ 100.595482][ T5936] macsec1: entered promiscuous mode [ 100.601369][ T5936] team0: entered promiscuous mode [ 100.608243][ T5936] macsec1: entered allmulticast mode [ 100.618576][ T5936] team0: entered allmulticast mode [ 100.623771][ T5936] team_slave_0: entered allmulticast mode [ 100.633381][ T5936] team_slave_1: entered allmulticast mode [ 100.644352][ T5936] team0: left allmulticast mode [ 100.650228][ T5936] team_slave_0: left allmulticast mode [ 100.655943][ T5936] team_slave_1: left allmulticast mode [ 100.662113][ T5936] team0: left promiscuous mode [ 100.668120][ T5936] team_slave_0: left promiscuous mode [ 100.673639][ T5936] team_slave_1: left promiscuous mode [ 100.964479][ T5963] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 100.977307][ T5964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.997028][ T5963] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 101.061381][ T5960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.067064][ T5969] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 101.153101][ T5960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.196142][ T5973] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 101.854779][ T6000] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 101.893144][ T6000] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 101.925510][ T5999] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 102.019911][ T6007] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 102.278615][ T6017] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 102.302284][ T6017] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 102.352859][ T6023] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 102.624214][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 102.675669][ T6030] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 102.705756][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 102.742707][ T6030] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 103.062416][ T6053] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 103.457220][ T6070] netlink: 272 bytes leftover after parsing attributes in process `syz-executor.1'. [ 103.898341][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 103.929727][ T6087] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 104.228529][ T6102] tipc: Started in network mode [ 104.233566][ T6102] tipc: Node identity e0000002, cluster identity 4711 [ 104.246281][ T6102] tipc: Enabling of bearer rejected, failed to enable media [ 104.265452][ T6106] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.2'. [ 105.131238][ T6137] tipc: Enabling of bearer rejected, failed to enable media [ 105.500587][ T6152] validate_nla: 8 callbacks suppressed [ 105.500610][ T6152] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 105.981266][ T6177] xt_CONNSECMARK: invalid mode: 0 [ 106.016783][ T6178] tipc: Enabling of bearer rejected, failed to enable media [ 106.239945][ T6189] xt_CT: You must specify a L4 protocol and not use inversions on it [ 106.686033][ T6209] C: renamed from lo [ 106.704004][ T6209] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 106.726350][ T6209] openvswitch: netlink: ERSPAN option length err (len 3060, max 255). [ 107.028026][ T6222] __nla_validate_parse: 9 callbacks suppressed [ 107.028050][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.070618][ T6222] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.113500][ T6226] tipc: Started in network mode [ 107.121493][ T6226] tipc: Node identity e0000002, cluster identity 4711 [ 107.132511][ T6226] tipc: Enabling of bearer rejected, failed to enable media [ 107.141828][ T6229] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 107.172117][ T6229] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 107.200660][ T6229] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 107.255074][ T6227] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 107.277588][ T6229] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 107.324538][ T6236] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 107.353163][ T6236] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 107.592204][ T6249] xt_CONNSECMARK: invalid mode: 0 [ 107.598410][ T6246] bridge_slave_1: left allmulticast mode [ 107.626785][ T6246] bridge_slave_1: left promiscuous mode [ 107.661407][ T6246] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.716863][ T6257] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 107.984391][ T6265] tipc: Enabling of bearer rejected, failed to enable media [ 108.025438][ T6269] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 108.066480][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 108.076499][ T6269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.096239][ T6269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.139808][ T6269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.147289][ T6269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.372102][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 108.392462][ T6281] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 108.506966][ T6281] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 108.569106][ T6291] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 108.812938][ T6302] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.846128][ T6303] tipc: Enabling of bearer rejected, failed to enable media [ 109.015011][ T6315] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 109.441072][ T6338] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 109.853235][ T6346] syzkaller0: entered promiscuous mode [ 109.860469][ T6346] syzkaller0: entered allmulticast mode [ 109.868849][ T6351] tipc: Enabling of bearer rejected, failed to enable media [ 109.979472][ T6358] wg2: entered promiscuous mode [ 110.018792][ T6358] wg2: entered allmulticast mode [ 110.150614][ T6365] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 110.194472][ T6365] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 110.208742][ T6365] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 110.276096][ T6363] team0: Port device bridge2 added [ 110.539819][ T6383] validate_nla: 1 callbacks suppressed [ 110.539841][ T6383] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 112.073426][ T6392] tipc: Enabling of bearer rejected, failed to enable media [ 112.424024][ T6409] __nla_validate_parse: 4 callbacks suppressed [ 112.424045][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 112.854698][ T6425] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 113.001758][ T6433] tipc: Enabling of bearer rejected, failed to enable media [ 113.252930][ T6442] netlink: zone id is out of range [ 113.280452][ T6442] netlink: zone id is out of range [ 113.294829][ T6442] netlink: zone id is out of range [ 113.306897][ T6442] netlink: zone id is out of range [ 113.347558][ T6442] netlink: zone id is out of range [ 113.352947][ T6442] netlink: zone id is out of range [ 113.426926][ T6442] netlink: zone id is out of range [ 113.442067][ T6442] netlink: zone id is out of range [ 113.456511][ T6442] netlink: zone id is out of range [ 113.478966][ T6442] netlink: zone id is out of range [ 113.578511][ T6451] netlink: 152132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 113.667027][ T6457] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 113.680705][ T6457] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 113.696507][ T6458] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 113.823961][ T6468] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 113.851880][ T6471] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 113.884332][ T6469] tipc: Enabling of bearer rejected, failed to enable media [ 114.235414][ T6491] x_tables: duplicate entry at hook 1 [ 114.452685][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 114.746593][ T6518] tipc: Enabling of bearer rejected, failed to enable media [ 114.941195][ T6527] sctp: [Deprecated]: syz-executor.2 (pid 6527) Use of int in max_burst socket option deprecated. [ 114.941195][ T6527] Use struct sctp_assoc_value instead [ 115.224794][ T6536] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 115.491861][ T6546] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 115.702214][ T6550] team_slave_0: entered promiscuous mode [ 115.713157][ T6550] team_slave_0: entered allmulticast mode [ 115.737181][ T6550] team0: Port device team_slave_0 removed [ 115.750613][ T6552] tipc: Enabling of bearer rejected, failed to enable media [ 116.028827][ T78] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.119848][ T6561] dummy0: entered promiscuous mode [ 116.147313][ T6561] dummy0: left promiscuous mode [ 116.324659][ T78] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.555233][ T78] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.709241][ T78] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.826246][ T6592] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 117.083046][ T78] bridge_slave_1: left allmulticast mode [ 117.113470][ T78] bridge_slave_1: left promiscuous mode [ 117.137604][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.188762][ T78] bridge_slave_0: left allmulticast mode [ 117.195167][ T5126] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 117.206641][ T78] bridge_slave_0: left promiscuous mode [ 117.213528][ T5126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 117.222447][ T5126] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 117.242363][ T5126] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 117.247317][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.261082][ T5126] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 117.269323][ T5126] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 117.747693][ T78] team0: Port device bridge2 removed [ 117.975728][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.990388][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.003785][ T78] bond0 (unregistering): Released all slaves [ 118.016245][ T6599] tipc: Enabling of bearer rejected, failed to enable media [ 118.031382][ T6609] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 118.102729][ T78] tipc: Left network mode [ 118.791751][ T6602] chnl_net:caif_netlink_parms(): no params data found [ 119.309624][ T5126] Bluetooth: hci0: command tx timeout [ 119.464244][ T78] hsr_slave_0: left promiscuous mode [ 119.483048][ T78] hsr_slave_1: left promiscuous mode [ 119.497120][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.505288][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.517762][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.527942][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.579889][ T78] veth1_macvtap: left promiscuous mode [ 119.586795][ T78] veth0_macvtap: left promiscuous mode [ 119.594587][ T78] veth1_vlan: left promiscuous mode [ 119.603697][ T78] veth0_vlan: left promiscuous mode [ 120.143640][ T78] team0 (unregistering): Port device team_slave_1 removed [ 120.190258][ T78] team0 (unregistering): Port device team_slave_0 removed [ 120.730402][ T6671] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 120.746907][ T6673] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 120.779888][ T6677] tipc: Enabling of bearer rejected, failed to enable media [ 120.818092][ T6602] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.848320][ T6602] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.855629][ T6602] bridge_slave_0: entered allmulticast mode [ 120.912168][ T6602] bridge_slave_0: entered promiscuous mode [ 120.940562][ T6602] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.967284][ T6602] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.004398][ T6602] bridge_slave_1: entered allmulticast mode [ 121.028666][ T6602] bridge_slave_1: entered promiscuous mode [ 121.240436][ T6602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.303011][ T6602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.388449][ T5126] Bluetooth: hci0: command tx timeout [ 121.572480][ T6602] team0: Port device team_slave_0 added [ 121.592944][ T6705] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 121.630772][ T6602] team0: Port device team_slave_1 added [ 121.801610][ T6711] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 121.801991][ T6713] net_ratelimit: 12 callbacks suppressed [ 121.802009][ T6713] netlink: zone id is out of range [ 121.876819][ T6713] netlink: zone id is out of range [ 121.908393][ T6602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.912737][ T6713] netlink: zone id is out of range [ 121.928818][ T6602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.948522][ T6713] netlink: zone id is out of range [ 121.994401][ T6602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.001557][ T6713] netlink: zone id is out of range [ 122.016182][ T6716] tipc: Enabling of bearer rejected, failed to enable media [ 122.034102][ T6713] netlink: zone id is out of range [ 122.047775][ T6713] netlink: zone id is out of range [ 122.061003][ T6713] netlink: zone id is out of range [ 122.079367][ T6602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.102672][ T6713] netlink: zone id is out of range [ 122.114750][ T6713] netlink: zone id is out of range [ 122.124978][ T6602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.212912][ T6602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.250150][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 122.462824][ T6602] hsr_slave_0: entered promiscuous mode [ 122.489473][ T6602] hsr_slave_1: entered promiscuous mode [ 122.522833][ T6602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.552361][ T6602] Cannot create hsr debugfs directory [ 123.164186][ T6759] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 123.347973][ T6763] tipc: Enabling of bearer rejected, failed to enable media [ 123.468230][ T5126] Bluetooth: hci0: command tx timeout [ 123.711470][ T6773] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 123.808030][ T6602] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 123.854251][ T6602] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 123.925195][ T6602] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 123.964531][ T6602] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 124.292332][ T6800] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 124.426361][ T6602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.479878][ T6805] tipc: Enabling of bearer rejected, failed to enable media [ 124.561441][ T6602] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.605340][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.612587][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.661574][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.668869][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.767618][ T6813] tipc: Enabled bearer , priority 0 [ 124.895074][ T6822] Bluetooth: MGMT ver 1.22 [ 124.973407][ T6602] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 125.017559][ T6602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.135676][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 125.376866][ T6848] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 125.446245][ T6851] tipc: Enabling of bearer rejected, failed to enable media [ 125.548816][ T5126] Bluetooth: hci0: command tx timeout [ 125.762557][ T6868] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 125.781221][ T6602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.859480][ T5218] tipc: Node number set to 3758096386 [ 125.898629][ T6867] tipc: Enabled bearer , priority 0 [ 126.127105][ T6602] veth0_vlan: entered promiscuous mode [ 126.184186][ T6602] veth1_vlan: entered promiscuous mode [ 126.310539][ T6884] xt_CT: You must specify a L4 protocol and not use inversions on it [ 126.370804][ T6602] veth0_macvtap: entered promiscuous mode [ 126.405866][ T6602] veth1_macvtap: entered promiscuous mode [ 126.513915][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.561194][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.588194][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.624255][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.661211][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.705312][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.769986][ T6602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.983064][ T5119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 126.994831][ T5119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 127.001751][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.019721][ T5119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 127.031558][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.041550][ T45] tipc: Node number set to 3758096386 [ 127.057881][ T5119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 127.065729][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.065767][ T5119] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 127.084499][ T5119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 127.093204][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.105857][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.154533][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.179666][ T6602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.222962][ T6602] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.274009][ T6602] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.302666][ T6602] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.319983][ T6602] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.527601][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.601688][ T6922] tipc: Enabling of bearer rejected, failed to enable media [ 127.724990][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.794826][ T6932] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 127.874693][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.080413][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.283746][ T6949] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 128.350609][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.367213][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.523812][ T6966] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 128.750984][ T35] bridge_slave_1: left allmulticast mode [ 128.756796][ T35] bridge_slave_1: left promiscuous mode [ 128.785045][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.813911][ T35] bridge_slave_0: left allmulticast mode [ 128.826876][ T35] bridge_slave_0: left promiscuous mode [ 128.842620][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.149245][ T5126] Bluetooth: hci4: command tx timeout [ 129.903290][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.946386][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.984304][ T35] bond0 (unregistering): Released all slaves [ 130.025019][ T6987] tipc: Enabling of bearer rejected, failed to enable media [ 130.030574][ T4218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.057321][ T6996] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 130.072899][ T4218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.157235][ T35] : left promiscuous mode [ 130.252555][ T6907] chnl_net:caif_netlink_parms(): no params data found [ 130.329310][ T35] tipc: Left network mode [ 130.356842][ T7012] veth1_macvtap: left promiscuous mode [ 130.375713][ T7012] macsec0: entered allmulticast mode [ 130.420483][ T7012] net_ratelimit: 1 callbacks suppressed [ 130.420509][ T7012] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 131.020586][ T35] hsr_slave_0: left promiscuous mode [ 131.052537][ T35] hsr_slave_1: left promiscuous mode [ 131.124667][ T35] veth1_macvtap: left promiscuous mode [ 131.132103][ T35] veth0_macvtap: left promiscuous mode [ 131.139813][ T35] veth1_vlan: left promiscuous mode [ 131.145474][ T35] veth0_vlan: left promiscuous mode [ 131.228200][ T5119] Bluetooth: hci4: command tx timeout [ 131.796044][ T35] team0 (unregistering): Port device team_slave_1 removed [ 131.869631][ T35] team0 (unregistering): Port device team_slave_0 removed [ 132.353093][ T6907] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.360669][ T6907] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.368127][ T6907] bridge_slave_0: entered allmulticast mode [ 132.375397][ T6907] bridge_slave_0: entered promiscuous mode [ 132.388577][ T7043] tipc: Enabling of bearer rejected, failed to enable media [ 132.479520][ T6907] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.518266][ T6907] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.542234][ T6907] bridge_slave_1: entered allmulticast mode [ 132.568157][ T6907] bridge_slave_1: entered promiscuous mode [ 132.758548][ T7058] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 132.907105][ T6907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.975558][ T6907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.151139][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.168922][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.231061][ T6907] team0: Port device team_slave_0 added [ 133.247277][ T7082] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 133.279168][ T7082] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 133.304127][ T7085] tipc: Started in network mode [ 133.307840][ T5119] Bluetooth: hci4: command 0x040f tx timeout [ 133.317353][ T7085] tipc: Node identity e0000002, cluster identity 4711 [ 133.357705][ T7085] tipc: Enabling of bearer rejected, failed to enable media [ 133.373949][ T6907] team0: Port device team_slave_1 added [ 133.680188][ T6907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.697793][ T6907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.739853][ T7100] syz-executor.3 (7100) used greatest stack depth: 19088 bytes left [ 133.760067][ T6907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.803631][ T6907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.829874][ T6907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.891122][ T7109] netlink: 272 bytes leftover after parsing attributes in process `syz-executor.4'. [ 133.909078][ T6907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.160790][ T6907] hsr_slave_0: entered promiscuous mode [ 134.188545][ T6907] hsr_slave_1: entered promiscuous mode [ 134.220933][ T6907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.232234][ T6907] Cannot create hsr debugfs directory [ 134.259030][ T7125] xt_connbytes: Forcing CT accounting to be enabled [ 134.273109][ T7125] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 134.303064][ T7117] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 134.321238][ T7121] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 134.433588][ T7129] macvlan0: entered allmulticast mode [ 134.467651][ T7131] tipc: Enabling of bearer rejected, failed to enable media [ 135.036507][ T7153] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 135.387827][ T5126] Bluetooth: hci4: command 0x040f tx timeout [ 135.520480][ T7167] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 135.770264][ T7187] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 135.832332][ T7188] tipc: Enabling of bearer rejected, failed to enable media [ 136.250542][ T6907] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 136.293376][ T6907] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 136.334786][ T6907] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 136.385718][ T6907] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 136.483492][ T7223] veth0_vlan: entered allmulticast mode [ 136.964199][ T7237] Bluetooth: MGMT ver 1.22 [ 137.009298][ T7237] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 137.056341][ T6907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.164957][ T6907] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.220682][ T5218] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.228001][ T5218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.362128][ T5218] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.369382][ T5218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.432858][ T7253] tipc: Enabling of bearer rejected, failed to enable media [ 137.605123][ T6907] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 137.724794][ T6907] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.043681][ T7280] netlink: 'syz-executor.0': attribute type 23 has an invalid length. [ 138.128204][ T7284] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 138.175766][ T7284] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.3'. [ 138.285294][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 138.311954][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 138.336343][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 138.388623][ T6907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.552461][ T7298] tipc: Enabling of bearer rejected, failed to enable media [ 138.706557][ T6907] veth0_vlan: entered promiscuous mode [ 138.765844][ T6907] veth1_vlan: entered promiscuous mode [ 138.836482][ T7304] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 139.009747][ T6907] veth0_macvtap: entered promiscuous mode [ 139.062652][ T6907] veth1_macvtap: entered promiscuous mode [ 139.126187][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.164873][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.192459][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.218470][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.244637][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.295511][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.317592][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.347524][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.378366][ T6907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.403271][ T7336] xt_limit: Overflow, try lower: 262144/524288 [ 139.427218][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.483407][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.501478][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.524886][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.542976][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.570057][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.584019][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.597622][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.624555][ T6907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.664175][ T6907] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.697463][ T6907] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.724330][ T6907] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.749989][ T6907] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.780238][ T7346] tipc: Enabling of bearer rejected, failed to enable media [ 139.987675][ T5204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.013220][ T5204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.082658][ T7351] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 140.137309][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.160016][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.669795][ T5126] Bluetooth: hci0: command 0x0c20 tx timeout [ 140.684352][ T7365] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 140.703427][ T7370] tipc: Enabling of bearer rejected, failed to enable media [ 140.753356][ T7365] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.2'. [ 140.976431][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 141.039341][ T7382] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 141.062827][ T7380] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 141.085096][ T7380] netlink: 9352 bytes leftover after parsing attributes in process `syz-executor.0'. [ 141.095272][ T7380] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 141.144061][ T7380] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 141.421338][ T7405] tipc: Can't bind to reserved service type 0 [ 141.475975][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 141.538254][ T7408] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.1'. [ 141.557161][ T7408] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 141.684883][ T7413] tipc: Enabling of bearer rejected, failed to enable media [ 141.864119][ T7418] Bluetooth: hci3: invalid length 0, exp 2 for type 25 [ 142.118645][ T7430] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 142.507033][ T7448] tipc: Enabling of bearer rejected, failed to enable media [ 142.979831][ T7475] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 143.063068][ T7480] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 143.091137][ T7480] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. [ 143.159531][ T7478] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 143.427109][ T7494] tipc: Enabling of bearer rejected, failed to enable media [ 143.722378][ T7502] bridge0: entered promiscuous mode [ 143.767858][ T7502] macsec1: entered promiscuous mode [ 143.960339][ T7502] bridge0: left promiscuous mode [ 144.103733][ T7506] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 144.499639][ T7528] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 144.554856][ T7533] tipc: Enabling of bearer rejected, failed to enable media [ 144.739388][ T7539] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 144.916076][ T7545] syz-executor.2 uses old SIOCAX25GETINFO [ 144.979466][ T7549] bridge0: entered promiscuous mode [ 144.984881][ T7549] macsec1: entered promiscuous mode [ 145.051012][ T7549] bridge0: left promiscuous mode [ 145.214254][ T7553] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 145.633984][ T7583] syz_tun: entered promiscuous mode [ 145.657926][ T7583] macsec1: entered promiscuous mode [ 145.673551][ T7583] macsec1: entered allmulticast mode [ 145.688369][ T7583] syz_tun: entered allmulticast mode [ 146.314141][ T7630] __nla_validate_parse: 4 callbacks suppressed [ 146.314163][ T7630] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 146.389865][ T7630] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.399189][ T7630] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.408036][ T7630] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.416776][ T7630] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.453931][ T7630] vxlan0: entered promiscuous mode [ 146.646360][ T7643] bridge_slave_0: invalid flags given to default FDB implementation [ 146.756443][ T7649] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 147.047083][ T7630] syz-executor.2 (7630) used greatest stack depth: 19024 bytes left [ 147.299339][ T7685] Cannot find add_set index 0 as target [ 147.430062][ T7695] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 148.004899][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 148.293204][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 148.454794][ T7746] rdma_op ffff888079dd21f0 conn xmit_rdma 0000000000000000 [ 148.542122][ T7750] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 149.714208][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 149.879524][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.908080][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.994822][ T7825] netem: change failed [ 150.119271][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.162258][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.293424][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.327610][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.462366][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.502873][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.671444][ T7845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.692666][ T7845] team0: Port device batadv0 added [ 150.866898][ T7847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.909790][ T7847] team0: Port device batadv0 added [ 150.977971][ T5119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 150.991480][ T5119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.000080][ T5119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.024498][ T5119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.043112][ T5119] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.052337][ T5119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.062716][ T62] bridge_slave_1: left allmulticast mode [ 151.097688][ T62] bridge_slave_1: left promiscuous mode [ 151.103526][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.136656][ T62] bridge_slave_0: left allmulticast mode [ 151.151725][ T62] bridge_slave_0: left promiscuous mode [ 151.196227][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.821536][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.838290][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.856993][ T62] bond0 (unregistering): Released all slaves [ 151.985589][ T7871] bridge1: entered promiscuous mode [ 151.995689][ T7871] bridge1: entered allmulticast mode [ 152.038531][ T7878] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 152.272259][ T7884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.304302][ T7884] team0: Port device batadv0 added [ 152.546668][ T62] hsr_slave_0: left promiscuous mode [ 152.572629][ T62] hsr_slave_1: left promiscuous mode [ 152.579067][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.586535][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.622110][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.642809][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.749508][ T62] veth1_macvtap: left promiscuous mode [ 152.755148][ T62] veth0_macvtap: left promiscuous mode [ 152.787732][ T62] veth1_vlan: left promiscuous mode [ 152.793156][ T62] veth0_vlan: left promiscuous mode [ 153.148977][ T5119] Bluetooth: hci4: command tx timeout [ 153.320033][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88806585ec00: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 153.484447][ T62] team0 (unregistering): Port device team_slave_1 removed [ 153.529489][ T62] team0 (unregistering): Port device team_slave_0 removed [ 153.971508][ T7907] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 154.512363][ T7852] chnl_net:caif_netlink_parms(): no params data found [ 154.797695][ T7852] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.810637][ T7852] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.828299][ T7852] bridge_slave_0: entered allmulticast mode [ 154.841887][ T7852] bridge_slave_0: entered promiscuous mode [ 154.857903][ T7852] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.867579][ T7852] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.875076][ T7852] bridge_slave_1: entered allmulticast mode [ 154.882972][ T7852] bridge_slave_1: entered promiscuous mode [ 154.933346][ T7949] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 154.942107][ T7951] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 155.007214][ T7852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.033158][ T7852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.166565][ T7852] team0: Port device team_slave_0 added [ 155.206026][ T7852] team0: Port device team_slave_1 added [ 155.227839][ T5119] Bluetooth: hci4: command tx timeout [ 155.344770][ T7852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.367798][ T7852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.412857][ T7852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.469808][ T7852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.477370][ T7852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.547463][ T7852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.756303][ T7947] syz-executor.0 (7947) used greatest stack depth: 18640 bytes left [ 155.764543][ T7970] atomic_op ffff8880607a2998 conn xmit_atomic 0000000000000000 [ 155.767809][ T7970] atomic_op ffff88807b2ed198 conn xmit_atomic 0000000000000000 [ 155.793336][ T7852] hsr_slave_0: entered promiscuous mode [ 155.808433][ T7852] hsr_slave_1: entered promiscuous mode [ 155.815658][ T7852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.830709][ T7852] Cannot create hsr debugfs directory [ 155.913449][ T7977] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 156.373185][ T7994] bridge2: entered promiscuous mode [ 156.381328][ T7994] bridge2: entered allmulticast mode [ 156.623363][ T8008] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 156.652367][ T8009] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 157.252621][ T5115] syz-executor.0 (5115) used greatest stack depth: 18448 bytes left [ 157.259168][ T7852] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 157.308213][ T5119] Bluetooth: hci4: command tx timeout [ 157.453490][ T4218] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.516809][ T7852] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 157.558766][ T7852] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 157.584093][ T7852] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 157.624471][ T8039] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 157.720533][ T4218] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.759626][ T8044] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 157.862422][ T4218] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.121454][ T4218] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.232960][ T7852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.257222][ T5126] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 158.283213][ T5126] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 158.292050][ T5126] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 158.302278][ T5126] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 158.319396][ T5126] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 158.326868][ T5126] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 158.481444][ T7852] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.714009][ T5204] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.721236][ T5204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.772079][ T4218] bridge_slave_1: left allmulticast mode [ 158.797536][ T4218] bridge_slave_1: left promiscuous mode [ 158.803382][ T4218] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.831957][ T4218] bridge_slave_0: left allmulticast mode [ 158.837900][ T4218] bridge_slave_0: left promiscuous mode [ 158.843712][ T4218] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.871889][ T4218] tipc: Resetting bearer [ 159.149048][ T4218] tipc: Disabling bearer [ 159.313375][ T4218] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.324677][ T4218] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.336098][ T4218] bond0 (unregistering): Released all slaves [ 159.363634][ T8073] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 159.388068][ T5126] Bluetooth: hci4: command tx timeout [ 159.440368][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.447597][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.614400][ T4218] tipc: Left network mode [ 159.895994][ T8060] chnl_net:caif_netlink_parms(): no params data found [ 160.306046][ T7852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.395313][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 160.427808][ T5126] Bluetooth: hci1: command tx timeout [ 160.538345][ T8060] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.559416][ T8060] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.583231][ T8060] bridge_slave_0: entered allmulticast mode [ 160.600481][ T8060] bridge_slave_0: entered promiscuous mode [ 160.633192][ T8126] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 160.643397][ T8060] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.660512][ T8060] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.706333][ T8060] bridge_slave_1: entered allmulticast mode [ 160.715355][ T8060] bridge_slave_1: entered promiscuous mode [ 160.747777][ T4218] hsr_slave_0: left promiscuous mode [ 160.766946][ T4218] hsr_slave_1: left promiscuous mode [ 160.780686][ T4218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.815138][ T4218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.829653][ T4218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.837128][ T4218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.867007][ T4218] veth1_macvtap: left promiscuous mode [ 160.879052][ T4218] veth0_macvtap: left promiscuous mode [ 160.884734][ T4218] veth1_vlan: left promiscuous mode [ 160.896055][ T4218] veth0_vlan: left promiscuous mode [ 161.402120][ T4218] team0 (unregistering): Port device team_slave_1 removed [ 161.443218][ T4218] team0 (unregistering): Port device team_slave_0 removed [ 162.123628][ T8060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.172699][ T8060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.308438][ T8060] team0: Port device team_slave_0 added [ 162.343599][ T8060] team0: Port device team_slave_1 added [ 162.482425][ T8060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.490373][ T8060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.516380][ T5126] Bluetooth: hci1: command tx timeout [ 162.537461][ T8060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.568576][ T8163] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 162.606588][ T7852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.748471][ T8060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.755480][ T8060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.836250][ T8060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.863340][ T8174] Bluetooth: MGMT ver 1.22 [ 163.199714][ T5119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 163.208884][ T5119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 163.218652][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 163.226975][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 163.236471][ T5119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 163.247838][ T5119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 163.317950][ T8060] hsr_slave_0: entered promiscuous mode [ 163.326048][ T8060] hsr_slave_1: entered promiscuous mode [ 163.602531][ T4218] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.720090][ T4218] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.769649][ T7852] veth0_vlan: entered promiscuous mode [ 163.816075][ T4218] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.860604][ T7852] veth1_vlan: entered promiscuous mode [ 163.928351][ T4218] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.223939][ T7852] veth0_macvtap: entered promiscuous mode [ 164.246275][ T7852] veth1_macvtap: entered promiscuous mode [ 164.332389][ T8203] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.460802][ T8203] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.490182][ T4218] bridge_slave_1: left allmulticast mode [ 164.496153][ T4218] bridge_slave_1: left promiscuous mode [ 164.507355][ T4218] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.526853][ T4218] bridge_slave_0: left allmulticast mode [ 164.533691][ T4218] bridge_slave_0: left promiscuous mode [ 164.540404][ T4218] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.590354][ T5126] Bluetooth: hci1: command tx timeout [ 165.017650][ T4218] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.031280][ T4218] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.045006][ T4218] bond0 (unregistering): Released all slaves [ 165.144978][ T8203] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.236619][ T8203] bond0: (slave netdevsim0): Releasing backup interface [ 165.254895][ T8203] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.277564][ T7852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.291144][ T7852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.306780][ T7852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.320985][ T5126] Bluetooth: hci0: command tx timeout [ 165.323365][ T7852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.336519][ T7852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.352497][ T7852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.365011][ T7852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.375773][ T4218] tipc: Left network mode [ 165.378157][ T8179] chnl_net:caif_netlink_parms(): no params data found [ 165.392677][ T8210] team0: entered promiscuous mode [ 165.399034][ T8210] team_slave_1: entered promiscuous mode [ 165.404939][ T8210] batadv0: entered promiscuous mode [ 165.420713][ T8207] team0: left promiscuous mode [ 165.427778][ T8207] team_slave_1: left promiscuous mode [ 165.438197][ T8207] batadv0: left promiscuous mode [ 165.529418][ T7852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.541348][ T7852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.555502][ T7852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.574339][ T7852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.585108][ T7852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.602521][ T7852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.615516][ T7852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.686829][ T7852] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.695892][ T7852] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.705235][ T7852] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.714911][ T7852] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.759103][ T8203] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.775976][ T8203] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.794241][ T8203] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.811384][ T8203] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.986920][ T8179] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.994967][ T8179] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.003869][ T8179] bridge_slave_0: entered allmulticast mode [ 166.013066][ T8179] bridge_slave_0: entered promiscuous mode [ 166.085491][ T4218] hsr_slave_0: left promiscuous mode [ 166.093912][ T4218] hsr_slave_1: left promiscuous mode [ 166.102436][ T4218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.112298][ T4218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.128934][ T4218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.136402][ T4218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.176210][ T4218] veth1_macvtap: left promiscuous mode [ 166.182259][ T4218] veth0_macvtap: left promiscuous mode [ 166.188702][ T4218] veth1_vlan: left promiscuous mode [ 166.194430][ T4218] veth0_vlan: left promiscuous mode [ 166.227026][ T8230] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 166.681908][ T5126] Bluetooth: hci1: command tx timeout [ 166.850755][ T4218] team0 (unregistering): Port device team_slave_1 removed [ 166.894297][ T4218] team0 (unregistering): Port device team_slave_0 removed [ 167.142230][ T4218] team0 (unregistering): Port device batadv0 removed [ 167.297179][ T8179] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.304709][ T8179] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.312650][ T8179] bridge_slave_1: entered allmulticast mode [ 167.340579][ T8179] bridge_slave_1: entered promiscuous mode [ 167.388470][ T5126] Bluetooth: hci0: command tx timeout [ 167.419821][ T8179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.475398][ T8179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.524498][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.532609][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.605616][ T8179] team0: Port device team_slave_0 added [ 167.656548][ T8244] sch_tbf: burst 0 is lower than device team0 mtu (1514) ! [ 167.670939][ T8179] team0: Port device team_slave_1 added [ 167.673388][ T8244] IPv4: Oversized IP packet from 127.202.26.0 [ 167.696409][ T8060] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 167.784667][ T8060] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 167.801646][ T8060] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 167.809182][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.822448][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.898606][ T8179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.905721][ T8179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.935059][ T8179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.972096][ T8060] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 168.029170][ T8179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.036170][ T8179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.062848][ T8179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.085414][ T8251] team_slave_0: entered promiscuous mode [ 168.091613][ T8251] team_slave_0: entered allmulticast mode [ 168.123551][ T8251] team0: Port device team_slave_0 removed [ 168.151300][ T8253] team0: entered promiscuous mode [ 168.156826][ T8253] team_slave_1: entered promiscuous mode [ 168.163844][ T8253] batadv0: entered promiscuous mode [ 168.173484][ T8250] team0: left promiscuous mode [ 168.181030][ T8250] team_slave_1: left promiscuous mode [ 168.186906][ T8250] batadv0: left promiscuous mode [ 168.637028][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 168.664129][ T8264] gretap0: entered promiscuous mode [ 168.678804][ T8264] macvtap1: entered promiscuous mode [ 168.685489][ T8264] macvtap1: entered allmulticast mode [ 168.695943][ T8264] gretap0: entered allmulticast mode [ 168.731050][ T8179] hsr_slave_0: entered promiscuous mode [ 168.763982][ T8179] hsr_slave_1: entered promiscuous mode [ 168.772062][ T8179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.797798][ T8179] Cannot create hsr debugfs directory [ 169.393720][ T8289] netlink: 'syz-executor.3': attribute type 64 has an invalid length. [ 169.407609][ T8289] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 169.468902][ T5126] Bluetooth: hci0: command tx timeout [ 169.530119][ T8060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.718169][ T8060] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.792080][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.799492][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.850737][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.857981][ T5122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.237104][ T8060] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 170.248471][ T8060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.330019][ T8179] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 170.343222][ T8179] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 170.404535][ T8179] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 170.462867][ T8179] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 170.550413][ T8339] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 170.611088][ T8338] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 170.791765][ T8060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.823050][ T8179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.965746][ T8179] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.986945][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.994191][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.019914][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.027254][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.274689][ T8364] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.363452][ T8060] veth0_vlan: entered promiscuous mode [ 171.386018][ T8060] veth1_vlan: entered promiscuous mode [ 171.472432][ T8364] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.550107][ T5126] Bluetooth: hci0: command tx timeout [ 171.576748][ T8373] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.650305][ T8364] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.796196][ T8364] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.866051][ T8060] veth0_macvtap: entered promiscuous mode [ 171.901742][ T8060] veth1_macvtap: entered promiscuous mode [ 171.969494][ T8060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.984299][ T8060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.997060][ T8060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.013839][ T8060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.037702][ T8060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.062919][ T8060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.083243][ T8060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.123681][ T8060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.145577][ T8060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.155793][ T8060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.174211][ T8060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.184221][ T8060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.204027][ T8060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.224140][ T8060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.234534][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 172.300473][ T8060] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.309541][ T8060] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.330680][ T8060] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.343439][ T8060] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.386155][ T8364] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.413112][ T8364] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.451237][ T8364] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.502131][ T8179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.542279][ T8364] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.659018][ T8415] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 172.706380][ T8418] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 172.748299][ T5204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.766566][ T5204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.871643][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.917242][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.923016][ T8179] veth0_vlan: entered promiscuous mode [ 172.981862][ T8179] veth1_vlan: entered promiscuous mode [ 173.131431][ T8431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.175511][ T8431] team0: Port device batadv0 added [ 173.271359][ T8179] veth0_macvtap: entered promiscuous mode [ 173.311377][ T8179] veth1_macvtap: entered promiscuous mode [ 173.373342][ T8179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.395995][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 173.408485][ T8179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.418851][ T8443] block nbd0: not configured, cannot reconfigure [ 173.438964][ T8179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.459960][ T8179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.471943][ T8179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.482795][ T8179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.494117][ T8179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.506859][ T8179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.539996][ T8179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.571409][ T8179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.593769][ T8179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.629243][ T8179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.657911][ T8179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.677564][ T8179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.697891][ T8179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.708857][ T8179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.730967][ T8179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.756757][ T8179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.782034][ T8464] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 173.828407][ T8179] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.861099][ T8179] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.886650][ T8179] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.917721][ T8179] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.226590][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.243827][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.345254][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.363768][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.447575][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 174.479021][ T8488] block nbd0: not configured, cannot reconfigure [ 174.777960][ T8513] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 174.835861][ T8513] : entered promiscuous mode [ 174.930864][ T8516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.959046][ T8516] team0: Port device batadv0 added [ 175.041969][ T8516] syz-executor.1 (8516) used greatest stack depth: 18424 bytes left [ 175.336829][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 175.353733][ T8539] block nbd0: not configured, cannot reconfigure [ 175.497248][ T8546] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 175.616377][ T8553] delete_channel: no stack [ 176.048553][ T8581] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 176.076574][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 176.094565][ T8581] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 176.105528][ T8578] block nbd0: not configured, cannot reconfigure [ 176.613013][ T8608] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 176.648727][ T8607] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 177.486232][ T8654] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 177.596361][ T8653] __nla_validate_parse: 3 callbacks suppressed [ 177.596384][ T8653] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 177.666757][ T8659] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 177.875878][ T8675] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 177.895099][ T8675] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 178.026717][ T8684] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32768) [ 178.040969][ T8684] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 178.096590][ T8689] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 178.651938][ T29] audit: type=1804 audit(1717257068.775:2): pid=8707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2793389994/syzkaller.ou09jC/251/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 178.950432][ T8715] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 179.141290][ T8723] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 179.257266][ T8730] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 179.302218][ T8734] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 179.317838][ T8734] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 179.398950][ T8737] bond0: entered allmulticast mode [ 179.404127][ T8737] bond_slave_0: entered allmulticast mode [ 179.430473][ T8737] bond_slave_1: entered allmulticast mode [ 179.536855][ T8740] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 179.592799][ T8743] : renamed from bond0 [ 179.610234][ T8750] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.936898][ T8766] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 180.105848][ T8773] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 180.143835][ T8773] netlink: 'syz-executor.3': attribute type 20 has an invalid length. [ 180.173756][ T8773] IPv6: NLM_F_CREATE should be specified when creating new route [ 180.203619][ T8776] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 180.360917][ T8785] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 180.490809][ T8793] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 180.797004][ T8802] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 181.094426][ T8822] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 181.281862][ T8829] xt_hashlimit: max too large, truncated to 1048576 [ 181.286666][ T8831] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 181.310335][ T8829] xt_hashlimit: overflow, try lower: 0/0 [ 181.491517][ T8846] Unknown options in mask 1f4 [ 181.627998][ T29] audit: type=1804 audit(1717257071.745:3): pid=8856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2793389994/syzkaller.ou09jC/262/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 181.684104][ T29] audit: type=1804 audit(1717257071.745:4): pid=8856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2793389994/syzkaller.ou09jC/262/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 181.713252][ T29] audit: type=1804 audit(1717257071.755:5): pid=8856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2793389994/syzkaller.ou09jC/262/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 181.748850][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 181.830886][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 181.841413][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 182.311520][ T8887] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 182.456167][ T8895] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 182.683632][ T8906] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 183.019871][ T8922] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 184.343366][ T8996] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 184.421520][ T9001] tipc: Enabling of bearer rejected, failed to enable media [ 184.518870][ T9008] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 0, id = 0 [ 184.683199][ T51] tipc: Subscription rejected, illegal request [ 184.710083][ T9015] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.751159][ T9015] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.773652][ T9015] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 184.812651][ T9025] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 185.135550][ T9036] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 185.410162][ T9045] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! [ 185.436469][ T9043] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 185.485587][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 185.642144][ T9059] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 185.664584][ T9059] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 185.817897][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.859699][ T9069] vlan2: entered promiscuous mode [ 185.864803][ T9069] batadv0: entered promiscuous mode [ 185.881511][ T9069] batadv0: left promiscuous mode [ 185.918449][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 186.308909][ T9091] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 186.487848][ T29] audit: type=1804 audit(1717257076.605:6): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir522054759/syzkaller.YmLcNI/64/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 186.561298][ T29] audit: type=1804 audit(1717257076.645:7): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir522054759/syzkaller.YmLcNI/64/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 186.592046][ T29] audit: type=1804 audit(1717257076.655:8): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir522054759/syzkaller.YmLcNI/64/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 186.788538][ T9099] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 186.806593][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 186.825415][ T9111] netlink: 492 bytes leftover after parsing attributes in process `syz-executor.0'. [ 187.021697][ T9122] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 187.696952][ T9141] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 187.732639][ T9143] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 187.757159][ T51] tipc: Subscription rejected, illegal request [ 187.803826][ T9145] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 187.849325][ T9145] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 187.885898][ T9152] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 187.897112][ T9145] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 187.982182][ T9157] netlink: 492 bytes leftover after parsing attributes in process `syz-executor.3'. [ 188.261233][ T9171] team0: Port device batadv0 removed [ 188.368806][ T9177] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 188.417761][ T9177] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 188.450033][ T9177] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 188.515184][ T9177] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 188.532791][ T9191] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 188.581719][ T9191] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.4'. [ 188.831134][ T9205] bond_slave_1: entered promiscuous mode [ 188.844375][ T9205] macsec1: entered promiscuous mode [ 188.859545][ T9205] bond0: entered promiscuous mode [ 188.872271][ T9205] bond_slave_0: entered promiscuous mode [ 188.881717][ T9205] macsec1: entered allmulticast mode [ 188.888008][ T9205] bond0: entered allmulticast mode [ 188.903869][ T9205] bond_slave_0: entered allmulticast mode [ 188.925679][ T9205] bond_slave_1: entered allmulticast mode [ 188.947335][ T9205] bond0: left allmulticast mode [ 188.952736][ T9205] bond_slave_0: left allmulticast mode [ 188.965968][ T9205] bond_slave_1: left allmulticast mode [ 188.972809][ T9205] bond0: left promiscuous mode [ 188.985801][ T9205] bond_slave_0: left promiscuous mode [ 188.994683][ T9205] bond_slave_1: left promiscuous mode [ 189.119677][ T9223] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 189.410104][ T9245] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 189.430632][ T9245] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 189.538080][ T9254] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 189.984214][ T9275] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 190.395455][ T9299] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 190.904669][ T9322] validate_nla: 1 callbacks suppressed [ 190.904693][ T9322] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 191.095570][ T9330] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 191.506007][ T9351] xt_nfacct: accounting object `syz1' does not exists [ 191.710534][ T9362] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 191.873458][ T9371] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 192.546993][ T9400] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 192.777204][ T9409] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 193.462457][ T9440] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 193.761085][ T9446] __nla_validate_parse: 22 callbacks suppressed [ 193.761108][ T9446] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'. [ 193.790915][ T9446] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 193.980684][ T9458] hsr0: entered promiscuous mode [ 194.165331][ T9462] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 