last executing test programs: 11.135900011s ago: executing program 1 (id=2630): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.069872469s ago: executing program 1 (id=2633): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f00000002c0)}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) socket$inet(0x2, 0x4, 0x1) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet(0x2, 0x802, 0x1) write(r8, &(0x7f0000000080)="08008edf773c8000", 0xfd) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r12, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000002800000005000000020000000100000f03000000030000006b0b00000a00000044942d0e0000000000000f0100000003002e6161000000000000000000"], &(0x7f00000014c0)=""/2, 0x45, 0x2, 0x1}, 0x28) sendto$inet6(r7, &(0x7f0000000100)="a18d9a98e2e39bc1625a3ef53957d73fedd7c44e12c8", 0x16, 0x2008001, &(0x7f00000001c0)={0xa, 0x4e20, 0x4e8, @mcast2, 0x8ab}, 0x1c) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x34, r6, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008004) 10.575097091s ago: executing program 1 (id=2639): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x3, 0x8, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4044010) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x4}, 0x6) poll(&(0x7f0000000100)=[{r0, 0x100}, {r0, 0x262d}, {r0, 0x2080}], 0x3, 0x4b48) 10.476617943s ago: executing program 1 (id=2640): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xb, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000001af020bb7cdbc8080000000000000108000540000000040900010073797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x40090}, 0x22048880) 10.144369082s ago: executing program 1 (id=2644): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket(0x1f, 0x800, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40) 9.711458266s ago: executing program 1 (id=2655): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.146352033s ago: executing program 4 (id=2700): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x2, 0x4, 0x83, 0xff, 0x1, 0x4, 0xb7, 0x4, 0x2, 0x8, 0x4, 0xf1}, 0xe) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0xe4f, 0x1, [0x6]}, &(0x7f0000000100)=0xa) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={r1, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={r2, @in={{0x2, 0x4e24, @local}}}, &(0x7f0000000300)=0x84) 4.094917737s ago: executing program 4 (id=2701): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000002180)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) getsockname$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10) 4.008771332s ago: executing program 3 (id=2702): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYBLOB="3f00000006020400280012800b0001"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000001100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="192c2cbd7000ffdbdf2515000000763336b95bd2e9f66a0e06c6a1681e6f8f6dc8593c3ab566a27fef1f8c5d4dabdf9a4417ab3eec56d9184ea75ce90e8a86b9e47b1c098fb352f7fb0c5c5d6db26a293d356da11eab7841dd44387ef28e89259f91283522142b8aba8329c9406ce6e65d2dcb4cd526368ae1fedf6f4800b60d9e87748fdba177a1"], 0x14}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xd1, &(0x7f00000001c0)=""/209, 0x41100, 0x8}, 0x94) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000011c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x6e, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000382b00fc220000000000000000000000000000fe8000000000000000000000000000aa6700000000000000210074b941"], 0x0) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000001080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f00000009c0)={{r7}, 0x100000000, 0x418b, 0x8}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x7, 0x9}, &(0x7f00000001c0)=0x90) setsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000200)={r8, 0x1, 0x8, 0x8}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x14, 0x2, 0x4) 3.889617436s ago: executing program 4 (id=2704): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000040)=0x10, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000105000061114c0000000000850000001c0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3.749013365s ago: executing program 4 (id=2705): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$inet_sctp(r0, &(0x7f0000001440)={&(0x7f0000000000)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001380)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="6648f7ac2424a62ff77dfaded36d47e7550fd81a56334f11efb0424685b8bfee0a6164e2377cf9e11e3ccab7cbbd693caf1ba735b0a7c09be27458cd5b4abe85c55f5bf8b752a920791d40797384ca529b8b2418eef934360376c6556e0f1d643fa26f3e2bb55e807bcefb4a2df40b4d67983e1a7964530db549e3e81b4b70586872b639a4fc2754faf8d3170bb497a019e31ebdfcd8dd4ff7d53f9631e26c05999c52c28a2eba99cabc51b45c857d", 0xaf}, {&(0x7f0000001280)="345695d633fdff008aa51323ad7e751ca6c2ff15eef73d71bb20bfafc5afd25b295ff6872af89b6d421caea93601147e64ffad85b1c50c55ce642c70c21bf2ec27ea7ee0cc8adaf55d434c824ce6d67e5c51e66189f55dc75c98653476c34312acb0357760af10d7e7e70026098d1b0ac8195f37d93ae45f1191d3f5759f1ad8cead4e6f639e64750ff11f5faf5653731c9db9d83e04d23380c9dfdc65b3ba0c80b1ade86463305829f39ea9ab043327757c9256e098c6fe8e959e4282b5b2a92d6809f79b22d1fb1452a7d0030a65185f81db6727314904fbf8aba3734f2aa8b477f0092de6d288c3dbe3a7f5e75a8bf2", 0xf1}], 0x3, &(0x7f00000013c0)=[@init={0x18, 0x84, 0x0, {0x8, 0x10, 0x1}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0xe510}}, @init={0x18, 0x84, 0x0, {0xfff8, 0x6, 0x4, 0xa1c}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x4}}], 0x60, 0x8004001}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd8}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x72}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044040}, 0x40800) 3.656565824s ago: executing program 2 (id=2706): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r1, 0x0, 0x80, 0x0, 0x6, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @broadcast}}}}) 3.633478945s ago: executing program 4 (id=2707): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000b12000002199e3220a40000000060a0102000000000000000000000000100004800c00018008000100647570000900010073797a300000000008492a07a9000003050007408c000000140000001100010000000000000000000000000a"], 0x68}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="d40000001b0001000000000000000000fc0000000000000000000000000000000000000000000000000400000000000100000000000000000000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001500000000000000000008001f0000000000"], 0xd4}, 0x1, 0x0, 0x0, 0x400c001}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lblc\x00', 0x5, 0xa, 0x77}, {@private=0xa010102, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) sendmsg$sock(r2, &(0x7f0000000340)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x43}}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4f23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f00000000c0)={0x11, {{0x29, 0x0, 0x5000000, @private1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newchain={0x2c64, 0x64, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x10}, {0x6}, {0xe, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0xea5}, @TCA_RATE={0x6, 0x5, {0xc1, 0x8}}, @TCA_RATE={0x6, 0x5, {0xff, 0x9}}, @filter_kind_options=@f_u32={{0x8}, {0x2c08, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x40000000}, @TCA_U32_SEL={0x554, 0x5, {0xd, 0x2, 0x7, 0xb, 0x1, 0xfffc, 0x3, 0x5, [{0x1, 0xcfe8, 0x7, 0xdf}, {0xa0, 0x3, 0x9}, {0x5, 0x262, 0x3, 0xb}, {0x7, 0x3, 0xff, 0x3}, {0x6, 0x973b, 0x2, 0x8001}, {0x7, 0xf, 0x28000000, 0x4}, {0x81, 0x8, 0xe7f, 0x732}, {0x2, 0xd2f, 0x2, 0x7}, {0x4, 0x2, 0x7f, 0x1b}, {0x0, 0x9, 0x4, 0x6}, {0xbda, 0xce2, 0x8001, 0xe8}, {0x8, 0x6, 0x0, 0x3}, {0x53, 0x3, 0x8, 0xfffffeff}, {0x9, 0x5, 0x8, 0xc0}, {0x5, 0x8, 0x9, 0x1}, {0x2123, 0x3, 0x40, 0x970a}, {0x40, 0x5, 0x861, 0x3}, {0x800, 0x3, 0xf882, 0x2}, {0xdf16, 0x4, 0x8a, 0x2}, {0xb, 0x4cd3, 0x5, 0x4}, {0x1, 0x3, 0xff, 0x8c}, {0x7, 0x8, 0x9, 0x4}, {0x9, 0x7, 0x8, 0x7}, {0x800, 0x1, 0xc624, 0x4}, {0x7, 0xdc1, 0xfffffff7, 0x8}, {0x7, 0xe84, 0x4, 0x6}, {0x7, 0x4, 0x5, 0x9}, {0xfff, 0x33, 0x7fffffff, 0x10000}, {0x80, 0x6, 0xfffffffb, 0xd4a0}, {0x8000, 0x5, 0x7, 0x6}, {0x6, 0x2b23, 0x800, 0x9}, {0x5, 0x9, 0x3, 0x2}, {0x7, 0x39c, 0xea1d, 0xd}, {0x4, 0xff, 0x0, 0x6}, {0x3, 0xad, 0x6, 0xb40}, {0x7, 0x2, 0x4, 0x1}, {0x8, 0x20, 0xe2ba, 0x3cc}, {0x7, 0x0, 0x7ff, 0x6}, {0x2, 0xa8, 0x7, 0x6}, {0x3ff, 0x4, 0x10000, 0x2e5}, {0x8, 0x4, 0x1ff, 0xdc}, {0x6, 0x9, 0xfffffff8}, {0x3, 0x353, 0x5, 0x9}, {0xbf60, 0x1, 0x8, 0x5}, {0xc, 0x2, 0x7, 0xa1e5}, {0x5, 0x5f, 0x6, 0x3}, {0xe0, 0x4, 0x9, 0x3}, {0x2073, 0x2, 0x0, 0xd4}, {0x3, 0x2, 0x5, 0xb3c}, {0x4, 0x800, 0x5, 0xf145}, {0xe, 0x6, 0x2655, 0x5}, {0x9, 0x2, 0x5, 0x5}, {0xa46, 0xe, 0x9, 0x9}, {0x7, 0x40, 0xfffffffe, 0x9}, {0x892e, 0x0, 0x858c, 0x800}, {0x2, 0x9, 0x4, 0x6}, {0x5, 0x2, 0x1, 0x8}, {0xba, 0x40, 0x10000, 0xffff}, {0x22, 0x6, 0x6, 0x3}, {0x3ff, 0x5, 0xb, 0x3}, {0x4, 0x7, 0x5, 0x7f}, {0xd03, 0x101, 0x4, 0xf5ea}, {0x9, 0x2c, 0x5, 0x1}, {0x8, 0x9, 0xc, 0xfff}, {0x4, 0x2, 0x0, 0x10000}, {0x401, 0x1200, 0x0, 0x1}, {0xffffffff, 0xfffffe01, 0xbcd, 0xcfb}, {0x55e2, 0x0, 0x8, 0x9}, {0x5a0d45a5, 0x3, 0x3, 0xffffffff}, {0x7, 0x1ff, 0x5, 0xec}, {0x1, 0x4, 0xb, 0x58eb}, {0x3, 0xfff, 0x9, 0xcdf7}, {0xb84, 0x2, 0x6, 0x4}, {0xdb9, 0xe, 0x7ff, 0xd}, {0x7, 0xc879, 0x9, 0x7ff}, {0x90, 0x1, 0x80, 0x2}, {0x4, 0x8, 0x5, 0x3}, {0x9, 0x212e, 0x9, 0x5}, {0x314b, 0x1740, 0x41000000, 0xa}, {0xfff, 0x400, 0x1b1, 0x268}, {0x6, 0x9, 0x80000001, 0x5}, {0x79e, 0x367b, 0x88, 0x1}, {0x6f0e69dc, 0x101, 0x80, 0x15}, {0x495aa6d, 0x7fffffff, 0x7e}]}}, @TCA_U32_DIVISOR={0x8, 0x4, 0xd9}, @TCA_U32_DIVISOR={0x8, 0x4, 0x9b}, @TCA_U32_ACT={0x2674, 0x7, [@m_tunnel_key={0x140, 0x12, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}]}, {0x100, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x1158, 0x13, 0x0, 0x0, {{0xb}, {0x10cc, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x5}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0xff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10, 0x7, 0x6, 0x10000, 0x74, {0x6, 0x2, 0x8000, 0x401, 0xcb6, 0x40000000}, {0x81, 0x0, 0x1, 0x7, 0x4, 0xb}, 0xd, 0x4, 0x6}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xd}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x800}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0xb81, 0xf, 0x7, 0xc4, 0x5, 0x9, 0x63d00000, 0x1, 0x4, 0x6, 0xe3, 0x8, 0x5, 0x10000, 0x7, 0x8, 0xffff, 0x1, 0x8, 0x1, 0x0, 0x0, 0x2, 0x1, 0x8e, 0x8, 0x81, 0x80, 0x3, 0x6, 0x1, 0x48, 0xa0000000, 0x15, 0x8, 0x3, 0x1, 0xa6, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x5, 0xfffffffa, 0x2, 0x80000000, 0x1, 0xd, 0x140000, 0x5, 0x8, 0x5, 0x5e, 0xfffffff5, 0x8, 0x4, 0x5207, 0x0, 0x4, 0x5, 0x7, 0xe700, 0xfffffff8, 0x4, 0x9, 0x6e7, 0x1, 0x0, 0x4986, 0x1, 0x80000000, 0x6, 0x3, 0xa, 0x2, 0x800, 0x5, 0xf, 0x9, 0x80, 0x0, 0xffff, 0x0, 0x2000000, 0x2, 0x0, 0x3, 0x2, 0x2, 0x3, 0x8, 0x6a9, 0x78, 0xd, 0x6, 0x9, 0x0, 0x6, 0x2, 0x53f4, 0x1000, 0x1, 0x7, 0x462, 0xb, 0x9, 0x5, 0x2, 0x9, 0x7, 0x2, 0x1, 0x7, 0xfffffff7, 0xfffffffd, 0x3, 0x1, 0x8, 0x8e0, 0x5, 0x6, 0x10000, 0x80, 0x1, 0x200, 0x0, 0x3, 0x27ae, 0x7, 0x8, 0x800, 0x8, 0x0, 0x2280, 0xfffffff3, 0x8, 0x5, 0xb722, 0x0, 0x9, 0x3, 0x7, 0x6, 0x752, 0x7, 0x3b, 0x78, 0x4, 0x10001, 0x7, 0x8, 0x5, 0x6, 0x80000000, 0x63a, 0x0, 0xffffff00, 0x5, 0xb, 0xa, 0xd2b, 0x9, 0x5, 0x1, 0x2, 0x1, 0x8be3, 0xff, 0x10, 0x401, 0x2, 0x1, 0x8, 0x0, 0x0, 0x10, 0x47b, 0x6, 0x3ff, 0x65cf3193, 0x81, 0xfffffffd, 0x2, 0x0, 0x0, 0x74acee80, 0x4, 0x7, 0xb, 0x5a4ee11, 0x2, 0x2, 0x0, 0x1, 0x3, 0x4, 0x7, 0x4, 0x100, 0x401, 0x3, 0x5, 0x7, 0x1000, 0xfffff801, 0x200, 0xfff, 0x4, 0xfffffc01, 0xf, 0x2, 0x5, 0x1ff, 0x51, 0x9, 0xfffffffb, 0x0, 0x86, 0x8, 0xc8a, 0xc4e5, 0x7, 0x0, 0xdd, 0xb, 0x9, 0x6, 0x7, 0x4, 0xac, 0x1, 0x5, 0x4, 0x7, 0x7, 0x594e, 0x3, 0x1ff, 0xfa, 0xffffffff, 0x8, 0x80000001, 0x0, 0x2, 0xf, 0x3, 0x101, 0x931, 0x3, 0x4, 0x452, 0xa, 0xc, 0x1ff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xa, 0x8fbc, 0x6, 0x3, 0x5, 0x8, 0x3, 0xfffffff9, 0x14, 0x4, 0x4, 0x5191, 0xfffffffb, 0x1, 0x6, 0x3, 0x10000, 0x3, 0x5, 0x8001, 0x2f, 0x0, 0x0, 0x6, 0x1, 0x0, 0x7fff, 0x1, 0x4, 0x6f, 0x7ff, 0x5, 0x4, 0x3, 0x2, 0x80000001, 0x380, 0xffffffff, 0x4, 0x100, 0x9a3, 0x5, 0x800, 0x4, 0x5, 0x9, 0x1, 0x8001, 0x2, 0xe7a, 0x385, 0x6, 0x6, 0x7, 0xffffffff, 0x7, 0x18, 0x7, 0x3, 0xad, 0x9, 0x0, 0x9, 0x6, 0x3, 0x2, 0x9, 0x88, 0x80000000, 0x6, 0x6, 0xfffffffd, 0xfffffff7, 0xaa3b, 0xfff, 0x1, 0x2, 0x7f, 0x1b, 0x0, 0x9, 0x81, 0x7ff, 0x93c, 0x8, 0xf552, 0x0, 0x7, 0x9, 0x8, 0x8, 0x7fff, 0x0, 0x190, 0x0, 0x2, 0x10001, 0xe7, 0x8000, 0x9, 0x1, 0x0, 0x2, 0x7f, 0xffffb70a, 0x3, 0x8, 0x3, 0x85, 0x200, 0x101, 0x4, 0x10, 0x1, 0x80000000, 0x80000000, 0x7f, 0xee9, 0x1, 0x1a55, 0x7, 0x7, 0x1, 0x3000000, 0x318f45b4, 0x3, 0x3, 0xb, 0x1000, 0x5, 0x8186, 0x7, 0xe69b, 0x2, 0x0, 0x6, 0x10000, 0x7fffffff, 0x10000, 0x6, 0x8, 0x2, 0x7, 0x6, 0x3, 0x1, 0x1, 0x2, 0x7, 0x3, 0xf713, 0x10000, 0xce2, 0x8, 0xfa1, 0x5e0, 0x7e, 0x6, 0x1000, 0x0, 0x2, 0x2, 0x10000, 0x2c, 0x6, 0x3, 0x5, 0x5, 0xfffffffb, 0xd, 0x8, 0x6dc, 0x2, 0x4, 0x0, 0x5, 0x1, 0x0, 0xffffffc0, 0x7, 0x1, 0x40, 0x100, 0xffff, 0x5, 0x9, 0x2, 0x6, 0xffff6ecd, 0x7, 0x1, 0x6, 0x3, 0x0, 0x400, 0x2d, 0xe, 0x5a04, 0x7, 0x6, 0x2, 0x80000000, 0x4, 0x4, 0x6f56, 0x80, 0xec, 0x1ff, 0x2fad, 0x1000, 0x3, 0x7, 0xfffffffb, 0x362, 0xf, 0xcc44, 0x6, 0xffff0001, 0x7, 0x8001, 0xaae, 0x5, 0x2, 0x3, 0x5, 0xc, 0x3, 0x2, 0x32d, 0x2, 0x40, 0x1, 0x8, 0x1, 0x100, 0x280, 0xe, 0xfffffffe, 0x5, 0x137, 0x4, 0x5, 0x80000001, 0x3, 0x3, 0x8, 0x8, 0xe, 0x1000, 0x0, 0x9, 0xffff88f0, 0x2000000, 0xed34, 0x30]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6cf, 0x8, 0x4, 0x1, 0x7ff, 0xb, 0x112, 0x2, 0xab, 0x800, 0x0, 0x3, 0x7, 0x15, 0x3, 0x800, 0x4, 0x4, 0x3, 0x1ff, 0x2fd6, 0x7, 0x200, 0x1, 0x6, 0x85, 0xfffffff9, 0xfffffff2, 0x80000001, 0x0, 0x0, 0x2, 0x9, 0x1, 0x7, 0x100, 0x3e, 0xffff, 0x4, 0x42ec, 0x8, 0xa732058f, 0xfffffffd, 0x5a, 0x3, 0x4, 0x3, 0xffffff02, 0xfffffffa, 0xaea, 0x7, 0x6, 0x5, 0x3ff, 0x8, 0x8, 0x8ac4, 0xfffffffc, 0x92, 0xff, 0x10001, 0x6, 0xb, 0x9, 0x9, 0x0, 0x6, 0xf9d9, 0xa08, 0x4, 0x2, 0xfffffffb, 0x71a9, 0x2, 0x7, 0x9, 0x1, 0x9, 0x1, 0x3, 0x8, 0x8, 0x8, 0x5, 0x3, 0x3, 0x6, 0x1ff, 0x8, 0x1ff, 0x10001, 0x6, 0xef, 0x41, 0x7, 0x92, 0x4, 0x0, 0x7, 0x3, 0xb, 0x2, 0x5, 0x0, 0xb, 0xff, 0x9, 0x3, 0x5, 0x8, 0x0, 0x6, 0x6, 0x1481, 0x2e0, 0xffffffff, 0x0, 0xffffffff, 0x1, 0x3, 0x1ff, 0x7000000, 0x0, 0x5e, 0x5, 0x791, 0x8, 0x320b, 0x80, 0x4, 0x5, 0x38, 0x4, 0xb6, 0x6, 0x5, 0x7, 0xfffffff7, 0x2, 0x49, 0x6, 0x508, 0x9c, 0x71, 0x9694, 0x3, 0x2, 0x5, 0x9, 0xa6, 0x1d37, 0xfffff5a5, 0x5, 0xfff, 0x2, 0x0, 0xaba6, 0x80000000, 0x4, 0x101, 0xffffff81, 0x5, 0x3, 0xd34a, 0xdca, 0x8, 0x8e3278, 0x8, 0x5, 0x1, 0x7fffffff, 0x9, 0x9, 0x7c68, 0x4, 0x0, 0x4, 0x5, 0x960188f, 0x40, 0x6, 0x15520030, 0x8, 0x7, 0x1, 0x9, 0x2, 0x5, 0x5, 0x9, 0x9, 0x6, 0x7, 0x6, 0x7fffffff, 0x2, 0x100, 0x5, 0x6, 0x6, 0x4, 0x0, 0x401, 0xff, 0x501, 0x5, 0x7f, 0x0, 0x6, 0x8, 0xffff, 0x8, 0xc0, 0x200, 0x3, 0x6ea, 0x101, 0x1, 0x1000, 0x9, 0x1, 0x7, 0x5, 0x9, 0x4, 0x6, 0x2, 0x8, 0xd8c9, 0xfffffe00, 0xffff, 0x101, 0x7d3f, 0x2, 0x83, 0x1ff, 0x8, 0x4, 0x2, 0x4, 0x80, 0xc8d, 0x8, 0x7fff, 0x8, 0x3, 0x7fffffff, 0x9, 0x8, 0x9, 0x8f9, 0x5, 0x9, 0x2, 0xc46, 0x401]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x40}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x10000, 0x7, 0x1b, 0x6, 0x4, 0x2ea7, 0x200, 0x6c74, 0x0, 0x6, 0x2, 0x505d, 0x965, 0x2, 0x3, 0x10, 0x0, 0x8, 0x2dc, 0xfff, 0x7, 0x6, 0x8, 0xfffffffb, 0x5, 0x8, 0x2, 0x0, 0x5, 0x7ff, 0x3, 0x8, 0x22, 0x31, 0x3a9, 0x9, 0x4, 0x6, 0x8000, 0x9, 0xfffffff7, 0x5, 0x0, 0x8, 0x9, 0x3, 0x3ff, 0x7, 0x800, 0x2, 0x81, 0x9, 0x401, 0x2, 0xd5c3, 0x3, 0x4, 0x5, 0x6, 0x10000, 0xfffffff8, 0x7f, 0x6, 0x9, 0x2, 0x3, 0x3, 0x0, 0x2, 0x1, 0x0, 0x0, 0x3, 0x200, 0x4, 0x9, 0x7, 0x78d8, 0x3, 0x5, 0x5, 0x5, 0x1, 0x0, 0x46, 0xb, 0x7, 0x8, 0x2, 0x0, 0x9, 0x4, 0x9, 0x7, 0x6, 0x5, 0xd, 0x6, 0x8, 0x9, 0x5, 0x4, 0x40, 0x1, 0x7, 0x3, 0x80, 0x200, 0xb8d, 0xfffffffc, 0x0, 0x13, 0x5, 0x5, 0x5, 0x58, 0x10001, 0xffffff56, 0x3, 0x8, 0x3, 0x7, 0x4, 0x0, 0x0, 0x98, 0x84b, 0x4, 0x2, 0x40, 0x80, 0x0, 0x5, 0x6, 0x4, 0x2, 0x996e, 0x7, 0x0, 0x7, 0x1, 0x1, 0x101, 0x3, 0xca, 0x6, 0x83fb, 0x7, 0x6, 0xa4, 0x5, 0x7, 0x3, 0x47d, 0xe, 0x7f, 0xfffffffb, 0x9, 0x3, 0xc, 0x34f, 0xffff, 0xd, 0x1e, 0xa, 0x0, 0x2, 0x100, 0x81, 0x80000001, 0xff, 0x5, 0x2800000, 0xbf, 0x1, 0x5, 0x1, 0x40, 0x6, 0x2, 0x8, 0x3, 0xc, 0xb, 0x2, 0x6, 0x7ff, 0x5, 0xadd, 0x4, 0x400, 0x7, 0x3, 0x101, 0x1000, 0x9, 0xdc, 0x1, 0x7fffffff, 0x6, 0x8000000, 0x3, 0x8, 0x6, 0xd, 0x6, 0xfffffc01, 0x5c, 0x3, 0xfffffffa, 0x8, 0x0, 0xd5f, 0x8001, 0x6, 0x2, 0xfffff04a, 0x6e0bce79, 0x6, 0x3, 0xfffffff8, 0x10001, 0xfffffffa, 0x1000, 0xfffff800, 0x81, 0x8, 0x80000000, 0xe38, 0x10000, 0x1, 0x80, 0xf, 0x7f, 0x5, 0xffff, 0x8, 0x0, 0xebce, 0x1ff, 0x5, 0x8, 0x4, 0x5, 0x1, 0x2, 0xfffff000, 0x1d7d, 0x3, 0x9, 0xe7, 0x100, 0x8, 0x7ff, 0x6, 0x4]}, @TCA_POLICE_RATE64={0xc}]]}, {0x64, 0x6, "c13d546cfb38c98b7fe12c97a151213aaf292bd41c1c809af57b9adabfaf70bd46c929df3df91a35a1d089370dcaeb56c10575cc10bd3a5e560c7cfec8ce443d0bc16e623aab9ac36f8f7434f13b46ad9b3178a16188bb1c835c1bde4cd1b891"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0xd0, 0xb, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x6, 0x10, 0x1}, 0x80}}]}, {0x85, 0x6, "231bd8f0cac0b4bdeda355c5d3b0562781c750cae5c61ae102731bb4b45e3c65e256926bc101998efd9733c9c097fd46b17c9d64d7a49e52c44f8936c85b1e86761058917f7516d994eb324de55156f644feba096915cab776209b9ccbfbf73cbcc29a8a6c5566e3ac75866c62f34712846e1e2ee11355b65d2d917fd0574c01cf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_pedit={0x11bc, 0x7, 0x0, 0x0, {{0xa}, {0x1190, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xac, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_KEYS_EX={0x110, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0x168, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x1, 0x3, 0x6, 0x80000001, 0x80000000}, 0x2, 0xb, [{0xc6, 0x0, 0x6, 0x2, 0xffff, 0xff}, {0x7, 0x1, 0x9, 0x4, 0x35850c03, 0x3}, {0x899, 0x6, 0x1, 0x29e, 0xf, 0x2}]}, [{0x4, 0x3, 0x0, 0x8, 0x0, 0x5}, {0xffc00000, 0x1, 0x8, 0x6, 0x7, 0x1ff}, {0x8, 0x8, 0x3, 0x3, 0x1, 0x5}, {0x3, 0xe, 0x4b3068c4, 0x0, 0xfffffff9, 0x7}, {0x3, 0x7, 0x1, 0x7, 0x4, 0xf}, {0x3, 0x3, 0xfffffffd, 0x4, 0x8, 0x8}, {0xffff, 0xe, 0x0, 0x35, 0xffffffff, 0xa}, {0x5, 0x8, 0x5bea, 0x6, 0x5, 0x24000}, {0x10, 0x8f, 0x3, 0xbba1, 0x4, 0x7}, {0xf3c5, 0x4, 0x6, 0x2, 0x0, 0x10001}, {0x65, 0x3, 0xfffff440, 0x7fffffff, 0x6, 0x2cb}, {0x71, 0x62, 0xfffffff9, 0x5, 0xfffffffc, 0x7f}, {0x6, 0xfff, 0x0, 0xc, 0x52, 0xfffffff6}, {0x5, 0x3, 0x200, 0x7, 0x2400000, 0x2}, {0x2, 0x55, 0x7, 0x3, 0x7f, 0x2}, {0x3, 0x1, 0x6, 0x8, 0xffff7fff, 0x6}, {0x9, 0x401, 0x400, 0x28, 0x2fd2, 0x80000001}, {0x2, 0x3, 0xfffffff8, 0x8, 0x4, 0x7fff}, {0xac3, 0x6, 0x7fffffff, 0x80000000, 0x2, 0xc7}, {0x2, 0x5, 0x7, 0x5, 0x1, 0xce93}, {0x10001, 0x1, 0xf9, 0x4, 0x4, 0xffffffff}, {0x1ff0, 0x800, 0x1, 0x1, 0x1, 0xfffffffe}, {0xd, 0xf97, 0x6, 0x2, 0x9}, {0x27a4caad, 0x6, 0x4, 0x1, 0x30e, 0x80}, {0x200, 0x2, 0x8, 0x7fffffff, 0x0, 0x2}, {0x9, 0x6, 0xb, 0x7, 0x9, 0x8000000}, {0x1000, 0x4, 0x9, 0x8bd, 0x1, 0xfffffff9}, {0x10000, 0x5c21, 0xbe, 0xfffffffc, 0x0, 0x1}, {0x3, 0x10001, 0x6, 0x8e2d, 0x3, 0x8}, {0x1e9a059c, 0x0, 0x8, 0x10, 0x1000, 0x81}, {0xa, 0x3, 0x3, 0xb9, 0x38ec, 0xfffffba0}, {0x0, 0x0, 0xa8, 0x101, 0x0, 0x7f}, {0x9, 0xfffffe01, 0x5, 0x2, 0x6dd, 0x1}, {0xffff8000, 0x9, 0x80, 0xf, 0x5, 0x7}, {0xc0, 0x100, 0x81, 0x452c, 0x6fc, 0x1}, {0x93b, 0x5648, 0x9, 0x9, 0x7f, 0x41ae}, {0x7, 0x429b, 0x100, 0xd91f, 0x8, 0x8}, {0x7f, 0x7ca, 0x8, 0x3, 0x8001, 0x1}, {0x3, 0x7, 0x4, 0x5, 0x8, 0x9901}, {0xffff, 0x7fffffff, 0x0, 0x4, 0x4, 0x2}, {0x5, 0x8ccb, 0x4, 0x101, 0x9, 0x6}, {0x2, 0x9, 0x62, 0x3, 0x2, 0x80000001}, {0x2c44, 0x1000, 0x3, 0xfffffffb, 0x9, 0x7}, {0x7fff, 0x8, 0x6, 0x7ff, 0x0, 0x200}, {0x8001, 0x1, 0x7, 0x5, 0x5, 0x1}, {0x9, 0x7, 0x1, 0x93, 0x4, 0x7}, {0x9, 0x5, 0xa0b6, 0x7, 0x8001, 0xd}, {0xbe2e, 0x8, 0x7, 0x9, 0x4, 0x3}, {0x482, 0x9e1f, 0x7, 0x9, 0x3}, {0x47b, 0x4, 0x73b4, 0x8b78, 0x3, 0x1000}, {0x9, 0x7fff, 0xfffeffff, 0x81, 0x1d7a}, {0x2, 0x7, 0x3ff, 0x4, 0x1, 0x8}, {0xec, 0xf, 0x4, 0x5, 0x41, 0xfff}, {0x2, 0x4, 0x8, 0x1, 0x7f, 0xa}, {0x9, 0xfffffffb, 0x2, 0x7ff, 0x400, 0x5}, {0xffffffb1, 0xa, 0x8, 0x2, 0x6, 0x6}, {0x0, 0x2, 0x5, 0x7c38, 0xffff, 0x4}, {0xffff, 0x1, 0x2c, 0x1, 0xc7, 0x9}, {0x3, 0x2, 0x53, 0x7, 0xfffffeff, 0x6}, {0x2, 0x5, 0x0, 0xf9, 0x0, 0x200}, {0x7fff, 0x0, 0x6, 0x10, 0x8, 0x6}, {0xffffffff, 0x7, 0x20, 0xf, 0x2, 0x35}, {0x4, 0xc8b, 0x9, 0x9, 0x0, 0x6}, {0x0, 0x10, 0x4a, 0x9, 0xb, 0x4}, {0x5, 0x0, 0x9, 0x10001, 0x3c9f7e7, 0xffffff01}, {0x7, 0x8, 0x25f, 0x5, 0x4, 0x4}, {0xfffffff5, 0xca, 0x4, 0x35, 0x40, 0x1}, {0x3ff, 0xffffff44, 0x9, 0x7, 0xa15, 0xc0}, {0x626, 0x5, 0x4, 0x6, 0x5, 0x9}, {0x1, 0x3, 0x80000000, 0x3, 0x0, 