last executing test programs: 8.875504456s ago: executing program 0 (id=3206): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000740)=""/127, 0x7f}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f00000010c0)=@raw=[@generic={0xbf, 0x6, 0x1}, @generic={0xb7, 0x2}, @generic={0x7b, 0xa, 0x2, 0xfff8}, @generic={0x7b, 0xa, 0x2, 0xfff0}, @generic={0x7b, 0xa, 0x2, 0xffe8}, @generic={0x7b, 0xa, 0x2, 0xffe0}, @generic={0x7b, 0xa, 0x2, 0xffd8}, @generic={0x7b, 0xa, 0x2, 0xffd0}, @generic={0x7b, 0xa, 0x2, 0xffc8}, @generic={0x7b, 0xa, 0x2, 0xffc0}, @generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x73, 0xa, 0x2, 0xfbc0}, @generic={0xb7, 0x2, 0x0, 0x0, 0x1}, @generic={0x63, 0xa, 0x2, 0xffc4}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x63, 0xa, 0x2, 0xffcc}, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0x63, 0xa, 0x2, 0xffd0}, @generic={0xbf, 0x1, 0x6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0xb7, 0x0, 0x0, 0x0, 0x2}, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r2, 0x0, 0x36, 0x0, &(0x7f0000002280)="001122334455001122334456080045000028000000004006f8ce0a0000010a00000200500050000000000000000050022000b82b0000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r3, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc0c2, '\x00', 0x0, r3, 0x3, 0x4}, 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc0c2, '\x00', 0x0, r3, 0x3, 0x4}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000004540)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9a83c9", 0x4, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be}}}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r4, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0xdbd}}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x3}}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x11, 0x13, [{0x16}, {0x1, 0x1}, {0x36}, {0x36}, {0x4f}, {0x32}, {0x6, 0x1}, {0x5, 0x1}, {0x60}, {0x1b}, {0x6c}, {0x0, 0x1}, {0x12}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4094) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x50}}, 0x0) socket(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0) ioctl$XFS_IOC_BULKSTAT(0xffffffffffffffff, 0x8040587f, &(0x7f00000007c0)={{0x6, 0x0, 0x2, 0x7fff, 0x40}, &(0x7f0000000400)=[{}, {}, {}, {}, {}]}) (async) ioctl$XFS_IOC_BULKSTAT(0xffffffffffffffff, 0x8040587f, &(0x7f00000007c0)={{0x6, 0x0, 0x2, 0x7fff, 0x40}, &(0x7f0000000400)=[{}, {}, {}, {}, {}]}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffea7, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffea7, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}]}, 0x48}}, 0x0) 8.547686499s ago: executing program 0 (id=3207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000040)) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x3, 0x3, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x3}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x7}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xf}]}, 0x50}, 0x1, 0x0, 0x0, 0xb7f21abf07cd8ee0}, 0x20004080) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000004c0)={0x1, 0x2, "ff9edf", 0x6c, 0x2}) write(0xca, &(0x7f0000000000)="05a30aae82", 0x5) (async) write(0xca, &(0x7f0000000000)="05a30aae82", 0x5) close(r2) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000080)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x3c, 0xb, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf6}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x11c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x3c, 0xb, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf6}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x11c}}, 0x0) 8.221156077s ago: executing program 0 (id=3209): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=0xffffffffffffffff, 0x26, 0x1, 0xffff, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, @void}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r3, r0, 0x34, 0x2010, 0xffffffffffffffff, @value=r4, @void, @void, @void, r2}, 0x20) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r5) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc73a}, [@jmp={0x5, 0x0, 0x0, 0xb, 0x9, 0x30, 0xfffffffffffffff1}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xbd}, @jmp={0x5, 0x1, 0x1, 0x1, 0x5, 0x50, 0x10}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x58, &(0x7f0000000340)=""/88, 0x0, 0x24, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x1, 0x3, 0x401}, 0x10, 0xac4f, r0, 0x0, &(0x7f0000000440)=[r1], 0x0, 0x10, 0xf2e3}, 0x94) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r7, 0x40049366, &(0x7f0000000540)=0x1) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r5) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x78, r8, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'rose0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cpu_online_t:s0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'ip6gre0\x00', 0x0, 0x2f, 0xd, 0x1, 0x6, 0x6, @mcast2, @local, 0x8, 0x8, 0x3ff, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'ip6tnl0\x00', r9, 0x4, 0x7f, 0x7, 0x2, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x43}, 0x1, 0x700, 0x95a, 0x7}}) setsockopt$RDS_FREE_MR(r6, 0x114, 0x3, &(0x7f0000000880)={{0x3, 0x3}, 0xd3}, 0x10) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) r12 = accept$packet(r6, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000900)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000a00)={'syztnl0\x00', &(0x7f0000000980)={'ip6tnl0\x00', r10, 0x2f, 0x7, 0x7, 0xfffffff7, 0x28, @mcast2, @private0, 0x7800, 0x40, 0x402, 0x38}}) sendto$packet(r12, &(0x7f0000000940), 0x0, 0x0, &(0x7f0000000a40)={0x11, 0x7, r13, 0x1, 0x8, 0x6, @local}, 0x14) listen(r11, 0xc) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000a80)=0x3, 0x4) syz_emit_ethernet(0xd1, &(0x7f0000000ac0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@mpls_mc={0x8848, {[{0x40}, {0x8, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x9}, {0xff000, 0x0, 0x1}, {0x1, 0x0, 0x1}], @generic="2bcb187e62b157e16abd4109381602012d7d2da7c493a4c6d0d74794fd02b74ac97ac5dc4623f67aed66b31b5b833982491280200937e64dae5a2f27f3925b4976930166a94bd953647b97dab3c1b309badb5f4c157757cbe6e4eac8959aea67baaa263818b32a1dcc9be47263de23b7b6073e5a6f83949a53d1c858f40dbec78cd7d4da64f3ab3608110f68b461b901d04d513578bcedacabea23d97a0519650aa939"}}}}, &(0x7f0000000bc0)={0x0, 0x4, [0x64e, 0xc12, 0x5a2, 0x104]}) write$tun(r6, &(0x7f0000000c00)={@val={0x0, 0x1c}, @val={0x2, 0x3, 0x1, 0x8, 0xbbed, 0x6}, @ipv6=@dccp_packet={0x3, 0x6, "eabfe7", 0x246, 0x21, 0xff, @loopback, @loopback, {[@hopopts={0x0, 0x15, '\x00', [@generic={0x5, 0x7e, "7b73209e46920b204516c07ba6fc3a9c2ec69818ae465b2fe7c4cde92b703c0112b35f0e0770bb2db0b5e28a5a4a09a031919880c98839db60339adc959acd3893e3891266bd6554e88c9a263ce8180551c867d19363283d789272af2cce192ec8108b8b9432d075de7a0eb390684fcc1c33d53965f9e902413eb1030493"}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0xd3}, @enc_lim={0x4, 0x1, 0xc}, @ra={0x5, 0x2, 0xffff}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, @jumbo={0xc2, 0x4, 0x1000}]}, @hopopts={0x2f, 0x19, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @pad1, @enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @enc_lim={0x4, 0x1, 0x6b}, @jumbo, @generic={0xd, 0x22, "1c9d95814662529d43227d2eab75a4fc85234099f4050a2d6cfef8a888c3c144ccaf"}, @generic={0x10, 0x7d, "7882d48538061f9eebb7c4f5bd7827817dbcb035509f2ff41646560aefd3ad95a531c06e3eb95d7cd9d4e3b7df242ba2493d75a58cd9b3dbab01ea9170c1ade2f50cbd8d6094dd591d14cd66b12e3bf015bd169cd9b85b824331e078a09444795699f464b3192fcb36b2cc4b84a0fc47a99703cb2ef0d3eadd78bf696d"}, @enc_lim={0x4, 0x1, 0xf}, @enc_lim]}], {{0x4e23, 0x4e24, 0x4, 0x1, 0x8, 0x0, 0x0, 0x5, 0x4, "8ff9df", 0x70, "ecfd59"}, "9ddebd53d683bea0d88aa8be55ec59427051d392f91c73c507b29cba2c2f5005279cc0e2073a9ce395d2997f282a04c5f6a4afa10734744d753cd0c53c27da36c3971c3b9dca86b0e3b707068f20e09da4e4bd289a5a297ee187c0ca56674f30cb7f3a6e62d0dda64456a7b1ada7e9f9980eaaf80f9d87f336b36398899684a29e0b1f2be06e06146fbcf4e79ecceb36b911a089c4433c09d3b47ba0af1fedacc7eeb69712f7"}}}}, 0x27c) r14 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000000e80)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000f80)=0xe8) r15 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000fc0)={0x0, 0x9}, &(0x7f0000001000)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r15, 0x84, 0x1a, &(0x7f0000001040)={r16, 0xe, "9033e5e65b95e44fe2c1e6d08ab6"}, &(0x7f0000001080)=0x16) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001200)={'syztnl2\x00', &(0x7f0000001180)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x3, 0x7, 0x18, @remote, @private0, 0x8000, 0x80, 0x0, 0x6}}) 8.111282151s ago: executing program 0 (id=3210): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000000070000ffff000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09200000000000b60901000000002066000000646c6c251801000020786c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fedbdf25190000000c00018008000100", @ANYRES32=r5], 0x20}}, 0x4000080) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000400) 7.917265419s ago: executing program 0 (id=3212): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200)=0xffffffffffffffff, 0x12) (async) sendfile(r2, r1, 0x0, 0xbdc4) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000180)=@add_del={0x2, &(0x7f0000000000)='ipvlan0\x00'}) (async) r5 = socket$unix(0x1, 0x1, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0xffe0}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc015}, 0x884) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @NHA_FDB={0x4}]}, 0x30}}, 0x0) 7.220820721s ago: executing program 0 (id=3220): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r2], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r2], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f00000007c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x35, 0x66, 0x0, 0x8d, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e24, 0x4e20, 0x21, 0x0, @opaque="3889fd9dda34895d0a742bc5a3ee0d8b0c024843e990582d85"}}}, 0x43) (async) write$tun(r1, &(0x7f00000007c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x35, 0x66, 0x0, 0x8d, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e24, 0x4e20, 0x21, 0x0, @opaque="3889fd9dda34895d0a742bc5a3ee0d8b0c024843e990582d85"}}}, 0x43) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 5.219395563s ago: executing program 2 (id=3241): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x800, 0x7}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0300010000000014000500fe8000000000000000000000000000bb08000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c000100000201010000020000000000000000000000000000000001"], 0x60}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x628, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote], 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffffff, 0xffffffff, 0xff000000], 0xffffff7f, 0x1, {0x4}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x688) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) (async) syz_emit_ethernet(0x1f, 0x0, 0x0) (async, rerun: 32) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0xc}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xbc, 0x19, 0x1, 0x4, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x3}}, [@tmpl={0x4}]}, 0xbc}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x3, &(0x7f0000000a00)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x1, 0xffffffdd, 0xa}}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000)={0x1, 0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) 4.402715281s ago: executing program 2 (id=3252): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000005c0)={@local, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xa7, 0x2400008, r3}) (async) syz_emit_ethernet(0x82, &(0x7f00000000c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @empty}, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "001927", 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xffffffff}]}], "f4c638bed6f068cc"}}}}}}}, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200840, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006d0001000000000000000000003c0000", @ANYRES32=r0, @ANYBLOB="000000000000000018003480140035"], 0x38}}, 0x0) 3.190080914s ago: executing program 2 (id=3259): r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000700)={0x2, 0x4e22, @remote}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a70000000060a010400000000000000000a0000040900010073797a31000000000900020073797a320000000044000480400001800e000100627974656f726465720000002c000280080004400000006d080001400000000e0800034000000065080002400000000e080005"], 0x98}, 0x1, 0x0, 0x0, 0x4880}, 0x2404c810) getpeername(r0, 0x0, 0x0) 3.049600867s ago: executing program 3 (id=3261): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)={0x60, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r0}}}]}}]}, 0x60}, 0x1, 0x400000000000000, 0x0, 0x10}, 0x0) 3.021458757s ago: executing program 1 (id=3262): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@nat={'nat\x00', 0x670, 0x5, 0x4e0, 0x0, 0x2d0, 0xffffffff, 0x0, 0x228, 0x448, 0x448, 0xffffffff, 0x448, 0x448, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0xf2, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xff, 0x0, 0xff], @ipv4=@loopback, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x87, 0x4e1c, 0x4e23, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xb, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @icmp_id=0x66}}}}, {{@ip={@multicast1, @rand_addr=0x64010101, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x73, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x5, 0x3}, {0xffffffffffffffff, 0x0, 0x4}, {0xffffffffffffffff, 0x3, 0x1}, 0x1, 0x10001}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @icmp_id=0x65}}}}, {{@ip={@broadcast, @multicast1, 0xffffff00, 0xffffffff, 'geneve1\x00', 'macvlan1\x00', {0xff}, {}, 0x2, 0x2, 0x12}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000040014000780050014000700000008001240120500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3c83}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_int(r3, 0x29, 0x13, 0x0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x214e}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x890) socket(0x400000000010, 0x3, 0xf) socket$unix(0x1, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) 2.753718666s ago: executing program 3 (id=3264): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x48, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001480)={0x20, 0x26, 0x301, 0x270bd1d, 0x25dfdbfb, {0x20}, [@typed={0xc, 0x163, 0x0, 0x0, @u64=0x3}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000180)={r5, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x81, 0x0, 0x6940000, 0x80, 0x9, 0x77}, &(0x7f0000000940)=0x9c) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x40, 0x13, 0x1, 0x2000000, 0x25dfdbff, {}, [@IFLA_ADDRESS={0xa, 0x1, @random="4780d8506416"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e0040"], 0x44}}, 0x0) 2.432897786s ago: executing program 1 (id=3265): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x1000) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x240000d5) 2.216010918s ago: executing program 3 (id=3266): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="620ac4ff0000000071108d000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000000080)={&(0x7f0000000000)=[{0x2, 0x0, 0x9, 0x5, 0x7ef43b21, 0x8, 0x5, 0x7000}, {0x3, 0x0, 0x5, 0x9, 0x0, 0xffffffffffffffff, 0xffff, 0x40}], 0x2, 0x38, 0x0, 0x1}) 2.19268151s ago: executing program 1 (id=3267): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}}, 0x14) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r4], 0x50}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2091) 2.027828311s ago: executing program 2 (id=3269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'veth0_macvtap\x00', {0x2}, 0xff}) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000280)={0x0, 0x9}, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000200), 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffe}, 0x1c) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000140)="01020000010006", 0x7) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) close(r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x14}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x44, 0x10, &(0x7f0000000040)}, 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000032c0)=@delchain={0x1fa8, 0x65, 0x2, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x6, 0x7}, {0x8, 0x1}, {0x4, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @filter_kind_options=@f_u32={{0x8}, {0x1f64, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_MARK={0x10, 0xa, {0x8}}, @TCA_U32_MARK={0x10, 0xa, {0x81, 0x9}}, @TCA_U32_POLICE={0xc, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0xff6}]}, @TCA_U32_ACT={0x1840, 0x7, [@m_ife={0x8c, 0x1f, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x2}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}]}, {0x4e, 0x6, "40c2ac7634b0f30deaa459423145d78fdf952b6109dacc32ddef45019d681a890c04d3804a513946a80f4684c72a00d8a100fd08b7730601fc7a874963903bb5473920057b66ef253909"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_pedit={0x1164, 0x8, 0x0, 0x0, {{0xa}, {0x10a4, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x150, 0x5, 0x0, 0x1, [{0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0xbfbc0e8102f71891}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0xa0, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}, @TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0xffffb2fb, 0x7f, 0xffffffffffffffff, 0x100, 0x2}, 0x7f, 0xf, [{0x80000000, 0x0, 0x7, 0xc, 0x3, 0x4}, {0x5, 0x100, 0x9, 0x400, 0x8, 0x101b424d}, {0x81, 0x6, 0x1d8c, 0xe7b, 0x5, 0x7}, {0x25800, 0x9, 0x7fffffff, 0x3, 0x0, 0x5ada}, {0x0, 0x8001, 0x1, 0x8, 0x80, 0x4de}, {0xc, 0x10000, 0x489, 0x3, 0x3, 0x1}]}, [{0x10000, 0x9, 0x3, 0xea, 0x87c0, 0x8000}, {0x0, 0xffffffff, 0x1, 0x3, 0x3, 0x6}, {0xc, 0x7, 0x4, 0x5, 0x6, 0x711c578d}, {0x8, 0x4, 0x40, 0x800, 0x5, 0x3}, {0x3, 0x2d2, 0x9b5, 0xdd8, 0x3, 0xff}, {0x0, 0x6, 0x200, 0xd9, 0x3ff, 0x5}, {0x40, 0xef, 0x5, 0x7, 0xe6, 0x2}, {0x0, 0xe11f, 0xa0d, 0x9, 0x3, 0x6}, {0x1, 0xb3ca, 0x9, 0x8, 0x7, 0x28c2}, {0x6, 0x6145, 0x5, 0x6, 0x4, 0x3}, {0x4, 0x7, 0xffffebf8, 0x5, 0x4, 0x3}, {0x100, 0xf, 0xffffffff, 0x81, 0x7fffffff, 0x10000}, {0x6, 0x81, 0x8, 0x1, 0x1, 0x800}, {0x4, 0xf8000000, 0x4, 0x3, 0x5, 0x6}, {0x8, 0xeaf, 0x3, 0xffffffff, 0x6}, {0x2, 0xffff8001, 0xc, 0x3, 0x100, 0x80000001}, {0x80, 0x0, 0x2, 0x4, 0x800, 0xbdb}, {0x4, 0x8, 0x1af, 0x7fffffff, 0x6ad, 0xffff}, {0x9, 0x2, 0xffffff7f, 0x5, 0xa2, 0x8000}, {0x7, 0x2, 0xe, 0xba, 0x7, 0x2}, {0x3, 0x6, 0x8, 0x4, 0x10, 0x9}, {0x15af, 0xc, 0x5, 0x1, 0x80, 0x3ff}, {0x101, 0x4f, 0x7d, 0x3, 0xd, 0x6}, {0x0, 0x3, 0xc, 0x957, 0x81, 0x82b}, {0x2, 0xf2e, 0x4, 0x9000000, 0x1, 0x59e}, {0x1000, 0xe3f, 0x200, 0x3, 0x3, 0x5}, {0x6, 0x10000, 0x1, 0x6, 0x0, 0x5}, {0x5b, 0x40000, 0x5, 0xcd8, 0x3, 0x3}, {0xf, 0x135d, 0x1, 0x545, 0x80000, 0x1}, {0x5, 0xfffff80e, 0x2, 0x7, 0x8, 0xa08c}, {0xd268, 0x5, 0x3, 0x8001, 0x3, 0x800}, {0x10, 0x9, 0x6, 0x37, 0x28, 0x8cf}, {0xff, 0x7fffffff, 0x4, 0x7ff, 0x1, 0xd}, {0xffffffff, 0x5, 0xfffffffe, 0xe, 0x4, 0x100}, {0x1, 0x1, 0x8, 0x2be, 0x0, 0x8}, {0x6c409681, 0x8000, 0xa, 0x6, 0x6, 0x1}, {0x8, 0x5, 0x6, 0x5, 0x0, 0x2417}, {0x7, 0x6, 0x7, 0x8, 0x5, 0x400}, {0x10001, 0x7ff, 0x30c22113, 0x7fffffff, 0x101, 0x9}, {0x7, 0x4, 0x2, 0x4, 0x1}, {0x8, 0x3, 0x88f, 0x40, 0x81, 0x66e}, {0x2164cf81, 0x2, 0xffffff7f, 0x800, 0x200, 0x517}, {0xfffffffb, 0x3ff, 0x6, 0xeb3, 0x9, 0x3}, {0x5, 0xc23c, 0x2, 0x58d, 0x5, 0xd}, {0x431, 0x0, 0x4, 0x6, 0x7, 0x5}, {0x1, 0x0, 0x6, 0x1ff, 0x66c, 0x3}, {0x337, 0x0, 0x7, 0x8000, 0x5, 0x99}, {0x9, 0x10, 0x1ff, 0x8, 0x1, 0x5}, {0xfa, 0x7f, 0x4, 0x3, 0x5, 0x8c8}, {0xd, 0x59d, 0x58d6, 0x5, 0xfffffffe, 0xfff}, {0x3, 0x5, 0x7fff, 0xfffffff6, 0x2, 0x3}, {0x7, 0x20e, 0x4, 0x4, 0x4, 0x4}, {0x4, 0x7, 0x20e, 0x0, 0x8bb, 0xe}, {0x81, 0x7, 0x3, 0x7ff, 0x8, 0x2}, {0x4, 0x6, 0x5, 0x4, 0xa154, 0x5}, {0x3, 0x2, 0x666, 0xdaab, 0x5, 0xf}, {0x8909, 0xfffffe01, 0x182, 0x9, 0x0, 0x7}, {0xfff, 0xcb, 0x3, 0x800, 0x1, 0x800}, {0xfb4, 0x5, 0x9, 0x8, 0x1, 0x8}, {0x1, 0x10000, 0x3, 0x4, 0x2, 0x9}, {0x7, 0x2, 0xfffffffa, 0x5, 0x7, 0x6}, {0x8, 0x3, 0xab8, 0x0, 0x0, 0x160a}, {0x3, 0xffff8001, 0x5, 0xe, 0x1, 0x400}, {0x5, 0xa89, 0x10, 0x5, 0x1, 0x4}, {0x4, 0x3, 0x3, 0x4, 0xb, 0x3}, {0x1, 0x5c, 0x2, 0x9, 0x339, 0xd}, {0x4, 0xd4, 0x1, 0x1, 0x4, 0xffffffff}, {0xbf, 0x5, 0x200, 0x8, 0x9, 0x6}, {0x3, 0x5, 0x5, 0x101, 0x8001, 0x5}, {0x2, 0xa0, 0x5, 0x8000, 0x10, 