last executing test programs: 8.00989792s ago: executing program 1 (id=2729): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000e517a92400"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg(r3, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2021, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@getnexthop={0x18, 0x76, 0x1, 0x0, 0x25dfdbff, {0x3}}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x29, 0x3d, 0xfffffffffffffcac, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x9, {{0xa, 0x4e22, 0xfffffff7, @mcast1, 0x1ff}}, {{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd}}}, 0x108) 7.724963424s ago: executing program 2 (id=2732): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "9913d4ab2de66f9c", "dd79ff97261d7098a0723ec49ab4cfdc", 'i}oz', "ffca69dbc7b44302"}, 0x28) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x7fffffff, @empty, 0xe44}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x0, 0x80000, 0x0, &(0x7f0000000380)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r3 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@ax25={{0x3, @rose}, [@rose, @netrom, @rose, @bcast, @null, @remote, @netrom, @null]}, &(0x7f0000000100)=0x80, 0x80000) r4 = accept4$x25(0xffffffffffffffff, &(0x7f0000000200)={0x9, @remote}, &(0x7f0000000240)=0x12, 0x800) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000280)={r4}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000002c0)={0x6, 0x2, 0xd46, 0x5, 0xf}) 7.376744062s ago: executing program 1 (id=2736): syz_80211_inject_frame(&(0x7f0000000200)=@broadcast, &(0x7f0000000340)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x0, 0x1}, {0x204}, @initial, @device_a, @device_b, {0x8, 0x7f}}, @random="5a0e32691f906df5132399625b45678683ecd90140d6f531a2e1cf82aea74420925b3ecc70362815ca4366631342d3968614157658997a0d49d2ccdb2c2a0199eac88a0a1894fb9fc9c539737569cd7e4a692fb61d23cc96c08a35e4d2e4d6dd"}, 0x78) 7.059806401s ago: executing program 2 (id=2738): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40) close(0x3) r0 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x1e, 0x200, @l2={'ib', 0x3a, 'vlan0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x404c000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000200001000000000000fe211e81000000000000000000000008000d"], 0x38}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x4044880}, 0x40040) 6.995024852s ago: executing program 2 (id=2739): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000100000000000000020004008500000050000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000950000000000000023d802caecc3e562c9d9770264b44edf6d1a4037e7fa868da68177de389982e6dde88812f44a4439f76930cf2db27ef5a41e973de67b60298424748654e71c2e2d98a7a9223df77a284189446eca804d87a61f88a8f155c780c85c221d32ed2304cdb2816fb7c5261b2e051a8a3e7e4d98cbc0ca0c19df1677a227d7c788abfda0e6f7109bbacb398a633dd0bdb663a056f9ede3b3c1e6474235e0670a97d4"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.923400967s ago: executing program 2 (id=2740): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800e3cfa0ee4802acb7ab5093c2812ce9000002200000000000000000080071"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x10, 0x7, 0x0, 0x1, {{0x11, 0x4, 0x1, 0x6, 0x44, 0x68, 0x0, 0x40, 0x4, 0x0, @multicast1, @broadcast, {[@timestamp={0x44, 0x8, 0x0, 0x0, 0x8, [0x5]}, @timestamp={0x44, 0x28, 0x34, 0x0, 0xb, [0x4, 0x4, 0x8, 0xec, 0x8, 0x0, 0x4, 0x8, 0x3]}]}}}}}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x8070bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xc, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002b40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000000380)=@deltfilter={0x2768, 0x2d, 0x10, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xffe0, 0xffe0}, {0xffe0, 0x10}, {0x2, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x1678, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'bridge0\x00'}, @TCA_FW_ACT={0x15b4, 0x4, [@m_simple={0x9c, 0x6, 0x0, 0x0, {{0xb}, {0x4}, {0x6d, 0x6, "67d05dd4e2f096d00000a29062798471035da5dfc81330bdcf6d94ab100f114b5114348f21155b0630842f0c2dfecf2846390f5e9d44d56deac4ce4c4757516e32bf4022c41bf2b3bb49271dd36b62f654202754b1f78b4ca3d4443bd4b65c1cf041ab40f044295fa5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x19c, 0x8, 0x0, 0x0, {{0x7}, {0x130, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0xff, 0x6, {0x3ff, 'raw\x00', 0x5, 0x1, "de20b4acc4d6de9cbc68ee660f9c0dae6ef83cc1805f33a5bb610e7bc03967ba19de86aa87b999f46986e6110bef8eb1a10d334814f20b811ff5ff9f8747d70596530d8c8c598a2bbd377e31059da39788c0241dc2adf25743b51c96da148f396ee3c82e83fca83c38b2b54dfae48113e99c2ed6f1a826a4d90ff77a3e8cc83ec53e6adfaae31c2008183d7af59c1b3b518d566fa4522ee58fce1cf6235d6ba056da7586a9c3431971ea6460fcd6a1287d07cf8a2acef49714c6900df480eef3ba5a980aeab43dc693acba1d703df0dd64dddc4b91"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x100}]}, {0x46, 0x6, "113ced988d30aae11df3caf18187e4ea39fe4ee99b213e0cb0a2701f37b6aa67a91612a5ba0a53c0e5d38f7ea944d4dce1d203d8b76bd4ebd82af4f4dce1363fb098"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x78, 0xa, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x7f}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xbcc}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x441}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x80, 