0x6}, {0x400, 0xc41d, 0x9, 0x6, 0x101, 0x4}, {0x9, 0x1000, 0xa399, 0x200, 0x0, 0x9}, {0x84, 0xfffff4ae, 0x2, 0x0, 0x5, 0x6}, {0x80000001, 0x7, 0x1ff, 0x3d3af0af, 0x3, 0x800}, {0x1, 0x6, 0x6, 0x81, 0xd, 0x6}, {0x6, 0xc, 0xe0000, 0x6, 0xa, 0x8}, {0x3, 0x0, 0x2, 0x3, 0x9b, 0x710}, {0x8, 0x5, 0x0, 0xee8, 0xcd7, 0x2}, {0xc8, 0x9150, 0x9a, 0x9, 0x15f, 0x5}, {0x3, 0x0, 0x8000, 0xd7, 0xfffffffc, 0x23f6}, {0x40, 0x9, 0x69, 0x4, 0x6, 0x5}, {0x1, 0x2, 0x9, 0x7, 0x8, 0xa01}, {0x7, 0xab8, 0x0, 0x80000001, 0x5, 0x7}, {0x1, 0x10000, 0x2, 0xffffffff, 0x80, 0x1ff}, {0x2f, 0x2, 0x4, 0x0, 0x3, 0x7f}, {0x40, 0xc41, 0x6, 0x9, 0x6, 0x80000001}, {0x787000, 0x4, 0xa, 0x1, 0x3, 0x3ff}, {0x8, 0x6, 0x5, 0x3, 0xffff, 0x2}, {0x2, 0x7, 0x9, 0x80000000, 0x5, 0x1ff}, {0x5, 0x3, 0x14, 0x1ff, 0x42, 0x1}, {0x6, 0xf, 0x7, 0x80000001, 0x8, 0x7}, {0x3, 0x7, 0x6, 0xd76e, 0x7, 0x3}, {0x2, 0x8001, 0xb3b9, 0xffffffff, 0x8, 0x3}, {0x762, 0x9, 0x6b88, 0x921, 0x8, 0xa}, {0x7fff, 0x8, 0x3, 0x1800, 0xcf, 0x80}, {0x7, 0x7, 0x3, 0x28e7, 0xff, 0x400}, {0x0, 0x1, 0x40, 0x7712b46a, 0x4}, {0x7, 0x9545, 0xe, 0x1, 0x3c3, 0x4}, {0x6, 0xf0000000, 0x6, 0x0, 0x9, 0x8}, {0x3, 0x5, 0x3, 0x1, 0x4, 0x7}, {0x4, 0x8, 0x8, 0xb, 0x7}, {0x8, 0x4, 0xf9, 0x9, 0x7, 0x2}, {0x30000, 0x98, 0xffffff81, 0x3, 0x8000, 0xffffffc0}, {0x7, 0x8001, 0x25, 0x6, 0x0, 0x7}, {0xffff539d, 0x400, 0x73, 0x7, 0x7, 0xfffffffb}, {0x8, 0x3, 0x1, 0x0, 0x3, 0x6}, {0x7a, 0x39f4, 0x6, 0x0, 0xfffffffc, 0x3}, {0x8, 0x3, 0x3, 0x1, 0x0, 0x5}, {0x48b, 0x2, 0x3df2, 0x2, 0x73f, 0x75def65c}, {0x6, 0x665b, 0xff, 0x33, 0xa6, 0x4}, {0x64, 0x8, 0x10001, 0x7ff, 0x0, 0x1}, {0xffffffd7, 0x7, 0x0, 0x8}, {0x400, 0x323a, 0x5, 0x0, 0x3, 0xb}, {0x6, 0xe, 0x5, 0x3, 0x0, 0x1}, {0x8, 0xe5, 0x7fff, 0x0, 0x40, 0x18af1a82}, {0x8, 0x5, 0x3ff, 0x101, 0x8, 0xfffffffb}, {0x0, 0x3, 0x5, 0x6207, 0x5, 0x1}, {0xffff, 0x8, 0xe, 0xfd9d, 0x0, 0xf}, {0x90, 0x5, 0x2, 0xff, 0x80, 0x80000001}, {0x2, 0x0, 0x9, 0x8, 0x6c53, 0x1ff}, {0x0, 0x3, 0x1, 0x8000, 0xb26e, 0x2}, {0x12, 0x456d, 0x5, 0x400, 0x5, 0xfffffffd}, {0x0, 0x6, 0x1, 0xfffffff8, 0x3, 0x86}, {0x7c, 0x1, 0x0, 0x0, 0x7, 0x81}, {0x3ff, 0x7, 0x5, 0x5, 0xffffffff, 0x1}, {0xa1f3, 0x2, 0x10001, 0xffffb108, 0x3, 0x7}, {0x8, 0x0, 0x0, 0x2e, 0x7, 0x8}, {0x80000000, 0x6, 0xfff, 0x1, 0x9, 0x1000}], [{0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x1fa0377c7359df16, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x6, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0xc37873d7588e663e}, {0x3}, {0x2, 0x1}, {0x1}, {0x4}, {0x4}, {0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x1}, {0x1}, {0x1, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x4}, {0x5}, {0x4}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x7, 0x1}, {0x3, 0xbcfdcda3663c4f74}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mirred={0x14c, 0x20, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x7, 0x10000000, 0x401, 0x4}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x5, 0x7, 0x96, 0xfffff800}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x1, 0x0, 0x9, 0xfffffff8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x1, 0x20000000, 0x3}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x2, 0x7, 0xa, 0xd4c}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x3, 0x8, 0x200, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa, 0xd90, 0x2, 0x1ff, 0x6}, 0x1, r7}}]}, {0x40, 0x6, "c47109a94259b43102e707d950d190edee639d0c36ba216244fdea384e293d207c55bf2b206c39229f9e92dbeb422e6937600ba554e40fdcabb32adc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_U32_MARK={0x10, 0xa, {0x10001, 0x3}}, @TCA_U32_INDEV={0x14, 0x8, 'syzkaller0\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c64}}, 0x800) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r8) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r9, 0x1, 0x70bd29, 0x25dfdbfc, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005}, 0x0) 2.959851382s ago: executing program 2 (id=2709): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x3c, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c17f079171000700880000"}}}}}}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r4, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r5, @ANYBLOB="ed5d5e67"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000480)=[{0x3, 0x4, 0xb, 0x5}, {0x1, 0x4, 0xb, 0x5}], 0x10, 0x3}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0) 2.741458887s ago: executing program 3 (id=2711): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x4, 0x8, 0x9, @vifc_lcl_ifindex, @private=0xa010100}, 0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x2}, 0x8) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xb0, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x2e}, @void, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fb004e3715f889509cf9c93cbbf3ee2f7a9490bcfd246054"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x4) 2.640211886s ago: executing program 3 (id=2712): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendfile(r3, r4, 0x0, 0xffffffff000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r5, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.630318295s ago: executing program 2 (id=2713): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000280)={r2, @in={{0x2, 0x4e23, @remote}}, 0x8002, 0x1}, &(0x7f0000000080)=0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x7, 0x8}, 0x50) bpf$ENABLE_STATS(0x20, &(0x7f00000003c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x3, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt(r1, 0x73, 0x7, &(0x7f0000000180)="1dd743d855fe86ef8468effa5fcf87686d479d3b17c4bba58cbc04b1a95cfc071a4c3f784a41f748881af111b7e0224ced84087bbf9fa03dcb2d3bae433c96", 0x3f) 1.743656332s ago: executing program 3 (id=2716): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b2a, &(0x7f0000000040)) ioctl(r2, 0x8b1a, &(0x7f0000000040)) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0x2, 0xfffffff8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@ipv4_newroute={0x20, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x0) 1.674781184s ago: executing program 2 (id=2717): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x6a, &(0x7f00000004c0)=""/106, 0x41100, 0x58, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x948, 0x160, 0x378, 0x378, 0x460, 0x630, 0x878, 0x878, 0x878, 0x878, 0x878, 0x6, 0x0, {[{{@ipv6={@empty, @private1, [], [0x0, 0x0, 0x0, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x5}, 0x0, 0x138, 0x160, 0x0, {0x7a00000010000000}, [@common=@hl={{0x28}, {0x3, 0x4}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@rand_addr=' \x01\x00', 0x22}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x1e0, 0x218, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x8, 0x2400], 0x80000000, 0x8, 0x94b06560c6564e1f, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2c}, @dev={0xfe, 0x80, '\x00', 0x22}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @local, @remote], 0xf}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0x0, 0x20}, {0x0, 0x0, 0x4}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x3, 0x5, 0x2, 0x8000, 0xc, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xcb, 'system_u:object_r:kmsg_device_t:s0\x00'}}}, {{@uncond, 0x0, 0x208, 0x248, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x36}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x8}, @private1, @local, @private2={0xfc, 0x2, '\x00', 0x2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x8, @ipv6=@remote, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x9a8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000a00)) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r4, 0x6, 0x5, 0x0, &(0x7f00000009c0)) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffff7ff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x80820}, 0xc0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0x2}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0xe, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x6}, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) ioctl$XFS_IOC_BULKSTAT(r5, 0x8040587f, &(0x7f0000000000)={{0x5, 0x2, 0x9, 0x7, 0x2}, &(0x7f0000000340)=[{}, {}]}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="24000000190001002cbd7000000000001c140000fe020001"], 0x24}}, 0x0) 1.586011267s ago: executing program 3 (id=2718): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e00010800074000000001"], 0x94}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) r2 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=@flushsa={0x214, 0x1c, 0x100, 0x70bd2d, 0x25dfdbfd, {0x33}, [@policy={0xac, 0x7, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e21, 0x1fe9, 0x4e21, 0xf3ee, 0xa, 0x0, 0x20, 0x2c, r1, r2}, {0x4, 0x8, 0x6, 0x95, 0xde, 0x7fff, 0x1, 0x4a4}, {0x1, 0xc, 0x2, 0x8b3}, 0xd, 0x6e6bb9, 0x2, 0x1, 0x1}}, @extra_flags={0x8, 0x18, 0x3}, @extra_flags={0x8, 0x18, 0x3}, @tmpl={0x144, 0x5, [{{@in6=@mcast1, 0x4d3, 0x6c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x2, 0x8e145e7ef1ae6c8c, 0xf, 0x0, 0x0, 0xfffffffa}, {{@in6=@private1, 0x4d2, 0x32}, 0x2, @in=@multicast2, 0x3506, 0x1, 0x0, 0x8, 0x3, 0x9, 0x18}, {{@in6=@rand_addr=' \x01\x00', 0x4d3, 0x33}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3502, 0x2, 0x0, 0x8f, 0x3, 0x5, 0x9}, {{@in=@empty, 0x4d4, 0x6c}, 0xa, @in6=@remote, 0x3505, 0x4, 0x0, 0x15, 0xffffbee6, 0x88a, 0x5}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0xff}, 0xa, @in=@local, 0x3501, 0x2, 0x2, 0x7, 0x3, 0x9, 0x9}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x20048000}, 0x4040) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 1.453479294s ago: executing program 3 (id=2719): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x704) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000240], 0x0, &(0x7f0000000200), &(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000040000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x110}}, 0x0) r3 = socket(0x8, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0) recvmmsg(r6, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000001c0)={0x0, 0xffffffffffffff46, &(0x7f0000002540)={&(0x7f0000002500)={0x1c, 0x0, 0xad0e41e9ad2f93a7, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01072bbd7000ffdbdf250100000008000300", @ANYRES32=r11, @ANYBLOB="99c896ea15d38af8f5f64c1d4ad972d594857720c86d4072c6588aee1dade2d722feb0400a000ed5b95c568ddeeef2c987802f3858f5e203fa43886bf7fbecb97976b8de5e66d604b392a23cb491ac13b59ce29bab6336e88291715df47b80ef86891e44d469146376f200bed3989fa4bdd9778e4e9d3197ba92739dfe"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xa6}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000480}, 0x800) ioctl$IMGETCOUNT(r3, 0x40106183, &(0x7f0000000000)) getpid() getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000c40)={@local}, &(0x7f0000000c80)=0x14) write(r1, &(0x7f0000000000)='-\x00\x00', 0x3) 1.216142129s ago: executing program 0 (id=2720): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r3 = socket$rxrpc(0x21, 0x2, 0xa) poll(&(0x7f00000001c0)=[{r3, 0x8004}, {r3, 0x100}], 0x2, 0x7) 920.535542ms ago: executing program 0 (id=2721): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x13) r1 = socket$packet(0x11, 0x3, 0x300) clock_gettime(0x0, &(0x7f0000000540)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_BASE_RATE64={0xffffffffffffff52, 0x2, 0x1}]}}]}, 0x50}}, 0x0) 680.486897ms ago: executing program 0 (id=2722): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @exit, @alu={0x5, 0x1, 0xa, 0xa, 0xa}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) 380.608872ms ago: executing program 0 (id=2723): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x4004) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)={0x44, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x10) 184.139437ms ago: executing program 2 (id=2724): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa888ef000000141412800b0001006d616373656300002a000280080005004681b93c19563c4fcfa0e9096d286e011c0b6a9699725b0a061fa243a70bd54ea3291581366801c67e479644bd9161c6b1bed364c6d6417d893f7ccc2ba4b8cd6c4210aefb1963b3cc37b71f642fc1e44f0386cedafb8e96707b0e4796c0bfac4e480f97991653af16", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB], 0x44}}, 0x8000) 183.133551ms ago: executing program 0 (id=2725): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x4004) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'pim6reg\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000140)) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000140)) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) (async) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000044}, 0x24000000) (async) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000044}, 0x24000000) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null]}) (async) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null]}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x2000001}, 0x8000) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c000000100039042abd7000fcdbdf2500000000", @ANYRES32=r8, @ANYBLOB="01189600031100102c0012800b00010069703667726500001c00028014000600fc000000000000000000000000000000040012002c0bb0"], 0x4c}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r9 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r10, &(0x7f0000000200)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0xfffffffe, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null]}, 0x40) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x8000}, 0x0) 42.876942ms ago: executing program 4 (id=2726): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'syztnl2\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x1, 0x80, 0x69e, 0x71c, {{0xd, 0x4, 0x0, 0x5, 0x34, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @local, {[@end, @rr={0x7, 0x3, 0xf7}, @ssrr={0x89, 0x1b, 0x8a, [@empty, @private=0xa010101, @broadcast, @loopback, @loopback, @remote]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000001c0)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f0000000000)={&(0x7f00000000c0)=@can={{0x4, 0x1, 0x1}, 0x8, 0x0, 0x0, 0x0, "7ee1d272c746bafb"}, 0x10}, 0x1, 0x0, 0x0, 0x24000000}, 0x11) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x30, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x286}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf1a}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048805}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r12, 0x107, 0x1, &(0x7f00000002c0)={r13, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000001300)=ANY=[@ANYRES32=r7, @ANYRES16=r12, @ANYRESOCT=r5, @ANYRES32=r13, @ANYRES16=r8, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000010000000000000000000000000000000000004d4e2e687805000300e40000000800ce0f1495441dd6c3e304", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRESHEX=r7, @ANYRES64=r9, @ANYRESOCT=r2, @ANYRES64=r10, @ANYRESHEX=r1, @ANYRESDEC=r8, @ANYRES8, @ANYBLOB="3c00028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000900000008000100", @ANYRES32=0x0, @ANYBLOB="f000028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040002000000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400050000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000800000008000100", @ANYRES32=r4, @ANYRES64=r10, @ANYRESOCT=r9, @ANYRESHEX=r11, @ANYRES32=r6, @ANYRES64=r1, @ANYRES32=r9, @ANYBLOB="8000028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRES32=r10, @ANYBLOB="2801028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000b0000003c0001002400010075736572000000006b757000000000000000000000000000000000000000000005000300faffffff0400040008000600", @ANYRES32=0x0, @ANYRES16=r8, @ANYRES32=r13, @ANYRES16=r2], 0x68c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x3, 0x30}, 0xc) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x4004071, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x800, 0x0, 0x54}, 0x9c) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0xffff, 0x20, 0x1000, 0xa}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r14, 0x84, 0x70, &(0x7f0000000180)={r15, @in6={{0xa, 0x4e22, 0x1, @mcast1, 0x400}}, [0x2, 0xfffffffffffffffa, 0x200, 0xe, 0x5, 0xc, 0xffffffff00000001, 0x5, 0x1, 0x7, 0xffffffffffffffff, 0x8, 0x3, 0x4, 0x8000000000000001]}, &(0x7f0000000280)=0x100) 35.766193ms ago: executing program 0 (id=2727): r0 = socket(0x10, 0x3, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000080)=0xfffffffb, 0xfffffffffffffc7f) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2800000076000d0b00000000000000000300000000000000080001000b00000008000a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001000390400000000fcffffff00000000", @ANYRES32=r7, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac141495bd3c"], 0x40}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100039040200"/20, @ANYRES32=r7, @ANYBLOB="481000001a41045b1138b928eabc6200677265001400028008000709ac1414aa06000300810000f9957d964adcb760878a8655cdb18a0008000400cc060000"], 0x48}}, 0x4040000) 0s ago: executing program 2 (id=2728): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x96, 0x0, 0x80}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="0b010000000000c3000000000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x11, 0xffffffffffffffff, &(0x7f0000000080)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000340)={@broadcast, 0x0, 0x0, 0x60, 0x0, [{@remote}, {@multicast1}, {@multicast1}, {}, {@multicast2}, {@dev}]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$key(0xf, 0x3, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x4c02}) readv(r3, &(0x7f0000000080)=[{&(0x7f0000001980)=""/4101, 0x1005}], 0x1) r4 = socket(0x10, 0x3, 0x0) setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f0000000100)=0xf2, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r5, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0xffffe000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r6, 0x2000) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) kernel console output (not intermixed with test programs): syzkaller1: entered promiscuous mode [ 188.582958][ T9366] syzkaller1: entered allmulticast mode [ 188.837019][ T9396] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 188.853211][ T9396] team0 (unregistering): Port device team_slave_0 removed [ 188.876275][ T9396] team0 (unregistering): Failed to send options change via netlink (err -105) [ 188.894399][ T9396] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 188.935498][ T9396] team0 (unregistering): Port device team_slave_1 removed [ 188.948744][ T9396] bond1: left allmulticast mode [ 188.954119][ T9396] ip6gretap1: left allmulticast mode [ 188.961134][ T9396] bond1: left promiscuous mode [ 188.967835][ T9396] ip6gretap1: left promiscuous mode [ 188.976796][ T9396] team0 (unregistering): Failed to send options change via netlink (err -105) [ 188.986232][ T9396] team0 (unregistering): Failed to send port change of device macvlan2 via netlink (err -105) [ 188.997523][ T9396] team0 (unregistering): Port device macvlan2 removed [ 190.162664][ T9483] lo speed is unknown, defaulting to 1000 [ 190.770197][ T9508] tipc: Enabling of bearer rejected, failed to enable media [ 190.783332][ T9508] __nla_validate_parse: 17 callbacks suppressed [ 190.783348][ T9508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.896'. [ 191.005726][ T5143] Bluetooth: hci2: command 0x0406 tx timeout [ 191.012039][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 191.013927][ T5824] Bluetooth: hci3: command 0x0406 tx timeout [ 191.581692][ T9508] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 191.788507][ T9534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.805491][ T9534] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.848763][ T9549] ip6t_srh: unknown srh match flags 4000 [ 191.865206][ T9534] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.977613][ T6592] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 191.996090][ T6592] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 192.027841][ T6592] bond0: now running without any active interface! [ 192.101604][ T9542] lo speed is unknown, defaulting to 1000 [ 192.594640][ T9579] netlink: 296 bytes leftover after parsing attributes in process `syz.4.908'. [ 192.742538][ T9592] tipc: Enabled bearer , priority 0 [ 192.806396][ T9592] syzkaller0: entered promiscuous mode [ 192.815804][ T9592] syzkaller0: entered allmulticast mode [ 192.908563][ T9592] tipc: Resetting bearer [ 192.941600][ T9592] tipc: Disabling bearer [ 193.118144][ T9609] No such timeout policy "syz0" [ 193.359863][ T9619] bond6 (unregistering): Released all slaves [ 193.412284][ T9626] netlink: 34 bytes leftover after parsing attributes in process `syz.1.917'. [ 193.422665][ T9623] netlink: 20 bytes leftover after parsing attributes in process `syz.2.916'. [ 193.606666][ T9643] netlink: 