194.190872][ T9462] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 194.212046][ T9464] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 194.257177][ T9462] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 194.595458][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.606842][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.804561][ T9489] Bluetooth: MGMT ver 1.22 [ 195.385003][ T3831] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.404242][ T4488] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 195.415331][ T4488] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 195.425269][ T4488] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 195.434738][ T4488] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 195.445129][ T4488] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 195.452943][ T4488] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 195.562798][ T3831] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.825251][ T3831] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.943785][ T3831] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.099098][ T9551] validate_nla: 1 callbacks suppressed [ 196.099118][ T9551] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 196.302437][ T29] audit: type=1107 audit(1717257086.425:9): pid=9558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 196.360760][ T3831] bridge_slave_1: left allmulticast mode [ 196.366466][ T3831] bridge_slave_1: left promiscuous mode [ 196.402020][ T3831] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.448825][ T3831] bridge_slave_0: left allmulticast mode [ 196.454544][ T3831] bridge_slave_0: left promiscuous mode [ 196.484039][ T3831] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.670992][ T5126] Bluetooth: hci2: command 0x0406 tx timeout [ 196.677280][ T4488] Bluetooth: hci3: command 0x0406 tx timeout [ 197.082243][ T3831]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.092691][ T3831] bond_slave_0: left allmulticast mode [ 197.104389][ T3831]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.116379][ T3831] bond_slave_1: left allmulticast mode [ 197.125850][ T3831]  (unregistering): Released all slaves [ 197.255038][ T9582] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 197.351579][ T9586] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 197.385776][ T9586] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 197.405799][ T9589] vxcan0: tx drop: invalid sa for name 0x0000000000000004 [ 197.451437][ T9511] chnl_net:caif_netlink_parms(): no params data found [ 197.558753][ T5116] Bluetooth: hci1: command tx timeout [ 197.717633][ T9602] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 197.725957][ T9602] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 197.753336][ T9602] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 197.773332][ T9598] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 197.798960][ T9608] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 197.903438][ T9608] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 197.916516][ T9612] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 197.941006][ T9607] bridge0: port 2(team0) entered blocking state [ 197.962175][ T9607] bridge0: port 2(team0) entered disabled state [ 197.981550][ T9607] team0: entered allmulticast mode [ 198.001794][ T9607] team_slave_1: entered allmulticast mode [ 198.013357][ T9607] batadv0: entered allmulticast mode [ 198.029137][ T9607] team0: entered promiscuous mode [ 198.034668][ T9607] team_slave_1: entered promiscuous mode [ 198.041399][ T9607] batadv0: entered promiscuous mode [ 198.051365][ T9607] bridge0: port 2(team0) entered blocking state [ 198.058161][ T9607] bridge0: port 2(team0) entered forwarding state [ 198.073618][ T3831] hsr_slave_0: left promiscuous mode [ 198.089106][ T3831] hsr_slave_1: left promiscuous mode [ 198.096464][ T3831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.104154][ T3831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.112888][ T3831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.120537][ T3831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.144855][ T35] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 198.154794][ T35] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 198.172617][ T3831] veth1_macvtap: left promiscuous mode [ 198.179089][ T3831] veth0_macvtap: left promiscuous mode [ 198.184936][ T3831] veth1_vlan: left promiscuous mode [ 198.192287][ T3831] veth0_vlan: left promiscuous mode [ 198.784795][ T3831] team0 (unregistering): Port device team_slave_1 removed [ 198.832231][ T3831] team0 (unregistering): Port device team_slave_0 removed [ 199.145818][ T3831] team0 (unregistering): Port device batadv0 removed [ 199.385475][ T9615] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 199.406869][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 199.431080][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 199.520990][ T9511] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.538407][ T9511] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.549920][ T9511] bridge_slave_0: entered allmulticast mode [ 199.558031][ T9511] bridge_slave_0: entered promiscuous mode [ 199.569335][ T9511] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.581857][ T9511] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.589946][ T9511] bridge_slave_1: entered allmulticast mode [ 199.609710][ T9511] bridge_slave_1: entered promiscuous mode [ 199.621849][ T9632] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 199.627775][ T5116] Bluetooth: hci1: command tx timeout [ 199.642042][ T9635] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 199.664680][ T9635] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 199.848126][ T9511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.891514][ T9511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.036028][ T9511] team0: Port device team_slave_0 added [ 200.093188][ T9511] team0: Port device team_slave_1 added [ 200.238580][ T9511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.250244][ T9511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.279037][ T9511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.311051][ T9511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.319695][ T9511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.378991][ T9511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.554157][ T9511] hsr_slave_0: entered promiscuous mode [ 200.581523][ T9511] hsr_slave_1: entered promiscuous mode [ 200.644285][ T9669] ipvlan0: entered allmulticast mode [ 200.652211][ T9669] veth0_vlan: entered allmulticast mode [ 200.674789][ T9673] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 201.372111][ T9705] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 201.392921][ T9705] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 201.421052][ T9707] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 201.435387][ T9711] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 201.448656][ T9707] netlink: 'syz-executor.1': attribute type 24 has an invalid length. [ 201.592870][ T9719] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 201.593252][ T9720] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 201.709183][ T5116] Bluetooth: hci1: command tx timeout [ 201.737624][ T9719] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 201.758849][ T9720] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 201.832450][ T9720] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 201.847702][ T9720] netlink: 68316 bytes leftover after parsing attributes in process `syz-executor.2'. [ 201.966610][ T9732] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 202.090191][ T9511] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 202.111031][ T9511] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 202.129166][ T9511] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 202.152126][ T9511] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 202.373116][ T9749] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 202.462551][ T9511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.535395][ T9511] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.569950][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.577280][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.635787][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.643056][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.770245][ T9761] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 202.776623][ T9511] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.867967][ T9771] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 202.961524][ T9743] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 203.006031][ T9761] Bluetooth: MGMT ver 1.22 [ 203.238956][ T9511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.388101][ T9511] veth0_vlan: entered promiscuous mode [ 203.409398][ T9511] veth1_vlan: entered promiscuous mode [ 203.479185][ T9794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.505770][ T9511] veth0_macvtap: entered promiscuous mode [ 203.545610][ T9511] veth1_macvtap: entered promiscuous mode [ 203.637105][ T9511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.658729][ T9511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.678659][ T9511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.704440][ T9511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.727726][ T9511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.753073][ T9511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.769865][ T9511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.787776][ T5116] Bluetooth: hci1: command tx timeout [ 203.810863][ T9511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.843555][ T9511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.909717][ T9511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.934451][ T9511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.951211][ T9511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.975002][ T9511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.994712][ T9511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.026341][ T9511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.039973][ T9511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.073103][ T9511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.106523][ T9511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.137464][ T9805] bond_slave_1: entered promiscuous mode [ 204.155349][ T9805] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 204.172128][ T9805] bond_slave_1: left promiscuous mode [ 204.238977][ T9817] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 204.271781][ T9511] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.285585][ T9511] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.302623][ T9511] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.312950][ T9511] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.473991][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.487406][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.538475][ T5218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.554063][ T5218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.921659][ T9840] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 204.948820][ T9838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.967258][ T9838] __nla_validate_parse: 1 callbacks suppressed [ 204.967283][ T9838] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.0'. [ 205.018660][ T9842] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.3'. [ 205.350572][ T9853] team0: Port device batadv0 removed [ 205.841699][ T9876] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 206.243064][ T9888] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.3'. [ 206.698581][ T9896] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 206.747297][ T9898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.782590][ T9898] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.1'. [ 206.841565][ T9901] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 207.161312][ T9917] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 207.420983][ T9926] validate_nla: 2 callbacks suppressed [ 207.421005][ T9926] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 207.494305][ T9932] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.2'. [ 207.532434][ T9933] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 207.685139][ T9938] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 208.578999][ T9941] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 209.446668][T10017] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 209.905346][T10044] xt_recent: hitcount (134217728) is larger than allowed maximum (255) [ 210.188871][ T51] wlan1: Trigger new scan to find an IBSS to join [ 210.210111][T10055] ebt_among: dst integrity fail: 102 [ 210.218654][T10057] __nla_validate_parse: 7 callbacks suppressed [ 210.218675][T10057] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 210.592390][T10077] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 210.648034][T10077] ip6gretap0: entered promiscuous mode [ 210.666448][T10077] batadv_slave_0: entered promiscuous mode [ 210.685727][T10077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.703357][T10077] Cannot