0x4, 0xffffffffffffffff, 0x9, 0x80000001}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7fff}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xf68, 0x3, 0x0, 0x0, {{0xa}, {0xf14, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xf10, 0x4, {{{0x2, 0xe, 0x3, 0x2, 0x3397}, 0x8, 0xff, [{0x0, 0x4, 0x2, 0x8, 0x0, 0x6}, {0x100, 0x5e5, 0x0, 0x84a5, 0x5, 0x8}, {0x1, 0x7, 0x4, 0x9, 0x5, 0x5}, {0xff, 0x5, 0xffff, 0x49b, 0x27, 0x3}, {0xb9, 0xffff7fff, 0x0, 0xffffffff, 0x25, 0xfffffffb}, {0x10, 0x2, 0x5, 0x77, 0x8}, {0x6, 0x0, 0x7, 0x1e, 0x4, 0x3}, {0x3, 0xb3, 0xb5e, 0xfffffffe, 0xfffff2ae, 0x4b5}, {0x10, 0x9, 0x3, 0x3, 0xfffffff8, 0x2}, {0x101, 0x6, 0xd2b7, 0x1, 0x6, 0x5}]}, [{0x2, 0x8, 0x800, 0xec, 0x7, 0x7}, {0x5, 0x20000000, 0x6, 0xfffffffc, 0x6, 0x200}, {0x5, 0x6, 0x5, 0x1000, 0x2, 0x6}, {0x6, 0x8, 0x8000, 0x8000, 0xe65, 0x4}, {0x7f, 0xfffffff7, 0x5, 0x9, 0x3, 0x10001}, {0xffffffff, 0x6, 0x10, 0x0, 0x400, 0xfffffffb}, {0x5, 0x3, 0x80, 0x7, 0xfffffffc, 0x95}, {0x8, 0x8, 0x8000, 0x3, 0xd2c7, 0xed0}, {0x8, 0x4, 0x4, 0x4, 0x4, 0x9}, {0x2216, 0x1, 0x6, 0x1, 0x4, 0xb2}, {0x5, 0x6, 0x9, 0xff}, {0x734, 0x6, 0x1000, 0x5000, 0x3ff, 0x9}, {0x0, 0x84f8, 0x6, 0x88, 0x430c, 0x6}, {0x7, 0x0, 0x8001, 0xfff, 0x5, 0x1}, {0x2, 0x7, 0x4, 0x1, 0x0, 0x8}, {0x5, 0xd7dc, 0x0, 0x40, 0x9, 0x1}, {0xff, 0x6, 0x81, 0x7e02, 0x3, 0x6}, {0xa5, 0x587, 0x8000, 0x28, 0x9, 0x4}, {0x0, 0x3, 0x80000000, 0x6, 0x9, 0x9}, {0x7, 0x7, 0x5, 0x0, 0x10000}, {0xfffffffe, 0xa43, 0x40, 0x4, 0xd1, 0x1}, {0xfffffff8, 0x80000000, 0x3, 0x4, 0xffffffff, 0x5}, {0x5, 0xfff, 0x5, 0x5, 0x7, 0xad6}, {0x0, 0x48, 0x1, 0x3, 0x7}, {0x447, 0x401, 0x3, 0x7, 0x4, 0xff}, {0x6, 0x40, 0x8, 0xffff, 0x4, 0x80}, {0x6, 0x7, 0x3, 0xf, 0x3}, {0xf2e7, 0x2, 0x0, 0x0, 0xfffffffe, 0x7ff}, {0x0, 0x6, 0xfffffffd, 0x2, 0x4, 0x5}, {0xfffffff9, 0x3, 0xa86, 0xa78, 0x8001, 0x423}, {0x4, 0x9, 0x5, 0x1, 0x596}, {0x3, 0x6, 0x6, 0x5, 0x5, 0x5}, {0xc, 0xc, 0x4, 0xd9, 0x6, 0x3}, {0x1, 0x8, 0x20000000, 0x3, 0x4, 0x2}, {0x9, 0x358d, 0x800, 0xde7, 0x3, 0x7}, {0x81, 0x5, 0x4, 0x5, 0x7, 0x7}, {0x3, 0x8bb4, 0x0, 0x6038, 0x100, 0x101}, {0xf9, 0x0, 0xc, 0x0, 0x1, 0x80}, {0x5, 0x10001, 0xffffffff, 0x10001, 0x7}, {0xeea, 0x7a2, 0x9, 0x5, 0x0, 0x8}, {0xa78, 0x2, 0x3, 0xe453, 0x2, 0x7fff}, {0x200, 0xc, 0x9, 0x8001, 0x6, 0xb}, {0x1, 0x1, 0x7, 0x7f, 0x2000000, 0x6}, {0x4, 0x99b, 0x1000, 0x395, 0x6, 0xfffffffe}, {0x21c, 0x3c27, 0x3, 0x8, 0x5, 0x200}, {0xfffffff2, 0xffff, 0x81, 0x7d0b0ddf, 0x2, 0x7}, {0x8, 0x5, 0x800, 0x0, 0x7fffffff, 0x10000}, {0x8, 0x6, 0x100, 0x220, 0xf, 0x7fff}, {0x4, 0x6, 0x9, 0x200, 0x9, 0x5}, {0x1, 0x2, 0x2, 0x8, 0x1, 0xf}, {0x5, 0x9, 0x4, 