100 bytes leftover after parsing attributes in process `syz.2.920'. [ 193.667615][ T9642] netlink: 'syz.2.920': attribute type 6 has an invalid length. [ 193.878591][ T9656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.925'. [ 194.052119][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.058577][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.241990][ T9667] lo speed is unknown, defaulting to 1000 [ 194.493068][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.930'. [ 194.546137][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.930'. [ 194.804800][ T9686] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.933'. [ 194.833467][ T9685] netlink: 44 bytes leftover after parsing attributes in process `syz.3.932'. [ 195.014691][ T9691] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 195.379097][ T9706] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 195.623215][ T9716] veth1: left promiscuous mode [ 195.640463][ T9716] veth1: left allmulticast mode [ 195.677330][ T9716] vlan3: left promiscuous mode [ 195.702425][ T9716] geneve1: left promiscuous mode [ 195.708577][ T9716] vlan3: left allmulticast mode [ 195.713582][ T9716] geneve1: left allmulticast mode [ 195.720158][ T9716] ip6gre1: left promiscuous mode [ 195.725383][ T9716] ip6gre1: left allmulticast mode [ 196.457385][ T9756] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 196.496167][ T9756] syzkaller1: linktype set to 768 [ 196.633740][ T9766] lo speed is unknown, defaulting to 1000 [ 197.153066][ T9780] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 197.206318][ T9785] __nla_validate_parse: 3 callbacks suppressed [ 197.206335][ T9785] netlink: 168 bytes leftover after parsing attributes in process `syz.3.960'. [ 197.866993][ T9793] tipc: Enabled bearer , priority 0 [ 197.919721][ T9794] syzkaller0: entered promiscuous mode [ 197.925711][ T9794] syzkaller0: entered allmulticast mode [ 197.951525][ T9802] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 198.012259][ T9811] netlink: 16 bytes leftover after parsing attributes in process `syz.4.965'. [ 198.043932][ T9811] netlink: 40 bytes leftover after parsing attributes in process `syz.4.965'. [ 198.053190][ T9802] tipc: Resetting bearer [ 198.072774][ T9802] tipc: Disabling bearer [ 198.083560][ T9806] netlink: 56 bytes leftover after parsing attributes in process `syz.2.964'. [ 198.241753][ T9826] tipc: Enabling of bearer rejected, failed to enable media [ 198.632235][ T9837] lo speed is unknown, defaulting to 1000 [ 199.306009][ T9866] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.981'. [ 199.587968][ T9860] netlink: 'syz.4.978': attribute type 5 has an invalid length. [ 199.824620][ T9894] sock: sock_set_timeout: `syz.3.989' (pid 9894) tries to set negative timeout [ 199.931802][ T9899] syzkaller0: entered promiscuous mode [ 199.937477][ T9899] syzkaller0: entered allmulticast mode [ 200.053295][ T9901] nbd: must specify at least one socket [ 200.108563][ T9903] netlink: 'syz.4.994': attribute type 27 has an invalid length. [ 200.118202][ T9903] netlink: 'syz.4.994': attribute type 1 has an invalid length. [ 200.244618][ T9909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.995'. [ 200.292387][ T9905] syzkaller0: entered promiscuous mode [ 200.305982][ T9905] syzkaller0: entered allmulticast mode [ 200.425647][ T9912] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.997'. [ 200.756663][ T9927] netlink: 20 bytes leftover after parsing attributes in process `syz.1.999'. [ 201.464681][ T9914] lo speed is unknown, defaulting to 1000 [ 201.484895][ T9917] lo speed is unknown, defaulting to 1000 [ 201.808780][ T9946] xt_hashlimit: max too large, truncated to 1048576 [ 201.832637][ T9946] Cannot find add_set index 3 as target [ 201.857144][ T9938] xt_CT: No such helper "syz0" [ 201.894942][ T9943] raw_sendmsg: syz.1.1004 forgot to set AF_INET. Fix it! [ 201.932843][ T9947] lo speed is unknown, defaulting to 1000 [ 202.079020][ T9954] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1007'. [ 202.093375][ T9956] syzkaller0: entered promiscuous mode [ 202.099182][ T9956] syzkaller0: entered allmulticast mode [ 203.000324][ T9979] tipc: Enabling of bearer rejected, failed to enable media [ 203.181743][ T9988] lo speed is unknown, defaulting to 1000 [ 203.262180][ T9997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1017'. [ 204.108878][T10016] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1022'. [ 204.625738][T10029] geneve2: entered promiscuous mode [ 204.648176][ T6592] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.670741][ T6592] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.700003][ T6592] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.730983][ T6592] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.783258][T10036] netlink: 'syz.0.1029': attribute type 1 has an invalid length. [ 204.801055][T10036] netlink: 'syz.0.1029': attribute type 4 has an invalid length. [ 204.819275][T10036] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1029'. [ 204.839749][T10036] netlink: 'syz.0.1029': attribute type 10 has an invalid length. [ 205.230770][T10046] can: request_module (can-proto-4) failed. [ 205.324190][T10053] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1033'. [ 205.413136][T10053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1033'. [ 205.486634][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1036'. [ 205.509780][T10054] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1033'. [ 205.559422][T10065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1036'. [ 205.665236][T10076] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 205.695799][T10075] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.1040'. [ 205.912740][T10088] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1042'. [ 205.953830][T10088] unsupported nlmsg_type 40 [ 206.133201][T10105] syzkaller0: entered promiscuous mode [ 206.141337][T10105] syzkaller0: entered allmulticast mode [ 206.486028][T10129] openvswitch: netlink: Flow key attr not present in new flow. [ 206.877140][T10157] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 206.909697][T10158] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 207.077637][T10165] gretap0: entered promiscuous mode [ 207.093565][T10165] vlan4: entered promiscuous mode [ 207.203842][T10163] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 207.238602][T10163] bond4 (unregistering): Released all slaves [ 207.443476][T10190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.693500][T10209] bridge0: entered promiscuous mode [ 207.712671][T10209] macsec0: entered promiscuous mode [ 208.077424][T10242] 8021q: adding VLAN 0 to HW filter on device bond5 [ 208.364397][T10264] __nla_validate_parse: 7 callbacks suppressed [ 208.364415][T10264] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1090'. [ 208.380385][T10271] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1088'. [ 208.405680][T10264] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1090'. [ 208.423201][T10272] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1089'. [ 208.469216][T10264] netlink: 'syz.2.1090': attribute type 5 has an invalid length. [ 208.511221][T10264] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1090'. [ 208.554564][T10259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1088'. [ 208.671363][T10282] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 208.881081][T10293] ieee802154 phy0 wpan0: encryption failed: -22 [ 208.894097][T10293] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1095'. [ 209.079474][T10302] netlink: 'syz.3.1097': attribute type 12 has an invalid length. [ 209.096989][T10302] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1097'. [ 209.324367][T10309] openvswitch: netlink: IP tunnel dst address not specified [ 209.333616][T10307] syzkaller0: entered promiscuous mode [ 209.339193][T10307] syzkaller0: entered allmulticast mode [ 209.743763][T10331] netlink: 'syz.4.1104': attribute type 10 has an invalid length. [ 209.797099][T10331] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.804810][T10331] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.820785][T10331] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.828025][T10331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.835700][T10331] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.842885][T10331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.844695][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1104'. [ 209.863413][T10331] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 209.875465][T10333] bridge_slave_1: left allmulticast mode [ 209.881554][T10333] bridge_slave_1: left promiscuous mode [ 209.889322][T10333] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.909610][T10333] bridge_slave_0: left allmulticast mode [ 209.920228][T10333] bridge_slave_0: left promiscuous mode [ 209.926313][T10333] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.060559][T10333] bond0: (slave bridge0): Releasing backup interface [ 210.239130][T10354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1109'. [ 210.329435][T10359] xt_TCPMSS: Only works on TCP SYN packets [ 210.667250][T10385] syz_tun: left allmulticast mode [ 210.672516][T10385] syz_tun: left promiscuous mode [ 210.678008][T10385] bridge0: port 4(syz_tun) entered disabled state [ 210.697624][T10385] bridge_slave_0: left allmulticast mode [ 210.703536][T10385] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.739693][T10385] bridge_slave_1: left allmulticast mode [ 210.746163][T10385] bridge_slave_1: left promiscuous mode [ 210.746763][T10394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.752010][T10385] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.770158][T10394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.783484][T10394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.857619][T10385] bond0: (slave bond_slave_0): Releasing backup interface [ 210.882516][T10385] bond0: (slave bond_slave_1): Releasing backup interface [ 210.897693][T10385] team0: Port device team_slave_0 removed [ 210.912854][T10385] team0: Port device team_slave_1 removed [ 210.919821][T10385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.928066][T10385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.936829][T10385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.944231][T10385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.952987][T10385] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 211.383645][T10432] team0: Port device dummy0 removed [ 211.411903][T10432] bond0: (slave bond_slave_0): Releasing backup interface [ 211.430961][T10432] bond0: (slave bond_slave_1): Releasing backup interface [ 211.459873][T10432] team0: Port device team_slave_0 removed [ 211.494655][T10432] team0: Port device team_slave_1 removed [ 211.506550][T10432] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 211.538206][ T6107] !yz!: Port: 1 Link DOWN [ 211.547987][T10441] bridge0: entered allmulticast mode [ 212.002206][T10467] can: request_module (can-proto-0) failed. [ 212.069301][T10478] netlink: 'syz.1.1143': attribute type 10 has an invalid length. [ 212.095865][T10467] lo speed is unknown, defaulting to 1000 [ 212.096800][T10478] bridge0: left allmulticast mode [ 212.134614][T10478] team0: left allmulticast mode [ 212.143334][T10478] team_slave_0: left allmulticast mode [ 212.156916][T10478] team_slave_1: left allmulticast mode [ 212.167290][T10478] team0: left promiscuous mode [ 212.172173][T10478] team_slave_0: left promiscuous mode [ 212.178923][T10478] team_slave_1: left promiscuous mode [ 212.195136][T10478] bridge0: port 3(team0) entered disabled state [ 212.210753][T10478] bridge_slave_1: left allmulticast mode [ 212.221599][T10478] bridge_slave_1: left promiscuous mode [ 212.230425][T10478] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.267449][T10478] bridge_slave_0: left allmulticast mode [ 212.273480][T10478] bridge_slave_0: left promiscuous mode [ 212.285813][T10478] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.643881][T10497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.674717][ T30] audit: type=1800 audit(1773623111.107:3): pid=10497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1149" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1262 res=0 errno=0 [ 212.749712][T10500] veth2: entered allmulticast mode [ 212.828909][T10508] netlink: 'syz.1.1154': attribute type 3 has an invalid length. [ 213.154175][T10514] lo speed is unknown, defaulting to 1000 [ 213.185994][T10528] syzkaller0: entered promiscuous mode [ 213.195996][T10528] syzkaller0: entered allmulticast mode [ 213.501439][ T5822] Bluetooth: hci4: command 0x0405 tx timeout [ 213.657812][T10532] lo speed is unknown, defaulting to 1000 [ 213.709334][T10533] lo speed is unknown, defaulting to 1000 [ 214.443733][T10554] __nla_validate_parse: 9 callbacks suppressed [ 214.443751][T10554] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1165'. [ 214.461132][T10554] nbd: socks must be embedded in a SOCK_ITEM attr [ 214.506887][T10552] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1164'. [ 214.535643][T10554] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1165'. [ 214.545698][T10554] nbd: device at index 64 is going down [ 214.623089][T10560] xt_TCPMSS: Only works on TCP SYN packets [ 214.720754][T10559] bond3: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 214.737617][T10564] netlink: 'syz.2.1164': attribute type 5 has an invalid length. [ 215.723194][T10588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1174'. [ 215.872721][T10591] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1175'. [ 215.916246][T10591] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1175'. [ 216.314629][T10600] lo speed is unknown, defaulting to 1000 [ 216.942986][T10625] xt_hashlimit: size too large, truncated to 1048576 [ 217.246832][T10643] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1184'. [ 217.393584][T10645] tipc: Started in network mode [ 217.405850][T10645] tipc: Node identity 666532267a8f, cluster identity 4711 [ 217.433450][T10645] tipc: Enabled bearer , priority 0 [ 217.450291][T10648] syzkaller0: entered promiscuous mode [ 217.456536][T10648] syzkaller0: entered allmulticast mode [ 217.467862][T10645] tipc: Resetting bearer [ 217.543674][T10648] dummy0: entered promiscuous mode [ 217.548902][T10648] dummy0: entered allmulticast mode [ 217.582917][T10654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1187'. [ 218.020925][T10664] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1189'. [ 218.186037][T10666] syzkaller1: entered promiscuous mode [ 218.199597][T10666] syzkaller1: entered allmulticast mode [ 218.213304][T10644] tipc: Resetting bearer [ 218.267695][T10644] tipc: Disabling bearer [ 218.491979][T10681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.502476][T10677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1195'. [ 218.527795][T10677] netlink: 'syz.2.1195': attribute type 1 has an invalid length. [ 218.535929][T10677] netlink: 'syz.2.1195': attribute type 2 has an invalid length. [ 218.636349][T10684] vlan2: entered promiscuous mode [ 218.641423][T10684] bridge0: entered promiscuous mode [ 218.938264][T10706] tipc: Enabling of bearer rejected, failed to enable media [ 219.230186][T10720] syzkaller0: entered promiscuous mode [ 219.242303][T10720] syzkaller0: entered allmulticast mode [ 219.707748][T10740] bridge0: entered allmulticast mode [ 219.933042][T10751] bridge0: entered promiscuous mode [ 219.964176][T10754] __nla_validate_parse: 2 callbacks suppressed [ 219.964194][T10754] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1217'. [ 219.981915][T10754] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1217'. [ 220.491246][T10778] xt_HMARK: spi-set and port-set can't be combined [ 220.565044][T10782] netlink: 'syz.0.1225': attribute type 1 has an invalid length. [ 220.573030][T10782] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1225'. [ 220.621319][T10782] pim6reg: entered allmulticast mode [ 220.628981][T10782] pim6reg: left allmulticast mode [ 220.780539][T10790] netlink: 'syz.0.1228': attribute type 16 has an invalid length. [ 220.923489][T10796] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 220.939161][T10796] batman_adv: batadv0: Adding interface: macsec2 [ 220.945754][T10796] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.975455][T10796] batman_adv: batadv0: Interface activated: macsec2 [ 221.164073][T10801] syzkaller0: entered promiscuous mode [ 221.170550][T10801] syzkaller0: entered allmulticast mode [ 221.354524][T10805] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1233'. [ 221.494100][T10810] geneve1: entered promiscuous mode [ 221.505443][T10810] macsec3: entered promiscuous mode [ 221.517481][T10810] macsec3: entered allmulticast mode [ 221.529522][T10810] geneve1: entered allmulticast mode [ 221.555512][T10810] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1235'. [ 221.628585][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1235'. [ 221.910858][T10820] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 221.932798][T10820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.960718][T10820] syzkaller0: entered promiscuous mode [ 221.981800][T10820] syzkaller0: entered allmulticast mode [ 222.363445][T10824] can: request_module (can-proto-5) failed. [ 222.485779][T10828] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1240'. [ 222.634257][T10831] lo speed is unknown, defaulting to 1000 [ 224.009909][T10843] netlink: 'syz.4.1244': attribute type 1 has an invalid length. [ 224.117895][T10847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1244'. [ 224.139171][T10843] 8021q: adding VLAN 0 to HW filter on device bond6 [ 224.151615][T10841] tipc: Enabled bearer , priority 0 [ 224.159717][T10846] syzkaller0: entered promiscuous mode [ 224.165193][T10846] syzkaller0: entered allmulticast mode [ 224.213427][T10848] tipc: Resetting bearer [ 224.247717][T10840] tipc: Resetting bearer [ 224.307694][T10840] tipc: Disabling bearer [ 225.576258][T10898] netlink: 'syz.1.1259': attribute type 4 has an invalid length. [ 225.831791][T10907] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1261'. [ 225.859646][T10907] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1261'. [ 226.178462][T10928] netlink: 'syz.3.1267': attribute type 32 has an invalid length. [ 226.210034][T10928] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.280997][T10928] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.319014][T10938] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1268'. [ 226.393935][T10928] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.484209][T10928] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.508228][T10934] lo speed is unknown, defaulting to 1000 [ 226.642203][ T69] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.662888][ T6589] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.692661][ T6589] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.714127][ T6589] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.732615][T10954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1272'. [ 226.829239][T10954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1272'. [ 226.838974][T10954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1272'. [ 226.892752][T10957] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 227.034191][T10965] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1276'. [ 227.063364][T10965] netlink: ct family unspecified [ 227.068565][T10965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.737240][T10998] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1285'. [ 227.780847][T10999] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1285'. [ 228.072192][T11024] netlink: 'syz.1.1294': attribute type 4 has an invalid length. [ 228.096326][T11025] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1291'. [ 228.534366][T11052] ipvlan2: entered promiscuous mode [ 228.553106][T11052] ipvlan2: entered allmulticast mode [ 228.567773][T11052] gretap0: entered allmulticast mode [ 228.632918][T11051] bond4: option downdelay: invalid value (18446744073709551615) [ 228.651199][T11051] bond4: option downdelay: allowed values 0 - 2147483647 [ 228.665198][T11051] bond4 (unregistering): Released all slaves [ 228.688618][T11045] lo speed is unknown, defaulting to 1000 [ 228.864278][T11067] sctp: [Deprecated]: syz.2.1302 (pid 11067) Use of struct sctp_assoc_value in delayed_ack socket option. [ 228.864278][T11067] Use struct sctp_sack_info instead [ 229.133118][T11037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.305268][T11081] lo speed is unknown, defaulting to 1000 [ 230.653775][T11122] netlink: 