0xffffffff}, {0x14db, 0x10000, 0x81, 0xf, 0x3ff, 0x1a4}, {0x2, 0x3, 0x7, 0x0, 0x7, 0xf2d2}, {0x6, 0x4, 0x9, 0x2, 0xe2f1, 0x8000000}, {0x2, 0x6, 0x71a, 0xc345, 0x3}, {0x8, 0x8, 0x4, 0x5, 0x3, 0x3}, {0x7, 0x7, 0x400, 0x9, 0x5, 0xffffff38}, {0xfffffffb, 0x9, 0x3, 0x4, 0x9, 0x8}, {0xa0, 0x4, 0x6, 0x4, 0xa44, 0xfffffff7}, {0xcc4, 0xe, 0x8000, 0x7, 0x8000, 0x1}, {0x3, 0xe, 0x20c, 0x400, 0x9, 0x81}, {0x101, 0x4, 0x521, 0x81d, 0x87, 0xffe}, {0x5, 0x7, 0x7f, 0x1, 0x8e35}, {0x1, 0xa5, 0x0, 0x9, 0x7, 0x5}, {0x7, 0x623, 0x2, 0xdc97, 0x8, 0x6}, {0x5, 0x7fff, 0xffffffb5, 0x2, 0xffffd5c8, 0x1000}, {0x3fb62031, 0x10001, 0x90, 0x4, 0x5, 0x5}, {0x9, 0xffffffff, 0x7fff, 0x7fa, 0x5, 0x10}, {0x4, 0x6, 0xfff, 0x7ff, 0x0, 0x8}, {0x4, 0x1ff, 0x1ff, 0x7432b25e, 0x2, 0x6}, {0x100, 0x5, 0x10000, 0x5, 0x8001, 0x1000}, {0x82b, 0x0, 0x5, 0x1, 0x84, 0x3}, {0x9, 0x7, 0x0, 0xa2, 0x698, 0xe8}, {0xfffffff7, 0x1ff, 0xffffffff, 0xa82b, 0x6, 0x6}, {0x0, 0x99, 0x9, 0x9a, 0x49c83e0e, 0x437}, {0x40, 0x8, 0xe38, 0x69f, 0x9, 0xc}, {0x400, 0x1, 0x2, 0x4, 0x14, 0x7}, {0xfffe0000, 0x80, 0xf, 0x9, 0x8, 0x1}, {0x9, 0x6, 0x8000, 0x5, 0x2}, {0x2, 0x7, 0x7, 0xc41, 0x7f, 0x4}, {0xfff, 0x6, 0x2, 0x4f78, 0x7fff, 0x1ff}, {0x9, 0x2, 0x46c, 0x1, 0xffff, 0x26}, {0xec1, 0x3, 0x2ce2, 0x0, 0x5, 0x7}, {0x7, 0x6, 0x2483fa39, 0x2, 0x5, 0xfffffff9}, {0x8000, 0x2199, 0x4, 0xedc5, 0x5, 0x1}, {0x2, 0xe, 0x100, 0x96, 0x1, 0x6}, {0x0, 0xa59, 0x1, 0x3, 0x52, 0x9}, {0x3, 0x1, 0xfffffffd, 0x40, 0xe018, 0x3}, {0x976, 0x0, 0x9, 0x5, 0xbb70, 0x5}, {0x1, 0xb, 0x0, 0x7f, 0xd18, 0x8e2}, {0x1, 0x6, 0x4, 0x3f25, 0x6, 0x4}, {0x6, 0x3, 0xfffffff7, 0x7, 0xf1, 0xfffffffc}, {0xffffffff, 0xffffff96, 0x8, 0x966c, 0x2, 0x9}, {0x7, 0x7ff, 0x28c, 0x5, 0x2, 0x3}, {0x2, 0x2, 0x473}, {0x1, 0x41, 0x0, 0x80000000, 0x3}, {0x5, 0x7, 0x26e, 0x9af, 0x3fc, 0x6}, {0x1, 0x1, 0x7fff, 0x8, 0xcc, 0x7}, {0x10000, 0x9, 0xe1, 0x0, 0x7fff, 0x81}, {0x3, 0x1, 0xae2e, 0x3, 0xffffec95, 0x10001}, {0x7ff, 0x2, 0x6, 0x426b2b20, 0x8000, 0x6}, {0x7, 0xb3ce, 0x3, 0x5, 0x1, 0xdf9}, {0x0, 0x0, 0x5, 0x400, 0x101, 0x4}, {0x2e, 0x3, 0x7, 0x9, 0x4, 0x9}, {0x6, 0x6, 0x3, 0x4, 0x3, 0x100}, {0x7, 0x4, 0x9, 0xd, 0x1, 0x5}, {0x4, 0x7, 0x80, 0x8, 0x4, 0x3}, {0x10001, 0x9, 0x100, 0x6, 0x7, 0x9}, {0x7fffffff, 0xf5, 0x1, 0xff, 0x80, 0x9}], [{0x0, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {}, {0x4}, {0x3}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x6f7d3a20edeaa0ab}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x2}, {0x5}, {0x4}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x5525d3a354c55cdf, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {}, {0x2}, {}, {0x4, 0x1}, {0x0, 0x1394ecc09fbda72f}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {}, {0x0, 0x1}], 0x1}}]}, {0x96, 0x6, "145a5c317b379e37a97a9e9c9a9ced1181a19e4e912531ad07cfc07d3b188ef64ce485fd91d48b1a0778db0d7a6bb0b7353d99dd663c17d05b3f8b342f863838c94ae3edb8031829417d9f33331a7db4e65fd256657c4e220229f348e9ad75a696f5f0be58aab1928d183b80d6f63622f33cf60292129dcdbfadb70673bb6d37324c7a6d8cd381ad80fa7460827fbc40a809"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_nat={0x12c, 0x3ffd, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x100, 0x64, 0x6, 0x6, 0x4}, @local, @multicast1, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x2c, 0x20000000, 0xffff, 0xfffffffe}, @loopback, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x7fffffff, 0x2, 0x3, 0x6}, @multicast1, @empty, 0xff, 0x1}}]}, {0x8b, 0x6, "88607a53d1374c1b8798d9ea4a6f6c71b72760efab3358b6aee6d0413b3d9bf2fbc3c1a484922d4c8067f86718245980ffbb6ec7cda31c834504cf206e8535fe5b1920e09459dd27a03a007d40ffca2ba85a0eee196c9095b993f173499081b6f3bff93eab2f52175d14625ec81a621340aaab34d765d1929661ff1fcf29bcc3b2b25b919d4980"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x8c, 0x1c, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x3, 0x88, 0x6, 0x2c00000}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r6}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xd9, 0x1, 0x6}, {0x10, 0x3, 0x7, 0x10000}, {0x1, 0x5, 0x1, 0x24000000}, {0x9, 0x8, 0x5e, 0x4}]}]}, {0xd, 0x6, "972176f58cea56f098"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x130, 0x4, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010101}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0xd3, 0x6, "91033926f0f2a402713a517cb621a042ae82e3a8d69335f063116163b0f47541f05e3c0615d44e78873ddf5be53c512b2be01205af08d8b717803e9439369f448c04f31c21c2b2b9f052bf444033adc20f4f5c5a571997eed4d814f272cfad10e7f5835715201ed2b4f8c67cb0110b426c773753eec9b2bbcd563bb1af9ec5a9fb0ddff1b93b1f86b3e7193f4b6e7327edcae03409383a75614dd05cc6cd26938b8aae46a18b8c75196d565005b5ebdf62faacab9a43f9244891cdc99eadd2186700"/207}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_bpf={0xc8, 0x11, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0xbd, 0x3, 0xd, 0xfffff12c}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x80, 0x1, 0x3, 0x7fff}]}]}, {0x55, 0x6, "61fd4c581d672cfca2a7adb7ddf914950702c6d3e0491e5a26643897a1b4067faf3e5fb2e6831ebbf0bf730cc4e0b7d5e56216249b5eea02b742ba0d701829cce8e0c8eb3c3f0950145efe09a0905dce03"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x144, 0x0, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x75e}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa52}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe0d}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}]}, {0xf0, 0x6, "fc2c18cebb269a683d9510ede4659834b37ce980567c78f3bdf3cf6164ce4d9409b25b3cc4d6b49a0422b8ea87b3025760c82cad1d061340797bd18babf353604893cf29001742db15059e9b12ffe3e0f52eb19c1d60b3081067d26e5686653fcde9b49897e16344937ddd0632aa90516562ef5bd6d370fe0746fb7ffb62ea5532465e11a4f30a01fe4da3c6ecdc373c234256d7f725ed72f07c6f3e6db5f83b8d0d24e3a56e346b9a41383ed6eaa683bd7768fb5bcbe9da0e642fb7578619c1ea842b080934409399847e05654de9627502676501d310ee148b815c01fcd3d71705bf8db11d259bf3ed02ac"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0xc8, 0xf, 0x0, 0x0, {{0x7}, {0x94, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "80a73c60ef59902332e6a238def2f3fd"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010102}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_CT_ZONE={0x6, 0x4, 0x101}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x3a}}, @TCA_CT_LABELS={0x14, 0x7, "85897898de1ac2e809b54c4be71a878c"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ff0a9baf225dcf22848d33b84503192e"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "e9288f5a8a6f537a9ed2a44fe9900545"}]}, {0xe, 0x6, "0aa7cb0d4e47b7ee154a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0x3c, 0x15, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xefe}]}, {0x5, 0x6, "c5"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ctinfo={0x54, 0xb, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}]}, {0x1e, 0x6, "34de44db8968bd61f67933f7e087d248b41df0abfa626749af37"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_U32_MARK={0x10, 0xa, {0x2, 0x8}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x83}, @TCA_U32_ACT={0x678, 0x7, [@m_ct={0x4c, 0x1b, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}]}, {0x1b, 0x6, "66870fcf84bb5a1322ca4ded9ba6799a2725823916f58c"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mpls={0xac, 0x13, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x77, 0x6, "74a80e95122bd1080e01f0d8e297492bd77cc27dfeac566fadc87646ef42adb001f69b0e5294871248564713db33f3527e3386db657dfab81102d7095c2a719e35c52d0beabbf76ce11ef8eb87fc4f514daea59a944c18c4b6e5cf6554a2b96ca34fa8ff516395b60e0c2f6dfb88d4aedaef45"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_police={0x57c, 0x0, 0x0, 0x0, {{0xb}, {0x510, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x1, 0x7, 0x8, 0x7, {0x0, 0x1, 0x39, 0x8, 0x9, 0x4}, {0x4, 0x0, 0x8, 0x3, 0x5f, 0x8}, 0xffff, 0x0, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3c9, 0x8, 0x8, 0x6, 0x9, {0x52, 0x0, 0x1, 0x5, 0x4}, {0x5, 0x2, 0x81, 0x1, 0xfffb, 0xd208}, 0x1, 0x7, 0x8fa}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xce, 0x2, 0x7fffffff, 0x0, 0x8, {0x5, 0x0, 0x4, 0x5, 0xd4f1}, {0x8, 0x0, 0x100, 0x1ff, 0x178, 0xf}, 0x2eb, 0x3}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x84}, @TCA_POLICE_RATE={0x404, 0x2, [0x7f, 0x7, 0x6, 0x1, 0x5, 0x1, 0x0, 0xffffffa9, 0x3ff, 0x14c, 0xee5, 0x8, 0x9, 0x800, 0x7d9, 0x4, 0x7, 0x7f, 0x0, 0xfffff000, 0xfffff800, 0x7, 0x9, 0x8, 0x3, 0x2e25, 0xfffffc00, 0x2, 0x3, 0xf, 0x4, 0x24, 0xae2f, 0x9, 0x6, 0x2, 0x7, 0x0, 0x248, 0x6, 0xfff, 0x1, 0x6, 0x10, 0x101, 0x363, 0xc3e2, 0x4, 0xd027, 0x7fffffff, 0x4, 0x253abd6a, 0xbb00, 0x8, 0x10001, 0x5, 0x8000, 0x4, 0xffffffff, 0x9, 0x2, 0x7, 0x4f0d, 0xf, 0x80, 0x10000, 0x3, 0x3, 0x18, 0x0, 0x5, 0x9f08, 0x4, 0x8, 0x1, 0x40, 0x0, 0x9, 0xae88fc8, 0x9, 0x1, 0x2, 0x401, 0xffffff8a, 0x7fffffff, 0x80000000, 0x4, 0x5, 0x2edd, 0x401, 0x8, 0xba44, 0xf0, 0x4, 0x7f, 0x3, 0x114c, 0x852, 0x786, 0x9, 0xd, 0x80000001, 0x9, 0x5, 0xf, 0xfffffffb, 0x6, 0x6, 0xa5, 0xc064, 0x6, 0x1000, 0x7fffffff, 0x6, 0x69, 0x8, 0x3, 0x7, 0x4, 0xfffffff9, 0x33, 0xfffffff7, 0x80, 0x6, 0x539, 0x7fffffff, 0x3, 0xff, 0x156f, 0xfffffffd, 0x7, 0xd, 0x80000000, 0x70a, 0x3, 0x4, 0xf5, 0x1, 0x7, 0x7, 0x5, 0x1, 0x2, 0x1ff, 0x10, 0x1, 0x80, 0x9, 0x10000, 0x1, 0x81, 0xfff, 0x510, 0x50c6, 0xb, 0x4, 0x7, 0x6, 0x7, 0x5, 0x6, 0x5, 0x2, 0x4e2, 0x0, 0x9, 0x1a, 0x0, 0x5, 0x5634, 0x66, 0x7fffffff, 0x6, 0xdb96, 0x7, 0x5, 0x60ba, 0xe, 0x4, 0x6, 0x66, 0xf42, 0xd0, 0x0, 0x0, 0x5, 0x8001, 0x81, 0x9, 0x6, 0x28d, 0x7, 0x7fffffff, 0x400, 0x4, 0x5, 0x1, 0x1, 0x8, 0x7, 0x1, 0x3, 0x7fff, 0x1, 0x2, 0xa, 0x4, 0x80, 0x5, 0x80, 0x8, 0x40, 0xe4b, 0x7, 0x0, 0x6, 0x2, 0x8, 0x200, 0x3, 0x80000001, 0x8, 0x9201, 0xd, 0x6, 0x10, 0x4, 0x9f7, 0xc, 0x6, 0x9, 0x160, 0x1, 0x3, 0x4, 0x4, 0x6, 0x1, 0x5, 0x2, 0x2, 0x6, 0x2, 0x4, 0x7fff, 0x1ff, 0x6, 0x8, 0xffffffff, 0xd97, 0x6, 0x3, 0x6, 0x101, 0x1000, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x0, 0x6, 0x5, 0x3a89, {0x4, 0x0, 0xe, 0xe1, 0x9, 0x58}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0xc, 0xe0, 0x6}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}]]}, {0x42, 0x6, "157fa2c5b062e3c32c9a8735048bcbb46b295ecf2de3f035969d63c97cd82fe407f237baef7ec4f4993c0feffec7d0abb8f1b585ce392be6cbb9d0b3e675"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_U32_CLASSID={0x8, 0x1, {0x5, 0x7}}, @TCA_U32_SEL={0x54, 0x5, {0x0, 0x8, 0x1, 0x1, 0x2800, 0xc, 0xff4f, 0x8, [{0x3, 0x6, 0x7, 0x2}, {0x0, 0x9, 0x100, 0x4}, {0x1, 0x140000, 0x5, 0x348}, {0x6, 0x7, 0x818d, 0xaa0e}]}}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @TCA_RATE={0x6, 0x5, {0x0, 0x8}}]}, 0x1fa8}, 0x1, 0x0, 0x0, 0x81}, 0x0) r8 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x24, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x4}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xffff85fd}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x9}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x8}]}}]}, 0x50}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r12) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0100000000000400000003740006140006006970366772653000000000000000000008000700000000000800040064310101080005"], 0x40}, 0x1, 0xffffffff00000003}, 0x0) 1.889884708s ago: executing program 3 (id=3270): r0 = socket(0x400000000010, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0xfff, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10000004}, 0x50) (async) r1 = socket$kcm(0xa, 0x5, 0x0) (async) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) (async) r4 = socket$kcm(0xa, 0x5, 0x0) (async) r5 = socket$packet(0x11, 0x3, 0x300) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x1) (async) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000280)={0x3, &(0x7f0000000100)=[{0x28, 0x0, 0xf9, 0xfffff030}, {0x4d, 0x0, 0x0, 0x3}, {0x6}]}, 0x10) (async) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r8}, 0x90) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x50) socket$can_j1939(0x1d, 0x2, 0x7) (async) accept4$x25(r3, 0x0, &(0x7f0000000140), 0x80000) r9 = socket(0x15, 0x5, 0x0) getsockopt(r9, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r11 = accept4(r4, &(0x7f0000000440)=@sco, &(0x7f00000004c0)=0x80, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x8916, &(0x7f0000000000)={r10}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r2}) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r12, 0x84, 0x3, &(0x7f00000000c0)=0xfffffffc, 0x4) (async) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc0280200003031e000500e1000c0400070080000900", 0x33a) 1.750203999s ago: executing program 4 (id=3271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000a9000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000000080002400000000014000000020a010800000000000000000000000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0xc824}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x13, &(0x7f0000000080)=0x80000000, 0x4) bind$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) (async) bind$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r4, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x802}, 0x20000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x802}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) write(r4, &(0x7f0000000000)="01", 0x1) (async) write(r4, &(0x7f0000000000)="01", 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r3}, 0x48) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) (async) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) accept(r0, &(0x7f0000000000)=@qipcrtr, &(0x7f00000000c0)=0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b04400000fcdbdf250300000000005e81ebc2b7ff0e4a0000"], 0x20}}, 0x0) 1.488046496s ago: executing program 3 (id=3272): socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 64) close(0x4) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000040)=0x2) (async) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 1.443334765s ago: executing program 4 (id=3273): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="7a0af8ff7525707cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c80000040000000000b1a297cfddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1ae9f2cfe401dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4800afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692f01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c5c5b011cf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb53a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c66200349e62d4d0ab1a1dc51907c9800000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xc}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) 1.322046151s ago: executing program 2 (id=3274): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0xfffffffc, {0xa, 0x0, 0x0, 0xfe}}, 0x18}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r4, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x5ee}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x10) socket$kcm(0x2, 0xa, 0x2) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r6, @ANYBLOB="200001"], 0x38}}, 0x0) r7 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000100000000000000000008430180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000060000008db28000ffffffffb7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a50000001831000002000000000000000000008000000000", @ANYRES32=0x1, @ANYBLOB="00000000060000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x4, 0x9, 0x800, 0xbb03}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x101}, 0x94) syz_emit_ethernet(0x1bf, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r9, r8, 0x25, 0x1b, @val=@perf_event={0xb}}, 0x18) 1.207671276s ago: executing program 4 (id=3275): socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000680)={0x18, r4, 0x1, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2660004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x38, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x400, 0x8, 0x401, 0x9, 0x3, 0x6, 0x8]}}]}]}]}, 0x38}}, 0x0) 859.697612ms ago: executing program 1 (id=3276): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001000000800000003535b3d215ee0169395f"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x40000}, @IFLA_IPTUN_LINK={0x8, 0x1, r1}]}}}]}, 0x58}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00'}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001000000800000003535b3d215ee0169395f"], 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x40000}, @IFLA_IPTUN_LINK={0x8, 0x1, r1}]}}}]}, 0x58}}, 0x0) (async) 572.17721ms ago: executing program 4 (id=3277): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x5, 0x5, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x13, 0x0, 0x2, 0x4}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x0, @mcast1}}]}, 0x70}}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)={0x288, r4, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xdb}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4b2f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x938}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1e53}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x5, @local, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xdd}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "5620fde7db4a042d5b0e07b1037602e299cf3b7dcc8649b2c9f8"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x915}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x44000}, 0x20008000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x30, r3, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbff, {{0x12}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 530.017072ms ago: executing program 1 (id=3278): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x2000000) 359.952785ms ago: executing program 2 (id=3279): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r1, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000280)}, 0xbeb}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/88, 0x58}, {&(0x7f0000001640)=""/174, 0xae}, {&(0x7f0000001700)=""/121, 0x79}, {&(0x7f0000001780)=""/250, 0xfa}, {&(0x7f0000001880)=""/162, 0xa2}], 0x6, &(0x7f00000019c0)=""/251, 0xfb}, 0xaa}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x100009}, {{0x0, 0x0, 0x0}, 0xfffffff1}], 0x8, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x6) r2 = accept(r0, &(0x7f0000000180)=@can, &(0x7f0000000200)=0x80) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) connect(r1, &(0x7f00000000c0)=@nfc={0x27, r3, 0xffffffffffffffff, 0x7}, 0x80) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000000280)={0x0, 0x1, 0xd6, r4, 0xfffff000}, 0xc) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000000)="3b97") syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r1) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1f8}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) r6 = socket$rxrpc(0x21, 0x2, 0xa) ioctl(r6, 0x8b23, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) 359.479736ms ago: executing program 1 (id=3280): r0 = socket(0xb, 0x5, 0x3) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r1, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3dc, 0x6d}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x800) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x4, 0x8, 0x4, 0x4, 0x2, 0x4, 0x6, 0x769}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048084}, 0x20000000) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, @llc={0x1a, 0x207, 0x5, 0x5, 0x8, 0x5, @link_local}, @l2tp={0x2, 0x0, @empty}, @can={0x1d, r5}, 0xe, 0x0, 0x0, 0x0, 0xfff, &(0x7f0000000080)='veth0_macvtap\x00', 0xe9, 0x7f, 0x7}) r6 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 327.070821ms ago: executing program 4 (id=3281): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, r2, 0x401}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 134.526915ms ago: executing program 3 (id=3282): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000200)={0x6e1, 0x2, 0x8, 0x0, 0x9ae, 0x9, 0x0, &(0x7f0000000140)=[{0x1a, 0x101, 0xfffffffc}, {0x4, 0x101, 0x101}, {0x5, 0xfe, 0x4}, {0x18, 0xfe, 0x101}, {0x10, 0x1fc, 0x2}, {0x1, 0xfe, 0x2}, {0x18, 0x101, 0x6be}, {0xd, 0x345dc3532ddf113a, 0x8}, {0x7, 0x1ff, 0x80000000}]}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='GPL\x00'}, 0x94) 0s ago: executing program 4 (id=3283): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) preadv(r2, &(0x7f0000001700)=[{&(0x7f0000000180)=""/210, 0xd2}], 0x1, 0x2, 0x1) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r4, 0x4) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x7b20, 0xffffffff, 0x98, 0x1544, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r7, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r8, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@alu={0x7, 