0x93f9, 0x8000, 0x4}, {0x7fff, 0x2, 0x10, 0x6e7, 0x9, 0x9}, {0x5, 0x6, 0xfff, 0x0, 0x4, 0x800}, {0x1, 0x80, 0x7f0, 0x2, 0x9, 0x1}, {0xca2, 0x7c, 0x8d, 0x4, 0x400, 0x3}, {0x3, 0xd61, 0x8001, 0x7fff, 0x7, 0x6}, {0x10001, 0x3, 0x6, 0xfffff072, 0x0, 0xfff}, {0x6, 0x5, 0xaa76, 0x9, 0x7f, 0x2}, {0x10000000, 0x4, 0xfffffffc, 0x1, 0x3, 0xef1}, {0x7ff, 0x5, 0xe, 0x2, 0x80, 0x2}, {0x9, 0x1, 0x7, 0x100, 0x5, 0x5}, {0xf, 0xfae3, 0x0, 0x81, 0x7, 0x4}, {0x8, 0x3, 0xca, 0x6, 0xb}, {0x0, 0x1, 0x7, 0x4f5, 0x401, 0xd}, {0x9, 0x7, 0xfffffffd, 0x6, 0x8, 0x4}, {0x2, 0x6, 0x9, 0x0, 0x2, 0x10000}, {0x3, 0xfffffffd, 0xeb69, 0xcb2, 0xab2, 0x48}, {0xc, 0xc0, 0x3, 0x7, 0x853, 0x3}, {0x6, 0x0, 0x9, 0x8, 0x1, 0x10000}, {0x8, 0x9, 0x3, 0x8, 0x9, 0x9}, {0x1, 0x40, 0x9, 0x0, 0x1, 0xfffffffc}, {0x7, 0x10, 0x4, 0x2300, 0x9, 0x4}, {0xd084, 0x7, 0xd7b, 0x10, 0x476a, 0x2}, {0x2, 0x8, 0xd, 0xffffffff, 0xdee, 0x2}, {0xb, 0x70, 0x9, 0x4, 0x2, 0x3ff}, {0x7, 0x7, 0xa89, 0x7, 0xffffffff, 0x3}, {0x5, 0x30, 0x8001, 0x400, 0xfffff67a, 0x8}, {0x2, 0x8000, 0x7, 0xe47, 0x4, 0x73}, {0x2, 0x2, 0x3, 0x1ff, 0x7f, 0x1}, {0x0, 0x6aa26785, 0x9, 0x4, 0x5, 0x10000}, {0x3, 0xa37, 0x5, 0x1, 0xfffffffa, 0x800}, {0x1000, 0x3, 0x4, 0x9, 0x40, 0xb}, {0x0, 0x5, 0xffffffff, 0x7ff, 0x3}, {0xb, 0x2, 0x8, 0x4, 0x40, 0x6}, {0xd4a, 0xecfd, 0x10001, 0x5, 0xfff, 0x8}, {0x3, 0xc, 0xf, 0x0, 0x7, 0x4be}, {0x3, 0x0, 0x6, 0x7, 0xcfa1, 0x6}, {0xfff, 0x21c88194, 0x9, 0x81, 0x400, 0x9}, {0x6, 0xb, 0x7c52f1f9, 0x4, 0x7f}, {0xf6, 0x83, 0x0, 0x2, 0x7d, 0x3}, {0x7ff, 0x3, 0xf828, 0x9, 0x5, 0x3}, {0xb, 0x5, 0x5, 0xffffffd5, 0x69d2, 0x10001}, {0xd6, 0x0, 0x3, 0x16, 0x3, 0xed3}, {0x0, 0xbf64, 0x1, 0x7, 0x1f5, 0x7f}, {0x1, 0x6, 0x7fff, 0x0, 0x3ff, 0xfffffff9}, {0x947, 0x2, 0x6, 0x3, 0x1, 0x7}, {0xd120, 0xaa, 0x0, 0x1000, 0x4, 0x401}, {0xe3, 0x4, 0x8, 0x4, 0x2, 0x1ff}, {0x1800, 0x6b4, 0x8, 0xfffff68d, 0x1, 0x3}, {0x9, 0xffffffff, 0x9, 0x7f, 0xe6, 0x80}, {0x6, 0x84c3, 0x5, 0x9, 0x4}, {0x2f7, 0x9, 0x9, 0x101, 0x24d}, {0x5, 0x8, 0x10001, 0x8, 0x9, 0x1bad}, {0x7, 0x0, 0x3, 0x5, 0x401, 0x57}, {0x6, 0xace, 0x13, 0x2, 0x6, 0x7}, {0x1, 0x41e, 0x6, 0x9, 0x80000000, 0x100}, {0xffff, 0x6c, 0xfffffffd, 0x3cf, 0x3, 0x19ab}, {0x6, 0x80, 0x10, 0x2, 0x4, 0x3}, {0xfffffffc, 0x8, 0x1, 0x0, 0xd, 0x2}, {0x81, 0x7, 0x10001, 0x6, 0x800, 0x4}, {0x1894bd6c, 0xf8b, 0x6, 0xfcc2, 0x2, 0x4}, {0x7ff, 0xff, 0x7, 0x40, 0x1, 0x8000}, {0x2, 0x9, 0x2, 0x3, 0x18000000, 0x7}, {0x2, 0xffffffff, 0x9, 0x0, 0x7fffffff, 0x9}, {0x0, 0xfffffffe, 0xa23, 0x101, 0x800, 0x3}, {0x4000, 0x6, 0x6b, 0xd6, 0x8, 0x952b}, {0x40, 0x7, 0x2, 0x1b, 0x2, 0x10000}, {0x8c20, 0x2, 0x0, 0x1, 0xfffffffa, 0x8}, {0x5, 0x1ff, 0x8, 0x7, 0xe, 