'syz.3.1318': attribute type 10 has an invalid length. [ 230.718921][T11122] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.789121][T11122] bond0: (slave team0): Enslaving as an active interface with an up link [ 231.034933][T11132] __nla_validate_parse: 3 callbacks suppressed [ 231.034952][T11132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1320'. [ 231.075644][T11132] block nbd3: Unsupported socket: should be TCP or UNIX. [ 231.087816][T11127] lo speed is unknown, defaulting to 1000 [ 231.817278][T11148] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1325'. [ 232.005294][T11154] xt_TPROXY: Can be used only with -p tcp or -p udp [ 233.124010][T11188] lo speed is unknown, defaulting to 1000 [ 233.322585][T11204] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1337'. [ 233.357610][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1339'. [ 233.625048][T11219] tipc: Enabling of bearer rejected, failed to enable media [ 233.650231][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1342'. [ 233.672966][T11214] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 233.696127][T11214] netlink: 'syz.1.1342': attribute type 61 has an invalid length. [ 233.787059][T11229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1346'. [ 233.814868][T11231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1347'. [ 233.836847][T11231] netlink: 540 bytes leftover after parsing attributes in process `syz.4.1347'. [ 233.874460][T11229] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.943748][T11229] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.002840][T11233] lo speed is unknown, defaulting to 1000 [ 234.030989][T11229] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.098871][T11229] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.265075][ T6566] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.352259][ T6566] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.364964][ T6566] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.407379][ T6566] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.458480][T11242] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1352'. [ 234.482219][T11242] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1352'. [ 234.516490][T11242] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20004 [ 234.999981][T11273] tipc: Enabled bearer , priority 0 [ 235.031327][T11273] tipc: Disabling bearer [ 235.127036][T11282] 8021q: adding VLAN 0 to HW filter on device bond6 [ 235.175513][T11282] macsec0: entered promiscuous mode [ 235.180995][T11282] bond6: entered promiscuous mode [ 235.186798][T11282] macsec0: entered allmulticast mode [ 235.192196][T11282] bond6: entered allmulticast mode [ 235.201343][T11282] bond6: left allmulticast mode [ 235.207323][T11282] bond6: left promiscuous mode [ 235.722295][T11303] netlink: 'syz.4.1368': attribute type 2 has an invalid length. [ 235.877245][T11313] delete_channel: no stack [ 236.201202][T11328] bond4: (slave lo): Releasing backup interface [ 236.224216][T11328] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 236.253411][T11328] bond0: (slave bond_slave_0): Releasing backup interface [ 236.292946][T11328] bond0: (slave bond_slave_1): Releasing backup interface [ 236.322605][T11328] team0: Port device team_slave_0 removed [ 236.339426][T11339] netlink: 'syz.2.1377': attribute type 4 has an invalid length. [ 236.350213][T11328] team0: Port device team_slave_1 removed [ 236.370154][T11328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.387518][T11328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.396023][T11344] netlink: 'syz.2.1377': attribute type 4 has an invalid length. [ 236.411457][T11328] team0: Port device bridge1 removed [ 236.428446][T11325] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 236.524888][T11321] team0: Mode changed to "loadbalance" [ 236.916152][T11371] veth0: entered promiscuous mode [ 236.922971][T11371] bond0: entered promiscuous mode [ 236.928435][T11371] bond_slave_0: entered promiscuous mode [ 236.934238][T11371] bond_slave_1: entered promiscuous mode [ 236.940396][T11371] team0: entered promiscuous mode [ 236.945500][T11371] team_slave_0: entered promiscuous mode [ 236.951457][T11371] team_slave_1: entered promiscuous mode [ 236.960474][T11370] bond0: left promiscuous mode [ 236.965400][T11370] bond_slave_0: left promiscuous mode [ 236.971719][T11370] bond_slave_1: left promiscuous mode [ 236.988608][T11370] team0: left promiscuous mode [ 236.993387][T11370] team_slave_0: left promiscuous mode [ 237.016931][T11370] team_slave_1: left promiscuous mode [ 237.022769][T11370] veth0: left promiscuous mode [ 237.051383][T11377] __nla_validate_parse: 19 callbacks suppressed [ 237.051398][T11377] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1380'. [ 237.520595][T11412] netlink: 'syz.2.1388': attribute type 6 has an invalid length. [ 237.574535][T11414] netlink: 'syz.4.1389': attribute type 61 has an invalid length. [ 237.604665][T11416] wg1: entered promiscuous mode [ 237.651536][T11416] wg1: entered allmulticast mode [ 238.047601][T11435] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1392'. [ 238.562692][T11474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1399'. [ 238.780198][T11488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1404'. [ 238.791090][T11488] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1404'. [ 239.079322][T11504] netlink: 'syz.0.1406': attribute type 10 has an invalid length. [ 239.108974][T11504] team0: Port device dummy0 added [ 239.227369][T11513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1409'. [ 239.257672][T11513] bond5: Invalid ad_actor_system MAC address. [ 239.263780][T11513] bond5: option ad_actor_system: invalid value (7) [ 239.276047][T11513] bond5 (unregistering): Released all slaves [ 239.545393][T11534] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 239.694713][T11542] netlink: 'syz.4.1414': attribute type 10 has an invalid length. [ 239.920238][T11565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1420'. [ 240.222094][T11581] syzkaller0: entered allmulticast mode [ 240.467677][T11599] syzkaller0: entered promiscuous mode [ 240.488436][T11599] syzkaller0: entered allmulticast mode [ 241.161710][T11640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1432'. [ 241.256576][T11645] 8021q: adding VLAN 0 to HW filter on device bond7 [ 241.271327][ T30] audit: type=1107 audit(1773623139.707:4): pid=11641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='\\öƒ' [ 241.447746][T11663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.549873][T11664] xt_hashlimit: size too large, truncated to 1048576 [ 241.582877][T11676] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1440'. [ 241.604519][T11677] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1442'. [ 241.700457][T11677] geneve5: entered promiscuous mode [ 241.950204][T11692] bridge5: port 1(veth3) entered blocking state [ 241.986321][T11692] bridge5: port 1(veth3) entered disabled state [ 242.029645][T11692] veth3: entered allmulticast mode [ 242.062717][T11692] veth3: entered promiscuous mode [ 242.079859][T11692] bridge5: port 1(veth3) entered blocking state [ 242.086460][T11692] bridge5: port 1(veth3) entered forwarding state [ 242.121100][T11700] bridge5: port 2(geneve2) entered blocking state [ 242.132043][T11700] bridge5: port 2(geneve2) entered disabled state [ 242.139273][T11700] geneve2: entered allmulticast mode [ 242.152689][T11700] geneve2: entered promiscuous mode [ 242.380094][T11726] __nla_validate_parse: 2 callbacks suppressed [ 242.380110][T11726] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1452'. [ 242.414116][T11726] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1452'. [ 242.424958][ T6566] bridge5: port 1(veth3) entered disabled state [ 242.452024][T11726] netlink: 'syz.4.1452': attribute type 2 has an invalid length. [ 242.717682][T11750] lo speed is unknown, defaulting to 1000 [ 242.813723][T11755] netlink: 'syz.4.1457': attribute type 12 has an invalid length. [ 242.885412][T11758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1458'. [ 242.908298][T11758] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1458'. [ 242.928852][T11758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1458'. [ 242.959187][T11758] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1458'. [ 243.178966][T11767] lo speed is unknown, defaulting to 1000 [ 243.214171][T11772] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 243.391844][T11777] 8021q: VLANs not supported on nlmon0 [ 243.530332][T11783] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.1466'. [ 243.557396][T11783] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 243.762994][T11798] xt_TCPMSS: Only works on TCP SYN packets [ 243.777860][T11798] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1469'. [ 243.797601][T11798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1469'. [ 243.828817][T11793] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 244.002459][T11807] xt_cluster: node mask cannot exceed total number of nodes [ 244.074811][T11811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.342273][T11835] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1477'. [ 244.590907][T11839] syzkaller0: entered promiscuous mode [ 244.596573][T11839] syzkaller0: entered allmulticast mode [ 244.990229][T11850] tipc: Enabled bearer , priority 0 [ 245.011037][T11838] tipc: Resetting bearer [ 245.037944][T11838] tipc: Disabling bearer [ 245.054866][T11847] syzkaller1: entered promiscuous mode [ 245.066146][T11847] syzkaller1: entered allmulticast mode [ 245.162567][T11865] netlink: 'syz.1.1484': attribute type 1 has an invalid length. [ 245.210937][T11851] lo speed is unknown, defaulting to 1000 [ 245.254153][T11865] bond8: entered promiscuous mode [ 245.259776][T11865] 8021q: adding VLAN 0 to HW filter on device bond8 [ 245.281907][T11863] sctp: [Deprecated]: syz.4.1483 (pid 11863) Use of struct sctp_assoc_value in delayed_ack socket option. [ 245.281907][T11863] Use struct sctp_sack_info instead [ 245.336267][T11865] ipvlan2: entered allmulticast mode [ 245.341584][T11865] bond8: entered allmulticast mode [ 245.416660][T11866] ipvlan3: entered allmulticast mode [ 245.637476][T11865] bond8: (slave bridge3): making interface the new active one [ 245.662126][T11865] bridge3: entered promiscuous mode [ 245.684396][T11865] bridge3: entered allmulticast mode [ 245.714115][T11865] bond8: (slave bridge3): Enslaving as an active interface with an up link [ 245.945164][T11892] bond9: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 245.991681][T11892] bond9 (unregistering): Released all slaves [ 246.457790][T11916] SET target dimension over the limit! [ 246.519764][T11929] sit0: entered promiscuous mode [ 246.551129][T11929] netlink: 'syz.4.1503': attribute type 1 has an invalid length. [ 246.801981][T11945] netlink: 'syz.1.1507': attribute type 1 has an invalid length. [ 246.871636][T11945] 8021q: adding VLAN 0 to HW filter on device bond9 [ 246.949664][T11956] x_tables: duplicate underflow at hook 1 [ 247.024575][T11950] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 247.043765][T11950] bond9: (slave batadv1): making interface the new active one [ 247.086985][T11950] bond9: (slave batadv1): Enslaving as an active interface with an up link [ 247.134671][T11966] netlink: 'syz.4.1513': attribute type 1 has an invalid length. [ 247.275483][T11945] bond9 (unregistering): (slave batadv1): Releasing active interface [ 247.301603][T11945] bond9 (unregistering): Released all slaves [ 247.428311][T11979] __nla_validate_parse: 9 callbacks suppressed [ 247.428329][T11979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1516'. [ 247.489641][T11975] lo speed is unknown, defaulting to 1000 [ 247.737601][T12004] pim6reg1: entered promiscuous mode [ 247.743067][T12004] pim6reg1: entered allmulticast mode [ 247.798414][T12004] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1521'. [ 248.311213][T12035] netlink: 'syz.0.1529': attribute type 1 has an invalid length. [ 248.429058][T12035] 8021q: adding VLAN 0 to HW filter on device bond5 [ 248.459437][T12035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1529'. [ 248.487358][T12040] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 248.508112][T12040] bond5: (slave batadv2): making interface the new active one [ 248.519429][T12040] bond5: (slave batadv2): Enslaving as an active interface with an up link [ 248.603718][T12050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1531'. [ 248.645002][T12054] x_tables: duplicate underflow at hook 3 [ 248.650289][T12035] bond5 (unregistering): (slave batadv2): Releasing active interface [ 248.683497][T12035] bond5 (unregistering): Released all slaves [ 248.778542][T12062] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1535'. [ 248.818711][T12062] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1535'. [ 248.843294][T12062] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1535'. [ 248.852298][T12064] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1536'. [ 248.887775][T12064] netlink: 'syz.3.1536': attribute type 2 has an invalid length. [ 248.933751][T12064] hmac(sha224): entered promiscuous mode [ 248.937720][T12068] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1538'. [ 249.116143][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1540'. [ 249.211248][T12082] netlink: 'syz.2.1541': attribute type 1 has an invalid length. [ 249.253246][T12079] 8021q: adding VLAN 0 to HW filter on device bond4 [ 249.274287][T12079] netlink: 'syz.3.1540': attribute type 4 has an invalid length. [ 249.283515][T12085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.294915][T12085] bond4: (slave bond0): making interface the new active one [ 249.308578][T12085] bond4: (slave bond0): Enslaving as an active interface with an up link [ 249.321586][T12082] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 249.332648][T12079] wlan1: mtu less than device minimum [ 249.510458][T12100] gretap0: entered promiscuous mode [ 249.642594][T12106] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 249.649336][T12112] netlink: set zone limit has 4 unknown bytes [ 249.718735][T12116] netlink: 'syz.0.1549': attribute type 1 has an invalid length. [ 249.724507][T12117] netlink: 'syz.3.1550': attribute type 1 has an invalid length. [ 250.073407][T12142] lo speed is unknown, defaulting to 1000 [ 250.084600][T12149] tipc: Failed to remove unknown binding: 66,1,1/0:432943090/432943092 [ 250.122830][T12149] tipc: Failed to remove unknown binding: 66,1,1/0:432943090/432943092 [ 250.160301][T12149] tipc: Failed to remove unknown binding: 66,1,1/0:432943090/432943092 [ 250.316721][T12165] netlink: 'syz.0.1564': attribute type 21 has an invalid length. [ 250.326229][T12166] vti0: entered promiscuous mode [ 250.338731][T12164] syzkaller0: entered promiscuous mode [ 250.344316][T12164] syzkaller0: entered allmulticast mode [ 250.357645][T12165] netlink: zone id is out of range [ 250.363009][T12165] netlink: zone id is out of range [ 251.041405][T12201] tipc: Started in network mode [ 251.051607][T12201] tipc: Node identity 522f126ed73, cluster identity 4711 [ 251.067455][T12201] tipc: Enabled bearer , priority 0 [ 251.098208][T12201] syzkaller0: entered promiscuous mode [ 251.103706][T12201] syzkaller0: entered allmulticast mode [ 251.148753][T12200] tipc: Resetting bearer [ 251.186530][T12200] tipc: Disabling bearer [ 251.210329][T12211] syzkaller0: left promiscuous mode [ 251.217405][T12211] syzkaller0: left allmulticast mode [ 251.548090][T12219] lo speed is unknown, defaulting to 1000 [ 251.556576][T12230] syzkaller0: entered promiscuous mode [ 251.562154][T12230] syzkaller0: entered allmulticast mode [ 251.589858][T12230] TC_ACT_REPEAT abuse ? [ 252.119005][T12246] Cannot find add_set index 0 as target [ 252.220327][T12245] lo speed is unknown, defaulting to 1000 [ 252.274060][T12251] tipc: Enabled bearer , priority 0 [ 252.297899][T12251] syzkaller0: entered promiscuous mode [ 252.312498][T12251] syzkaller0: entered allmulticast mode [ 252.371704][T12251] tipc: Resetting bearer [ 252.387516][T12250] tipc: Resetting bearer [ 252.401739][T12250] tipc: Disabling bearer [ 253.022472][T12274] __nla_validate_parse: 12 callbacks suppressed [ 253.022489][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1593'. [ 253.079398][T12276] netlink: 'syz.1.1594': attribute type 8 has an invalid length. [ 253.095070][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1593'. [ 253.145484][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1593'. [ 253.472864][T12289] syzkaller0: entered promiscuous mode [ 253.479309][T12289] syzkaller0: entered allmulticast mode [ 253.873821][T12310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1598'. [ 253.931779][T12310] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1598'. [ 254.111726][T12320] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1600'. [ 254.753383][T12368] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535) [ 254.811913][T12371] netlink: 'syz.4.1614': attribute type 1 has an invalid length. [ 254.819964][T12371] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1614'. [ 254.845779][T12371] netlink: 'syz.4.1614': attribute type 1 has an invalid length. [ 254.863943][T12371] netlink: 638 bytes leftover after parsing attributes in process `syz.4.1614'. [ 254.900181][T12371] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1614'. [ 255.043938][T12371] lo speed is unknown, defaulting to 1000 [ 255.064424][T12384] netlink: 'syz.2.1617': attribute type 3 has an invalid length. [ 255.082134][T12384] netlink: 'syz.2.1617': attribute type 2 has an invalid length. [ 255.114803][T12389] syzkaller0: entered promiscuous mode [ 255.141210][T12389] syzkaller0: entered allmulticast mode [ 255.330750][T12361] syzkaller1: entered promiscuous mode [ 255.342898][T12361] syzkaller1: entered allmulticast mode [ 255.436323][T12407] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 255.446581][T12407] pim6reg1: linktype set to 270 [ 255.488714][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.498156][T12407] ipvlan3: entered promiscuous mode [ 255.735386][T12419] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1624'. [ 256.223167][T12423] wg1: left promiscuous mode [ 256.231933][T12423] wg1: left allmulticast mode [ 256.281628][T12423] geneve2: left promiscuous mode [ 256.408375][ T69] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.456519][ T6589] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.465104][ T6589] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.540967][ T6589] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.194925][T12485] pim6reg: entered allmulticast mode [ 257.270741][T12485] pim6reg99999999: entered allmulticast mode [ 257.720290][ T30] audit: type=1107 audit(1773623156.157:5): pid=12516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 257.894027][T12528] siw: device registration error -23 [ 258.194699][T12547] syzkaller1: entered promiscuous mode [ 258.204627][T12547] syzkaller1: entered allmulticast mode [ 258.292146][T12557] syzkaller0: entered promiscuous mode [ 258.299802][T12557] syzkaller0: entered allmulticast mode [ 258.667333][T12573] x_tables: ip_tables: osf match: only valid for protocol 6 [ 259.227891][T12588] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 259.292028][T12583] IPv6: Can't replace route, no match found [ 259.298421][T12583] IPv6: Can't replace route, no match found [ 260.102943][T12573] __nla_validate_parse: 4 callbacks suppressed [ 260.102961][T12573] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1661'. [ 260.414059][T12602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1671'. [ 260.515111][T12609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1671'. [ 260.544244][T12609] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1671'. [ 260.575658][T12609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1671'. [ 260.642615][T12609] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1671'. [ 260.676416][T12609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1671'. [ 261.083723][T12634] netlink: 'syz.4.1675': attribute type 83 has an invalid length. [ 261.123232][T12634] sctp: [Deprecated]: syz.4.1675 (pid 12634) Use of int in maxseg socket option. [ 261.123232][T12634] Use struct sctp_assoc_value instead [ 261.503167][T12654] bond9 (unregistering): Released all slaves [ 261.551162][T12652] bond9 (unregistering): Released all slaves [ 261.706855][T12665] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1690'. [ 261.712845][T12662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1689'. [ 261.761381][T12668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1691'. [ 