0x1, 0x1, 0x1, 0x3, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x401, 0x1b, &(0x7f00000003c0)=""/27, 0x40f00, 0x28, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x2, 0xb978, 0x5}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[r5, r6, 0xffffffffffffffff, r8, r9]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x63}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x14, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): 88][T12279] pim6reg: left allmulticast mode [ 218.983627][T12281] openvswitch: netlink: Missing valid actions attribute. [ 220.964502][T12397] __nla_validate_parse: 3 callbacks suppressed [ 220.964522][T12397] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1614'. [ 221.030289][T12400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1615'. [ 221.251934][T12412] syzkaller1: entered promiscuous mode [ 221.251956][T12412] syzkaller1: entered allmulticast mode [ 221.430952][T12423] netlink: 'syz.3.1620': attribute type 5 has an invalid length. [ 221.430993][T12423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1620'. [ 221.470570][T12423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1620'. [ 221.492198][T12423] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1620'. [ 221.501026][T12424] netlink: 'syz.1.1621': attribute type 1 has an invalid length. [ 221.575642][T12428] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1621'. [ 221.582247][T12424] bond5: entered promiscuous mode [ 221.583717][T12424] 8021q: adding VLAN 0 to HW filter on device bond5 [ 221.584619][T12428] bond5: entered allmulticast mode [ 221.614003][T12433] sock: sock_set_timeout: `syz.2.1623' (pid 12433) tries to set negative timeout [ 221.653502][T12420] bond5: (slave bridge3): making interface the new active one [ 221.653525][T12420] bridge3: entered promiscuous mode [ 221.653725][T12420] bridge3: entered allmulticast mode [ 221.678080][T12420] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 221.791673][T12443] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 221.792693][T12443] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 221.794308][T12443] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 221.795185][T12443] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 221.851037][T12443] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 221.855064][T12443] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 221.867854][T12443] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 221.872561][T12443] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 221.878099][T12443] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 221.883259][T12443] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 222.102484][T12456] gtp0: entered promiscuous mode [ 222.102504][T12456] gtp0: entered allmulticast mode [ 222.280831][T12472] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1632'. [ 222.281009][T12475] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1632'. [ 222.601890][T12489] Cannot find del_set index 3 as target [ 222.822935][T12504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1640'. [ 222.827846][T12501] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1638'. [ 222.948177][T12509] gretap0: entered promiscuous mode [ 223.339163][T12523] netlink: 'syz.1.1644': attribute type 1 has an invalid length. [ 223.339378][T12523] netlink: 'syz.1.1644': attribute type 1 has an invalid length. [ 223.339572][T12523] netlink: 'syz.1.1644': attribute type 1 has an invalid length. [ 223.339761][T12523] netlink: 'syz.1.1644': attribute type 1 has an invalid length. [ 223.339947][T12523] netlink: 'syz.1.1644': attribute type 1 has an invalid length. [ 223.340149][T12523] netlink: 'syz.1.1644': attribute type 1 has an invalid length. [ 223.340347][T12523] netlink: 'syz.1.1644': attribute type 1 has an invalid length. [ 223.340554][T12523] netlink: 'syz.1.1644': attribute type 1 has an invalid length. [ 223.550385][T12533] workqueue: name exceeds WQ_NAME_LEN. Truncating to: '¸ŠŸ>úáÂN9Ü5äx×Ùhˉ½p¡þàn [ 224.127290][T12565] C: entered promiscuous mode [ 224.132447][T12565] tunl0: entered promiscuous mode [ 224.160348][T12565] gre0: entered promiscuous mode [ 224.198184][T12565] gretap0: entered promiscuous mode [ 224.266696][T12565] erspan0: entered promiscuous mode [ 224.284900][T12565] ip_vti0: entered promiscuous mode [ 224.402664][T12586] openvswitch: netlink: IPv4 tunnel dst address is zero [ 224.402693][T12586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.511740][T12572] bond10: entered promiscuous mode [ 224.514336][T12572] 8021q: adding VLAN 0 to HW filter on device bond10 [ 224.539747][T12600] block nbd3: not configured, cannot reconfigure [ 224.642582][T12572] bond10: (slave bridge2): making interface the new active one [ 224.642605][T12572] bridge2: entered promiscuous mode [ 224.643762][T12572] bond10: (slave bridge2): Enslaving as an active interface with an up link [ 224.773847][T12608] bond10: (slave bridge3): Enslaving as a backup interface with an up link [ 224.793903][T12613] pim6reg: entered allmulticast mode [ 224.863366][T12615] pim6reg: left allmulticast mode [ 225.059896][T12625] wireguard: wg2: Could not create IPv4 socket [ 225.141633][T12633] ip_tables: iptables: counters copy to user failed while replacing table [ 225.141973][T12633] ip_tables: iptables: counters copy to user failed while replacing table [ 225.142283][T12633] ip_tables: iptables: counters copy to user failed while replacing table [ 225.142593][T12633] ip_tables: iptables: counters copy to user failed while replacing table [ 225.154682][T12633] ip_tables: iptables: counters copy to user failed while replacing table [ 225.215713][T12633] veth1_vlan: left promiscuous mode [ 225.384931][T12645] bridge2: entered promiscuous mode [ 225.384989][T12645] bridge2: entered allmulticast mode [ 225.413341][T12647] x_tables: duplicate underflow at hook 2 [ 225.419968][T12647] x_tables: duplicate underflow at hook 2 [ 225.691443][T12666] xt_IDLETIMER: label is empty or not nul-terminated [ 225.737600][T12671] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20000 [ 226.042667][T12685] gtp1: entered promiscuous mode [ 226.042688][T12685] gtp1: entered allmulticast mode [ 226.043948][T12691] __nla_validate_parse: 15 callbacks suppressed [ 226.043964][T12691] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1685'. [ 226.145752][T12697] openvswitch: netlink: Duplicate or invalid key (type 0). [ 226.157320][T12699] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1688'. [ 226.287730][T12707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1689'. [ 226.394529][T12709] ieee802154 phy1 wpan1: encryption failed: -22 [ 226.450626][T12714] validate_nla: 31 callbacks suppressed [ 226.450643][T12714] netlink: 'syz.0.1692': attribute type 5 has an invalid length. [ 226.641187][T12735] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1697'. [ 226.641373][T12735] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1697'. [ 226.661534][T12737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1696'. [ 226.972335][T12750] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1701'. [ 227.063625][T12757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.081578][T12761] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1704'. [ 227.084728][T12761] netlink: 'syz.0.1704': attribute type 3 has an invalid length. [ 227.603350][T12779] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 227.670365][T12785] netlink: 'syz.4.1713': attribute type 1 has an invalid length. [ 227.670387][T12785] netlink: 'syz.4.1713': attribute type 11 has an invalid length. [ 227.670398][T12785] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1713'. [ 227.708193][T12781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1711'. [ 227.708218][T12781] block nbd0: Unsupported socket: should be TCP or UNIX. [ 227.894036][T12796] bond1: entered promiscuous mode [ 227.940690][T12808] gretap2: entered promiscuous mode [ 227.940713][T12808] gretap2: entered allmulticast mode [ 228.123049][T12823] trusted_key: syz.0.1718 sent an empty control message without MSG_MORE. [ 228.147496][T12821] netlink: 'syz.4.1721': attribute type 17 has an invalid length. [ 228.595221][T12847] lo speed is unknown, defaulting to 1000 [ 228.597485][T12847] lo speed is unknown, defaulting to 1000 [ 228.611254][T12847] lo speed is unknown, defaulting to 1000 [ 228.620306][T12847] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 228.620340][T12847] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 228.620376][T12847] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 228.640134][T12847] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 228.831235][T12847] lo speed is unknown, defaulting to 1000 [ 228.868486][T12847] lo speed is unknown, defaulting to 1000 [ 228.902831][T12847] lo speed is unknown, defaulting to 1000 [ 228.926698][T12847] lo speed is unknown, defaulting to 1000 [ 228.944878][T12847] lo speed is unknown, defaulting to 1000 [ 229.686127][T12890] netlink: 'syz.2.1741': attribute type 29 has an invalid length. [ 229.686519][T12888] netlink: 'syz.4.1740': attribute type 3 has an invalid length. [ 229.690338][T12891] netlink: 'syz.2.1741': attribute type 29 has an invalid length. [ 229.725513][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.726310][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.726346][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.726373][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.817583][T12894] bond0: entered promiscuous mode [ 229.934236][T12902] netlink: 'syz.3.1746': attribute type 10 has an invalid length. [ 230.068944][T12912] net_ratelimit: 4 callbacks suppressed [ 230.068963][T12912] ip_tables: iptables: counters copy to user failed while replacing table [ 230.310303][T12929] bond9: option fail_over_mac: invalid value (16) [ 230.311706][T12929] bond9 (unregistering): Released all slaves [ 230.378499][T12917] syzkaller1: entered promiscuous mode [ 230.378520][T12917] syzkaller1: entered allmulticast mode [ 230.678927][T12952] netlink: 'syz.4.1756': attribute type 6 has an invalid length. [ 230.798465][T12960] ip_tables: iptables: counters copy to user failed while replacing table [ 230.812378][T12962] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 230.974300][T12971] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 231.062260][T12972] x_tables: duplicate underflow at hook 2 [ 231.444363][T12991] __nla_validate_parse: 10 callbacks suppressed [ 231.444381][T12991] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1769'. [ 231.495066][T13004] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1771'. [ 231.736540][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1774'. [ 231.808746][T13036] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1776'. [ 232.268104][T13062] Bluetooth: hci0: unsupported parameter 5135 [ 232.268126][T13062] Bluetooth: hci0: unsupported parameter 8192 [ 232.268139][T13062] Bluetooth: hci0: unsupported parameter 5135 [ 232.268150][T13062] Bluetooth: hci0: unsupported parameter 8192 [ 232.362776][T13067] netlink: 'syz.1.1783': attribute type 1 has an invalid length. [ 232.438951][T13064] 8021q: adding VLAN 0 to HW filter on device bond9 [ 232.584479][T13069] 8021q: adding VLAN 0 to HW filter on device bond7 [ 232.596129][T13069] bond6: (slave bond7): making interface the new active one [ 232.596614][T13069] bond6: (slave bond7): Enslaving as an active interface with an up link [ 232.653797][T13069] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1783'. [ 232.701754][T13073] bond6: (slave gretap3): Enslaving as a backup interface with an up link [ 232.878649][T13079] tipc: Started in network mode [ 232.878685][T13079] tipc: Node identity 2e9382e93b13, cluster identity 1518 [ 232.878847][T13079] tipc: Enabled bearer , priority 0 [ 232.974961][T13081] netlink: 580 bytes leftover after parsing attributes in process `syz.0.1785'. [ 233.089867][T13079] syzkaller0: entered promiscuous mode [ 233.089891][T13079] syzkaller0: entered allmulticast mode [ 233.090372][T13079] tipc: Resetting bearer [ 233.110009][T13087] xt_hashlimit: overflow, try lower: 0/0 [ 233.122140][T13078] tipc: Resetting bearer [ 233.453834][T13094] netlink: 'syz.3.1790': attribute type 2 has an invalid length. [ 234.843342][T13143] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1804'. [ 234.854841][T13143] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1804'. [ 234.864987][T13143] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1804'. [ 234.880860][T13143] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1804'. [ 234.929133][T13149] x_tables: duplicate underflow at hook 1 [ 234.929206][T13149] x_tables: duplicate underflow at hook 1 [ 234.929265][T13149] x_tables: duplicate underflow at hook 1 [ 234.929321][T13149] x_tables: duplicate underflow at hook 1 [ 234.929381][T13149] x_tables: duplicate underflow at hook 1 [ 234.929439][T13149] x_tables: duplicate underflow at hook 1 [ 234.929500][T13149] x_tables: duplicate underflow at hook 1 [ 234.929557][T13149] x_tables: duplicate underflow at hook 1 [ 234.929623][T13149] x_tables: duplicate underflow at hook 1 [ 235.641591][T13078] tipc: Disabling bearer [ 235.688484][ T2248] tipc: Node number set to 360743657 [ 235.988559][T13166] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 236.072393][T13176] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.467905][T13198] Bluetooth: hci0: unsupported parameter 5161 [ 236.467926][T13198] Bluetooth: hci0: unsupported parameter 8192 [ 236.467937][T13198] Bluetooth: hci0: unsupported parameter 5161 [ 236.467949][T13198] Bluetooth: hci0: unsupported parameter 8192 [ 236.598809][T13205] __nla_validate_parse: 8 callbacks suppressed [ 236.598827][T13205] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1824'. [ 236.731618][T13212] syzkaller1: entered promiscuous mode [ 236.731632][T13212] syzkaller1: entered allmulticast mode [ 236.862546][T13216] lo: entered allmulticast mode [ 236.871830][T13216] lo: left allmulticast mode [ 237.165752][T13237] netlink: 'syz.4.1833': attribute type 1 has an invalid length. [ 237.165773][T13237] netlink: 5120 bytes leftover after parsing attributes in process `syz.4.1833'. [ 237.317604][T13245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.321188][T13244] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1836'. [ 237.344077][ T9] lo speed is unknown, defaulting to 1000 [ 237.390324][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.456326][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.559386][T13254] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1837'. [ 237.560645][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1837'. [ 237.969801][T13281] netlink: 'syz.4.1846': attribute type 83 has an invalid length. [ 238.178599][T13298] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1850'. [ 238.426069][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.593916][T13311] syzkaller1: entered promiscuous mode [ 238.593938][T13311] syzkaller1: entered allmulticast mode [ 238.776164][T13324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1857'. [ 238.786813][T13317] netlink: 'syz.0.1856': attribute type 1 has an invalid length. [ 238.786832][T13317] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1856'. [ 238.786845][T13317] netlink: 'syz.0.1856': attribute type 1 has an invalid length. [ 238.791244][T13317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1856'. [ 239.310783][T13338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1861'. [ 239.683870][T13353] sctp: [Deprecated]: syz.3.1866 (pid 13353) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.683870][T13353] Use struct sctp_sack_info instead [ 239.885139][T13366] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 239.979242][T13368] xt_socket: unknown flags 0x8 [ 240.421795][T13407] ip6t_rt: too many addresses specified [ 240.559459][T13415] netlink: 'syz.0.1882': attribute type 10 has an invalid length. [ 240.559735][T13415] veth0_vlan: left promiscuous mode [ 240.583264][T13415] team0: Device veth0_vlan failed to register rx_handler [ 240.765145][T13421] bond0: entered allmulticast mode [ 240.765168][T13421] bond_slave_0: entered allmulticast mode [ 240.765185][T13421] bond_slave_1: entered allmulticast mode [ 240.865992][T13426] netlink: 'syz.1.1887': attribute type 1 has an invalid length. [ 241.760441][T13470] __nla_validate_parse: 9 callbacks suppressed [ 241.760459][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1901'. [ 241.825053][T13474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1901'. [ 241.896483][T13470] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 242.109739][T13486] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1903'. [ 242.342467][ T25] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 242.614021][T13505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1908'. [ 242.614904][T13505] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 242.710796][T13514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1911'. [ 242.849272][T13516] xt_CT: No such helper "netbios-ns" [ 242.869289][T13518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1914'. [ 242.869317][T13518] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 242.879496][T13518] syzkaller0: entered allmulticast mode [ 243.065640][T13528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1915'. [ 243.086213][T13528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1915'. [ 243.104860][T13528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1915'. [ 243.114680][T13528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1915'. [ 243.571649][T13551] openvswitch: netlink: ct_state flags ffffffff unsupported [ 243.647678][ T7163] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 243.648724][ T7163] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 243.676021][ T5719] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 243.916198][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 244.669906][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 245.041893][T13614] netlink: 'syz.0.1942': attribute type 2 has an invalid length. [ 245.109485][T13611] vlan3: entered allmulticast mode [ 245.109506][T13611] veth1_to_hsr: entered allmulticast mode [ 245.407285][T13637] netlink: 'syz.1.1950': attribute type 7 has an invalid length. [ 245.410733][T13637] netlink: 'syz.1.1950': attribute type 7 has an invalid length. [ 245.617840][T13642] bond11: entered allmulticast mode [ 245.618205][T13642] 8021q: adding VLAN 0 to HW filter on device bond11 [ 245.751085][T13651] netlink: 'syz.3.1955': attribute type 1 has an invalid length. [ 245.853256][T13660] netlink: 'syz.1.1959': attribute type 6 has an invalid length. [ 246.003873][T13670] netlink: 'syz.2.1960': attribute type 11 has an invalid length. [ 246.522038][T13705] xt_REDIRECT: bad rangesize 26624. [ 247.298376][T13760] __nla_validate_parse: 22 callbacks suppressed [ 247.298396][T13760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1982'. [ 247.770205][T13784] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.1987'. [ 247.770230][T13784] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.1987'. [ 247.773735][T13784] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 247.865494][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 248.249448][T13804] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1994'. [ 248.330263][T13806] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1995'. [ 248.330300][T13806] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1995'. [ 248.351903][T13806] openvswitch: netlink: Duplicate key (type 6). [ 248.354930][T13806] openvswitch: netlink: Key type 1542 is out of range max 32 [ 248.643184][T13824] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 248.813624][T13829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2003'. [ 248.859333][ T31] audit: type=1107 audit(1789950978.283:9): pid=13835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Â.T´¿ßS3²Ã0‹kç5±µz.