0x10001}, {0xffff, 0x8, 0x8000, 0x86ec, 0xc67, 0x2900285b}, {0x2, 0x3, 0x4, 0x6, 0xffffffff, 0x6}, {0x9, 0x3, 0xd, 0xffff, 0x150, 0x7}, {0x2, 0x10, 0xdb2, 0xde, 0x1, 0x9}, {0x2ab, 0xfffffff9, 0x8, 0x7e4b890c, 0x7, 0x200}, {0x2, 0x3, 0xc48, 0x6e0000, 0x6, 0xff}, {0xf2ee, 0x7, 0xe8, 0xffff, 0xfffffe01, 0x6}, {0xb1c, 0x6, 0x3, 0x0, 0x3, 0x2}, {0x9, 0x1, 0x2, 0x1, 0x4, 0x1}], [{0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x6}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {}, {}, {0x5}, {0x2}, {0x3, 0x1}, {0x3}, {0x1}, {0x1}, {0x5}, {0x3}, {0x2, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x6caf85369d3d49b5}, {0x5, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x2}, {0x3}, {0x1, 0x1}, {0x3}, {0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x7, 0x1}, {0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x6, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0xf}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x5}, {0x4}], 0x1}}]}, {0x29, 0x6, "5fdd91dfae9e0d536ba2b273ebc2c40cd90f4f1a17a150fa1cb1e1733311b006732350fcee"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x120, 0xb, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0xbcce, 0x0, 0x7, 0x6}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7ff, 0xb, 0x3, 0x8, 0x7}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0xa2, 0x6, "85a0fa037429bfd0e0cb2eeed9b75bbf3c63c3837e9dbb13446a502a431887307ed349b79f71fbabd4fa79a8f464415aba38b2fe3aef71ee13addc9ea8e58e0bc86ce2abbf279d23dd76d2a53de941cc3be938d86632362976df9c139b5cef176520f5df95ee80f729ba605bfe324594a7620649f557d38f1925e7e3d105cea4fe22acfe51d0ea5e272681f0ede59b2c14f08800955aa9fcb7044f89aaee"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x12c, 0x18, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x92, 0x8, 0x1, 0x10, 0xb}, 0x14}}]}, {0xe4, 0x6, "7d9cb4b020e9bfab52e6b166dd9c760c9832e6630547ea0ee1d2ca54794a22d21991f6938620d10d1a778472b72895cc50de4b5725535983d6bc49c148470aedf02fa4722c26d019ea2b13c14f3dabaf16fdba66adfcd230a5005af0066d9246f171d31529982210f866e881c48c7d82344bf6e6eefed7aad67cda6f27e3db7bed5fb0cbccd94aa9a39c73b437e1fdd2848526f4373adb65a35cdd1590fa74e92996954b5c0765183dc959c50cea15743fd82c4bcffd41d388c4fc5a8d043ee5714665302d4fb217079ef1fb294a03a78af90188333c8f1b50c8ebbd2e17850a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_skbedit={0x14c, 0x1c, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x3086, 0x6, 0xe0000000, 0x6}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xf4a, 0x3ff, 0x3, 0x18, 0x6}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xa4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}]}, {0xdf, 