create hsr debugfs directory [ 210.974550][T10091] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 211.107978][T10094] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 211.502993][T10113] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 211.642505][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 211.816656][T10131] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.825577][T10131] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.834769][T10131] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.843586][T10131] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.889888][T10138] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.0'. [ 211.937672][T10138] caif0 speed is unknown, defaulting to 1000 [ 212.004051][T10140] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 212.016997][T10138] caif0 speed is unknown, defaulting to 1000 [ 212.051225][T10138] caif0 speed is unknown, defaulting to 1000 [ 212.366459][T10158] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 212.677055][ T9] caif0 speed is unknown, defaulting to 1000 [ 212.697684][T10138] infiniband syz1: set down [ 212.711861][T10138] infiniband syz1: added caif0 [ 212.712834][T10180] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 212.913395][T10138] RDS/IB: syz1: added [ 212.922499][T10138] smc: adding ib device syz1 with port count 1 [ 212.939450][T10138] smc: ib device syz1 port 1 has pnetid [ 212.948412][ T9] caif0 speed is unknown, defaulting to 1000 [ 212.970149][T10138] caif0 speed is unknown, defaulting to 1000 [ 213.028917][T10194] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.1'. [ 213.150419][ T62] wlan1: Trigger new scan to find an IBSS to join [ 213.264157][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 213.294893][T10201] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 213.449553][T10138] caif0 speed is unknown, defaulting to 1000 [ 213.605502][ T29] audit: type=1804 audit(1717257103.725:10): pid=10217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3036976799/syzkaller.6nqlBq/104/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 213.687455][T10218] dccp_v4_rcv: dropped packet with invalid checksum [ 213.752236][ T29] audit: type=1804 audit(1717257103.875:11): pid=10217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3036976799/syzkaller.6nqlBq/104/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 213.925532][T10138] caif0 speed is unknown, defaulting to 1000 [ 214.377662][T10235] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 214.405510][T10235] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 214.498815][T10253] x_tables: duplicate underflow at hook 4 [ 214.546401][T10138] caif0 speed is unknown, defaulting to 1000 [ 214.593467][T10260] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 214.963445][T10281] tun0: tun_chr_ioctl cmd 1075340134 [ 215.125842][T10138] caif0 speed is unknown, defaulting to 1000 [ 215.455975][T10293] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 215.679079][T10305] __nla_validate_parse: 12 callbacks suppressed [ 215.679102][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 215.789681][T10313] xt_TCPMSS: Only works on TCP SYN packets [ 215.844131][T10313] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 216.057820][T10314] team1: Mode "" not found [ 216.189030][ T12] wlan1: Trigger new scan to find an IBSS to join [ 216.265556][T10341] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. [ 216.296610][T10341] rdma_rxe: rxe_newlink: failed to add caif0 [ 216.334183][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 216.668731][T10363] No such timeout policy "syz1" [ 217.155155][ T12] wlan1: Creating new IBSS network, BSSID e2:1b:43:ad:5c:8c [ 217.535913][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 217.573717][T10402] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 218.070764][T10434] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 218.140992][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 218.262777][T10447] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 218.296220][T10447] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 218.307871][T10447] netlink: 115864 bytes leftover after parsing attributes in process `syz-executor.4'. [ 218.320046][T10448] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 218.359541][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 218.405832][T10450] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 218.818924][T10474] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 219.140511][T10486] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 219.311832][T10498] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 219.334276][T10498] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 219.350309][T10503] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 219.398213][T10503] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 219.531727][T10510] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 220.441375][T10557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.691959][T10624] caif0 speed is unknown, defaulting to 1000 [ 221.854530][T10641] caif0 speed is unknown, defaulting to 1000 [ 222.782267][T10688] x_tables: duplicate underflow at hook 2 [ 223.562322][T10720] __nla_validate_parse: 3 callbacks suppressed [ 223.562344][T10720] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 224.016667][T10745] Cannot find add_set index 0 as target [ 224.058379][T10749] Cannot find add_set index 0 as target [ 224.134091][T10753] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'. [ 224.163389][T10758] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 224.812457][T10799] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 225.893758][T10844] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 227.078125][T10889] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 227.173493][T10893] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 227.216517][T10893] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 227.690836][T10917] validate_nla: 6 callbacks suppressed [ 227.690858][T10917] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 230.077555][T10948] netlink: 'syz-executor.4': attribute type 19 has an invalid length. [ 230.503336][T10979] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 230.524363][T10975] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.0'. [ 230.581967][T10982] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 230.753464][T10989] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 230.896412][T10998] Cannot find set identified by id 0 to match [ 231.144032][T11010] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 231.154955][T11010] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 231.693287][T11043] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 231.753980][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 231.810451][T11046] syz-executor.2[11046] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 231.810616][T11046] syz-executor.2[11046] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.285414][T11084] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 232.439693][T11089] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 232.829051][ T5116] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 232.853175][T11119] xt_TCPMSS: Only works on TCP SYN packets [ 232.957692][T11118] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 233.391572][T11150] caif0 speed is unknown, defaulting to 1000 [ 233.647281][T11169] xt_TCPMSS: Only works on TCP SYN packets [ 234.172176][T11202] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 234.181928][T11202] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 234.199032][T11202] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.208111][T11202] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.216858][T11202] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.226493][T11202] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.238039][T11202] vxlan0: entered promiscuous mode [ 234.822294][T11231] ip6_tunnel: non-ECT from fe80:0040:0000:0000:0000:0000:0000:00aa with DS=0xe [ 235.067596][ T5116] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 235.078157][T11239] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 235.120131][T11239] bond0: (slave bond_slave_0): Releasing backup interface [ 235.691035][T11270] __nla_validate_parse: 10 callbacks suppressed [ 235.691060][T11270] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 235.750742][T11270] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 235.770900][T11275] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.3'. [ 235.780540][T11270] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 235.820360][T11270] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.829273][T11270] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.838091][T11270] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.846925][T11270] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.885600][T11270] vxlan0: entered promiscuous mode [ 239.517951][T11280] Êü: entered promiscuous mode [ 239.575102][T11287] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 239.918552][T11303] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 240.028863][T11300] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 240.170869][T11312] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 240.201302][T11312] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 240.240649][T11312] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 240.470716][T11330] x_tables: duplicate underflow at hook 2 [ 241.098231][ T29] audit: type=1800 audit(1717257131.205:12): pid=11344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1941 res=0 errno=0 [ 241.180538][T11344] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 241.280680][T11354] SET target dimension over the limit! [ 242.111499][ T5116] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 243.331565][T11334] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 243.342802][T11377] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744071578845184) [ 243.358537][T11377] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 243.486367][T11379] ip6gretap0: left promiscuous mode [ 243.503895][T11379] batadv_slave_0: left promiscuous mode [ 243.628119][T11394] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 243.864709][T11405] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 244.155143][T11412] dvmrp0: entered allmulticast mode [ 244.294532][T11415] dummy0: entered promiscuous mode [ 244.302098][ T29] audit: type=1800 audit(1717257134.425:13): pid=11415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 244.327010][T11413] dummy0: left promiscuous mode [ 244.746281][T11443] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 244.955653][T11452] x_tables: ip_tables: ah match: only valid for protocol 51 [ 245.076238][T11459] x_tables: ip_tables: ah match: only valid for protocol 51 [ 245.322864][T11463] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.480817][T11463] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.588287][T11463] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.594631][T11485] xt_CT: You must specify a L4 protocol and not use inversions on it [ 245.656817][T11484] bond0: entered promiscuous mode [ 245.673187][T11484] bond_slave_0: entered promiscuous mode [ 245.680008][T11484] bond_slave_1: entered promiscuous mode [ 245.695013][T11484] bond0: entered allmulticast mode [ 245.706130][T11484] bond_slave_0: entered allmulticast mode [ 245.719998][T11484] bond_slave_1: entered allmulticast mode [ 245.820977][T11463] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.912737][T11495] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 246.046071][T11497] dvmrp0: entered allmulticast mode [ 246.086403][T11463] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.192139][T11463] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.269261][T11463] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.334911][T11463] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.655487][T11513] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 246.921532][T11525] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 246.954132][T11523] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 246.968864][T11525] vlan3: entered promiscuous mode [ 246.991089][T11523] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 247.224424][ T3831] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 247.224753][T11534] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 247.283995][T11540] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 247.565876][T11546] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 247.581368][T11555] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 247.734866][T11561] 8021q: VLANs not supported on lo [ 248.074969][T11581] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 248.121943][T11580] veth1_macvtap: left promiscuous mode [ 248.158956][T11580] macsec0: entered promiscuous mode [ 248.202982][T11580] macsec0: entered allmulticast mode [ 248.274663][T11586] veth1_macvtap: entered promiscuous mode [ 248.297483][T11586] veth1_macvtap: entered allmulticast mode [ 248.317864][T11586] macsec0: left promiscuous mode [ 