ãÈNË~§¥eËÀr7IÖg-8‹Bô•iû$6tGß½ÛË9« Vâ÷¶£„½7WŒTœ¾U=¬øï^ [ 248.859333][ T31] 8E}n·|£§Èµ¢&{‡rŒÈÝñî•m*ë±qøòFWÏý?]:‹sO"upM¾@ðedÐ6&}L¸«#Ú³7['Ë¡*Ø`|æé[¥]ÌÉ{¹^¶¢ÓÍl’UNýyÔº¤dåÇ„ïO…ÿJ¶žÇPÛåÚ×Êæ¢Ü/žÂV”É˨þ¤B ÍÈmíëǼ)-Ì$1 ‹' [ 249.242875][T13845] syzkaller0: entered promiscuous mode [ 249.242898][T13845] syzkaller0: entered allmulticast mode [ 249.549320][T13864] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2011'. [ 249.555101][T13865] nft_compat: unsupported protocol 5 [ 249.693685][T13873] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2012'. [ 250.047905][T13880] netlink: 'syz.3.2015': attribute type 1 has an invalid length. [ 250.047928][T13880] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2015'. [ 251.825456][T13895] GUP no longer grows the stack in syz.4.2021 (13895): 200000003000-20000000a000 (200000001000) [ 251.825507][T13895] CPU: 0 UID: 0 PID: 13895 Comm: syz.4.2021 Not tainted syzkaller #0 PREEMPT(full) [ 251.825526][T13895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.825544][T13895] Call Trace: [ 251.825554][T13895] [ 251.825562][T13895] dump_stack_lvl+0xe8/0x150 [ 251.825596][T13895] __get_user_pages+0x23b6/0x2750 [ 251.825629][T13895] ? lock_acquire+0x115/0x350 [ 251.825663][T13895] ? __gup_longterm_locked+0xc3b/0x15c0 [ 251.825694][T13895] __gup_longterm_locked+0xd52/0x15c0 [ 251.825722][T13895] ? lock_acquire+0x115/0x350 [ 251.825757][T13895] gup_fast_fallback+0x1d92/0x20e0 [ 251.825814][T13895] ? __pfx_gup_fast_fallback+0x10/0x10 [ 251.825841][T13895] ? lock_acquire+0x115/0x350 [ 251.825856][T13895] ? is_valid_gup_args+0x11f/0x200 [ 251.825882][T13895] ? get_user_pages_fast+0x4d/0xb0 [ 251.825908][T13895] __iov_iter_get_pages_alloc+0x378/0xa40 [ 251.825937][T13895] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 251.825961][T13895] iov_iter_get_pages2+0x5e/0xa0 [ 251.825986][T13895] __se_sys_vmsplice+0x7b5/0x1660 [ 251.826034][T13895] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 251.826065][T13895] ? __pfx_futex_wake+0x10/0x10 [ 251.826160][T13895] do_syscall_64+0x166/0x520 [ 251.826182][T13895] ? trace_irq_disable+0x3b/0x140 [ 251.826207][T13895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.826227][T13895] ? clear_bhb_loop+0x70/0xc0 [ 251.826251][T13895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.826268][T13895] RIP: 0033:0x7f5ab339e159 [ 251.826286][T13895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.826306][T13895] RSP: 002b:00007f5ab15f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 251.826328][T13895] RAX: ffffffffffffffda RBX: 00007f5ab3625fa0 RCX: 00007f5ab339e159 [ 251.826342][T13895] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 251.826353][T13895] RBP: 00007f5ab343506b R08: 0000000000000000 R09: 0000000000000000 [ 251.826364][T13895] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 251.826374][T13895] R13: 00007f5ab3626038 R14: 00007f5ab3625fa0 R15: 00007ffcdac12228 [ 251.826405][T13895] [ 251.957591][T13902] bond2: Removing last arp target with arp_interval on [ 252.111956][T13905] xt_cgroup: no path or classid specified [ 252.214931][T13912] batadv_slave_0: entered promiscuous mode [ 252.229511][T13912] netlink: 'syz.4.2027': attribute type 1 has an invalid length. [ 252.258571][T13912] xt_HMARK: spi-set and port-set can't be combined [ 252.297417][T13911] batadv_slave_0: left promiscuous mode [ 252.382599][T13928] __nla_validate_parse: 2 callbacks suppressed [ 252.382618][T13928] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2032'. [ 252.439712][T13933] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2032'. [ 252.457722][T13920] bridge4: entered promiscuous mode [ 252.523895][T13922] bridge5: entered promiscuous mode [ 252.542899][T13922] bridge6: entered promiscuous mode [ 252.573928][T13920] bridge7: entered promiscuous mode [ 252.592148][T13949] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2032'. [ 252.593569][T13933] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2032'. [ 252.667180][T13922] bridge8: entered promiscuous mode [ 252.709712][T13922] bridge9: entered promiscuous mode [ 252.739615][T13920] bridge10: entered promiscuous mode [ 252.759311][T13920] bridge11: entered promiscuous mode [ 252.823554][T13922] bridge12: entered promiscuous mode [ 252.836719][T13960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2036'. [ 252.841013][T13922] bridge13: entered promiscuous mode [ 252.867314][T13920] bridge14: entered promiscuous mode [ 252.881735][T13920] bridge15: entered promiscuous mode [ 252.881973][T13959] syzkaller1: renamed from bond1 (while UP) [ 252.916682][T13922] bridge16: entered promiscuous mode [ 252.932685][T13922] bridge17: entered promiscuous mode [ 252.942305][T13963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2037'. [ 252.942542][T13967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2037'. [ 252.968518][T13962] syzkaller1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 252.975090][T13962] syzkaller1: (slave lo): making interface the new active one [ 252.997048][T13962] syzkaller1: (slave lo): Enslaving as an active interface with an up link [ 253.014971][T13962] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 253.102520][T13920] bridge18: entered promiscuous mode [ 253.138391][T13977] xt_check_table_hooks: 25 callbacks suppressed [ 253.138409][T13977] x_tables: duplicate underflow at hook 2 [ 253.138474][T13977] x_tables: duplicate underflow at hook 2 [ 253.138548][T13977] x_tables: duplicate underflow at hook 2 [ 253.138616][T13977] x_tables: duplicate underflow at hook 2 [ 253.138679][T13977] x_tables: duplicate underflow at hook 2 [ 253.138744][T13977] x_tables: duplicate underflow at hook 2 [ 253.138823][T13977] x_tables: duplicate underflow at hook 2 [ 253.138887][T13977] x_tables: duplicate underflow at hook 2 [ 253.138950][T13977] x_tables: duplicate underflow at hook 2 [ 253.139023][T13977] x_tables: duplicate underflow at hook 2 [ 253.173928][T13920] bridge19: entered promiscuous mode [ 253.240023][T13982] netlink: 'syz.4.2041': attribute type 1 has an invalid length. [ 253.251230][T13922] bridge20: entered promiscuous mode [ 253.254485][ T5719] lo speed is unknown, defaulting to 1000 [ 253.254566][ T9] lo speed is unknown, defaulting to 1000 [ 253.254682][ T2248] lo speed is unknown, defaulting to 1000 [ 253.254716][ T1632] lo speed is unknown, defaulting to 1000 [ 253.254773][ T5722] lo speed is unknown, defaulting to 1000 [ 253.254828][ T5721] lo speed is unknown, defaulting to 1000 [ 253.256793][T13978] netlink: 'syz.3.2039': attribute type 4 has an invalid length. [ 253.385032][T13986] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2041'. [ 253.429644][T13982] 8021q: adding VLAN 0 to HW filter on device bond1 [ 253.491598][T13983] bond1: (slave veth0_to_bond): making interface the new active one [ 253.493790][T13983] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 253.676868][T14003] netlink: 'syz.3.2046': attribute type 1 has an invalid length. [ 253.781435][T14009] netlink: 'syz.0.2049': attribute type 1 has an invalid length. [ 253.781456][T14009] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2049'. [ 253.900448][T14018] netlink: 'syz.2.2048': attribute type 1 has an invalid length. [ 253.900468][T14018] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2048'. [ 253.900481][T14018] netlink: 'syz.2.2048': attribute type 1 has an invalid length. [ 253.937016][T14018] netlink: 'syz.2.2048': attribute type 1 has an invalid length. [ 253.937039][T14018] netlink: 'syz.2.2048': attribute type 1 has an invalid length. [ 253.981201][T14003] veth7: entered allmulticast mode [ 253.991990][T14003] bond3: (slave veth7): Enslaving as an active interface with a down link [ 254.026157][T14007] bond3: (slave veth0_to_bond): making interface the new active one [ 254.028336][T14007] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 254.101928][T14003] bond0: entered allmulticast mode [ 254.351254][T14045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.602767][T14062] openvswitch: netlink: Missing valid actions attribute. [ 254.602799][T14062] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.753979][T14060] xt_IDLETIMER: timeout value is zero [ 254.817301][T14062] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.817336][T14062] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.969665][T14058] 8021q: VLANs not supported on ip_vti0 [ 255.047492][T14062] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.047527][T14062] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.388812][T14062] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.388848][T14062] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.628735][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.661623][T14062] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.661657][T14062] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.887858][ T31] audit: type=1800 audit(1789950985.333:10): pid=14135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2075" name="memory.events" dev="tmpfs" ino=2208 res=0 errno=0 [ 255.961178][T14133] Unsupported ieee802154 address type: 0 [ 255.961222][T14136] Unsupported ieee802154 address type: 0 [ 256.159229][T14147] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 256.195674][ T7480] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.195706][ T7480] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.265552][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 256.285539][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.285571][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.325831][ T7163] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 256.326081][ T7163] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 256.336018][ T7483] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.336048][ T7483] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.336081][ T7483] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.336103][ T7483] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.345650][ T5721] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 256.524029][T14163] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 256.581599][T14167] Bluetooth: hci0: unsupported parameter 5135 [ 256.581618][T14167] Bluetooth: hci0: unsupported parameter 8192 [ 256.581630][T14167] Bluetooth: hci0: unsupported parameter 5135 [ 256.581641][T14167] Bluetooth: hci0: unsupported parameter 8192 [ 256.898693][ T5721] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 256.965524][ T5721] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 256.965929][T14202] vlan3: entered promiscuous mode [ 256.965946][T14202] geneve1: entered promiscuous mode [ 256.966185][T14202] vlan3: entered allmulticast mode [ 256.966207][T14202] geneve1: entered allmulticast mode [ 257.477498][T14225] __nla_validate_parse: 25 callbacks suppressed [ 257.477512][T14225] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2101'. [ 257.541971][T14227] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 257.565655][ T5721] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 257.902592][T14247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2106'. [ 257.927782][T14247] ipvlan2: entered allmulticast mode [ 257.979112][T14211] lo speed is unknown, defaulting to 1000 [ 258.352494][ T5721] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 258.354401][T14265] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 258.386363][T14269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2112'. [ 258.477993][T14277] netlink: 'syz.2.2115': attribute type 2 has an invalid length. [ 258.479834][T14276] netlink: 'syz.2.2115': attribute type 2 has an invalid length. [ 258.634240][T14277] : entered promiscuous mode [ 258.639385][T14281] netlink: 'syz.4.2117': attribute type 83 has an invalid length. [ 258.949592][T14296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2120'. [ 258.950147][T14294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2120'. [ 258.992748][T14296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2120'. [ 259.140023][T14305] netlink: 'syz.2.2122': attribute type 3 has an invalid length. [ 259.142231][T14305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2122'. [ 259.142795][T14305] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 259.152486][T14303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2121'. [ 259.168443][T14303] Bluetooth: hci0: unsupported parameter 5135 [ 259.168460][T14303] Bluetooth: hci0: unsupported parameter 8192 [ 259.168472][T14303] Bluetooth: hci0: unsupported parameter 5135 [ 259.168482][T14303] Bluetooth: hci0: unsupported parameter 8192 [ 259.225091][T14307] netlink: 'syz.2.2122': attribute type 3 has an invalid length. [ 259.232526][T14308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2122'. [ 259.240507][T14312] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 259.578272][T14326] netlink: 'syz.0.2126': attribute type 1 has an invalid length. [ 259.686067][T14326] 8021q: adding VLAN 0 to HW filter on device bond10 [ 259.813902][T14351] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2129'. [ 259.902722][T14357] 8021q: adding VLAN 0 to HW filter on device syzkaller1 [ 260.025469][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 260.066026][T14367] netlink: 'syz.1.2132': attribute type 1 has an invalid length. [ 260.067652][T14367] openvswitch: netlink: Missing valid actions attribute. [ 260.094724][ T5634] udevd[5634]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 260.204759][T14371] xt_l2tp: unknown flags: 43 [ 260.304299][T14379] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 260.312994][T14379] 0ªX¹¦Dö»: entered allmulticast mode [ 261.263370][T14438] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 261.382151][T14440] netlink: 'syz.1.2157': attribute type 11 has an invalid length. [ 261.453966][T14449] netlink: 'syz.2.2158': attribute type 1 has an invalid length. [ 261.453983][T14449] netlink: 'syz.2.2158': attribute type 2 has an invalid length. [ 261.499224][T14454] tipc: Disabling bearer [ 261.618039][T14466] Set syz1 is full, maxelem 14 reached [ 261.637958][T14466] block nbd0: not configured, cannot reconfigure [ 262.078656][T14495] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 262.352197][T14508] can: request_module (can-proto-5) failed. [ 262.374304][T14512] ip6gre1: entered allmulticast mode [ 262.384061][ T7482] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 262.819869][T14548] __nla_validate_parse: 12 callbacks suppressed [ 262.819887][T14548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2184'. [ 263.109957][T14576] netlink: Unknown conntrack attr (0) [ 263.341932][T14594] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2192'. [ 263.390845][T14599] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2193'. [ 263.391683][T14600] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2193'. [ 263.497304][T14608] ipt_rpfilter: unknown options [ 263.865032][T14631] validate_nla: 2 callbacks suppressed [ 263.865052][T14631] netlink: 'syz.1.2198': attribute type 2 has an invalid length. [ 263.865065][T14631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2198'. [ 263.891967][T14631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2198'. [ 263.891987][T14631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2198'. [ 263.895113][T14631] bond0: left allmulticast mode [ 263.895132][T14631] bond_slave_0: left allmulticast mode [ 263.895175][T14631] bond_slave_1: left allmulticast mode [ 263.922205][T14631] netlink: 'syz.1.2198': attribute type 4 has an invalid length. [ 263.922225][T14631] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2198'. [ 263.946967][T14631] .`: renamed from bond0 [ 264.202973][T14647] netlink: zone id is out of range [ 264.202991][T14647] netlink: del zone limit has 4 unknown bytes [ 264.264194][T14649] gtp0: entered promiscuous mode [ 264.264215][T14649] gtp0: entered allmulticast mode [ 264.754890][T14681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2212'. [ 265.139401][T14693] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 265.174687][T14693] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2216'. [ 265.189014][T14693] bridge0: port 1(1¾x9ÿ) entered disabled state [ 265.332724][T14704] team0 (unregistering): Port device team_slave_0 removed [ 265.356082][T14704] team0 (unregistering): Port device team_slave_1 removed [ 265.416767][T14719] vcan0: entered allmulticast mode [ 265.559334][T14732] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 265.646499][T14738] netlink: 'syz.4.2228': attribute type 9 has an invalid length. [ 265.646519][T14738] netlink: 'syz.4.2228': attribute type 4 has an invalid length. [ 265.959098][T14755] syzkaller0: entered promiscuous mode [ 265.959121][T14755] syzkaller0: entered allmulticast mode [ 266.130699][T14764] xt_check_table_hooks: 55 callbacks suppressed [ 266.130738][T14764] x_tables: duplicate underflow at hook 3 [ 266.345511][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 267.327615][T14815] dvmrp8: entered allmulticast mode [ 267.728228][T14848] nbd: must specify a device to reconfigure [ 267.785517][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 268.508626][T14889] __nla_validate_parse: 26 callbacks suppressed [ 268.508644][T14889] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2268'. [ 268.508699][T14888] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2268'. [ 268.610112][T14894] netlink: 'syz.3.2270': attribute type 4 has an invalid length. [ 268.610134][T14894] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2270'. [ 268.660207][T14903] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2272'. [ 268.660261][T14903] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2272'. [ 268.662725][T14904] netlink: 'syz.4.2273': attribute type 21 has an invalid length. [ 268.693085][T14904] netlink: 'syz.4.2273': attribute type 1 has an invalid length. [ 268.710775][T14904] netlink: 'syz.4.2273': attribute type 1 has an invalid length. [ 268.783687][T14904] bond8: entered promiscuous mode [ 268.787887][T14904] 8021q: adding VLAN 0 to HW filter on device bond8 [ 268.866366][T14915] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2276'. [ 268.870301][T14915] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.870418][T14915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.870745][T14915] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.870847][T14915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.092366][T14929] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2279'. [ 269.166928][T14935] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2282'. [ 269.214837][T14942] netlink: 'syz.1.2282': attribute type 32 has an invalid length. [ 269.214858][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2282'. [ 269.237948][T14943] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 269.278763][T14946] netlink: 'syz.2.2283': attribute type 3 has an invalid length. [ 269.278782][T14946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2283'. [ 269.489824][T14942] bond0: Setting coupled_control to off (0) [ 269.730460][T14973] netlink: 'syz.0.2289': attribute type 11 has an invalid length. [ 269.734093][T14975] netlink: 'syz.0.2289': attribute type 11 has an invalid length. [ 269.954095][T14993] netlink: 'syz.1.2294': attribute type 11 has an invalid length. [ 270.089296][T14996] netlink: 'syz.1.2295': attribute type 1 has an invalid length. [ 270.250403][T15006] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 270.430240][T15024] tipc: Enabling of bearer rejected, media not registered [ 271.480253][T15073] netlink: 'syz.1.2318': attribute type 39 has an invalid length. [ 271.924322][T15105] ip6gre2: entered allmulticast mode [ 271.935203][ T253] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 272.050086][T15111] netlink: 'syz.0.2329': attribute type 2 has an invalid length. [ 272.119495][T15111] : entered promiscuous mode [ 272.211711][T15119] Unsupported ieee802154 address type: 0 [ 272.330375][T15134] netlink: Failed to add %pB helper -22 [ 272.330427][T15134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.499632][T15143] bond8: (slave C): Releasing backup interface [ 272.508008][T15143] bond8: (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 272.510453][T15143] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 272.621653][T15143] tipc: Enabling of bearer rejected, failed to enable media [ 273.545450][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 273.716396][T15222] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 273.959784][T15228] __nla_validate_parse: 15 callbacks suppressed [ 273.959803][T15228] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2359'. [ 274.186125][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 274.337573][T15251] ip6t_hbh: unknown flags 38 [ 274.381159][T15260] syzkaller1: entered promiscuous mode [ 274.381181][T15260] syzkaller1: entered allmulticast mode [ 274.554413][T15267] tap0: tun_chr_ioctl cmd 2148553947 [ 274.674971][T15247] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2363'. [ 274.674995][T15247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2363'. [ 