0x6, "fe90e2cfc1fd929cb9edcb29dc7ec42f816f3b68d402abb3497e62687bf04fbd26ac874eefaa4f1c4ee185b58072cb36aaeab85c1eae1a78783fb9cc2df61b6ac9bf85154285c1c6733bfc9f59b34d1cbe353000dbe82229b75ac9cbfe8b26eae4c2164f8f55763407f5838c273e3a8ca71f54aa84ea41dfa5fbb633bf2c7e57932dcff3944e54a4c142ef7afd1919e2975112558f4d192d933bbdbb12240900d872c543ccb167ab64f127482e89f2ae21099ba000cdf6df040a65e96ac55d41ef1efdbeefae2c1c2a35b831dfb98a919a5332635531619efe009a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x29d507e5e11ee81d, 0x1}}}}]}, @TCA_FW_ACT={0xa4, 0x4, [@m_simple={0xa0, 0x1b, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x42, 0x6, 0x3, 0x1}}, @TCA_DEF_DATA={0x6, 0x3, '\xec\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x4, 0x10000000, 0x9, 0x1}}]}, {0x31, 0x6, "5bbdc02bd7358268b41b1efeb293f8a691c9f1afd9061349948ee329d9fe1ad07ba9bb6e2410bf11ce148ce560"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x4, 0xffff}}]}}, @TCA_CHAIN={0x8, 0xb, 0xb030}, @TCA_RATE={0x6, 0x5, {0xf0, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_route={{0xa}, {0x1078, 0x2, [@TCA_ROUTE4_POLICE={0x106c, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x76d, 0x8, 0x0, 0x5, 0x1, 0x7, 0x6, 0x0, 0x10000, 0xfffffffd, 0x7, 0x4, 0x5, 0x6, 0x9, 0x6, 0x80000001, 0x2, 0xfffffffe, 0x7ff, 0x3, 0x7, 0x694, 0x8, 0x9, 0xa, 0xffffff31, 0x1, 0x5, 0xfc000000, 0x4, 0x80000001, 0x7, 0x0, 0x9, 0xb07, 0x8, 0x0, 0xffff10fd, 0x8000, 0x3, 0xfffffffc, 0x3, 0x8000, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x7fff, 0xe6, 0x6, 0x968, 0x3, 0xc, 0x7ff, 0x5, 0xfffffffd, 0x7fff, 0x3ff, 0xf95e, 0x5, 0x7ff, 0x100, 0x4, 0x10000, 0x2b2, 0x80, 0x0, 0x3, 0x2, 0x3, 0x81, 0x1, 0x4, 0xfffffff0, 0x3, 0x1, 0x7ff, 0x1, 0x4, 0xb, 0x6, 0x3, 0x7, 0x7, 0xb5af, 0x8b, 0x9, 0x3, 0x5, 0x297, 0x7, 0x8b, 0x1, 0x6, 0x7, 0x6, 0x7, 0x7, 0x5, 0x3, 0x3, 0x3, 0xa, 0x406dfffb, 0x2, 0x2, 0x8, 0x9307, 0xa1f2, 0x22, 0x5, 0x4, 0x5, 0x7ff, 0xd2, 0x6, 0xfffffffc, 0x8, 0x4bc8, 0x1, 0x8, 0x5, 0x3, 0x4, 0x9, 0xd6dd, 0x1, 0x2e4, 0xfffffffc, 0x6, 0x9, 0x8, 0xfff, 0x4, 0x9, 0x725, 0x7, 0x7, 0x4, 0x0, 0x1000, 0x8001, 0x5, 0x6, 0x7, 0x9, 0x2, 0xffff088c, 0x8, 0x0, 0x8, 0x1, 0x6, 0xfff, 0x8, 0x4, 0x9, 0x5, 0x3, 0x1, 0x1, 0x7, 0x7, 0x478, 0x0, 0x3, 0x3000000, 0x80000000, 0x5, 0x9, 0x6, 0x7fffffff, 0x5, 0xfffffff7, 0x3, 0x0, 0x7, 0x9, 0x4, 0x3ab, 0xff, 0x1b819da5, 0x8, 0x2, 0x5, 0x4, 0x8001, 0xf92, 0x6e2, 0xf, 0x1, 0x5, 0x4, 0x2b09, 0xa, 0x4, 0x1ff, 0x98, 0x5, 0x8, 0x0, 0xab5, 0xf, 0x2, 0x8, 0x3, 0xe, 0xd855, 0xff, 0x37, 0x7, 0x6, 0x2, 0xc56a, 0x0, 0x800, 0x8, 0x1, 0x1000, 0x8, 0xff, 0xd7, 0xfffffff7, 0x3, 0xc, 0x10001, 0x7fffffff, 0x6, 0x2, 0xf9, 0x3, 0x6, 0x5, 0x101, 0x3, 