248.331489][T11586] macsec0: left allmulticast mode [ 248.343636][T11586] veth1_macvtap: left allmulticast mode [ 249.024608][T11613] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 249.408954][T11629] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 249.495888][T11629] bond1: entered promiscuous mode [ 249.501434][T11630] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 249.818820][T11659] tipc: Enabling of bearer rejected, failed to enable media [ 250.084372][T11670] team0: Port device macvlan2 added [ 250.127656][T11673] team0: Port device macvlan3 added [ 251.509370][T11716] À: renamed from syztnl0 [ 251.978975][T11753] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 252.695478][T11782] veth1_macvtap: left promiscuous mode [ 252.711109][T11782] macsec0: entered allmulticast mode [ 252.749746][T11782] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 252.996649][T11797] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 253.092870][T11801] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 253.216521][T11806] syzkaller0: entered promiscuous mode [ 253.224151][T11806] syzkaller0: entered allmulticast mode [ 253.548480][T11822] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 253.734538][ T45] IPVS: starting estimator thread 0... [ 253.771405][T11831] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20004 [ 253.858172][T11832] IPVS: using max 18 ests per chain, 43200 per kthread [ 253.864814][T11836] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 253.911203][T11843] x_tables: duplicate entry at hook 1 [ 254.124227][T11850] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 254.214395][T11850] bond2: entered promiscuous mode [ 254.237098][T11856] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 254.371291][T11850] bond2: (slave vti1): The slave device specified does not support setting the MAC address [ 254.384141][T11850] bond2: (slave vti1): Error -95 calling set_mac_address [ 254.440320][T11866] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 254.469448][T11873] : renamed from bridge_slave_0 (while UP) [ 254.576681][T11869] x_tables: duplicate underflow at hook 3 [ 254.666802][T11879] tipc: Started in network mode [ 254.683049][T11879] tipc: Node identity ffff000000a0ffffff00000000000001, cluster identity 4711 [ 254.715692][T11879] tipc: Enabling of bearer rejected, failed to enable media [ 255.109345][T11893] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 255.600276][T11911] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 255.798393][T11918] netlink: 'syz-executor.4': attribute type 50 has an invalid length. [ 255.972282][T11926] EXT4-fs warning (device sda1): verify_group_input:162: Bad blocks count 0 [ 256.038661][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.045103][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.422501][T11939] tun0: tun_chr_ioctl cmd 1074025673 [ 256.503142][T11948] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 256.557886][T11947] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 256.769888][T11956] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 256.910618][T11972] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 257.166187][T11991] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 257.325394][T12002] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 257.341448][T12002] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 257.418742][T12002] IPv6: sit1: Disabled Multicast RS [ 257.425016][T12002] sit1: entered allmulticast mode [ 257.513683][T12010] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 257.525406][T12010] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.533414][T12010] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.560451][T12010] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.567904][T12010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.576574][T12010] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.584118][T12010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.601734][T12010] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 257.672019][T12016] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 257.722426][T12018] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 257.898001][T12027] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 258.062346][T12031] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 258.094122][T12033] syzkaller0: entered promiscuous mode [ 258.100099][T12033] syzkaller0: entered allmulticast mode [ 258.479818][T12043] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 260.121234][T12037] validate_nla: 1 callbacks suppressed [ 260.121257][T12037] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 260.324181][T12054] bond0: option arp_interval: invalid value (18446744071578845184) [ 260.355980][T12054] bond0: option arp_interval: allowed values 0 - 2147483647 [ 260.413222][T12061] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 260.529859][T12070] netlink: 136 bytes leftover after parsing attributes in process `syz-executor.2'. [ 260.553244][T12061] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 260.580644][T12068] caif0 speed is unknown, defaulting to 1000 [ 260.661150][T12065] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 260.749204][T12074] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 261.493131][T12092] caif0 speed is unknown, defaulting to 1000 [ 262.259955][T12111] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 262.467144][T12114] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 262.684924][T12119] netlink: 136 bytes leftover after parsing attributes in process `syz-executor.3'. [ 263.179791][T12138] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 263.207175][T12138] geneve0: entered promiscuous mode [ 263.247978][T12142] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 263.256436][T12142] netlink: 113592 bytes leftover after parsing attributes in process `syz-executor.3'. [ 263.270207][T12138] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 263.283379][T12141] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 263.421681][T12148] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 263.562411][T12151] caif0 speed is unknown, defaulting to 1000 [ 263.579527][T12158] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 263.689668][T12123] ------------[ cut here ]------------ [ 263.695933][T12123] refcount_t: decrement hit 0; leaking memory. [ 263.712473][T12123] WARNING: CPU: 1 PID: 12123 at lib/refcount.c:31 refcount_warn_saturate+0xfa/0x1d0 [ 263.722428][T12123] Modules linked in: [ 263.726408][T12123] CPU: 1 PID: 12123 Comm: syz-executor.1 Not tainted 6.10.0-rc1-syzkaller-00205-ge19de2064fdf #0 [ 263.729007][T12152] syzkaller0: entered promiscuous mode [ 263.737386][T12123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 263.753474][T12123] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 263.759684][T12123] Code: b2 00 00 00 e8 57 c3 e6 fc 5b 5d c3 cc cc cc cc e8 4b c3 e6 fc c6 05 6a 6e e8 0a 01 90 48 c7 c7 a0 a0 1f 8c e8 c7 f1 a8 fc 90 <0f> 0b 90 90 eb d9 e8 2b c3 e6 fc c6 05 47 6e e8 0a 01 90 48 c7 c7 [ 263.770078][T12152] syzkaller0: entered allmulticast mode 2024/06/01 15:52:33 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 263.779691][T12123] RSP: 0018:ffffc9000dd3fc48 EFLAGS: 00010246 [ 263.791652][T12123] RAX: 46d71456d92ffb00 RBX: ffff88805beb6664 RCX: ffff88801b6e5a00 [ 263.799851][T12123] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 263.808112][T12123] RBP: 0000000000000004 R08: ffffffff815847a2 R09: fffffbfff1c3998c [ 263.816746][T12123] R10: dffffc0000000000 R11: fffffbfff1c3998c R12: ffff88805beb6620 [ 263.825614][T12123] R13: 0000000000000000 R14: ffff88805beb6664 R15: dffffc0000000000 [ 263.833737][T12123] FS: 0000555562368480(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 263.842824][T12123] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.849748][T12123] CR2: 00007fb8e5ce66e4 CR3: 000000006d6d8000 CR4: 00000000003506f0 [ 263.857866][T12123] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 263.866181][T12123] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 263.874416][T12123] Call Trace: [ 263.877847][T12123] [ 263.880829][T12123] ? __warn+0x163/0x4e0 [ 263.885044][T12123] ? refcount_warn_saturate+0xfa/0x1d0 [ 263.890663][T12123] ? report_bug+0x2b3/0x500 [ 263.895319][T12123] ? refcount_warn_saturate+0xfa/0x1d0 [ 263.901230][T12123] ? handle_bug+0x3e/0x70 [ 263.905638][T12123] ? exc_invalid_op+0x1a/0x50 [ 263.910459][T12123] ? asm_exc_invalid_op+0x1a/0x20 [ 263.916352][T12123] ? __warn_printk+0x292/0x360 [ 263.921631][T12123] ? refcount_warn_saturate+0xfa/0x1d0 [ 263.927260][T12123] ? refcount_warn_saturate+0xf9/0x1d0 [ 263.932888][T12123] ref_tracker_free+0x6af/0x7e0 [ 263.938184][T12123] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 263.944232][T12123] ? __pfx_ref_tracker_free+0x10/0x10 [ 263.949740][T12123] ? ax25_destroy_socket+0x549/0x5b0 [ 263.955178][T12123] ax25_release+0x368/0x950 [ 263.959842][T12123] sock_close+0xbc/0x240 [ 263.964318][T12123] ? __pfx_sock_close+0x10/0x10 [ 263.969421][T12123] __fput+0x406/0x8b0 [ 263.973479][T12123] __x64_sys_close+0x7f/0x110 [ 263.978304][T12123] do_syscall_64+0xf3/0x230 [ 263.982871][T12123] ? clear_bhb_loop+0x35/0x90 [ 263.987737][T12123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.993695][T12123] RIP: 0033:0x7fd9ef67bdda [ 263.998247][T12123] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24 [ 264.018701][T12123] RSP: 002b:00007ffc28fb5cb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 264.027293][T12123] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007fd9ef67bdda [ 264.035782][T12123] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 264.044037][T12123] RBP: 00007fd9ef7b59a0 R08: 00000000819d5dff R09: 7fffffffffffffff [ 264.052156][T12123] R10: 000000000000005f R11: 0000000000000293 R12: 00000000000405ec [ 264.060264][T12123] R13: 00007fd9ef7b407c R14: 0000000000000032 R15: 00007fd9ef7b59a0 [ 264.068630][T12123] [ 264.071690][T12123] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 264.079090][T12123] CPU: 1 PID: 12123 Comm: syz-executor.1 Not tainted 6.10.0-rc1-syzkaller-00205-ge19de2064fdf #0 [ 264.089734][T12123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 264.099930][T12123] Call Trace: [ 264.103408][T12123] [ 264.106464][T12123] dump_stack_lvl+0x241/0x360 [ 264.111193][T12123] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.116439][T12123] ? __pfx__printk+0x10/0x10 [ 264.121134][T12123] ? vscnprintf+0x5d/0x90 [ 264.125517][T12123] panic+0x349/0x860 [ 264.129457][T12123] ? __warn+0x172/0x4e0 [ 264.133671][T12123] ? __pfx_panic+0x10/0x10 [ 264.138238][T12123] __warn+0x346/0x4e0 [ 264.142333][T12123] ? refcount_warn_saturate+0xfa/0x1d0 [ 264.148102][T12123] report_bug+0x2b3/0x500 [ 264.152569][T12123] ? refcount_warn_saturate+0xfa/0x1d0 [ 264.158072][T12123] handle_bug+0x3e/0x70 [ 264.162283][T12123] exc_invalid_op+0x1a/0x50 [ 264.167259][T12123] asm_exc_invalid_op+0x1a/0x20 [ 264.172226][T12123] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 264.178665][T12123] Code: b2 00 00 00 e8 57 c3 e6 fc 5b 5d c3 cc cc cc cc e8 4b c3 e6 fc c6 05 6a 6e e8 0a 01 90 48 c7 c7 a0 a0 1f 8c e8 c7 f1 a8 fc 90 <0f> 0b 90 90 eb d9 e8 2b c3 e6 fc c6 05 47 6e e8 0a 01 90 48 c7 c7 [ 264.199044][T12123] RSP: 0018:ffffc9000dd3fc48 EFLAGS: 00010246 [ 264.205432][T12123] RAX: 46d71456d92ffb00 RBX: ffff88805beb6664 RCX: ffff88801b6e5a00 [ 264.213523][T12123] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 264.221683][T12123] RBP: 0000000000000004 R08: ffffffff815847a2 R09: fffffbfff1c3998c [ 264.229683][T12123] R10: dffffc0000000000 R11: fffffbfff1c3998c R12: ffff88805beb6620 [ 264.237773][T12123] R13: 0000000000000000 R14: ffff88805beb6664 R15: dffffc0000000000 [ 264.246050][T12123] ? __warn_printk+0x292/0x360 [ 264.250858][T12123] ? refcount_warn_saturate+0xf9/0x1d0 [ 264.256345][T12123] ref_tracker_free+0x6af/0x7e0 [ 264.261222][T12123] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 264.267223][T12123] ? __pfx_ref_tracker_free+0x10/0x10 [ 264.272626][T12123] ? ax25_destroy_socket+0x549/0x5b0 [ 264.278150][T12123] ax25_release+0x368/0x950 [ 264.282881][T12123] sock_close+0xbc/0x240 [ 264.287487][T12123] ? __pfx_sock_close+0x10/0x10 [ 264.292373][T12123] __fput+0x406/0x8b0 [ 264.296401][T12123] __x64_sys_close+0x7f/0x110 [ 264.301094][T12123] do_syscall_64+0xf3/0x230 [ 264.305706][T12123] ? clear_bhb_loop+0x35/0x90 [ 264.310411][T12123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.316504][T12123] RIP: 0033:0x7fd9ef67bdda [ 264.321030][T12123] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24 [ 264.341108][T12123] RSP: 002b:00007ffc28fb5cb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 264.349923][T12123] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007fd9ef67bdda [ 264.358102][T12123] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 264.366092][T12123] RBP: 00007fd9ef7b59a0 R08: 00000000819d5dff R09: 7fffffffffffffff [ 264.374175][T12123] R10: 000000000000005f R11: 0000000000000293 R12: 00000000000405ec [ 264.382267][T12123] R13: 00007fd9ef7b407c R14: 0000000000000032 R15: 00007fd9ef7b59a0 [ 264.390277][T12123] [ 264.393529][T12123] Kernel Offset: disabled [ 264.397934][T12123] Rebooting in 86400 seconds..