274.686435][T15272] xt_hashlimit: size too large, truncated to 1048576 [ 275.383671][T15310] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2379'. [ 275.410359][T15312] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2379'. [ 275.491549][T15321] netlink: 'syz.3.2384': attribute type 12 has an invalid length. [ 275.678130][T15330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2386'. [ 275.707426][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 275.776539][T15324] batman_adv: batadv0: Adding interface: veth0 [ 275.776562][T15324] batman_adv: batadv0: Interface activated: veth0 [ 276.062579][T15355] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2389'. [ 276.230816][T15362] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2395'. [ 276.230839][T15362] nbd: must specify at least one socket [ 276.258597][T15367] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2398'. [ 276.288003][T15368] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 276.465000][T15375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2402'. [ 276.541392][T15375] 8021q: adding VLAN 0 to HW filter on device bond8 [ 276.549375][T15384] netlink: 'syz.3.2405': attribute type 1 has an invalid length. [ 276.595201][T15384] 8021q: adding VLAN 0 to HW filter on device bond5 [ 276.624195][T15384] bond6: entered promiscuous mode [ 276.624233][T15384] bond6: entered allmulticast mode [ 276.624489][T15384] 8021q: adding VLAN 0 to HW filter on device bond6 [ 276.626374][T15384] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 276.656548][T15391] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 276.690636][T15384] bond3: (slave veth0_to_bond): Releasing active interface [ 276.709172][T15384] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 276.727401][T15396] netlink: 'syz.3.2405': attribute type 1 has an invalid length. [ 276.730326][T15384] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 276.780734][T15397] bond7: entered promiscuous mode [ 276.780790][T15397] bond7: entered allmulticast mode [ 276.781231][T15397] 8021q: adding VLAN 0 to HW filter on device bond7 [ 277.765217][T15461] netlink: 'syz.3.2426': attribute type 1 has an invalid length. [ 277.873406][T15469] netlink: 'syz.1.2427': attribute type 1 has an invalid length. [ 278.012105][T15482] team0: Device gtp2 is up. Set it down before adding it as a team port [ 278.070127][T15485] openvswitch: netlink: Multiple metadata blocks provided [ 278.183213][T15488] netlink: 'syz.3.2432': attribute type 10 has an invalid length. [ 278.223832][T15499] netlink: 'syz.4.2436': attribute type 3 has an invalid length. [ 278.320136][T15505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.436332][T15513] xt_policy: output policy not valid in PREROUTING and INPUT [ 278.646091][T15527] bond10: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 278.694576][T15527] bond10 (unregistering): Released all slaves [ 278.762078][T15531] vlan4: entered promiscuous mode [ 278.840376][T15533] netlink: 'syz.0.2446': attribute type 4 has an invalid length. [ 278.999526][T15545] __nla_validate_parse: 16 callbacks suppressed [ 278.999546][T15545] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2452'. [ 279.076695][T15550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.079967][T15553] netlink: 'syz.2.2454': attribute type 7 has an invalid length. [ 279.079984][T15553] netlink: 'syz.2.2454': attribute type 8 has an invalid length. [ 279.128852][T15547] bond9: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 279.149591][T15547] bond9 (unregistering): Released all slaves [ 279.215111][T15560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2453'. [ 279.321702][T15572] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2457'. [ 279.321726][T15572] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2457'. [ 279.892819][T15609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2470'. [ 279.893619][T15609] xt_cgroup: path and classid specified [ 280.223380][T15640] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2476'. [ 280.238787][T15640] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2476'. [ 280.279223][T15645] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2476'. [ 280.297003][T15642] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2476'. [ 280.389442][T15652] bond10: Removing last arp target with arp_interval on [ 280.579934][T15661] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2481'. [ 280.878719][T15680] openvswitch: netlink: Key type 123 is out of range max 32 [ 280.993217][T15687] openvswitch: netlink: Key type 123 is out of range max 32 [ 281.084052][T15693] syz_tun: entered allmulticast mode [ 281.084748][T15700] tipc: Failed to obtain node identity [ 281.084776][T15700] tipc: Enabling of bearer rejected, failed to enable media [ 281.114886][T15693] xt_addrtype: ipv6 does not support BROADCAST matching [ 281.129782][T15691] syz_tun: left allmulticast mode [ 281.138759][T15705] ªªªªª»: renamed from dummy0 [ 281.170348][T15705] nbd: couldn't find device at index 15663104 [ 281.170514][T15706] nbd: couldn't find device at index 15663104 [ 281.217672][T15708] validate_nla: 4 callbacks suppressed [ 281.217691][T15708] netlink: 'syz.3.2491': attribute type 21 has an invalid length. [ 281.289835][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.290677][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.327548][ T7484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.328478][ T7484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.328909][ T7484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.373737][ T7483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.152043][T15727] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 282.243808][T15729] syzkaller0: entered promiscuous mode [ 282.243830][T15729] syzkaller0: entered allmulticast mode [ 282.507036][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 282.670756][T15749] nbd0: detected capacity change from 0 to 63 [ 282.674443][ T4932] block nbd0: Receive control failed (result -32) [ 282.683442][ T2052] block nbd0: Dead connection, failed to find a fallback [ 282.683462][ T2052] block nbd0: shutting down sockets [ 282.683528][ T2052] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 282.683585][ T2052] Buffer I/O error on dev nbd0, logical block 0, async page read [ 282.722832][ T2052] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 282.722861][ T2052] Buffer I/O error on dev nbd0, logical block 1, async page read [ 282.726387][ T2052] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 282.726417][ T2052] Buffer I/O error on dev nbd0, logical block 2, async page read [ 282.767901][ T2017] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 282.769339][ T2017] Buffer I/O error on dev nbd0, logical block 3, async page read [ 282.770449][ T2017] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 282.770473][ T2017] Buffer I/O error on dev nbd0, logical block 0, async page read [ 282.770604][ T2017] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 282.770626][ T2017] Buffer I/O error on dev nbd0, logical block 1, async page read [ 282.770779][ T2017] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 282.770801][ T2017] Buffer I/O error on dev nbd0, logical block 2, async page read [ 282.770892][ T2017] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 282.770914][ T2017] Buffer I/O error on dev nbd0, logical block 3, async page read [ 282.771017][ T2017] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 282.771038][ T2017] Buffer I/O error on dev nbd0, logical block 0, async page read [ 282.771126][ T2017] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 282.771148][ T2017] Buffer I/O error on dev nbd0, logical block 1, async page read [ 282.781680][T15433] ldm_validate_partition_table(): Disk read failed. [ 282.783936][T15433] Dev nbd0: unable to read RDB block 0 [ 282.794609][T15433] nbd0: unable to read partition table [ 282.833076][T15756] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 282.937969][T15433] ldm_validate_partition_table(): Disk read failed. [ 282.949415][T15433] Dev nbd0: unable to read RDB block 0 [ 282.951196][T15433] nbd0: unable to read partition table [ 283.178649][T15769] batman_adv: batadv0: Adding interface: syzkaller0 [ 283.178669][T15769] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.178696][T15769] batman_adv: batadv0: Interface activated: syzkaller0 [ 283.354807][T15781] netlink: 'syz.2.2516': attribute type 10 has an invalid length. [ 283.411073][T15784] netlink: 'syz.2.2516': attribute type 10 has an invalid length. [ 283.785523][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 283.814298][T15768] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 283.883475][T15768] batman_adv: batadv0: Removing interface: syzkaller0 [ 284.117287][T15809] netlink: 'syz.1.2523': attribute type 11 has an invalid length. [ 284.164319][T15815] netlink: 'syz.1.2523': attribute type 11 has an invalid length. [ 284.234197][T15821] netlink: 'syz.2.2524': attribute type 8 has an invalid length. [ 284.234462][T15823] netlink: 'syz.2.2524': attribute type 8 has an invalid length. [ 284.502832][T15832] ip6t_srh: unknown srh invflags 4000 [ 284.955978][T15855] netlink: 'syz.1.2533': attribute type 1 has an invalid length. [ 284.956142][T15856] block nbd1: Unsupported socket: should be TCP or UNIX. [ 285.102631][T15862] netlink: 'syz.3.2535': attribute type 21 has an invalid length. [ 285.175031][T15868] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 285.321404][T15878] __nla_validate_parse: 10 callbacks suppressed [ 285.322628][T15878] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2538'. [ 285.328364][T15879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2539'. [ 285.354555][T15882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2540'. [ 285.410251][T15887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2540'. [ 285.482531][T15890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2541'. [ 285.644067][T15904] netlink: 'syz.0.2543': attribute type 15 has an invalid length. [ 285.644089][T15904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2543'. [ 285.917567][T15919] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 285.987611][T15919] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2548'. [ 286.190829][T15937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2554'. [ 286.670071][T15985] netlink: 'syz.4.2564': attribute type 21 has an invalid length. [ 286.670094][T15985] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2564'. [ 286.670154][T15985] netlink: 'syz.4.2564': attribute type 4 has an invalid length. [ 286.670167][T15985] netlink: 'syz.4.2564': attribute type 5 has an invalid length. [ 286.670177][T15985] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2564'. [ 287.507863][T16042] IPVS: Unknown mcast interface: rose0 [ 287.753071][T16067] tipc: Enabling of bearer rejected, failed to enable media [ 288.319256][T16104] af_packet: tpacket_rcv: packet too big, clamped from 68 to 4294967272. macoff=96 [ 288.510467][T16114] netlink: 'syz.1.2608': attribute type 39 has an invalid length. [ 288.606936][T16120] ¾x9ÿ: renamed from bridge_slave_0 [ 289.119619][T16156] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 289.541808][T16190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.594749][T16194] 8021q: adding VLAN 0 to HW filter on device bond15 [ 289.663894][T16194] 8021q: adding VLAN 0 to HW filter on device bond16 [ 289.699094][T16198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.039101][T16224] netlink: 'syz.2.2637': attribute type 1 has an invalid length. [ 290.129798][T16224] 8021q: adding VLAN 0 to HW filter on device bond17 [ 290.185484][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 290.200015][T16224] bond17: (slave bridge23): making interface the new active one [ 290.201349][T16224] bond17: (slave bridge23): Enslaving as an active interface with an up link [ 290.368344][T16243] __nla_validate_parse: 18 callbacks suppressed [ 290.368363][T16243] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2638'. [ 290.368612][T16238] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2638'. [ 290.443359][T16248] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2640'. [ 290.539275][T16259] syzkaller0: entered promiscuous mode [ 290.539294][T16259] syzkaller0: entered allmulticast mode [ 290.563666][T16253] netlink: 'syz.0.2641': attribute type 1 has an invalid length. [ 290.766948][T16276] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 290.766970][T16276] syzkaller1: group set to 0 [ 290.794469][T16277] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2645'. [ 290.950552][T16285] netlink: 'syz.4.2647': attribute type 1 has an invalid length. [ 291.042323][T16293] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 291.062869][T16285] 8021q: adding VLAN 0 to HW filter on device bond11 [ 291.184636][T16300] xt_l2tp: missing protocol rule (udp|l2tpip) [ 291.206186][T16300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2652'. [ 291.231089][T16305] 8021q: VLANs not supported on syzkaller1 [ 291.713374][T16336] openvswitch: netlink: Message has 8 unknown bytes. [ 291.948984][T16348] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2664'. [ 291.968056][T16348] netlink: 'syz.4.2664': attribute type 6 has an invalid length. [ 291.968090][T16348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2664'. [ 292.218714][T16368] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 268435491, id = 0 [ 292.229050][T16359] netlink: 'syz.0.2669': attribute type 9 has an invalid length. [ 292.229068][T16359] netlink: 'syz.0.2669': attribute type 4 has an invalid length. [ 292.547254][T16382] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2672'. [ 292.748176][T16399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2675'. [ 292.928221][T16396] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.928349][T16396] bridge0: port 2(bridge_slave_1) entered listening state [ 292.928703][T16396] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.928896][T16396] bridge0: port 1(bridge_slave_0) entered listening state [ 293.002212][T16396] A link change request failed with some changes committed already. Interface ÿÿÿÿÿÿ may have been left with an inconsistent configuration, please check. [ 293.003827][T16399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2675'. [ 293.093032][T16412] netlink: 'syz.0.2679': attribute type 1 has an invalid length. [ 293.093053][T16412] netlink: 'syz.0.2679': attribute type 3 has an invalid length. [ 293.118610][T16414] sctp: [Deprecated]: syz.1.2678 (pid 16414) Use of struct sctp_assoc_value in delayed_ack socket option. [ 293.118610][T16414] Use struct sctp_sack_info instead [ 293.370699][T16428] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 293.384141][T16428] openvswitch: netlink: IP tunnel dst address not specified [ 294.178949][T16463] syzkaller0: entered promiscuous mode [ 294.178970][T16463] syzkaller0: entered allmulticast mode [ 294.199709][T16463] netlink: 'syz.4.2690': attribute type 10 has an invalid length. [ 294.212587][T16463] team0: Device veth0_macvtap failed to register rx_handler [ 294.502302][T16437] syz.0.2683 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 294.502339][T16437] CPU: 0 UID: 0 PID: 16437 Comm: syz.0.2683 Not tainted syzkaller #0 PREEMPT(full) [ 294.502359][T16437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 294.502370][T16437] Call Trace: [ 294.502377][T16437] [ 294.502385][T16437] dump_stack_lvl+0xe8/0x150 [ 294.502416][T16437] dump_header+0xd3/0x4b0 [ 294.502441][T16437] oom_kill_process+0x3ab/0x9e0 [ 294.502470][T16437] out_of_memory+0x1064/0x1480 [ 294.502490][T16437] ? try_charge_memcg+0xc32/0x15e0 [ 294.502525][T16437] ? __pfx_out_of_memory+0x10/0x10 [ 294.502544][T16437] ? do_raw_spin_unlock+0xf5/0x200 [ 294.502581][T16437] try_charge_memcg+0xcdf/0x15e0 [ 294.502622][T16437] ? __pfx_try_charge_memcg+0x10/0x10 [ 294.502664][T16437] ? charge_memcg+0x47/0x310 [ 294.502688][T16437] charge_memcg+0x1dd/0x310 [ 294.502709][T16437] ? mem_cgroup_swapin_charge_folio+0x2b/0x390 [ 294.502729][T16437] mem_cgroup_swapin_charge_folio+0x25a/0x390 [ 294.502760][T16437] swap_cache_alloc_folio+0x4de/0x990 [ 294.502802][T16437] swap_cache_read_folio+0x44/0x120 [ 294.502838][T16437] swap_cluster_readahead+0x392/0x630 [ 294.502867][T16437] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 294.502891][T16437] ? __css_rstat_updated+0x237/0x540 [ 294.502936][T16437] swapin_readahead+0x1a3/0xc50 [ 294.502971][T16437] ? __pfx_swapin_readahead+0x10/0x10 [ 294.503000][T16437] ? swap_table_get+0x1e/0x260 [ 294.503024][T16437] ? swap_table_get+0x1e/0x260 [ 294.503046][T16437] ? swap_table_get+0x1e/0x260 [ 294.503069][T16437] ? swap_table_get+0x216/0x260 [ 294.503095][T16437] ? swap_cache_get_folio+0x2e7/0x2f0 [ 294.503127][T16437] do_swap_page+0x3fb/0x4c10 [ 294.503169][T16437] ? __lock_acquire+0x747/0x2de0 [ 294.503187][T16437] ? do_swap_page+0x126/0x4c10 [ 294.503211][T16437] ? __pfx_do_swap_page+0x10/0x10 [ 294.503232][T16437] ? __pte_offset_map+0x1ae/0x240 [ 294.503261][T16437] ? pte_offset_map_rw_nolock+0xea/0x160 [ 294.503289][T16437] handle_mm_fault+0x1398/0x3750 [ 294.503322][T16437] ? handle_mm_fault+0xf1/0x3750 [ 294.503354][T16437] ? __pfx_handle_mm_fault+0x10/0x10 [ 294.503375][T16437] ? lock_vma_under_rcu+0x45a/0x500 [ 294.503427][T16437] do_user_addr_fault+0xa4f/0x1340 [ 294.503457][T16437] ? trace_page_fault_user+0x84/0x1e0 [ 294.503478][T16437] exc_page_fault+0x6a/0xc0 [ 294.503500][T16437] asm_exc_page_fault+0x26/0x30 [ 294.503519][T16437] RIP: 0033:0x7faa34959274 [ 294.503535][T16437] Code: ff ff ff f0 83 88 08 03 00 00 10 64 48 8b 3c 25 00 03 00 00 e8 9d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca <64> 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 80 3d 2e a4 29 00 00 [ 294.503549][T16437] RSP: 002b:00007ffe0260ffe0 EFLAGS: 00010246 [ 294.503566][T16437] RAX: 00000000fffffffa RBX: 00007faa34c25fa0 RCX: 0000000000000000 [ 294.503578][T16437] RDX: 00007ffe02610020 RSI: 0000000000000000 RDI: 0000000000000000 [ 294.503589][T16437] RBP: 00007faa34c27da0 R08: 0000000000000000 R09: 0000000000000000 [ 294.503599][T16437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000047deb [ 294.503610][T16437] R13: 00007faa34c2609c R14: 0000000000047b39 R15: 00007faa34c26090 [ 294.503640][T16437] [ 294.637343][T16437] memory: usage 307200kB, limit 307200kB, failcnt 518 [ 294.637363][T16437] memory+swap: usage 307360kB, limit 9007199254740988kB, failcnt 0 [ 294.637375][T16437] kmem: usage 307156kB, limit 9007199254740988kB, failcnt 0 [ 294.637386][T16437] Memory cgroup stats for /syz0: [ 294.637814][T16437] cache 0 [ 294.637824][T16437] rss 0 [ 294.637830][T16437] rss_huge 0 [ 294.637836][T16437] shmem 0 [ 294.637841][T16437] mapped_file 0 [ 294.637847][T16437] dirty 0 [ 294.637853][T16437] writeback 0 [ 294.637859][T16437] workingset_refault_anon 27 [ 294.637866][T16437] workingset_refault_file 2 [ 294.637873][T16437] swap 163840 [ 294.637879][T16437] swapcached 319488 [ 294.637885][T16437] pgpgin 59755 [ 294.637891][T16437] pgpgout 59744 [ 294.637898][T16437] pgfault 105102 [ 294.637904][T16437] pgmajfault 16 [ 294.637910][T16437] inactive_anon 16384 [ 294.637916][T16437] active_anon 4096 [ 294.637923][T16437] inactive_file 0 [ 294.637929][T16437] active_file 0 [ 294.637935][T16437] unevictable 0 [ 294.637941][T16437] hierarchical_memory_limit 314572800 [ 294.637948][T16437] hierarchical_memsw_limit 9223372036854771712 [ 294.637955][T16437] total_cache 0 [ 294.637961][T16437] total_rss 0 [ 294.637967][T16437] total_rss_huge 0 [ 294.637973][T16437] total_shmem 0 [ 294.637980][T16437] total_mapped_file 0 [ 294.637986][T16437] total_dirty 0 [ 294.637992][T16437] total_writeback 0 [ 294.637999][T16437] total_workingset_refault_anon 27 [ 294.638006][T16437] total_workingset_refault_file 2 [ 294.638013][T16437] total_swap 163840 [ 294.638019][T16437] total_swapcached 319488 [ 294.638026][T16437] total_pgpgin 59755 [ 294.638033][T16437] total_pgpgout 59744 [ 294.638039][T16437] total_pgfault 105102 [ 294.638045][T16437] total_pgmajfault 16 [ 294.638051][T16437] total_inactive_anon 16384 [ 294.638058][T16437] total_active_anon 4096 [ 294.638064][T16437] total_inactive_file 0 [ 294.638071][T16437] total_active_file 0 [ 294.638077][T16437] total_unevictable 0 [ 294.638084][T16437] anon_cost 0 [ 294.638089][T16437] file_cost 0 [ 294.638096][T16437] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2683,pid=16437,uid=0 [ 