261.842509][T12670] netlink: 'syz.2.1690': attribute type 11 has an invalid length. [ 261.863378][T12662] bridge4: port 1(veth7) entered blocking state [ 261.877790][T12670] netlink: 'syz.2.1690': attribute type 23 has an invalid length. [ 261.906995][T12662] bridge4: port 1(veth7) entered disabled state [ 261.913830][T12662] veth7: entered allmulticast mode [ 261.924490][T12662] veth7: entered promiscuous mode [ 261.938037][T12663] lo speed is unknown, defaulting to 1000 [ 261.938871][T12669] bridge4: port 2(veth0_to_bond) entered blocking state [ 261.963884][T12669] bridge4: port 2(veth0_to_bond) entered disabled state [ 261.973067][T12669] veth0_to_bond: entered allmulticast mode [ 262.006822][T12669] veth0_to_bond: entered promiscuous mode [ 262.049139][T12670] gretap1: entered promiscuous mode [ 262.074670][T12686] xt_TCPMSS: Only works on TCP SYN packets [ 262.081869][T12665] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 262.219088][T12674] bridge4: port 3(veth9) entered blocking state [ 262.230125][T12674] bridge4: port 3(veth9) entered disabled state [ 262.241737][T12674] veth9: entered allmulticast mode [ 262.250474][T12674] veth9: entered promiscuous mode [ 262.260803][T12663] lo speed is unknown, defaulting to 1000 [ 262.267947][T12663] lo speed is unknown, defaulting to 1000 [ 262.302012][T12663] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 262.343877][T12663] lo speed is unknown, defaulting to 1000 [ 262.352761][T12663] lo speed is unknown, defaulting to 1000 [ 262.362411][T12663] lo speed is unknown, defaulting to 1000 [ 262.381243][T12663] lo speed is unknown, defaulting to 1000 [ 262.389862][T12663] lo speed is unknown, defaulting to 1000 [ 262.460877][T12706] netlink: 'syz.0.1700': attribute type 1 has an invalid length. [ 262.591784][T12711] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 262.603213][T12711] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 262.664855][T12706] bond5: (slave bridge5): Enslaving as an active interface with a down link [ 262.703778][T12712] bond5: (slave gretap2): making interface the new active one [ 262.712862][T12712] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 262.846882][T12716] netlink: 'syz.0.1702': attribute type 1 has an invalid length. [ 262.864602][T12716] netlink: 'syz.0.1702': attribute type 1 has an invalid length. [ 262.892885][T12716] netlink: 'syz.0.1702': attribute type 8 has an invalid length. [ 262.992204][T12725] atomic_op ffff88807a66d998 conn xmit_atomic 0000000000000000 [ 263.021518][T12703] lo speed is unknown, defaulting to 1000 [ 263.122512][T12733] batadv_slave_1: entered promiscuous mode [ 263.188980][T12732] batadv_slave_1: left promiscuous mode [ 263.333530][T12746] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 263.370703][T12746] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20002 [ 263.759601][T12765] netlink: 'syz.0.1715': attribute type 11 has an invalid length. [ 263.789284][T12762] xt_hashlimit: max too large, truncated to 1048576 [ 263.796870][T12762] Cannot find add_set index 3 as target [ 264.325778][T12804] nbd3: detected capacity change from 0 to 127 [ 264.412137][ T5831] block nbd3: Receive control failed (result -104) [ 264.711316][T12833] IPv6: sit1: Disabled Multicast RS [ 264.909923][T12848] xt_hashlimit: size too large, truncated to 1048576 [ 264.928718][T12845] IPv6: NLM_F_REPLACE set, but no existing node found! [ 265.330308][T12873] __nla_validate_parse: 24 callbacks suppressed [ 265.330329][T12873] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1745'. [ 265.386892][T12873] batadv_slave_0: Caught tx_queue_len zero misconfig [ 266.215880][T12846] lo speed is unknown, defaulting to 1000 [ 266.756545][T12912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1758'. [ 266.823441][T12912] bond9: Invalid ad_actor_system MAC address. [ 266.829802][T12912] bond9: option ad_actor_system: invalid value (7) [ 266.854479][T12912] bond9 (unregistering): Released all slaves [ 267.413832][T12908] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 267.434452][T12907] lec:lec_atm_close: lec0: Shut down! [ 267.679243][T12941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1762'. [ 267.866957][ T6589] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.881780][ T6589] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.894863][ T6589] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.903557][ T6589] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.014552][T12959] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1766'. [ 268.612566][T12986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1772'. [ 268.726299][T12995] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1775'. [ 268.776492][T13000] netlink: 'syz.2.1776': attribute type 5 has an invalid length. [ 268.802255][T13000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1776'. [ 269.222604][T13025] wg1 speed is unknown, defaulting to 1000 [ 269.231863][T13025] wg1 speed is unknown, defaulting to 1000 [ 269.256920][T13025] wg1 speed is unknown, defaulting to 1000 [ 269.312502][T13025] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 269.459174][T13025] wg1 speed is unknown, defaulting to 1000 [ 269.470668][T13025] wg1 speed is unknown, defaulting to 1000 [ 269.507579][T13025] wg1 speed is unknown, defaulting to 1000 [ 269.519804][T13025] wg1 speed is unknown, defaulting to 1000 [ 269.557384][T13025] wg1 speed is unknown, defaulting to 1000 [ 269.600822][T13047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1784'. [ 270.080707][T13081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1794'. [ 270.613552][T13104] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1801'. [ 270.720458][T13111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1802'. [ 270.980897][T13132] netlink: 'syz.0.1806': attribute type 3 has an invalid length. [ 271.114536][T13135] syzkaller1: entered promiscuous mode [ 271.151354][T13135] syzkaller1: entered allmulticast mode [ 271.228987][T13141] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1810'. [ 271.346420][ T5487] lec:lec_start_xmit: lec0:No lecd attached [ 271.744201][T13169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.621648][T13222] netlink: 'syz.3.1829': attribute type 12 has an invalid length. [ 272.673493][T13226] 5nè‹Ò: entered promiscuous mode [ 272.723347][T13228] netlink: 'syz.3.1829': attribute type 12 has an invalid length. [ 272.792569][T13232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1833'. [ 272.857719][T13232] x_tables: duplicate underflow at hook 3 [ 272.924311][T13162] lo speed is unknown, defaulting to 1000 [ 272.957682][T13162] wg1 speed is unknown, defaulting to 1000 [ 272.994233][T13237] tipc: Enabled bearer , priority 0 [ 273.022618][T13237] syzkaller0: entered promiscuous mode [ 273.035777][T13237] syzkaller0: entered allmulticast mode [ 273.046185][T13237] tipc: Resetting bearer [ 273.152365][T13236] tipc: Resetting bearer [ 273.180259][T13236] tipc: Disabling bearer [ 273.274247][T13188] lo speed is unknown, defaulting to 1000 [ 273.282062][T13188] wg1 speed is unknown, defaulting to 1000 [ 273.440798][T13250] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1838'. [ 273.618629][T13253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1840'. [ 273.679109][T13255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1839'. [ 274.136562][T13273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1846'. [ 274.154012][T13273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1846'. [ 274.193503][T13273] Cannot find add_set index 3 as target [ 274.276636][T13273] netlink: 8556 bytes leftover after parsing attributes in process `syz.2.1846'. [ 274.305189][T13283] 0ªX¹¦À: renamed from caif0 [ 274.329684][T13273] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 274.362002][T13283] 0ªX¹¦À: entered allmulticast mode [ 274.376839][T13283] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 274.599020][ T30] audit: type=1800 audit(1773623173.037:6): pid=13298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1852" name="memory.events" dev="tmpfs" ino=1675 res=0 errno=0 [ 274.728229][T13304] netlink: 'syz.0.1855': attribute type 1 has an invalid length. [ 274.737700][T13304] netlink: 'syz.0.1855': attribute type 1 has an invalid length. [ 274.745447][T13304] netlink: 'syz.0.1855': attribute type 8 has an invalid length. [ 274.778725][T13313] netlink: 'syz.2.1853': attribute type 10 has an invalid length. [ 274.799650][T13312] xt_TCPMSS: Only works on TCP SYN packets [ 275.012455][T13329] netlink: 'syz.4.1859': attribute type 15 has an invalid length. [ 275.023664][T13328] netlink: 'syz.1.1860': attribute type 1 has an invalid length. [ 275.095241][T13328] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 275.251296][T13343] syzkaller0: entered promiscuous mode [ 275.266471][T13343] syzkaller0: entered allmulticast mode [ 275.280236][T13348] sctp: [Deprecated]: syz.0.1865 (pid 13348) Use of struct sctp_assoc_value in delayed_ack socket option. [ 275.280236][T13348] Use struct sctp_sack_info instead [ 275.480947][T13357] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 275.501886][T13357] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 275.601099][T13357] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 275.637569][T13357] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 275.746967][T13357] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 275.759728][T13357] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 275.810664][T13375] netlink: 'syz.1.1873': attribute type 2 has an invalid length. [ 275.865236][T13357] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 275.890969][T13357] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 275.942243][T13375] hmac(sha224: entered promiscuous mode [ 275.958946][T13322] lo speed is unknown, defaulting to 1000 [ 275.971448][T13322] wg1 speed is unknown, defaulting to 1000 [ 276.088450][T13389] __nla_validate_parse: 8 callbacks suppressed [ 276.088463][T13389] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1877'. [ 276.115193][T13390] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1876'. [ 276.150497][ T797] lo speed is unknown, defaulting to 1000 [ 276.176268][ T6589] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 276.195077][ T6589] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 276.213294][ T6589] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 276.222236][ T6589] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 276.299726][T13394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1876'. [ 276.375056][ T6589] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 276.386436][ T6589] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 276.479323][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 276.501080][ T12] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 276.511773][T13401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1878'. [ 276.605603][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5260 ms [ 276.613897][ C1] lec:lec_tx_timeout: lec0 [ 276.619450][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 276.693768][T13411] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1879'. [ 276.719915][T13411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1879'. [ 277.143018][T13431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.444986][T13452] batadv2: entered promiscuous mode [ 277.466897][T13452] batadv2: entered allmulticast mode [ 277.551675][T13460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1892'. [ 277.676037][T13463] netlink: 'syz.4.1893': attribute type 10 has an invalid length. [ 277.729379][T13470] netlink: 'syz.4.1893': attribute type 10 has an invalid length. [ 277.755874][T13466] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 277.794939][T13463] dummy0: left promiscuous mode [ 277.800642][T13463] dummy0: left allmulticast mode [ 277.852909][T13463] team0: Port device dummy0 added [ 277.872292][T13470] team0: Port device dummy0 removed [ 277.882480][T13470] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 277.891890][T13396] lo speed is unknown, defaulting to 1000 [ 277.917321][T13396] wg1 speed is unknown, defaulting to 1000 [ 278.040273][T13489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1902'. [ 278.052830][T13489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1902'. [ 278.073444][T13489] netlink: 'syz.3.1902': attribute type 18 has an invalid length. [ 278.133128][T13491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1903'. [ 278.488887][ T5831] Bluetooth: hci4: link tx timeout [ 278.494916][ T5831] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 278.778699][T13513] gretap1: entered promiscuous mode [ 278.784670][T13513] batman_adv: batadv0: Adding interface: gretap1 [ 278.793691][T13513] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.866088][T13513] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 279.227988][T13512] lo speed is unknown, defaulting to 1000 [ 279.255466][T13512] wg1 speed is unknown, defaulting to 1000 [ 280.044011][T13554] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 280.077795][T13554] bridge0: entered allmulticast mode [ 280.189043][T13564] validate_nla: 4 callbacks suppressed [ 280.189062][T13564] netlink: 'syz.4.1925': attribute type 1 has an invalid length. [ 280.399440][T13564] 8021q: adding VLAN 0 to HW filter on device bond8 [ 280.526296][ T5822] Bluetooth: hci4: command 0x0405 tx timeout [ 280.541746][T13569] bond8: (slave veth3): Enslaving as an active interface with a down link [ 280.593201][T13564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.633945][T13564] bond8: (slave batadv0): making interface the new active one [ 280.668776][T13564] batadv0: entered promiscuous mode [ 280.677797][T13564] bond8: (slave batadv0): Enslaving as an active interface with an up link [ 280.837256][T13582] syzkaller1: entered promiscuous mode [ 280.843207][T13582] syzkaller1: entered allmulticast mode [ 281.027289][T13593] veth1_macvtap: left promiscuous mode [ 281.368455][T13608] __nla_validate_parse: 11 callbacks suppressed [ 281.368474][T13608] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1935'. [ 281.420765][T13608] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1935'. [ 281.454236][T13606] netlink: 205448 bytes leftover after parsing attributes in process `syz.3.1935'. [ 281.645591][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 281.653663][ C1] lec:lec_tx_timeout: lec0 [ 281.659085][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 281.787050][T13625] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1940'. [ 281.817444][T13621] IPv6: NLM_F_CREATE should be specified when creating new route [ 282.326716][T13639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1943'. [ 282.460104][T13643] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1943'. [ 282.748358][T13654] x_tables: duplicate underflow at hook 3 [ 284.177238][T13648] lo speed is unknown, defaulting to 1000 [ 284.184607][T13648] wg1 speed is unknown, defaulting to 1000 [ 284.259610][T13718] delete_channel: no stack [ 284.269470][T13718] delete_channel: no stack [ 284.277810][T13718] delete_channel: no stack [ 284.282654][T13718] delete_channel: no stack [ 284.293554][T13718] delete_channel: no stack [ 284.299152][T13718] delete_channel: no stack [ 284.303951][T13718] delete_channel: no stack [ 284.312077][T13718] delete_channel: no stack [ 284.319706][T13718] delete_channel: no stack [ 284.324352][T13718] delete_channel: no stack [ 284.338123][T13718] delete_channel: no stack [ 284.343827][T13718] delete_channel: no stack [ 284.349713][T13718] delete_channel: no stack [ 284.354362][T13718] delete_channel: no stack [ 284.359720][T13718] delete_channel: no stack [ 284.364385][T13718] delete_channel: no stack [ 284.370341][T13718] delete_channel: no stack [ 284.374986][T13718] delete_channel: no stack [ 284.380118][T13718] delete_channel: no stack [ 284.384840][T13718] delete_channel: no stack [ 284.390726][T13718] delete_channel: no stack [ 284.395441][T13718] delete_channel: no stack [ 284.401456][T13718] delete_channel: no stack [ 284.407111][T13718] delete_channel: no stack [ 284.411818][T13718] delete_channel: no stack [ 284.417518][T13718] delete_channel: no stack [ 284.422258][T13718] delete_channel: no stack [ 284.427980][T13718] delete_channel: no stack [ 284.432699][T13718] delete_channel: no stack [ 284.438327][T13718] delete_channel: no stack [ 284.443044][T13718] delete_channel: no stack [ 284.449091][T13718] delete_channel: no stack [ 284.453816][T13718] delete_channel: no stack [ 285.597814][T13653] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 285.828295][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.871674][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.060169][T13773] netlink: 'syz.0.1965': attribute type 61 has an invalid length. [ 286.122357][T13780] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1963'. [ 286.462690][T13789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.556186][T13802] bond0: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 286.565511][ T6589] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 286.666129][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 286.674191][ C1] lec:lec_tx_timeout: lec0 [ 286.680561][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 286.711503][ T12] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 286.976823][T13822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1973'. [ 287.250277][T13828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1975'. [ 287.338988][T13828] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1975'. [ 287.533723][T13768] lo speed is unknown, defaulting to 1000 [ 287.597192][T13768] wg1 speed is unknown, defaulting to 1000 [ 287.987928][T13839] openvswitch: netlink: IP tunnel dst address not specified [ 288.002318][T13840] openvswitch: netlink: IP tunnel dst address not specified [ 288.012582][T13839] netlink: 'syz.0.1982': attribute type 11 has an invalid length. [ 288.124730][T13767] lo speed is unknown, defaulting to 1000 [ 288.134938][T13767] wg1 speed is unknown, defaulting to 1000 [ 288.142674][T13814] siw: device registration error -23 [ 288.734723][T13861] netlink: 'syz.1.1986': attribute type 83 has an invalid length. [ 288.833472][T13863] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1987'. [ 289.323459][T13877] veth5: entered promiscuous mode [ 289.330378][T13885] syz_tun: entered allmulticast mode [ 289.394534][T13883] syz_tun: left allmulticast mode [ 289.500748][T13897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1994'. [ 289.644818][T13904] netlink: 'syz.2.1996': attribute type 3 has an invalid length. [ 289.863481][T13918] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2003'. [ 290.167845][T13945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2009'. [ 290.218581][T13949] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2010'. [ 290.386759][T13957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2014'. [ 290.456667][T13959] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 290.591652][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.605283][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.661130][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.699532][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.891099][T13983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2019'. [ 291.355434][T14000] netlink: 'syz.4.2023': attribute type 1 has an invalid length. [ 291.449609][T14001] bond10 (unregistering): Released all slaves [ 291.552102][T13962] lo speed is unknown, defaulting to 1000 [ 291.560447][T13962] wg1 speed is unknown, defaulting to 1000 [ 291.668463][T14013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.696046][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 291.704120][ C1] lec:lec_tx_timeout: lec0 [ 291.709614][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 291.994002][T14029] __nla_validate_parse: 1 callbacks suppressed [ 291.994042][T14029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2028'. [ 292.086576][ T12] batadv0: left promiscuous mode [ 292.316478][T14036] ip6erspan0: entered allmulticast mode [ 292.325285][T14036] bond_slave_0: Caught tx_queue_len zero misconfig [ 292.482870][T14047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2034'. [ 292.943074][T14057] SET target dimension over the limit! [ 293.027857][T14016] lo speed is unknown, defaulting to 1000 [ 293.036545][T14016] wg1 speed is unknown, defaulting to 1000 [ 293.590549][T14086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2043'. [ 293.696448][T14090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2043'. [ 