294.639713][T16437] Memory cgroup out of memory: Killed process 16437 (syz.0.2683) total-vm:102384kB, anon-rss:1252kB, file-rss:23372kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 295.082839][T16483] sctp: [Deprecated]: syz.3.2695 (pid 16483) Use of int in max_burst socket option deprecated. [ 295.082839][T16483] Use struct sctp_assoc_value instead [ 295.122217][T16479] syzkaller1: entered promiscuous mode [ 295.122238][T16479] lo: entered promiscuous mode [ 295.122415][T16479] syzkaller1: entered allmulticast mode [ 295.122427][T16479] lo: entered allmulticast mode [ 295.279361][T16491] veth0_to_bond: default FDB implementation only supports local addresses [ 295.779086][ T31] audit: type=1800 audit(1789951025.213:11): pid=16517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2704" name="memory.events" dev="tmpfs" ino=2771 res=0 errno=0 [ 296.702792][T16569] __nla_validate_parse: 7 callbacks suppressed [ 296.702811][T16569] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2717'. [ 296.752401][T16573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.772710][T16573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.803377][T16575] netlink: 'syz.0.2721': attribute type 61 has an invalid length. [ 296.804437][T16575] netlink: 'syz.0.2721': attribute type 1 has an invalid length. [ 296.860668][T16577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2721'. [ 296.891357][T16575] 8021q: adding VLAN 0 to HW filter on device bond12 [ 296.990576][T16575] bond12: (slave bridge3): making interface the new active one [ 296.994062][T16575] bond12: (slave bridge3): Enslaving as an active interface with an up link [ 298.497147][T16656] x_tables: unsorted entry at hook 2 [ 298.670013][T16670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2746'. [ 298.741498][T16674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2748'. [ 298.741530][T16674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.754907][T16670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2746'. [ 298.856394][T16685] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2752'. [ 298.856672][T16685] smc: ib device syz2 ibport 1 applied user defined pnetid S [ 298.963763][T16694] netlink: 'syz.3.2753': attribute type 24 has an invalid length. [ 298.975322][T16696] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 299.145481][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 299.194827][T16713] macvlan0: entered promiscuous mode [ 299.195114][T16713] macvlan0: entered allmulticast mode [ 299.311294][T16706] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2759'. [ 299.436339][T16732] x_tables: duplicate underflow at hook 1 [ 299.569684][T16737] TCP: TCP_TX_DELAY enabled [ 299.570965][T16737] netlink: 'syz.2.2768': attribute type 6 has an invalid length. [ 299.630848][T16739] xt_NETMAP: bad MAP_IPS. [ 299.773759][T16749] netlink: 'syz.3.2769': attribute type 1 has an invalid length. [ 299.806745][T16750] netlink: 'syz.2.2771': attribute type 10 has an invalid length. [ 299.877720][T16749] bridge1: entered promiscuous mode [ 299.930863][T16750] veth0_vlan: entered allmulticast mode [ 299.966403][T16750] team0: Device veth0_vlan failed to register rx_handler [ 300.069811][T16753] bridge1: entered promiscuous mode [ 300.172650][T16752] vlan5: entered promiscuous mode [ 300.172671][T16752] hsr0: entered promiscuous mode [ 300.179782][T16752] vlan5: entered allmulticast mode [ 300.179801][T16752] hsr0: entered allmulticast mode [ 300.179812][T16752] hsr_slave_0: entered allmulticast mode [ 300.179826][T16752] hsr_slave_1: entered allmulticast mode [ 300.269091][T16765] netlink: 'syz.0.2774': attribute type 1 has an invalid length. [ 300.326319][T16766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2774'. [ 300.346795][T16765] 8021q: adding VLAN 0 to HW filter on device bond13 [ 300.481996][T16730] 8021q: adding VLAN 0 to HW filter on device .` [ 300.498303][ T5721] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 300.523055][T16730] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 300.551024][ T30] syz2: Port: 1 Link ACTIVE [ 300.612200][T16785] h: entered promiscuous mode [ 300.806648][T16793] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20000 [ 300.808927][T16795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.835483][ T5721] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 301.012965][T16810] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2787'. [ 301.031292][T16810] ip6gre3: entered promiscuous mode [ 301.031314][T16810] ip6gre3: entered allmulticast mode [ 301.172005][T16815] syzkaller1: entered promiscuous mode [ 301.172026][T16815] syzkaller1: entered allmulticast mode [ 301.490889][T16837] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2793'. [ 301.544286][T16846] netlink: 'syz.4.2797': attribute type 1 has an invalid length. [ 301.961932][T16871] netlink: 'syz.1.2805': attribute type 2 has an invalid length. [ 301.988675][T16871] vlan4: entered allmulticast mode [ 301.988697][T16871] bond0: entered allmulticast mode [ 302.048169][T16873] netlink: 'syz.4.2806': attribute type 11 has an invalid length. [ 302.049936][T16873] __nla_validate_parse: 1 callbacks suppressed [ 302.049950][T16873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2806'. [ 302.259711][T16884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2809'. [ 302.433369][T16890] xt_l2tp: invalid flags combination: 0 [ 302.554444][T16897] vlan6: entered allmulticast mode [ 302.554465][T16897] bond0: entered allmulticast mode [ 302.566181][T16897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2814'. [ 302.566240][T16897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2814'. [ 302.619861][T16903] Cannot find del_set index 4 as target [ 302.639361][T16904] Cannot find del_set index 4 as target [ 302.699095][T16908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2816'. [ 302.699584][T16909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2816'. [ 302.756369][T16914] netlink: 'syz.3.2818': attribute type 1 has an invalid length. [ 302.818371][T16914] 8021q: adding VLAN 0 to HW filter on device bond9 [ 302.879375][T16914] bond9: (slave gretap1): making interface the new active one [ 302.881033][T16914] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 303.069222][T16938] netlink: 'syz.3.2823': attribute type 2 has an invalid length. [ 303.105935][T16938] sit2: entered promiscuous mode [ 303.105957][T16938] sit2: entered allmulticast mode [ 303.268898][T16946] nbd: nbd0 already in use [ 303.380292][T16965] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 303.461840][T16964] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2830'. [ 303.683685][T16985] 8021q: VLANs not supported on lo [ 304.834188][T17020] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2845'. [ 304.834219][T17020] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 305.091408][T17038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2848'. [ 305.224402][T17034] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2847'. [ 305.450298][T17065] bond10 (unregistering): Released all slaves [ 305.827515][T17100] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 306.010756][T17114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.040215][T17114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.058630][T17116] tipc: Enabling of bearer rejected, failed to enable media [ 306.604554][T17146] validate_nla: 1 callbacks suppressed [ 306.604573][T17146] netlink: 'syz.1.2880': attribute type 22 has an invalid length. [ 306.652037][T17146] netlink: 'syz.1.2880': attribute type 22 has an invalid length. [ 306.825783][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 306.958007][T17171] bond10 (unregistering): Released all slaves [ 307.162783][T17189] IPVS: length: 4096 != 8 [ 307.221351][T17191] __nla_validate_parse: 7 callbacks suppressed [ 307.221370][T17191] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2891'. [ 307.492992][T17214] xt_l2tp: invalid flags combination: 0 [ 307.715662][T17229] ipt_ECN: cannot use operation on non-tcp rule [ 307.822153][T17236] siw: device registration error -23 [ 308.045858][T17245] netlink: 'syz.0.2903': attribute type 5 has an invalid length. [ 308.045879][T17245] netlink: 'syz.0.2903': attribute type 9 has an invalid length. [ 308.045891][T17245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2903'. [ 308.107820][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 308.108428][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 308.264925][T17242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2902'. [ 308.599735][T17265] netlink: 'syz.4.2910': attribute type 1 has an invalid length. [ 308.953869][T17274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2912'. [ 309.171402][ T5618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 309.187431][ T5618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 309.201104][ T5618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 309.214217][ T5618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 309.217503][ T5618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 309.287521][T17289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2918'. [ 309.289189][T17289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.292931][ T4932] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 309.293245][ T4932] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 309.294452][ T4932] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 309.297617][ T4932] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 309.299111][ T4932] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 309.333853][T17285] netlink: 'syz.4.2917': attribute type 83 has an invalid length. [ 309.426272][T17285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2917'. [ 309.437637][T17286] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2917'. [ 309.463069][T17285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2917'. [ 309.463300][T17285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2917'. [ 309.463520][T17285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2917'. [ 309.501031][T17262] netlink: 'syz.3.2908': attribute type 1 has an invalid length. [ 309.968492][T17311] macvlan1: entered allmulticast mode [ 309.982457][T17323] xt_hashlimit: size too large, truncated to 1048576 [ 309.987814][T17311] bond18: (slave macvlan1): Enslaving as an active interface with an up link [ 310.059942][T17326] xt_hashlimit: size too large, truncated to 1048576 [ 310.614774][T17356] tap0: tun_chr_ioctl cmd 1074025672 [ 310.614795][T17356] tap0: ignored: set checksum disabled [ 310.656492][T17356] netlink: 'syz.4.2934': attribute type 10 has an invalid length. [ 310.665512][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 310.678298][T17356] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.688461][T17356] team0: entered allmulticast mode [ 310.688480][T17356] team_slave_0: entered allmulticast mode [ 310.688495][T17356] team_slave_1: entered allmulticast mode [ 310.696564][T17356] bond0: (slave team0): Enslaving as an active interface with an up link [ 311.056912][T17281] lo speed is unknown, defaulting to 1000 [ 311.065751][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.066138][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.066479][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.071535][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.071901][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.072253][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.072595][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.072940][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.093864][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.094258][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.094591][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.094923][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.096646][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.102283][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.117380][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.117754][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.118090][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.118442][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.118773][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.143892][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.144281][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.144631][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.144963][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.160781][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.161671][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.162021][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.164618][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.172730][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.173117][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.173458][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.173808][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.178437][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.178805][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.179153][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.179525][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.183325][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.183757][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.184095][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.184441][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.193728][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.194072][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.194899][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.201314][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.201674][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.202020][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.204547][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.206222][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.206570][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.209569][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.209913][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.211233][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.213582][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.213960][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.214314][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.221482][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.221865][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.222641][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.254373][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.254769][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.255120][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.257148][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.261296][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.261669][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.262018][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.264624][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 311.388529][ T5618] Bluetooth: hci5: command tx timeout [ 311.759616][T17387] 0: reclassify loop, rule prio 0, protocol 03 [ 311.995894][T17401] netlink: 'syz.2.2944': attribute type 1 has an invalid length. [ 311.996860][T17402] netlink: 'syz.4.2943': attribute type 29 has an invalid length. [ 312.045513][T17401] bond19: entered promiscuous mode [ 312.045883][T17401] 8021q: adding VLAN 0 to HW filter on device bond19 [ 312.100895][T17397] netlink: 'syz.4.2943': attribute type 10 has an invalid length. [ 312.122976][T17402] syzkaller1: left promiscuous mode [ 312.123001][T17402] lo: left promiscuous mode [ 312.123175][T17402] syzkaller1: left allmulticast mode [ 312.123188][T17402] lo: left allmulticast mode [ 312.125070][T17281] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.157635][T17281] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.157803][T17281] bridge_slave_0: entered allmulticast mode [ 312.161088][T17281] bridge_slave_0: entered promiscuous mode [ 312.188594][T17281] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.188699][T17281] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.188914][T17281] bridge_slave_1: entered allmulticast mode [ 312.190869][T17281] bridge_slave_1: entered promiscuous mode [ 312.361155][T17401] bond19: (slave bridge24): making interface the new active one [ 312.361215][T17401] bridge24: entered promiscuous mode [ 312.379412][T17401] bond19: (slave bridge24): Enslaving as an active interface with an up link [ 312.423893][T17397] ip6gre2: entered allmulticast mode [ 312.525009][T17281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.532816][T17281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.626703][T17431] __nla_validate_parse: 22 callbacks suppressed [ 312.626723][T17431] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2948'. [ 312.645112][T17281] team0: Port device team_slave_0 added [ 312.663344][T17281] team0: Port device team_slave_1 added [ 312.710104][T17281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.710122][T17281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.710146][T17281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.711983][T17281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.711996][T17281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.712017][T17281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.166608][T17440] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2949'. [ 313.456244][T17281] hsr_slave_0: entered promiscuous mode [ 313.463715][T17281] hsr_slave_1: entered promiscuous mode [ 313.465349][ T5618] Bluetooth: hci5: command tx timeout [ 313.465486][T17281] debugfs: 'hsr0' already exists in 'hsr' [ 313.465514][T17281] Cannot create hsr debugfs directory [ 313.637635][T17451] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2954'. [ 313.664694][T17451] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2954'. [ 313.853741][T17457] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 314.086196][T17281] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.086232][T17281] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.159695][T17470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2960'. [ 314.301996][T17476] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2963'. [ 314.304800][T17466] team0: Device ipvlan0 failed to register rx_handler [ 314.418056][T17473] gre2: entered promiscuous mode [ 314.516448][T17281] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.516482][T17281] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.535204][T17486] netlink: 'syz.3.2964': attribute type 1 has an invalid length. [ 314.535364][T17486] netlink: 'syz.3.2964': attribute type 2 has an invalid length. [ 314.721823][T17281] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.721857][T17281] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.781508][T17503] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 314.845647][T17281] netdevsim netdevsim1  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.845680][T17281] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.947061][T17507] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2973'. [ 315.111727][T17519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2976'. [ 315.152446][T17516] macvtap0: entered allmulticast mode [ 315.152467][T17516] veth0_macvtap: entered allmulticast mode [ 315.214830][T17281] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 315.229825][T17281] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 315.230716][T17281] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 315.253026][T17281] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 315.253818][T17281] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 315.278885][T17281] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 315.282021][T17281] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 315.303455][T17281] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 315.374556][T17533] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2978'. [ 315.406011][T17531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2977'. [ 315.484001][T17531] hsr_slave_1 (unregistering): left promiscuous mode [ 315.505071][T17537] mac80211_hwsim hwsim18 ÿ: renamed from wlan1 [ 315.545644][ T5618] Bluetooth: hci5: command tx timeout [ 315.580960][T17281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.632959][T17281] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.643167][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.643265][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.675264][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.675365][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.724811][T17601] netlink: 'syz.3.2995': attribute type 2 has an invalid length. [ 317.052775][T17281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.068948][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.226756][T17626] tipc: Enabled bearer , priority 0 [ 317.293955][T17626] syzkaller0: entered promiscuous mode [ 317.293980][T17626] syzkaller0: entered allmulticast mode [ 317.294573][T17626] tipc: Resetting bearer [ 317.303054][T17281] veth0_vlan: entered promiscuous mode [ 317.390201][ T7487] tipc: Resetting bearer [ 317.426876][T17628] ip6tnl1: entered promiscuous mode [ 317.426899][T17628] ip6tnl1: entered allmulticast mode [ 317.431617][T17625] tipc: Resetting bearer [ 317.632454][ T5618] Bluetooth: hci5: command tx timeout [ 318.600007][T17650] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 318.637842][T17651] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 319.714831][T17625] tipc: Disabling bearer [ 319.741146][T17281] veth1_vlan: entered promiscuous mode [ 319.872036][T17281] veth0_macvtap: entered promiscuous mode [ 319.908897][T17281] veth1_macvtap: entered promiscuous mode [ 319.914143][T17656] netlink: 'syz.3.3011': attribute type 83 has an invalid length. [ 320.010436][T17281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.039291][T17671] __nla_validate_parse: 2 callbacks suppressed [ 320.039309][T17671] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3016'. [ 320.048645][T17281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.177618][ T7165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.177657][ T7165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.177685][ T7165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.177712][ T7165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.344343][ T7487] tipc: Subscription rejected, illegal request [ 320.370318][T17678] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3021'. [ 320.384997][T17679] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3021'. [ 320.414927][T17678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3021'. [ 320.439691][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.439716][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.448780][T17678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3021'. [ 320.449339][T17681] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3019'. [ 320.610143][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.610157][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.674474][T17701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3025'. [ 320.741517][T17703] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3026'. [ 321.060048][T17713] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2913'. [ 321.060071][T17713] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2913'. [ 321.138957][ T4932] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 321.143419][ T4932] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 321.144127][ T4932] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 321.161550][ T4932] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 321.178156][ T4932] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 322.074874][T17763] netlink: 'syz.2.3037': attribute type 25 has an invalid length. [ 322.193088][T17769] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 322.193189][T17769] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 322.193285][T17769] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 322.193376][T17769] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 322.193465][T17769] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 322.193914][T17769] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 322.194017][T17769] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 322.194105][T17769] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 322.194191][T17769] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 322.194280][T17769] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 322.326800][T17769] xt_hashlimit: size too large, truncated to 1048576 [ 322.835881][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 323.236480][ T4932] Bluetooth: hci4: command tx timeout [ 323.465405][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.465428][ C0] bridge0: topology change detected, propagating [ 323.465797][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.465813][ C0] bridge0: topology change detected, propagating [ 323.571197][T17722] lo speed is unknown, defaulting to 1000 [ 323.638838][T17851] netlink: 'syz.0.3055': attribute type 1 has an invalid length. [ 323.663530][T17852] nbd: must specify at least one socket [ 324.363168][T17722] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.363331][T17722] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.363476][T17722] bridge_slave_0: entered allmulticast mode [ 324.394809][T17722] bridge_slave_0: entered promiscuous mode [ 324.417244][T17722] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.417345][T17722] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.420045][T17722] bridge_slave_1: entered allmulticast mode [ 324.448686][T17722] bridge_slave_1: entered promiscuous mode [ 324.462757][T17897] netlink: 'syz.2.3063': attribute type 2 has an invalid length. [ 324.513027][T17722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.526944][T17722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.579911][T17722] team0: Port device team_slave_0 added [ 324.616268][T17722] team0: Port device team_slave_1 added [ 324.667932][T17722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.667949][T17722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.667972][T17722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.670178][T17722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.670191][T17722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.670213][T17722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.911302][T17722] hsr_slave_0: entered promiscuous mode [ 324.922126][T17722] hsr_slave_1: entered promiscuous mode [ 324.925186][T17722] debugfs: 'hsr0' already exists in 'hsr' [ 324.925205][T17722] Cannot create hsr debugfs directory [ 325.160536][T17722] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.160568][T17722] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.232602][T17913] xt_ecn: cannot match TCP bits for non-tcp packets [ 325.247948][T17722] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.247980][T17722] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.305988][ T4932] Bluetooth: hci4: command tx timeout [ 325.391619][T17722] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.391652][T17722] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.560294][T17722] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.560328][T17722] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.220265][T17722] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 326.237037][T17722] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 326.237915][T17722] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 326.262536][T17722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 326.285869][T17722] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 326.304841][T17722] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 326.312315][T17722] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 326.350639][T17722] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 326.367613][T17963] IPv6: NLM_F_CREATE should be specified when creating new route [ 326.539569][T17978] __nla_validate_parse: 16 callbacks suppressed [ 326.539587][T17978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3081'. [ 326.608286][T17722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.642547][T17722] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.662161][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.662288][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.700043][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.700155][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.961194][T18003] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3087'. [ 326.961607][T18003] netlink: 'syz.1.3087': attribute type 12 has an invalid length. [ 327.025757][T18003] bond1: option primary_reselect: invalid value (255) [ 327.046472][T18003] bond1 (unregistering): Released all slaves [ 327.385598][ T4932] Bluetooth: hci4: command tx timeout [ 327.701332][T17722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.765002][T18034] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3095'. [ 327.765138][T18034] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3095'. [ 328.385857][T17722] veth0_vlan: entered promiscuous mode [ 328.405719][T17722] veth1_vlan: entered promiscuous mode [ 328.431581][T18063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3103'. [ 328.444896][T18063] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.467105][T18063] bridge_slave_1 (unregistering): left allmulticast mode [ 328.467128][T18063] bridge_slave_1 (unregistering): left promiscuous mode [ 328.467215][T18063] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.580086][T17722] veth0_macvtap: entered promiscuous mode [ 328.587251][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 328.607171][T17722] veth1_macvtap: entered promiscuous mode [ 328.638195][T17722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.678607][T17722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.716754][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.750121][T18073] netlink: 'syz.2.3106': attribute type 75 has an invalid length. [ 328.776493][ T7165] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.777478][ T7165] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.802198][ T7165] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.899342][T18074] dvmrp0: entered allmulticast mode [ 328.968657][T18079] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3108'. [ 329.018568][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.018588][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.245130][ T7165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.245151][ T7165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.466237][ T4932] Bluetooth: hci4: command tx timeout [ 329.913262][T18108] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3114'. [ 330.023557][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 330.037803][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 330.039899][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 330.041132][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 330.041707][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 330.215932][T18124] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3117'. [ 330.349870][T18117] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 330.721650][T18153] xt_hashlimit: size too large, truncated to 1048576 [ 330.753931][T18153] xt_hashlimit: max too large, truncated to 1048576 [ 330.754142][T18153] xt_hashlimit: overflow, rate too high: 0 [ 330.839389][T18157] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3123'. [ 330.862290][T18153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3121'. [ 331.024885][T18167] netlink: 'syz.1.3121': attribute type 2 has an invalid length. [ 331.024907][T18167] netlink: 'syz.1.3121': attribute type 2 has an invalid length. [ 331.183208][T18175] netlink: Unknown nat attribute (0) [ 331.183241][T18175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.584307][T18194] netlink: 'syz.4.3130': attribute type 1 has an invalid length. [ 331.584328][T18194] __nla_validate_parse: 2 callbacks suppressed [ 331.584338][T18194] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3130'. [ 331.978625][T18212] x_tables: duplicate underflow at hook 1 [ 332.188336][ T4932] Bluetooth: hci1: command tx timeout [ 332.250858][T18196] syzkaller0: entered promiscuous mode [ 332.250881][T18196] syzkaller0: entered allmulticast mode [ 332.575154][T18229] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3139'. [ 332.579236][T18229] netlink: 'syz.4.3139': attribute type 9 has an invalid length. [ 332.579252][T18229] netlink: 23 bytes leftover after parsing attributes in process `syz.4.3139'. [ 332.580128][T18229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3139'. [ 332.580159][T18229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3139'. [ 332.673522][T18232] openvswitch: netlink: VLAN attribute unexpected. [ 332.693579][T18239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3142'. [ 332.713056][T18239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3142'. [ 332.724077][T18115] lo speed is unknown, defaulting to 1000 [ 332.735471][T18239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3142'. [ 332.741384][T18240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3141'. [ 332.743386][T18227] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3138'. [ 332.744516][T18238] netlink: 'syz.4.3142': attribute type 10 has an invalid length. [ 332.754138][T18238] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.754737][T18238] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.804185][T18238] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.804327][T18238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.804591][T18238] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.804715][T18238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.842760][T18238] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 333.270157][T18263] 8021q: VLANs not supported on ip_vti0 [ 333.502354][T18270] bond1: entered allmulticast mode [ 333.584431][T18274] netlink: 'syz.4.3149': attribute type 32 has an invalid length. [ 333.584900][T18274] netlink: 'syz.4.3149': attribute type 32 has an invalid length. [ 333.604898][T18274] netlink: 'syz.4.3149': attribute type 32 has an invalid length. [ 333.624362][T18274] netlink: 'syz.4.3149': attribute type 32 has an invalid length. [ 333.624831][T18274] netlink: 'syz.4.3149': attribute type 32 has an invalid length. [ 333.648759][T18274] netlink: 'syz.4.3149': attribute type 32 has an invalid length. [ 333.650708][T18274] netlink: 'syz.4.3149': attribute type 32 has an invalid length. [ 333.655923][T18274] netlink: 'syz.4.3149': attribute type 32 has an invalid length. [ 334.024930][T18285] syzkaller0: entered promiscuous mode [ 334.024953][T18285] syzkaller0: entered allmulticast mode [ 334.035637][T18115] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.036244][T18115] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.036370][T18115] bridge_slave_0: entered allmulticast mode [ 334.037971][T18115] bridge_slave_0: entered promiscuous mode [ 334.040663][T18115] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.040804][T18115] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.040928][T18115] bridge_slave_1: entered allmulticast mode [ 334.042785][T18115] bridge_slave_1: entered promiscuous mode [ 334.157806][T18115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.160876][T18115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.222226][T18115] team0: Port device team_slave_0 added [ 334.225135][T18115] team0: Port device team_slave_1 added [ 334.266731][ T4932] Bluetooth: hci1: command tx timeout [ 334.268713][T18115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.268726][T18115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.268749][T18115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.271543][T18115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.271556][T18115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.271576][T18115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.424647][T18115] hsr_slave_0: entered promiscuous mode [ 334.431983][T18115] hsr_slave_1: entered promiscuous mode [ 334.432772][T18115] debugfs: 'hsr0' already exists in 'hsr' [ 334.432788][T18115] Cannot create hsr debugfs directory [ 334.658666][T18319] IPv6: sit5: Disabled Multicast RS [ 334.828806][ T30] hid-generic 0005:07C0:0002.0002: unknown main item tag 0x0 [ 334.838987][ T30] hid-generic 0005:07C0:0002.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 335.488055][T18115] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.488089][T18115] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.488113][T18115] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 335.508761][T18356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.571231][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888050b64c00: rx timeout, send abort [ 335.589990][T18115] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.590010][T18115] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.590024][T18115] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 335.740757][T18115] .`: (slave netdevsim1): Releasing backup interface [ 335.743558][T18115] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.743606][T18115] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.743630][T18115] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 335.753798][T18366] openvswitch: netlink: Key type 1542 is out of range max 32 [ 335.964679][T18115] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.964711][T18115] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.964735][T18115] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 336.001247][T18378] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 336.001274][T18378] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 336.071282][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888050b64c00: abort rx timeout. Force session deactivation [ 336.072323][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888050b64800: rx timeout, send abort [ 336.314988][T18390] syzkaller1: entered promiscuous mode [ 336.315010][T18390] syzkaller1: entered allmulticast mode [ 336.355334][ T4932] Bluetooth: hci1: command tx timeout [ 336.572370][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888050b64800: abort rx timeout. Force session deactivation [ 336.708236][T18115] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 336.719479][T18115] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 336.720315][T18115] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 336.756028][T18115] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 336.757889][T18115] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 336.786732][T18115] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 336.789212][T18115] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 336.805421][T18115] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 336.925816][T18115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.968886][T18115] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.994326][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.994426][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.047651][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.047795][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.733268][T18466] tipc: Started in network mode [ 337.733296][T18466] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 337.757183][T18466] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 337.757953][T18466] tipc: Enabled bearer , priority 10 [ 338.204432][T18115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.340239][T18498] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 338.363083][T18115] veth0_vlan: entered promiscuous mode [ 338.399132][T18115] veth1_vlan: entered promiscuous mode [ 338.425797][ T4932] Bluetooth: hci1: command tx timeout [ 338.431733][T18495] Unsupported ieee802154 address type: 0 [ 338.533487][T18502] __nla_validate_parse: 17 callbacks suppressed [ 338.533506][T18502] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3205'. [ 338.573004][T18115] veth0_macvtap: entered promiscuous mode [ 338.607790][T18115] veth1_macvtap: entered promiscuous mode [ 338.659953][T18512] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3205'. [ 338.659979][T18512] nbd: device at index 64 is going down [ 338.691929][T18510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3204'. [ 338.710404][T18507] validate_nla: 26 callbacks suppressed [ 338.710419][T18507] netlink: 'syz.4.3204': attribute type 17 has an invalid length. [ 338.710431][T18507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3204'. [ 