293.913939][T14094] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2043'. [ 293.925066][T14018] lo speed is unknown, defaulting to 1000 [ 293.997791][T14101] bond0: Caught tx_queue_len zero misconfig [ 294.019082][T14018] wg1 speed is unknown, defaulting to 1000 [ 294.196841][T14115] netlink: 'syz.3.2049': attribute type 11 has an invalid length. [ 294.204696][T14115] netlink: 'syz.3.2049': attribute type 23 has an invalid length. [ 294.213386][T14115] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2049'. [ 294.257750][T14113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2050'. [ 294.303212][T14115] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 294.328147][T14115] gretap3: entered promiscuous mode [ 294.483009][T14125] syzkaller0: entered promiscuous mode [ 294.550180][ T1738] block nbd3: Possible stuck request ffff8880264fa800: control (read@0,1024B). Runtime 30 seconds [ 294.563355][T14037] lo speed is unknown, defaulting to 1000 [ 294.569997][ T1738] block nbd3: Possible stuck request ffff8880264faa00: control (read@1024,1024B). Runtime 30 seconds [ 294.571093][T14037] wg1 speed is unknown, defaulting to 1000 [ 294.581435][ T1738] block nbd3: Possible stuck request ffff8880264fac00: control (read@2048,1024B). Runtime 30 seconds [ 294.599516][ T1738] block nbd3: Possible stuck request ffff8880264fae00: control (read@3072,1024B). Runtime 30 seconds [ 295.041550][T14141] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2058'. [ 295.080939][T14141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2058'. [ 295.091900][T14141] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2058'. [ 295.215327][T14146] No such timeout policy "syz1" [ 295.310251][T14149] pim6reg: entered allmulticast mode [ 295.355484][T14149] pim6reg: left allmulticast mode [ 295.389667][T14153] netlink: 'syz.1.2061': attribute type 10 has an invalid length. [ 295.470204][T14153] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.481404][T14153] bond0: (slave team0): Enslaving as an active interface with a down link [ 295.755068][T14171] syzkaller0: entered promiscuous mode [ 295.760876][T14171] syzkaller0: entered allmulticast mode [ 295.922068][ T30] audit: type=1804 audit(1773623194.347:7): pid=14191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2071" name="/newroot/400/cgroup.controllers" dev="tmpfs" ino=2057 res=1 errno=0 [ 295.971625][ T30] audit: type=1800 audit(1773623194.347:8): pid=14191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2071" name="cgroup.controllers" dev="tmpfs" ino=2057 res=0 errno=0 [ 296.139372][T14180] bond0: entered promiscuous mode [ 296.144545][T14180] team0: entered promiscuous mode [ 296.176362][T14180] bond0: left promiscuous mode [ 296.181369][T14180] team0: left promiscuous mode [ 296.251371][T14195] netlink: 'syz.4.2072': attribute type 21 has an invalid length. [ 296.667466][T14217] netlink: 'syz.2.2080': attribute type 1 has an invalid length. [ 296.725599][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 296.733634][ C1] lec:lec_tx_timeout: lec0 [ 296.739069][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 296.921587][T14232] netlink: 'syz.4.2083': attribute type 1 has an invalid length. [ 296.975868][T14232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.229947][T14252] __nla_validate_parse: 8 callbacks suppressed [ 297.229966][T14252] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2087'. [ 297.282641][T14249] syzkaller0: entered promiscuous mode [ 297.316182][T14249] syzkaller0: entered allmulticast mode [ 297.529275][T14257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2089'. [ 297.542453][T14257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2089'. [ 297.552146][T14257] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2089'. [ 297.578280][T14257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2089'. [ 297.590342][T14259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2089'. [ 297.601639][T14259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2089'. [ 297.611254][T14259] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2089'. [ 297.725150][T14263] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2090'. [ 298.882392][T14210] lo speed is unknown, defaulting to 1000 [ 298.890767][T14210] wg1 speed is unknown, defaulting to 1000 [ 299.040095][T14274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2094'. [ 299.283723][T14291] syzkaller0: entered promiscuous mode [ 299.292681][T14291] syzkaller0: entered allmulticast mode [ 300.267427][T14244] lo speed is unknown, defaulting to 1000 [ 300.375504][T14289] lo speed is unknown, defaulting to 1000 [ 300.383209][T14244] wg1 speed is unknown, defaulting to 1000 [ 300.402915][T14289] wg1 speed is unknown, defaulting to 1000 [ 300.784752][T14251] lo speed is unknown, defaulting to 1000 [ 300.949621][T14251] wg1 speed is unknown, defaulting to 1000 [ 301.746014][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 301.754090][ C1] lec:lec_tx_timeout: lec0 [ 301.765692][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 302.072785][T14383] netlink: 'syz.4.2117': attribute type 13 has an invalid length. [ 302.195408][T14389] netlink: 'syz.1.2118': attribute type 2 has an invalid length. [ 302.395468][T14392] bond9: entered promiscuous mode [ 302.412937][T14392] bond9: entered allmulticast mode [ 302.418943][T14392] 8021q: adding VLAN 0 to HW filter on device bond9 [ 302.430426][T14393] tipc: MTU too low for tipc bearer [ 302.781350][T14416] __nla_validate_parse: 7 callbacks suppressed [ 302.781367][T14416] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2124'. [ 302.851685][T14410] bond7: option ad_actor_sys_prio: invalid value (0) [ 302.858736][T14410] bond7: option ad_actor_sys_prio: allowed values 1 - 65535 [ 302.869340][T14410] bond7 (unregistering): Released all slaves [ 302.938148][T14416] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2124'. [ 303.024062][T14416] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2124'. [ 303.035851][T14416] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2124'. [ 303.063449][T14416] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2124'. [ 303.104938][T14416] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2124'. [ 303.125469][T14416] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2124'. [ 303.141206][T14416] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2124'. [ 303.180554][T14428] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2128'. [ 303.219420][T14416] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2124'. [ 303.378851][T14432] bridge6: entered promiscuous mode [ 303.404951][T14432] bridge6: port 1(macsec4) entered blocking state [ 303.419845][T14432] bridge6: port 1(macsec4) entered disabled state [ 303.433599][T14432] macsec4: entered allmulticast mode [ 303.446077][T14432] bridge6: entered allmulticast mode [ 303.464512][T14432] macsec4: left allmulticast mode [ 303.470210][T14432] bridge6: left allmulticast mode [ 303.476609][T14432] bridge6: left promiscuous mode [ 303.548755][T14379] lo speed is unknown, defaulting to 1000 [ 303.565071][T14379] wg1 speed is unknown, defaulting to 1000 [ 303.740037][T14442] netlink: 'syz.1.2134': attribute type 58 has an invalid length. [ 304.118912][T14426] lo speed is unknown, defaulting to 1000 [ 304.129649][T14426] wg1 speed is unknown, defaulting to 1000 [ 304.571863][T14478] tipc: Enabling of bearer rejected, failed to enable media [ 304.601735][T14479] : renamed from veth0_to_bond (while UP) [ 304.846020][T14489] netlink: 'syz.4.2144': attribute type 2 has an invalid length. [ 304.883970][T14490] bond0: Caught tx_queue_len zero misconfig [ 305.136402][T14503] netlink: 'syz.1.2147': attribute type 1 has an invalid length. [ 305.207540][T14503] bond10: entered promiscuous mode [ 305.213141][T14503] 8021q: adding VLAN 0 to HW filter on device bond10 [ 305.275011][T14503] macvtap0: entered allmulticast mode [ 305.317689][T14512] bond10: (slave bridge7): making interface the new active one [ 305.325436][T14512] bridge7: entered promiscuous mode [ 305.333192][T14512] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 305.392679][T14518] netlink: 'syz.3.2151': attribute type 39 has an invalid length. [ 305.525333][T14531] tipc: Enabled bearer , priority 0 [ 305.534490][T14531] syzkaller0: entered promiscuous mode [ 305.552683][T14531] syzkaller0: entered allmulticast mode [ 305.671541][T14540] tipc: Enabled bearer , priority 0 [ 305.681616][T14538] syzkaller0: entered promiscuous mode [ 305.688925][T14538] syzkaller0: entered allmulticast mode [ 305.712889][T14531] tipc: Resetting bearer [ 305.759533][T14538] tipc: Resetting bearer [ 305.782765][T14538] tipc: Disabling bearer [ 305.850658][T14554] netlink: 'syz.3.2161': attribute type 1 has an invalid length. [ 306.074397][T14565] macvtap1: entered promiscuous mode [ 306.082928][T14565] macvtap1: entered allmulticast mode [ 306.094809][T14565] veth1_vlan: entered allmulticast mode [ 306.166473][T14515] tipc: Resetting bearer [ 306.197301][T14515] tipc: Disabling bearer [ 306.644651][T14587] bond7: entered promiscuous mode [ 306.653847][T14587] 8021q: adding VLAN 0 to HW filter on device bond7 [ 306.685788][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 306.776396][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 306.784431][ C1] lec:lec_tx_timeout: lec0 [ 306.789881][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 307.259095][T14618] tipc: Enabled bearer , priority 0 [ 307.267475][T14615] syzkaller0: entered promiscuous mode [ 307.273031][T14615] syzkaller0: entered allmulticast mode [ 307.322319][T14615] tipc: Resetting bearer [ 307.335507][ T5831] block nbd4: Receive control failed (result -32) [ 307.456411][T14614] tipc: Resetting bearer [ 307.609039][T14614] tipc: Disabling bearer [ 307.749765][T14632] bridge0: left promiscuous mode [ 307.755055][T14632] bridge0: entered allmulticast mode [ 307.862644][T14641] netlink: 'syz.1.2186': attribute type 83 has an invalid length. [ 307.870857][T14637] __nla_validate_parse: 37 callbacks suppressed [ 307.870874][T14637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2184'. [ 307.904692][T14637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2184'. [ 307.997596][T14648] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2188'. [ 308.009838][T14648] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 308.107352][T14657] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2191'. [ 308.134689][T14663] netlink: 'syz.1.2193': attribute type 9 has an invalid length. [ 308.358582][T14677] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2196'. [ 308.388912][T14677] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2196'. [ 308.513182][T14691] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2198'. [ 308.523564][T14691] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2198'. [ 308.719446][ T30] audit: type=1804 audit(1773623207.157:9): pid=14713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2204" name="/newroot/493/cgroup.controllers" dev="tmpfs" ino=2531 res=1 errno=0 [ 308.743888][ T30] audit: type=1800 audit(1773623207.157:10): pid=14713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2204" name="cgroup.controllers" dev="tmpfs" ino=2531 res=0 errno=0 [ 311.016862][T14654] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 311.151159][T14732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2209'. [ 311.160859][T14732] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2209'. [ 311.336330][T14745] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 311.808879][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 311.816969][ C1] lec:lec_tx_timeout: lec0 [ 311.822062][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 312.198919][T14788] syzkaller0: entered promiscuous mode [ 312.204486][T14788] syzkaller0: entered allmulticast mode [ 312.211546][T14752] lo speed is unknown, defaulting to 1000 [ 312.227223][T14752] wg1 speed is unknown, defaulting to 1000 [ 313.859441][T14794] __nla_validate_parse: 5 callbacks suppressed [ 313.859460][T14794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2222'. [ 313.902755][T14818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2223'. [ 314.021643][T14820] netlink: 'syz.4.2224': attribute type 2 has an invalid length. [ 314.032173][T14820] netlink: 'syz.4.2224': attribute type 2 has an invalid length. [ 314.174408][T14832] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.188102][T14832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 314.224368][T14833] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 314.240502][T14768] lo speed is unknown, defaulting to 1000 [ 314.256825][T14768] wg1 speed is unknown, defaulting to 1000 [ 314.389867][T14844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.138906][T14863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2236'. [ 315.154550][T14863] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2236'. [ 315.196227][T14863] netlink: 'syz.3.2236': attribute type 21 has an invalid length. [ 315.685160][T14885] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2243'. [ 316.202876][T14919] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2252'. [ 316.236725][T14919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2252'. [ 316.258175][T14925] netlink: 'syz.2.2255': attribute type 12 has an invalid length. [ 316.272256][T14925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2255'. [ 316.319333][T14929] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2256'. [ 316.624997][T14953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2263'. [ 316.940021][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.542145][T15017] netlink: 'syz.0.2280': attribute type 1 has an invalid length. [ 317.586599][T15017] 8021q: adding VLAN 0 to HW filter on device bond8 [ 317.597031][T15020] openvswitch: netlink: IP tunnel dst address not specified [ 317.645553][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 317.653623][ C1] lec:lec_tx_timeout: lec0 [ 317.660234][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 317.952494][T15038] netlink: 'syz.0.2288': attribute type 1 has an invalid length. [ 317.962766][T15039] tipc: Enabling of bearer rejected, failed to enable media [ 317.978788][T15038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.028178][T15042] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 318.057827][T15043] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 318.110845][T15004] lo speed is unknown, defaulting to 1000 [ 318.123587][T15004] wg1 speed is unknown, defaulting to 1000 [ 318.169944][T15052] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 318.190670][T15052] tipc: Enabled bearer , priority 10 [ 318.454539][T15064] bond6: entered promiscuous mode [ 318.650147][T15076] tipc: Enabled bearer , priority 0 [ 318.660850][T15076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.758902][T15085] netlink: 'syz.3.2303': attribute type 1 has an invalid length. [ 318.996292][T15100] __nla_validate_parse: 13 callbacks suppressed [ 318.996312][T15100] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2307'. [ 319.049877][T15103] netlink: 'syz.3.2307': attribute type 9 has an invalid length. [ 319.058187][T15103] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2307'. [ 319.068818][T15103] netlink: 'syz.3.2307': attribute type 1 has an invalid length. [ 319.916888][T15103] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 319.924004][ T6108] tipc: Node number set to 2233406062 [ 319.940118][T15108] 0ªX¹¦À: left allmulticast mode [ 320.030911][T15108] bond7: left promiscuous mode [ 320.058679][ T6107] tipc: Node number set to 2462802311 [ 320.065652][ T221] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.095840][ T221] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.132142][ T221] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.212425][ T221] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.261533][T15134] x_tables: duplicate underflow at hook 2 [ 320.282828][T15125] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2313'. [ 320.489561][T15141] netlink: 1053 bytes leftover after parsing attributes in process `syz.3.2317'. [ 320.567878][T15138] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.606946][T15118] tipc: New replicast peer: 255.255.255.255 [ 320.613941][T15118] tipc: Enabled bearer , priority 10 [ 320.627407][T15150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2319'. [ 320.675235][T15138] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.774395][T15138] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.851856][T15138] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.986618][T15164] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2323'. [ 321.036994][ T9039] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.092527][ T9039] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.130047][ T9039] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.169538][ T9039] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.225723][T15117] lo speed is unknown, defaulting to 1000 [ 321.232506][T15117] wg1 speed is unknown, defaulting to 1000 [ 321.503964][T15133] lo speed is unknown, defaulting to 1000 [ 321.586946][T15133] wg1 speed is unknown, defaulting to 1000 [ 321.630648][ T9] tipc: Node number set to 485110310 [ 321.707588][T15181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2329'. [ 321.772176][T15181] vlan2: entered promiscuous mode [ 321.778393][T15181] team0: entered promiscuous mode [ 322.382868][T15202] xt_nfacct: accounting object `syz0' does not exist [ 322.558280][T15212] netlink: 'syz.1.2337': attribute type 8 has an invalid length. [ 322.579658][T15214] sctp: [Deprecated]: syz.4.2335 (pid 15214) Use of struct sctp_assoc_value in delayed_ack socket option. [ 322.579658][T15214] Use struct sctp_sack_info instead [ 322.675690][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 322.683767][ C1] lec:lec_tx_timeout: lec0 [ 322.689285][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 322.700635][T15207] bond11: option tlb_dynamic_lb: invalid value (9) [ 322.730881][T15207] bond11 (unregistering): Released all slaves [ 323.046412][ T6597] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 323.054901][ T6597] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 323.067281][ T6597] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 323.084258][ T6597] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 323.104515][ T6597] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 323.126174][ T6597] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 323.144294][ T6597] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 323.153538][ T6597] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 323.290755][T15234] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2343'. [ 323.363136][T15240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2345'. [ 323.442030][T15244] IPVS: set_ctl: invalid protocol: 94 172.30.0.5:20002 [ 323.542540][T15250] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2348'. [ 323.561822][T15250] netlink: 'syz.3.2348': attribute type 15 has an invalid length. [ 323.590545][ T6585] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 323.601810][T15250] netlink: 'syz.3.2348': attribute type 15 has an invalid length. [ 323.610825][ T6585] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 323.628670][ T6585] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 323.687247][ T6585] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 323.821286][T15271] tipc: Enabled bearer , priority 0 [ 323.834439][T15261] syzkaller0: entered promiscuous mode [ 323.852221][T15261] syzkaller0: entered allmulticast mode [ 323.991738][T15261] tipc: Resetting bearer [ 324.019108][T15260] tipc: Resetting bearer [ 324.056794][T15260] tipc: Disabling bearer [ 324.080526][T15274] __nla_validate_parse: 3 callbacks suppressed [ 324.080545][T15274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2354'. [ 324.233126][T15299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2361'. [ 324.249565][T15299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2361'. [ 324.260927][T15299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2361'. [ 324.271029][T15299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2361'. [ 324.280851][T15299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2361'. [ 324.300541][T15299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2361'. [ 324.316588][T15299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2361'. [ 324.331200][T15299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2361'. [ 324.350105][T15299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2361'. [ 324.371396][T15304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.384691][T15304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.500935][T15307] vlan4: entered promiscuous mode [ 324.518936][T15307] bridge0: entered promiscuous mode [ 324.606913][ T1738] block nbd3: Possible stuck request ffff8880264fa800: control (read@0,1024B). Runtime 60 seconds [ 324.619250][ T1738] block nbd3: Possible stuck request ffff8880264faa00: control (read@1024,1024B). Runtime 60 seconds [ 324.631038][ T1738] block nbd3: Possible stuck request ffff8880264fac00: control (read@2048,1024B). Runtime 60 seconds [ 324.643127][ T1738] block nbd3: Possible stuck request ffff8880264fae00: control (read@3072,1024B). Runtime 60 seconds [ 324.695451][T15316] sch_tbf: peakrate 476949288562015496 is lower than or equals to rate 5628977692805006585 ! [ 324.752464][T15324] netlink: 'syz.0.2369': attribute type 13 has an invalid length. [ 325.040181][T15301] lo speed is unknown, defaulting to 1000 [ 325.050679][T15301] wg1 speed is unknown, defaulting to 1000 [ 325.394883][T15351] netlink: 'syz.3.2379': attribute type 1 has an invalid length. [ 325.557181][T15351] 8021q: adding VLAN 0 to HW filter on device bond7 [ 325.575007][T15353] bond7: entered promiscuous mode [ 325.583163][T15353] bond7: entered allmulticast mode [ 325.630247][T15356] erspan0: entered promiscuous mode [ 325.636310][T15356] vlan0: entered promiscuous mode [ 325.681414][T15357] bond0: entered promiscuous mode [ 325.687214][T15357] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 325.694386][T15357] team0: entered promiscuous mode [ 325.701623][T15357] bond0: left promiscuous mode [ 325.706924][T15357] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 325.713871][T15357] team0: left promiscuous mode [ 326.209415][T15384] netlink: 'syz.1.2391': attribute type 10 has an invalid length. [ 326.285480][T15394] 8021q: adding VLAN 0 to HW filter on device bond9 [ 326.343020][T15394] macvlan2: entered allmulticast mode [ 326.363435][T15394] veth0_to_bond: entered allmulticast mode [ 326.375483][T15394] bond9: (slave macvlan2): Enslaving as an active interface with an up link [ 326.447870][T15406] IPv6: NLM_F_REPLACE set, but no existing node found! [ 326.583305][T15416] IPv6: Can't replace route, no match found [ 326.590523][T15416] IPv6: Can't replace route, no match found [ 326.916662][T15446] xt_bpf: check failed: parse error [ 326.934843][T15448] nbd: must specify a size in bytes for the device [ 326.956594][T15448] nbd: must specify a size in bytes for the device [ 326.994135][T15448] nbd: must specify a size in bytes for the device [ 327.018156][T15448] nbd: must specify a size in bytes for the device [ 327.028373][T15448] nbd: must specify a size in bytes for the device [ 327.036145][T15448] nbd: must specify a size in bytes for the device [ 327.043130][T15448] nbd: must specify a size in bytes for the device [ 327.059792][T15448] nbd: must specify a size in bytes for the device [ 327.074888][T15448] nbd: must specify a size in bytes for the device [ 327.088091][T15448] nbd: must specify a size in bytes for the device [ 327.094931][T15448] nbd: must specify a size in bytes for the device [ 327.106036][T15448] nbd: must specify a size in bytes for the device [ 327.112884][T15448] nbd: must specify a size in bytes for the device [ 327.120392][T15448] nbd: must specify a size in bytes for the device [ 327.128806][T15448] nbd: must specify a size in bytes for the device [ 327.136312][T15448] nbd: must specify a size in bytes for the device [ 327.143076][T15448] nbd: must specify a size in bytes for the device [ 327.150728][T15448] nbd: must specify a size in bytes for the device [ 327.159346][T15448] nbd: must specify a size in bytes for the device [ 327.169320][T15448] nbd: must specify a size in bytes for the device [ 327.176449][T15448] nbd: must specify a size in bytes for the device [ 327.256854][T15448] nbd: must specify a size in bytes for the device [ 327.288130][T15448] nbd: must specify a size in bytes for the device [ 327.310265][T15448] nbd: must specify a size in bytes for the device [ 327.325173][T15448] nbd: must specify a size in bytes for the device [ 327.332713][T15448] nbd: must specify a size in bytes for the device [ 327.339707][T15448] nbd: must specify a size in bytes for the device [ 327.347282][T15448] nbd: must specify a size in bytes for the device [ 327.353994][T15448] nbd: must specify a size in bytes for the device [ 327.361266][T15448] nbd: must specify a size in bytes for the device [ 327.368497][T15448] nbd: must specify a size in bytes for the device [ 327.386626][T15448] nbd: must specify a size in bytes for the device [ 327.406054][T15448] nbd: must specify a size in bytes for the device [ 327.425273][T15448] nbd: must specify a size in bytes for the device [ 327.447860][T15448] nbd: must specify a size in bytes for the device [ 327.467609][T15448] nbd: must specify a size in bytes for the device [ 327.477426][T15464] netlink: 'syz.2.2413': attribute type 11 has an invalid length. [ 327.485894][T15448] nbd: must specify a size in bytes for the device [ 327.502761][T15448] nbd: must specify a size in bytes for the device [ 327.523825][T15448] nbd: must specify a size in bytes for the device [ 327.546847][T15448] nbd: must specify a size in bytes for the device [ 327.565035][T15448] nbd: must specify a size in bytes for the device [ 327.591846][T15448] nbd: must specify a size in bytes for the device [ 327.602909][T15448] nbd: must specify a size in bytes for the device [ 327.616380][T15448] nbd: must specify a size in bytes for the device [ 327.623371][T15448] nbd: must specify a size in bytes for the device [ 327.630699][T15448] nbd: must specify a size in bytes for the device [ 327.638261][T15448] nbd: must specify a size in bytes for the device [ 327.645015][T15448] nbd: must specify a size in bytes for the device [ 327.653940][T15448] nbd: must specify a size in bytes for the device [ 327.660998][T15448] nbd: must specify a size in bytes for the device [ 327.668250][T15448] nbd: must specify a size in bytes for the device [ 327.675006][T15448] nbd: must specify a size in bytes for the device [ 327.682719][T15448] nbd: must specify a size in bytes for the device [ 327.689913][T15448] nbd: must specify a size in bytes for the device [ 327.696046][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 327.704391][ C1] lec:lec_tx_timeout: lec0 [ 327.709215][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 328.996327][ T6585] bond0: (slave team0): link status definitely up, 0 Mbps full duplex [ 329.004621][ T6585] bond0: active interface up! [ 329.067249][T15468] unsupported nla_type 19471 [ 329.130904][T15469] __nla_validate_parse: 142 callbacks suppressed [ 329.130925][T15469] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2416'. [ 329.541051][T15506] netlink: 'syz.0.2425': attribute type 4 has an invalid length. [ 329.551693][T15502] syzkaller0: entered promiscuous mode [ 329.560540][T15502] syzkaller0: entered allmulticast mode [ 329.571763][T15507] netlink: 'syz.0.2425': attribute type 4 has an invalid length. [ 329.797192][ T30] audit: type=1800 audit(1773623228.227:11): pid=15520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2428" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2448 res=0 errno=0 [ 329.834226][ T30] audit: type=1800 audit(1773623228.227:12): pid=15521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2428" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2448 res=0 errno=0 [ 329.888997][T15523] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2430'. [ 329.905014][T15523] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 329.917735][T15525] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2429'. [ 329.937265][T15523] netlink: 'syz.0.2430': attribute type 11 has an invalid length. [ 329.945432][T15523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2430'. [ 329.948012][T15525] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2429'. [ 330.015949][T15531] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2430'. [ 330.476853][T15489] lo speed is unknown, defaulting to 1000 [ 330.484410][T15489] wg1 speed is unknown, defaulting to 1000 [ 330.568062][T15558] tipc: Enabled bearer , priority 0 [ 330.577869][T15557] tipc: Disabling bearer [ 330.645495][T15562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2437'. [ 330.705831][T15569] netlink: 'syz.3.2441': attribute type 21 has an invalid length. [ 330.713824][T15569] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2441'. [ 330.777932][T15569] netlink: 'syz.3.2441': attribute type 4 has an invalid length. [ 330.786510][T15569] netlink: 'syz.3.2441': attribute type 3 has an invalid length. [ 330.794271][T15569] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2441'. [ 331.100076][T15586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2445'. [ 331.321454][T15593] ip6gretap2: entered promiscuous mode [ 331.327872][T15593] macvlan3: entered promiscuous mode [ 331.345646][T15593] bond0: entered promiscuous mode [ 331.356314][T15593] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 331.514870][T15607] ip6t_srh: unknown srh invflags 4000 [ 331.701049][ T30] audit: type=1800 audit(1773623230.137:13): pid=15620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2453" name="memory.events" dev="tmpfs" ino=2485 res=0 errno=0 [ 331.867517][T15634] sctp: [Deprecated]: syz.2.2456 (pid 15634) Use of int in maxseg socket option. [ 331.867517][T15634] Use struct sctp_assoc_value instead [ 331.929003][T15636] lo: Caught tx_queue_len zero misconfig [ 331.962529][T15638] syzkaller0: entered promiscuous mode [ 331.969381][T15638] syzkaller0: entered allmulticast mode [ 332.353577][T15656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.709928][T15642] lo speed is unknown, defaulting to 1000 [ 332.716267][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 332.716296][ C1] lec:lec_tx_timeout: lec0 [ 332.724382][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 332.762625][T15642] wg1 speed is unknown, defaulting to 1000 [ 333.125110][T15692] batadv_slave_0: Caught tx_queue_len zero misconfig [ 333.686267][T15718] gtp0: entered promiscuous mode [ 333.693940][T15718] team0: Port device gtp0 added [ 334.258385][T15753] geneve5: entered promiscuous mode [ 334.263763][T15753] geneve5: entered allmulticast mode [ 334.750967][T15678] lo speed is unknown, defaulting to 1000 [ 334.758504][T15678] wg1 speed is unknown, defaulting to 1000 [ 335.093603][T15674] lo speed is unknown, defaulting to 1000 [ 335.101842][T15674] wg1 speed is unknown, defaulting to 1000 [ 335.252719][T15694] lo speed is unknown, defaulting to 1000 [ 335.261135][T15694] wg1 speed is unknown, defaulting to 1000 [ 335.500674][T15778] xt_TCPMSS: Only works on TCP SYN packets [ 336.751041][T15809] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 337.253280][T15788] lo speed is unknown, defaulting to 1000 [ 337.269086][T15788] wg1 speed is unknown, defaulting to 1000 [ 337.661078][T15844] tipc: Failed to remove unknown binding: 66,0,0/2462802311:3540141404/3540141406 [ 337.683648][T15844] tipc: Failed to remove unknown binding: 66,0,0/2462802311:3540141404/3540141405 [ 337.704130][T15849] netlink: 'syz.2.2510': attribute type 10 has an invalid length. [ 337.720404][T15844] tipc: Failed to remove unknown binding: 66,0,0/2462802311:3540141404/3540141406 [ 337.730317][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 337.738369][ C1] lec:lec_tx_timeout: lec0 [ 337.743627][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 337.766755][T15843] netlink: 'syz.1.2509': attribute type 10 has an invalid length. [ 337.773318][T15844] tipc: Failed to remove unknown binding: 66,0,0/2462802311:3540141404/3540141405 [ 337.885946][T15843] syz_tun: entered promiscuous mode [ 337.898700][T15843] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 337.913663][T15857] __nla_validate_parse: 10 callbacks suppressed [ 337.913681][T15857] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2511'. [ 338.169004][T15873] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2517'. [ 338.610038][T15900] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2523'. [ 338.649770][T15904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2525'. [ 338.675172][T15904] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2525'. [ 338.704013][T15904] tipc: Invalid UDP bearer configuration [ 338.704076][T15904] tipc: Enabling of bearer rejected, failed to enable media [ 338.812734][T15906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2527'. [ 339.040335][T15925] syzkaller0: entered promiscuous mode [ 339.048204][T15925] syzkaller0: entered allmulticast mode [ 339.101255][T15931] vxlan1: entered promiscuous mode [ 339.108417][T15932] netlink: 'syz.3.2532': attribute type 1 has an invalid length. [ 339.117889][T15931] vxlan1: entered allmulticast mode [ 339.125114][ T1113] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.141378][ T1113] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.169284][ T1113] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.197452][T15934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2536'. [ 339.257917][T15934] team0: Port device team_slave_0 removed [ 339.279173][ T1113] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.298010][T15941] wg2: Caught tx_queue_len zero misconfig [ 339.387435][T15941] xt_CT: No such helper "snmp_trap" [ 339.509709][T15956] syz_tun: left promiscuous mode [ 339.579114][T15956] veth3: left promiscuous mode [ 339.584062][T15956] ip6gre1: left promiscuous mode [ 339.589616][T15956] ip6gre1: left allmulticast mode [ 339.592425][T15966] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2545'. [ 339.594991][T15956] ip6gre2: left promiscuous mode [ 339.617310][T15956] ip6gre2: left allmulticast mode [ 339.623204][T15956] bridge1: left promiscuous mode [ 339.628789][T15956] bridge1: left allmulticast mode [ 339.640155][T15956] bridge0: left allmulticast mode [ 339.649755][T15956] bond8: left promiscuous mode [ 339.655141][T15956] bridge3: left promiscuous mode [ 339.671159][T15956] ipvlan2: left allmulticast mode [ 339.677451][T15956] ipvlan3: left allmulticast mode [ 339.684477][T15956] bond8: left allmulticast mode [ 339.708760][T15956] bridge3: left allmulticast mode [ 339.727633][T15956] vti0: left promiscuous mode [ 339.758527][T15956] ip6erspan0: left allmulticast mode [ 339.774230][T15956] bond9: left promiscuous mode [ 339.784810][T15956] bond9: left allmulticast mode [ 339.830768][T15956] bond10: left promiscuous mode [ 339.836267][T15956] bridge7: left promiscuous mode [ 339.963592][T15956] macvtap0: left allmulticast mode [ 340.042887][T15956] veth1_vlan: left allmulticast mode [ 340.076338][T15956] macvtap1: left promiscuous mode [ 340.088785][T15956] macvtap1: left allmulticast mode [ 340.335363][T15988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2548'. [ 340.388991][T15993] syzkaller0: entered promiscuous mode [ 340.394570][T15993] syzkaller0: entered allmulticast mode [ 340.752116][T16017] syzkaller1: entered promiscuous mode [ 340.761170][T16017] syzkaller1: entered allmulticast mode [ 341.409927][T16047] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2565'. [ 341.702346][T16062] netlink: 'syz.3.2571': attribute type 13 has an invalid length. [ 341.732576][T16065] xt_ecn: cannot match TCP bits for non-tcp packets [ 342.521621][T16097] team0: Port device gtp1 added [ 342.756040][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 342.764184][ C1] lec:lec_tx_timeout: lec0 [ 342.770435][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 342.842426][T16117] netlink: 'syz.4.2582': attribute type 4 has an invalid length. [ 342.980548][T16130] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20001 [ 343.072651][T16132] syzkaller0: entered promiscuous mode [ 343.083034][T16132] syzkaller0: entered allmulticast mode [ 343.092328][T16135] __nla_validate_parse: 9 callbacks suppressed [ 343.092343][T16135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2589'. [ 343.128400][T16135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2589'. [ 343.158964][T16140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2590'. [ 343.283124][T16144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2591'. [ 343.464314][T16147] netlink: 'syz.0.2592': attribute type 3 has an invalid length. [ 343.749850][T16162] veth0_to_bridge: entered promiscuous mode [ 343.768709][T16162] veth0_to_bridge: left promiscuous mode [ 343.800402][T16164] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2598'. [ 343.862206][T16117] lo speed is unknown, defaulting to 1000 [ 343.871002][T16117] wg1 speed is unknown, defaulting to 1000 [ 344.137174][T16175] xt_socket: unknown flags 0xfc [ 344.598733][T16201] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2608'. [ 344.673172][T16139] lo speed is unknown, defaulting to 1000 [ 344.705262][T16139] wg1 speed is unknown, defaulting to 1000 [ 345.581582][T16220] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2614'. [ 345.666613][T16224] veth0_to_bridge: entered promiscuous mode [ 345.681844][T16224] veth1: Caught tx_queue_len zero misconfig [ 345.689519][T16223] veth0_to_bridge: left promiscuous mode [ 345.891692][T16235] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2617'. [ 345.912132][T16238] netlink: 'syz.4.2621': attribute type 7 has an invalid length. [ 346.448971][T16259] netlink: 'syz.4.2627': attribute type 1 has an invalid length. [ 346.452696][T16261] bridge0: entered allmulticast mode [ 346.521298][T16259] bond11: entered promiscuous mode [ 346.528788][T16259] 8021q: adding VLAN 0 to HW filter on device bond11 [ 346.590494][T16242] lo speed is unknown, defaulting to 1000 [ 346.597678][T16242] wg1 speed is unknown, defaulting to 1000 [ 346.824197][T16281] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 346.833610][T16281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.894344][T16285] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2634'. [ 346.925029][T16287] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2635'. [ 347.022369][T16285] veth0_to_bond: left allmulticast mode [ 347.073720][T16292] netlink: 'syz.4.2636': attribute type 27 has an invalid length. [ 347.103896][T16296] netlink: 'syz.3.2637': attribute type 8 has an invalid length. [ 347.180592][T16292] sit0: left promiscuous mode [ 347.203427][T16292] vlan2: left promiscuous mode [ 347.265174][T16292] veth0_to_team: left promiscuous mode [ 347.271636][T16292] vlan2: left allmulticast mode [ 347.288204][T16292] veth0_to_team: left allmulticast mode [ 347.294899][T16292] bond4: left promiscuous mode [ 347.318807][T16292] bridge3: left allmulticast mode [ 347.325481][T16292] geneve5: left promiscuous mode [ 347.332593][T16292] bridge0: left allmulticast mode [ 347.341222][T16292] vxlan1: left promiscuous mode [ 347.350614][T16292] vxlan1: left allmulticast mode [ 347.380685][T16292] bond11: left promiscuous mode [ 347.495103][T16300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.515477][T16300] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.547430][T16300] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 347.577046][ T221] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.596209][ T221] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.647087][ T221] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.656542][ T221] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.703379][T16321] netlink: 'syz.1.2644': attribute type 1 has an invalid length. [ 347.734937][T16322] netlink: 'syz.1.2644': attribute type 1 has an invalid length. [ 347.786025][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 347.794060][ C1] lec:lec_tx_timeout: lec0 [ 347.799898][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 347.877324][T16342] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 347.896759][T16341] openvswitch: netlink: Key 6 has unexpected len 239 expected 2 [ 347.953238][T16325] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 347.979145][T16325] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 348.169193][T16361] __nla_validate_parse: 6 callbacks suppressed [ 348.169288][T16361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2651'. [ 348.640081][ T5822] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 348.651420][ T5822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 348.662680][ T5822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 348.671228][ T5822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 348.679742][ T5822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 348.726270][T16380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2658'. [ 348.817366][T16382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2659'. [ 