338.710457][T18507] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3204'. [ 338.784185][T18507] veth1_virt_wifi: entered promiscuous mode [ 338.795577][T18507] veth1_virt_wifi: left promiscuous mode [ 338.870048][T18507] netlink: 'syz.4.3204': attribute type 17 has an invalid length. [ 338.870069][T18507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3204'. [ 338.870092][T18507] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3204'. [ 338.887368][T18115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.926185][T18507] veth1_virt_wifi: entered promiscuous mode [ 338.927340][T18507] veth1_virt_wifi: left promiscuous mode [ 338.974346][ T5722] tipc: Node number set to 1 [ 338.995906][T18507] netlink: 'syz.4.3204': attribute type 17 has an invalid length. [ 338.995926][T18507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3204'. [ 338.995948][T18507] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3204'. [ 339.004184][T18115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.034521][T18507] veth1_virt_wifi: entered promiscuous mode [ 339.038734][T18527] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3208'. [ 339.041970][T18507] veth1_virt_wifi: left promiscuous mode [ 339.071567][T18517] udevd[18517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 339.082539][T18517] udevd[18517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 339.137391][T18507] netlink: 'syz.4.3204': attribute type 17 has an invalid length. [ 339.273504][T18507] veth1_virt_wifi: entered promiscuous mode [ 339.283152][T18507] veth1_virt_wifi: left promiscuous mode [ 339.386190][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.433140][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.466348][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.487705][ T7484] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.677261][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.677281][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.699543][T18554] netlink: zone id is out of range [ 339.699555][T18554] netlink: zone id is out of range [ 339.720293][T18554] netlink: zone id is out of range [ 339.833527][T18559] ip_tables: iptables: counters copy to user failed while replacing table [ 339.978244][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.978265][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.114434][T18569] syzkaller1: entered promiscuous mode [ 340.114456][T18569] syzkaller1: entered allmulticast mode [ 340.241143][T18575] netlink: 'syz.2.3112': attribute type 4 has an invalid length. [ 340.265740][T18572] syzkaller1: entered promiscuous mode [ 340.265762][T18572] syzkaller1: entered allmulticast mode [ 340.794951][T18597] netlink: 'syz.1.3228': attribute type 10 has an invalid length. [ 340.838668][T18597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 340.866332][T18597] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 341.078558][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 341.094912][ T5618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 341.107260][ T5618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 341.110865][ T5618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 341.111844][ T5618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 341.530994][T18621] netlink: 'syz.1.3235': attribute type 1 has an invalid length. [ 341.675944][T18624] bond2: (slave gretap1): making interface the new active one [ 341.676800][T18624] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 341.703983][T18625] 8021q: adding VLAN 0 to HW filter on device bond2 [ 341.986646][ T7483] IPVS: starting estimator thread 0... [ 342.092947][T18648] IPVS: using max 29 ests per chain, 69600 per kthread [ 342.320181][T18660] netlink: 'syz.4.3243': attribute type 11 has an invalid length. [ 342.320217][T18660] netlink: 'syz.4.3243': attribute type 4 has an invalid length. [ 342.859848][ T50] veth0: left allmulticast mode [ 342.859893][ T50] veth0: left promiscuous mode [ 342.865280][ T50] bridge0: port 3(veth0) entered disabled state [ 342.916628][ T50] bridge_slave_1: left allmulticast mode [ 342.916655][ T50] bridge_slave_1: left promiscuous mode [ 342.916869][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.962928][ T50] ¾x9ÿ: left allmulticast mode [ 342.962952][ T50] ¾x9ÿ: left promiscuous mode [ 342.963128][ T50] bridge0: port 1(1¾x9ÿ) entered disabled state [ 343.072980][ T50] C: left allmulticast mode [ 343.073099][ T50] vlan1: left allmulticast mode [ 343.226597][ T4932] Bluetooth: hci0: command tx timeout [ 343.431855][ T50] bond3 (unregistering): (slave erspan1): Releasing active interface [ 343.431920][ T50] erspan1 (unregistering): left promiscuous mode [ 343.661148][ T50] bond12 (unregistering): (slave bridge3): Releasing active interface [ 343.734148][ T50] bond1 (unregistering): Released all slaves [ 343.759158][ T50] bond2 (unregistering): Released all slaves [ 343.785792][ T50] bond3 (unregistering): Released all slaves [ 343.822733][ T50] bond0 (unregistering): Released all slaves [ 343.834511][ T50] bond4 (unregistering): (slave wireguard0): Releasing backup interface [ 343.834526][ T50] wireguard0: left promiscuous mode [ 343.834999][ T50] bond4 (unregistering): Released all slaves [ 343.860684][ T50] bond5 (unregistering): Released all slaves [ 343.886012][ T50] bond6 (unregistering): Released all slaves [ 343.893621][ T50] bond7 (unregistering): Released all slaves [ 343.917830][ T50] bond8 (unregistering): Released all slaves [ 343.947703][ T50] bond9 (unregistering): Released all slaves [ 343.967995][ T50] bond10 (unregistering): Released all slaves [ 343.980762][ T50] bond11 (unregistering): Released all slaves [ 344.000023][ T50] bond12 (unregistering): Released all slaves [ 344.022076][ T50] bond13 (unregistering): Released all slaves [ 344.042344][ T50] bond14 (unregistering): Released all slaves [ 344.054503][ T50] bond15 (unregistering): Released all slaves [ 344.153933][T18720] Bluetooth: MGMT ver 1.23 [ 344.153966][T18720] Bluetooth: hci0: unsupported parameter 5135 [ 344.153979][T18720] Bluetooth: hci0: unsupported parameter 8192 [ 344.153990][T18720] Bluetooth: hci0: unsupported parameter 5135 [ 344.154001][T18720] Bluetooth: hci0: unsupported parameter 8192 [ 344.437470][T18725] tipc: Enabling not permitted [ 344.437504][T18725] tipc: Enabling of bearer rejected, failed to enable media [ 344.510553][T18730] wireguard: wg2: Could not create IPv4 socket [ 344.613218][ T50] : left promiscuous mode [ 344.739764][T18737] IPv6: NLM_F_CREATE should be specified when creating new route [ 344.827838][T18737] __nla_validate_parse: 44 callbacks suppressed [ 344.827858][T18737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3264'. [ 344.921703][T18737] bond10: option xmit_hash_policy: invalid value (64) [ 344.924092][T18737] bond10 (unregistering): Released all slaves [ 344.973547][T18603] lo speed is unknown, defaulting to 1000 [ 344.974883][ T50] tipc: Left network mode [ 345.307426][ T4932] Bluetooth: hci0: command tx timeout [ 345.408997][T18753] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 345.701417][T18766] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3270'. [ 345.761463][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 345.774324][T18771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3271'. [ 345.841515][T18777] IPv4: Oversized IP packet from 127.202.26.0 [ 346.304034][T18780] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 346.304354][T18603] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.304447][T18603] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.304574][T18603] bridge_slave_0: entered allmulticast mode [ 346.314686][T18603] bridge_slave_0: entered promiscuous mode [ 346.342636][T18603] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.342733][T18603] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.343174][T18603] bridge_slave_1: entered allmulticast mode [ 346.365822][T18603] bridge_slave_1: entered promiscuous mode [ 346.640262][T18603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.756462][T18603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.037993][T18603] team0: Port device team_slave_0 added [ 347.060929][T18603] team0: Port device team_slave_1 added [ 347.161842][T18603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.161859][T18603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.161881][T18603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.238600][T18603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.238617][T18603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.238641][T18603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.353366][T18831] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 347.353384][T18831] IPv6: NLM_F_CREATE should be set when creating new route [ 347.385505][ C0] ------------[ cut here ]------------ [ 347.385519][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci0 [ 347.385674][ C0] WARNING: kernel/workqueue.c:2353 at __queue_work+0xd83/0x10d0, CPU#0: dhcpcd-run-hook/18809 [ 347.408092][ C0] Modules linked in: [ 347.411991][ C0] CPU: 0 UID: 0 PID: 18809 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(full) [ 347.421802][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.431843][ C0] RIP: 0010:__queue_work+0xd9f/0x10d0 [ 347.437216][ C0] Code: 49 81 c7 70 01 00 00 4c 8d 35 9d d8 ee 0e 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 0b 9c a9 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8 [ 347.456810][ C0] RSP: 0018:ffffc90000007bc0 EFLAGS: 00010046 [ 347.462873][ C0] RAX: 1ffff1100530f14e RBX: dffffc0000000000 RCX: ffff88803184be80 [ 347.470833][ C0] RDX: ffff8880322e5970 RSI: ffffffff8ad62eb0 RDI: ffffffff907d16e0 [ 347.478796][ C0] RBP: 0000000000010000 R08: 0000000000000100 R09: 1ffffffff20f482f [ 347.486768][ C0] R10: dffffc0000000000 R11: ffffffff818e4560 R12: 0000000000000008 [ 347.494744][ C0] R13: ffff888029878a58 R14: ffffffff907d16e0 R15: ffff8880322e5970 [ 347.502707][ C0] FS: 00007f9fd1042c80(0000) GS:ffff888124cce000(0000) knlGS:0000000000000000 [ 347.511628][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 347.518197][ C0] CR2: 00007f9fd12de7b8 CR3: 0000000050840000 CR4: 00000000003526f0 [ 347.526161][ C0] Call Trace: [ 347.529432][ C0] [ 347.532274][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 347.537721][ C0] call_timer_fn+0x18d/0x5f0 [ 347.542326][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 347.548140][ C0] ? call_timer_fn+0xd5/0x5f0 [ 347.552836][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 347.557957][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 347.563089][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 347.568896][ C0] __run_timer_base+0x67e/0x8b0 [ 347.573777][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 347.579146][ C0] ? ktime_get+0x1f5/0x220 [ 347.583555][ C0] ? lapic_next_event+0x11/0x20 [ 347.588441][ C0] run_timer_softirq+0xb7/0x170 [ 347.593296][ C0] handle_softirqs+0x226/0x860 [ 347.598064][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 347.602832][ C0] __irq_exit_rcu+0xcb/0x220 [ 347.607416][ C0] irq_exit_rcu+0x9/0x30 [ 347.611648][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 347.617358][ C0] [ 347.620275][ C0] [ 347.623193][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 347.629189][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 347.634466][ C0] Code: ff ff ff e8 50 85 42 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 a2 f0 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 bf 89 45 0a cc 48 8d 3d 97 4b da [ 347.654083][ C0] RSP: 0018:ffffc90002e4fa90 EFLAGS: 00000296 [ 347.660145][ C0] RAX: 8a0a0908c5cae200 RBX: 0000000000000001 RCX: 8000000000000001 [ 347.668104][ C0] RDX: 00000000000b663d RSI: ffffffff8e69c835 RDI: ffffffff8c6da080 [ 347.676070][ C0] RBP: ffff88803184be80 R08: ffffffff822bf6a3 R09: 0000000000000000 [ 347.684129][ C0] R10: ffffc90002e4fce0 R11: fffff520005c9f9e R12: ffff8880b86423b0 [ 347.692100][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000246 [ 347.700078][ C0] ? kmem_cache_alloc_lru_noprof+0x153/0x5f0 [ 347.706123][ C0] ? kmem_cache_alloc_lru_noprof+0x153/0x5f0 [ 347.712110][ C0] kmem_cache_alloc_lru_noprof+0x16e/0x5f0 [ 347.717911][ C0] ? kmem_cache_alloc_lru_noprof+0x153/0x5f0 [ 347.723889][ C0] ? __d_alloc+0x37/0x6f0 [ 347.728240][ C0] ? __d_alloc+0x37/0x6f0 [ 347.732568][ C0] __d_alloc+0x37/0x6f0 [ 347.736726][ C0] d_alloc_pseudo+0x21/0xc0 [ 347.741239][ C0] alloc_path_pseudo+0x107/0x220 [ 347.746187][ C0] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 347.751658][ C0] ? inode_set_ctime_current+0x287/0xb60 [ 347.757285][ C0] alloc_file_pseudo+0xa8/0x1e0 [ 347.762128][ C0] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 347.767576][ C0] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 347.772945][ C0] create_pipe_files+0x325/0x7c0 [ 347.777887][ C0] __do_pipe_flags+0x46/0x1f0 [ 347.782556][ C0] do_pipe2+0xaa/0x190 [ 347.786620][ C0] ? __pfx_do_pipe2+0x10/0x10 [ 347.791287][ C0] ? exc_page_fault+0x6a/0xc0 [ 347.795974][ C0] __x64_sys_pipe2+0x5a/0x70 [ 347.800568][ C0] do_syscall_64+0x166/0x520 [ 347.805237][ C0] ? trace_irq_disable+0x3b/0x140 [ 347.810289][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.816355][ C0] ? clear_bhb_loop+0x70/0xc0 [ 347.821035][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.826942][ C0] RIP: 0033:0x7f9fd11ffec9 [ 347.831346][ C0] Code: 07 31 c0 e9 49 ff ff ff 50 48 8d 3d a9 3a 0a 00 e8 ec 64 01 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 31 f6 b8 25 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 07 c3 66 0f 1f 44 00 00 48 8b 15 f9 be 0d 00 [ 347.850940][ C0] RSP: 002b:00007ffc5e875388 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 347.859342][ C0] RAX: ffffffffffffffda RBX: 0000560701299b88 RCX: 00007f9fd11ffec9 [ 347.867309][ C0] RDX: 000056070128bc30 RSI: 0000000000000000 RDI: 00007ffc5e8753f0 [ 347.875289][ C0] RBP: 000056070128bc30 R08: 0000000000000000 R09: 0000000000000040 [ 347.883259][ C0] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000084 [ 347.891219][ C0] R13: 000056070128bc30 R14: 0000000000000024 R15: 0000000000000000 [ 347.899200][ C0] [ 347.902224][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 347.909497][ C0] CPU: 0 UID: 0 PID: 18809 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(full) [ 347.919300][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.929345][ C0] Call Trace: [ 347.932617][ C0] [ 347.935452][ C0] vpanic+0x56d/0xa60 [ 347.939501][ C0] ? __pfx__printk+0x10/0x10 [ 347.944099][ C0] ? __pfx_vpanic+0x10/0x10 [ 347.948599][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 347.953883][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 347.959079][ C0] panic+0xc5/0xd0 [ 347.962797][ C0] ? __pfx_panic+0x10/0x10 [ 347.967228][ C0] __warn+0x315/0x4c0 [ 347.971233][ C0] ? __queue_work+0xd83/0x10d0 [ 347.975994][ C0] ? __queue_work+0xd83/0x10d0 [ 347.980751][ C0] __report_bug+0x276/0x570 [ 347.985319][ C0] ? kasan_save_track+0x3e/0x80 [ 347.990162][ C0] ? kasan_save_free_info+0x40/0x50 [ 347.995364][ C0] ? __kasan_slab_free+0x5c/0x80 [ 348.000312][ C0] ? __queue_work+0xd83/0x10d0 [ 348.005081][ C0] ? __pfx___report_bug+0x10/0x10 [ 348.010096][ C0] ? __d_alloc+0x37/0x6f0 [ 348.014421][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 348.019698][ C0] ? look_up_lock_class+0x57/0x110 [ 348.024799][ C0] ? register_lock_class+0x31/0x2e0 [ 348.029998][ C0] report_bug_entry+0x19b/0x290 [ 348.034845][ C0] ? __queue_work+0xd9f/0x10d0 [ 348.039604][ C0] ? __queue_work+0xda4/0x10d0 [ 348.044359][ C0] handle_bug+0xce/0x200 [ 348.048599][ C0] exc_invalid_op+0x1a/0x50 [ 348.053103][ C0] asm_exc_invalid_op+0x1a/0x20 [ 348.057942][ C0] RIP: 0010:__queue_work+0xd9f/0x10d0 [ 348.063310][ C0] Code: 49 81 c7 70 01 00 00 4c 8d 35 9d d8 ee 0e 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 0b 9c a9 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8 [ 348.082905][ C0] RSP: 0018:ffffc90000007bc0 EFLAGS: 00010046 [ 348.088962][ C0] RAX: 1ffff1100530f14e RBX: dffffc0000000000 RCX: ffff88803184be80 [ 348.096925][ C0] RDX: ffff8880322e5970 RSI: ffffffff8ad62eb0 RDI: ffffffff907d16e0 [ 348.104888][ C0] RBP: 0000000000010000 R08: 0000000000000100 R09: 1ffffffff20f482f [ 348.112850][ C0] R10: dffffc0000000000 R11: ffffffff818e4560 R12: 0000000000000008 [ 348.120831][ C0] R13: ffff888029878a58 R14: ffffffff907d16e0 R15: ffff8880322e5970 [ 348.128797][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 348.134612][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 348.139896][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 348.145270][ C0] call_timer_fn+0x18d/0x5f0 [ 348.149864][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 348.155669][ C0] ? call_timer_fn+0xd5/0x5f0 [ 348.160341][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 348.165450][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 348.170559][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 348.176364][ C0] __run_timer_base+0x67e/0x8b0 [ 348.181216][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 348.186578][ C0] ? ktime_get+0x1f5/0x220 [ 348.190986][ C0] ? lapic_next_event+0x11/0x20 [ 348.195839][ C0] run_timer_softirq+0xb7/0x170 [ 348.200689][ C0] handle_softirqs+0x226/0x860 [ 348.205458][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 348.210237][ C0] __irq_exit_rcu+0xcb/0x220 [ 348.214823][ C0] irq_exit_rcu+0x9/0x30 [ 348.219059][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 348.224685][ C0] [ 348.227603][ C0] [ 348.230526][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 348.236494][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 348.241768][ C0] Code: ff ff ff e8 50 85 42 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 a2 f0 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 bf 89 45 0a cc 48 8d 3d 97 4b da [ 348.261363][ C0] RSP: 0018:ffffc90002e4fa90 EFLAGS: 00000296 [ 348.267419][ C0] RAX: 8a0a0908c5cae200 RBX: 0000000000000001 RCX: 8000000000000001 [ 348.275378][ C0] RDX: 00000000000b663d RSI: ffffffff8e69c835 RDI: ffffffff8c6da080 [ 348.283337][ C0] RBP: ffff88803184be80 R08: ffffffff822bf6a3 R09: 0000000000000000 [ 348.291293][ C0] R10: ffffc90002e4fce0 R11: fffff520005c9f9e R12: ffff8880b86423b0 [ 348.299253][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000246 [ 348.307219][ C0] ? kmem_cache_alloc_lru_noprof+0x153/0x5f0 [ 348.313211][ C0] ? kmem_cache_alloc_lru_noprof+0x153/0x5f0 [ 348.319186][ C0] kmem_cache_alloc_lru_noprof+0x16e/0x5f0 [ 348.324990][ C0] ? kmem_cache_alloc_lru_noprof+0x153/0x5f0 [ 348.330967][ C0] ? __d_alloc+0x37/0x6f0 [ 348.335290][ C0] ? __d_alloc+0x37/0x6f0 [ 348.339623][ C0] __d_alloc+0x37/0x6f0 [ 348.343778][ C0] d_alloc_pseudo+0x21/0xc0 [ 348.348285][ C0] alloc_path_pseudo+0x107/0x220 [ 348.353223][ C0] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 348.358674][ C0] ? inode_set_ctime_current+0x287/0xb60 [ 348.364304][ C0] alloc_file_pseudo+0xa8/0x1e0 [ 348.369148][ C0] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 348.374606][ C0] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 348.379974][ C0] create_pipe_files+0x325/0x7c0 [ 348.384906][ C0] __do_pipe_flags+0x46/0x1f0 [ 348.389573][ C0] do_pipe2+0xaa/0x190 [ 348.393636][ C0] ? __pfx_do_pipe2+0x10/0x10 [ 348.398301][ C0] ? exc_page_fault+0x6a/0xc0 [ 348.402987][ C0] __x64_sys_pipe2+0x5a/0x70 [ 348.407573][ C0] do_syscall_64+0x166/0x520 [ 348.412157][ C0] ? trace_irq_disable+0x3b/0x140 [ 348.417170][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.423226][ C0] ? clear_bhb_loop+0x70/0xc0 [ 348.427893][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.433774][ C0] RIP: 0033:0x7f9fd11ffec9 [ 348.438205][ C0] Code: 07 31 c0 e9 49 ff ff ff 50 48 8d 3d a9 3a 0a 00 e8 ec 64 01 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 31 f6 b8 25 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 07 c3 66 0f 1f 44 00 00 48 8b 15 f9 be 0d 00 [ 348.457833][ C0] RSP: 002b:00007ffc5e875388 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 348.466239][ C0] RAX: ffffffffffffffda RBX: 0000560701299b88 RCX: 00007f9fd11ffec9 [ 348.474197][ C0] RDX: 000056070128bc30 RSI: 0000000000000000 RDI: 00007ffc5e8753f0 [ 348.482155][ C0] RBP: 000056070128bc30 R08: 0000000000000000 R09: 0000000000000040 [ 348.490112][ C0] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000084 [ 348.498070][ C0] R13: 000056070128bc30 R14: 0000000000000024 R15: 0000000000000000 [ 348.506046][ C0] [ 348.509303][ C0] Kernel Offset: disabled [ 348.513618][ C0] Rebooting in 86400 seconds..