348.948488][T16389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2660'. [ 349.053784][ T5818] bond0: (slave syz_tun): Releasing backup interface [ 349.401618][T16407] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 349.497794][ T148] bond4: (slave bond0): link status definitely down, disabling slave [ 349.524055][ T148] bond4: now running without any active interface! [ 349.542027][T16375] lo speed is unknown, defaulting to 1000 [ 349.563807][T16375] wg1 speed is unknown, defaulting to 1000 [ 349.769802][ T148] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 349.794778][ T148] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 349.805102][T16424] xt_TCPMSS: Only works on TCP SYN packets [ 349.871496][ T49] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 349.908824][ T49] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 20000 - 0 [ 350.006212][ T9039] veth9: left allmulticast mode [ 350.014870][ T9039] veth9: left promiscuous mode [ 350.034009][ T9039] bridge4: port 3(veth9) entered disabled state [ 350.048191][ T9039] veth0_to_bond: left allmulticast mode [ 350.054235][ T9039] veth0_to_bond: left promiscuous mode [ 350.064822][ T9039] bridge4: port 2(veth0_to_bond) entered disabled state [ 350.074225][ T9039] veth7: left allmulticast mode [ 350.079532][ T9039] veth7: left promiscuous mode [ 350.084573][ T9039] bridge4: port 1(veth7) entered disabled state [ 350.103895][ T9039] pimreg: left allmulticast mode [ 350.364614][ T9039] gtp0 (unregistering): left promiscuous mode [ 350.381436][ T9039] team0: Port device gtp0 removed [ 350.516954][ T9039] bond8 (unregistering): (slave bridge3): Releasing backup interface [ 350.699258][ T9039] bond10 (unregistering): (slave bridge7): Releasing backup interface [ 350.767820][ T5822] Bluetooth: hci5: command tx timeout [ 350.820719][ T9039] bond0 (unregistering): (slave team0): Releasing backup interface [ 350.830604][ T9039] bond0 (unregistering): Released all slaves [ 350.840217][ T9039] bond1 (unregistering): Released all slaves [ 350.855241][ T9039] bond2 (unregistering): Released all slaves [ 350.869156][ T9039] bond3 (unregistering): Released all slaves [ 350.882700][ T9039] bond4 (unregistering): Released all slaves [ 350.895144][ T9039] bond5 (unregistering): Released all slaves [ 350.908365][ T9039] bond6 (unregistering): Released all slaves [ 350.923473][ T9039] bond7 (unregistering): Released all slaves [ 350.949885][ T9039] bond8 (unregistering): Released all slaves [ 350.964175][ T9039] bond9 (unregistering): Released all slaves [ 350.981755][ T9039] bond10 (unregistering): Released all slaves [ 350.993914][ T9039] bond11 (unregistering): Released all slaves [ 351.008609][T16438] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 351.189431][T16375] chnl_net:caif_netlink_parms(): no params data found [ 351.250187][ T9039] 5nè‹Ò: left promiscuous mode [ 351.260138][T16481] xt_bpf: check failed: parse error [ 351.365282][T16491] x_tables: duplicate underflow at hook 2 [ 351.423778][ T9039] hmac(sha224: left promiscuous mode [ 351.591633][ T9039] tipc: Left network mode [ 351.839119][T16375] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.866151][T16375] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.894721][T16375] bridge_slave_0: entered allmulticast mode [ 351.932006][T16375] bridge_slave_0: entered promiscuous mode [ 352.111985][T16375] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.145767][T16375] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.177357][T16375] bridge_slave_1: entered allmulticast mode [ 352.196646][T16375] bridge_slave_1: entered promiscuous mode [ 352.450159][T16375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.608236][T16375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.713405][T16375] team0: Port device team_slave_0 added [ 352.760776][T16375] team0: Port device team_slave_1 added [ 352.816093][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 352.824165][ C1] lec:lec_tx_timeout: lec0 [ 352.826198][T16375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.829832][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 352.844645][T16375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.872100][T16375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.875907][ T5822] Bluetooth: hci5: command tx timeout [ 352.890745][T16375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.922716][T16375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.954293][T16375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.090967][T16582] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 353.186993][T16375] hsr_slave_0: entered promiscuous mode [ 353.211677][T16375] hsr_slave_1: entered promiscuous mode [ 353.643897][T16605] netlink: 'syz.0.2698': attribute type 62 has an invalid length. [ 353.868323][T16615] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2702'. [ 353.915795][ T9039] pim6reg99999999 (unregistering): left allmulticast mode [ 353.984840][ T30] audit: type=1800 audit(1773623252.417:14): pid=16617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2703" name="memory.events" dev="tmpfs" ino=2724 res=0 errno=0 [ 354.016365][ T9039] pim6reg (unregistering): left allmulticast mode [ 354.687829][ T1738] block nbd3: Possible stuck request ffff8880264fa800: control (read@0,1024B). Runtime 90 seconds [ 354.699441][ T1738] block nbd3: Possible stuck request ffff8880264faa00: control (read@1024,1024B). Runtime 90 seconds [ 354.711449][ T1738] block nbd3: Possible stuck request ffff8880264fac00: control (read@2048,1024B). Runtime 90 seconds [ 354.724031][ T1738] block nbd3: Possible stuck request ffff8880264fae00: control (read@3072,1024B). Runtime 90 seconds [ 354.832737][T16375] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 354.877094][T16655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2709'. [ 354.887877][T16655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2709'. [ 354.900804][T16655] netlink: 'syz.2.2709': attribute type 1 has an invalid length. [ 354.926580][ T5822] Bluetooth: hci5: command tx timeout [ 354.942943][T16655] 8021q: adding VLAN 0 to HW filter on device bond3 [ 354.962109][T16375] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 355.170420][T16375] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 355.424096][T16375] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 355.554893][T16668] tipc: Resetting bearer [ 355.600948][T16679] syzkaller1: entered promiscuous mode [ 355.606875][T16679] syzkaller1: entered allmulticast mode [ 355.693299][ T9039] IPVS: stop unused estimator thread 0... [ 356.031928][T16635] lo speed is unknown, defaulting to 1000 [ 356.125746][T16375] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 356.256011][T16375] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 356.293245][T16375] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 356.407958][T16375] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 356.860384][T16375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.900321][T16375] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.932833][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.940068][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.005623][ T5822] Bluetooth: hci5: command tx timeout [ 357.010095][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.018222][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.197254][T16741] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2722'. [ 357.215923][T16741] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2722'. [ 357.220406][T16742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2717'. [ 357.245352][T16741] netlink: 'syz.0.2722': attribute type 6 has an invalid length. [ 357.266362][T16741] netlink: 'syz.0.2722': attribute type 5 has an invalid length. [ 357.277238][T16741] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2722'. [ 357.669084][T16756] bpq0: entered promiscuous mode [ 357.678743][T16756] bpq0: entered allmulticast mode [ 357.695178][T16753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2724'. [ 357.770016][T16753] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2724'. [ 357.885911][ C1] ------------[ cut here ]------------ [ 357.891793][ C1] ODEBUG: free active (active state 0) object: ffff88805be29c90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 357.896629][T16716] lo speed is unknown, defaulting to 1000 [ 357.904961][ C1] WARNING: lib/debugobjects.c:632 at debug_check_no_obj_freed+0x405/0x550, CPU#1: syz.0.2727/16770 [ 357.921318][ C1] Modules linked in: [ 357.925552][ C1] CPU: 1 UID: 0 PID: 16770 Comm: syz.0.2727 Not tainted syzkaller #0 PREEMPT(full) [ 357.935036][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 357.945168][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 357.951586][ C1] Code: 89 44 24 20 e8 e7 2c 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 bb 27 8c 48 c7 c2 c0 c0 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 357.971247][ C1] RSP: 0000:ffffc90000a08b68 EFLAGS: 00010246 [ 357.977405][ C1] RAX: ffffffff8a965980 RBX: ffffffff9a53be10 RCX: 0000000000000000 [ 357.985396][ C1] RDX: ffffffff8c27c0c0 RSI: ffffffff8c27bb40 RDI: ffffffff901bee60 [ 357.993425][ C1] RBP: ffffffff8bcf3ce0 R08: ffff88805be29c90 R09: ffffffff8bcf5000 [ 358.001454][ C1] R10: dffffc0000000000 R11: ffffffff81b1e6a0 R12: ffff88805be29e00 [ 358.009475][ C1] R13: ffffffff901bee60 R14: ffff88805be29000 R15: ffff88805be29c90 [ 358.017496][ C1] FS: 00007fa69d9906c0(0000) GS:ffff888125567000(0000) knlGS:0000000000000000 [ 358.026482][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 358.033089][ C1] CR2: 00007fa69d98fff8 CR3: 000000007a1fc000 CR4: 00000000003526f0 [ 358.041107][ C1] Call Trace: [ 358.044474][ C1] [ 358.047354][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 358.053115][ C1] kfree+0x13a/0x630 [ 358.057123][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 358.062333][ C1] rose_timer_expiry+0x4cb/0x600 [ 358.067329][ C1] ? call_timer_fn+0x178/0x640 [ 358.072175][ C1] call_timer_fn+0x192/0x640 [ 358.076823][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 358.082321][ C1] ? call_timer_fn+0xd4/0x640 [ 358.087046][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 358.092199][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 358.097611][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 358.103102][ C1] __run_timer_base+0x652/0x8b0 [ 358.107995][ C1] ? ktime_get+0x45/0x200 [ 358.112355][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 358.117787][ C1] ? sched_clock_cpu+0x74/0x440 [ 358.122707][ C1] run_timer_softirq+0xb7/0x170 [ 358.127609][ C1] handle_softirqs+0x22a/0x870 [ 358.132430][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 358.137251][ C1] __irq_exit_rcu+0x5f/0x150 [ 358.141868][ C1] irq_exit_rcu+0x9/0x30 [ 358.146164][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 358.151928][ C1] [ 358.154872][ C1] [ 358.158253][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 358.164301][ C1] RIP: 0010:lock_release+0x44/0x3d0 [ 358.169579][ C1] Code: 8b 05 20 d8 79 11 48 89 44 24 28 0f 1f 44 00 00 65 8b 05 23 d8 79 11 83 f8 08 0f 83 56 02 00 00 89 c0 48 0f a3 05 8c 74 6f 0e <73> 0d e8 75 f9 08 00 84 c0 0f 84 94 02 00 00 83 3d 86 a7 6f 0e 00 [ 358.189237][ C1] RSP: 0000:ffffc9000ca87898 EFLAGS: 00000297 [ 358.195336][ C1] RAX: 0000000000000001 RBX: ffff8880b873c1c0 RCX: dffffc0000000000 [ 358.200806][T16375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.203350][ C1] RDX: 000000009eccc42a RSI: ffffffff82392e4a RDI: ffff8880b873c1c0 [ 358.218213][ C1] RBP: ffffc9000ca87b00 R08: ffffffff82392e4a R09: ffff8880b873c1c0 [ 358.226240][ C1] R10: dffffc0000000000 R11: fffff94000378131 R12: dffffc0000000000 [ 358.234248][ C1] R13: ffffffff82392e4a R14: ffff8880b873c1c0 R15: ffff8880b873c1f8 [ 358.242297][ C1] ? try_charge_memcg+0x24a/0x1560 [ 358.247502][ C1] ? try_charge_memcg+0x24a/0x1560 [ 358.252646][ C1] ? try_charge_memcg+0x24a/0x1560 [ 358.257833][ C1] try_charge_memcg+0x5d4/0x1560 [ 358.262812][ C1] ? try_charge_memcg+0x24a/0x1560 [ 358.267989][ C1] ? __pfx_policy_nodemask+0x10/0x10 [ 358.273332][ C1] ? __pfx_try_charge_memcg+0x10/0x10 [ 358.278766][ C1] ? percpu_ref_tryget+0x15/0x180 [ 358.283818][ C1] ? get_mem_cgroup_from_mm+0x38/0x290 [ 358.289348][ C1] ? get_mem_cgroup_from_mm+0x38/0x290 [ 358.294840][ C1] ? get_mem_cgroup_from_mm+0x38/0x290 [ 358.300368][ C1] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 358.305977][ C1] __mem_cgroup_charge+0xab/0x1e0 [ 358.311032][ C1] do_pte_missing+0x1677/0x3490 [ 358.315987][ C1] handle_mm_fault+0x1bec/0x3310 [ 358.320828][T16375] veth0_vlan: entered promiscuous mode [ 358.320962][ C1] ? handle_mm_fault+0xee/0x3310 [ 358.331380][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 358.336737][ C1] ? lock_vma_under_rcu+0x45a/0x500 [ 358.339505][T16781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2727'. [ 358.341982][ C1] do_user_addr_fault+0xa73/0x1340 [ 358.356006][ C1] ? ret_from_fork+0x4d5/0xb90 [ 358.360836][ C1] ? rcu_is_watching+0x15/0xb0 [ 358.361315][T16375] veth1_vlan: entered promiscuous mode [ 358.365662][ C1] ? trace_page_fault_user+0x84/0x210 [ 358.365699][ C1] exc_page_fault+0x6a/0xc0 [ 358.381022][ C1] asm_exc_page_fault+0x26/0x30 [ 358.385923][ C1] RIP: 0033:0x7fa69cb4acdf [ 358.390397][ C1] Code: b0 00 00 00 0f 29 bc 24 c0 00 00 00 64 48 8b 04 25 28 00 00 00 48 89 44 24 18 31 c0 48 8d 84 24 e0 00 00 00 45 31 c0 48 89 e1 <48> 89 44 24 08 48 8d 44 24 20 c7 04 24 18 00 00 00 c7 44 24 04 30 [ 358.410053][ C1] RSP: 002b:00007fa69d98fff0 EFLAGS: 00010246 [ 358.416177][ C1] RAX: 00007fa69d9900d0 RBX: 0000000000020000 RCX: 00007fa69d98fff0 [ 358.424169][ C1] RDX: 00007fa69cc4eddd RSI: 0000000000000023 RDI: 00007fa69d9900d0 [ 358.432208][ C1] RBP: 00007fa69d971000 R08: 0000000000000000 R09: 00007ffe55c84087 [ 358.440243][ C1] R10: 0000000000000008 R11: 0000000000000202 R12: 00007fa69d9900d0 [ 358.448274][ C1] R13: 000000000000000b R14: 00007ffe55c83fa0 R15: 00007ffe55c84088 [ 358.450259][T16375] veth0_macvtap: entered promiscuous mode [ 358.456305][ C1] [ 358.456335][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 358.456353][ C1] CPU: 1 UID: 0 PID: 16770 Comm: syz.0.2727 Not tainted syzkaller #0 PREEMPT(full) [ 358.456375][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 358.456388][ C1] Call Trace: [ 358.456397][ C1] [ 358.456405][ C1] vpanic+0x56c/0xa60 [ 358.456471][ C1] ? __pfx__printk+0x10/0x10 [ 358.456492][ C1] ? __pfx_vpanic+0x10/0x10 [ 358.456517][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 358.456545][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 358.456573][ C1] panic+0xc5/0xd0 [ 358.456608][ C1] ? __pfx_panic+0x10/0x10 [ 358.456649][ C1] __warn+0x315/0x4f0 [ 358.456674][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 358.456702][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 358.456729][ C1] __report_bug+0x29a/0x540 [ 358.456847][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 358.456882][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 358.456909][ C1] ? __pfx___report_bug+0x10/0x10 [ 358.456946][ C1] ? run_timer_softirq+0xb7/0x170 [ 358.456969][ C1] ? handle_softirqs+0x22a/0x870 [ 358.456994][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 358.457019][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 358.457046][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 358.457068][ C1] ? lock_release+0x44/0x3d0 [ 358.457092][ C1] ? try_charge_memcg+0x5d4/0x1560 [ 358.457113][ C1] ? __mem_cgroup_charge+0xab/0x1e0 [ 358.457137][ C1] report_bug_entry+0x19a/0x290 [ 358.457166][ C1] ? debug_check_no_obj_freed+0x44a/0x550 [ 358.457191][ C1] ? debug_check_no_obj_freed+0x44f/0x550 [ 358.457216][ C1] handle_bug+0xce/0x200 [ 358.457238][ C1] exc_invalid_op+0x1a/0x50 [ 358.457258][ C1] asm_exc_invalid_op+0x1a/0x20 [ 358.457278][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 358.457306][ C1] Code: 89 44 24 20 e8 e7 2c 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 bb 27 8c 48 c7 c2 c0 c0 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 358.457324][ C1] RSP: 0000:ffffc90000a08b68 EFLAGS: 00010246 [ 358.457343][ C1] RAX: ffffffff8a965980 RBX: ffffffff9a53be10 RCX: 0000000000000000 [ 358.457359][ C1] RDX: ffffffff8c27c0c0 RSI: ffffffff8c27bb40 RDI: ffffffff901bee60 [ 358.457375][ C1] RBP: ffffffff8bcf3ce0 R08: ffff88805be29c90 R09: ffffffff8bcf5000 [ 358.457391][ C1] R10: dffffc0000000000 R11: ffffffff81b1e6a0 R12: ffff88805be29e00 [ 358.457407][ C1] R13: ffffffff901bee60 R14: ffff88805be29000 R15: ffff88805be29c90 [ 358.457427][ C1] ? __pfx_timer_debug_hint+0x10/0x10 [ 358.457453][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 358.457487][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 358.457523][ C1] kfree+0x13a/0x630 [ 358.457540][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 358.457575][ C1] rose_timer_expiry+0x4cb/0x600 [ 358.457610][ C1] ? call_timer_fn+0x178/0x640 [ 358.457637][ C1] call_timer_fn+0x192/0x640 [ 358.457663][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 358.457690][ C1] ? call_timer_fn+0xd4/0x640 [ 358.457714][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 358.457749][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 358.457774][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 358.457809][ C1] __run_timer_base+0x652/0x8b0 [ 358.457832][ C1] ? ktime_get+0x45/0x200 [ 358.457863][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 358.457893][ C1] ? sched_clock_cpu+0x74/0x440 [ 358.457925][ C1] run_timer_softirq+0xb7/0x170 [ 358.457949][ C1] handle_softirqs+0x22a/0x870 [ 358.457978][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 358.458011][ C1] __irq_exit_rcu+0x5f/0x150 [ 358.458035][ C1] irq_exit_rcu+0x9/0x30 [ 358.458058][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 358.458086][ C1] [ 358.458093][ C1] [ 358.458102][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 358.458123][ C1] RIP: 0010:lock_release+0x44/0x3d0 [ 358.458147][ C1] Code: 8b 05 20 d8 79 11 48 89 44 24 28 0f 1f 44 00 00 65 8b 05 23 d8 79 11 83 f8 08 0f 83 56 02 00 00 89 c0 48 0f a3 05 8c 74 6f 0e <73> 0d e8 75 f9 08 00 84 c0 0f 84 94 02 00 00 83 3d 86 a7 6f 0e 00 [ 358.458165][ C1] RSP: 0000:ffffc9000ca87898 EFLAGS: 00000297 [ 358.458182][ C1] RAX: 0000000000000001 RBX: ffff8880b873c1c0 RCX: dffffc0000000000 [ 358.458195][ C1] RDX: 000000009eccc42a RSI: ffffffff82392e4a RDI: ffff8880b873c1c0 [ 358.458210][ C1] RBP: ffffc9000ca87b00 R08: ffffffff82392e4a R09: ffff8880b873c1c0 [ 358.458225][ C1] R10: dffffc0000000000 R11: fffff94000378131 R12: dffffc0000000000 [ 358.458240][ C1] R13: ffffffff82392e4a R14: ffff8880b873c1c0 R15: ffff8880b873c1f8 [ 358.458257][ C1] ? try_charge_memcg+0x24a/0x1560 [ 358.458282][ C1] ? try_charge_memcg+0x24a/0x1560 [ 358.458305][ C1] ? try_charge_memcg+0x24a/0x1560 [ 358.458340][ C1] try_charge_memcg+0x5d4/0x1560 [ 358.458365][ C1] ? try_charge_memcg+0x24a/0x1560 [ 358.458394][ C1] ? __pfx_policy_nodemask+0x10/0x10 [ 358.458423][ C1] ? __pfx_try_charge_memcg+0x10/0x10 [ 358.458447][ C1] ? percpu_ref_tryget+0x15/0x180 [ 358.458472][ C1] ? get_mem_cgroup_from_mm+0x38/0x290 [ 358.458506][ C1] ? get_mem_cgroup_from_mm+0x38/0x290 [ 358.458534][ C1] ? get_mem_cgroup_from_mm+0x38/0x290 [ 358.458563][ C1] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 358.458598][ C1] __mem_cgroup_charge+0xab/0x1e0 [ 358.458623][ C1] do_pte_missing+0x1677/0x3490 [ 358.458663][ C1] handle_mm_fault+0x1bec/0x3310 [ 358.458706][ C1] ? handle_mm_fault+0xee/0x3310 [ 358.458743][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 358.458771][ C1] ? lock_vma_under_rcu+0x45a/0x500 [ 358.458816][ C1] do_user_addr_fault+0xa73/0x1340 [ 358.458844][ C1] ? ret_from_fork+0x4d5/0xb90 [ 358.458873][ C1] ? rcu_is_watching+0x15/0xb0 [ 358.458901][ C1] ? trace_page_fault_user+0x84/0x210 [ 358.458930][ C1] exc_page_fault+0x6a/0xc0 [ 358.458960][ C1] asm_exc_page_fault+0x26/0x30 [ 358.458978][ C1] RIP: 0033:0x7fa69cb4acdf [ 358.458997][ C1] Code: b0 00 00 00 0f 29 bc 24 c0 00 00 00 64 48 8b 04 25 28 00 00 00 48 89 44 24 18 31 c0 48 8d 84 24 e0 00 00 00 45 31 c0 48 89 e1 <48> 89 44 24 08 48 8d 44 24 20 c7 04 24 18 00 00 00 c7 44 24 04 30 [ 358.459014][ C1] RSP: 002b:00007fa69d98fff0 EFLAGS: 00010246 [ 358.459030][ C1] RAX: 00007fa69d9900d0 RBX: 0000000000020000 RCX: 00007fa69d98fff0 [ 358.459045][ C1] RDX: 00007fa69cc4eddd RSI: 0000000000000023 RDI: 00007fa69d9900d0 [ 358.459058][ C1] RBP: 00007fa69d971000 R08: 0000000000000000 R09: 00007ffe55c84087 [ 358.459072][ C1] R10: 0000000000000008 R11: 0000000000000202 R12: 00007fa69d9900d0 [ 358.459085][ C1] R13: 000000000000000b R14: 00007ffe55c83fa0 R15: 00007ffe55c84088 [ 358.459115][ C1] [ 358.462259][ C1] Kernel Offset: disabled