0x3ff, 0x0, 0x101, 0x3, 0x800, 0x3, 0x3, 0x2, 0x80000001, 0x4, 0x60, 0x5, 0x21f, 0x3af5, 0x5, 0x1, 0x9, 0x1, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1ff}, @TCA_POLICE_RESULT={0x8, 0x5, 0xff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x6, 0x762, 0x4, 0xa, 0x7, 0x0, 0x67, 0x6, 0x3, 0x2, 0x4, 0xfffff001, 0x8, 0x8, 0x9, 0x200, 0x5, 0xfffffff8, 0x8000, 0x9, 0x8, 0x4953, 0x7, 0x7, 0x24, 0x8, 0x9, 0xffffff2c, 0x8, 0x101, 0x80000000, 0x7, 0x8, 0x8, 0x8, 0x1, 0x17c0, 0x8, 0x7, 0xdce7, 0xaaeb, 0xc99, 0xff, 0x7ff, 0x6, 0x1, 0x80000001, 0x10, 0x7, 0xfffffffb, 0x0, 0x40, 0xdac7, 0x7fff, 0x7fffffff, 0x11, 0x8001, 0x2, 0x8, 0x1, 0x8, 0x5, 0x2, 0x4, 0x8, 0x3, 0x5, 0x5, 0x3ff, 0x80000000, 0x6, 0x5, 0x8001, 0x22e1, 0x9000, 0xfffeffff, 0x0, 0x2, 0x8, 0x5, 0x99, 0x74a8, 0x4a34, 0x7, 0x2, 0x6, 0x0, 0x3, 0x200, 0xefa4, 0xf, 0x6, 0xa, 0x0, 0x6, 0x4, 0x0, 0x7, 0x47, 0x4, 0xffff, 0x7, 0xfc, 0x5, 0x9, 0xfffffffd, 0x2, 0xec, 0x9, 0x6, 0x0, 0x8, 0x6, 0xc, 0xd, 0x8001, 0xe, 0x200, 0x6, 0x1096, 0xdf, 0x5, 0x3, 0x8000, 0x3ff, 0x2d, 0xb5, 0x98, 0x616c75a5, 0xf4, 0xd0ed, 0xb, 0x3ff, 0xbbf, 0x6a4, 0x8, 0x88, 0xfffeffff, 0x100, 0x7, 0x8, 0x3, 0x9, 0x1, 0xb, 0x4e, 0x6, 0x8, 0x5, 0x6, 0x5aa, 0x0, 0x6, 0x4, 0xfffffffe, 0x9, 0x200, 0x8, 0xb, 0x6, 0x39f2a5f9, 0xf8, 0x0, 0x3ff, 0x4, 0x4, 0x6, 0xffff, 0x9, 0x7, 0x6, 0x10000, 0x4, 0x9b1d, 0xfffff921, 0x7fff, 0x5, 0xfffffffe, 0x3, 0x9, 0x6, 0x25d82fc9, 0x9, 0xb9, 0xa, 0x22, 0x4, 0x1, 0x6, 0x8, 0x9, 0x9, 0x80, 0x1, 0x4, 0x6, 0x3ff, 0xff, 0x1ff, 0x2, 0x100000, 0x8, 0x7, 0xb, 0x2a, 0x0, 0x6, 0x30, 0x7fff, 0x8, 0x3, 0x0, 0x8, 0x0, 0x7, 0x0, 0xd2, 0xfffffff7, 0x8f, 0x3, 0xbfe, 0x1000, 0x0, 0x8, 0x9, 0x800, 0x3e, 0x1, 0x7, 0xff, 0x6, 0x5, 0x1e0, 0x8, 0x5, 0x7, 0x9b87, 0x9, 0x2, 0x4751f429, 0x7, 0x4, 0x9, 0x0, 0x7, 0x0, 0x3ff, 0x78, 0x3, 0x500000, 0x2, 0xf768, 0x0, 0x7, 0x497]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x1, 0x4, 0xfffffff9, 0x2, {0x4, 0x0, 0x7, 0x7, 0x5, 0x3}, {0x4, 0x2, 0xff, 0x8000, 0x3, 0x1}, 0xfffff58f, 0x7ff, 0x7f}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x40, 0x5fc, 0x8793, 0x7fd, 0x1f, 0x2, 0x5, 0xfffffffb, 0x4, 0x10000, 0x7, 0x2, 0xfffffff7, 0x0, 0x3, 0x100, 0x3, 0x7, 0x4, 0x6, 0xf, 0x1000, 0x3c5, 0x8, 0x5, 0x3, 0x9, 0x400, 0x0, 0x800, 0x0, 0xf52, 0x9, 0x5, 0x81, 0x6, 0xf, 0x3, 0x2, 0xf0, 0xffffffa7, 0x6db, 0x2, 0x10001, 0x7ff, 0x80000001, 0xbb5, 0x8, 0x4b, 0x400, 0x5, 0x9, 0x5, 0xfffffff8, 0x5, 0x7fffffff, 0x7, 0x1, 0x3, 0x0, 0x7, 0x3, 0x5, 0x8, 0x1, 0x3, 0xf, 0x7fffffff, 0xd, 0x45, 0x5, 0x4, 0xfffffff8, 0x8064, 0x4b, 0x28, 0x80000000, 0x8, 0xffb, 0x8, 0x3, 0x2, 0x25, 0x80, 0x4, 0xfff, 0x0, 0xfffffff7, 0xe, 0x8, 0x688fe555, 0x2, 0x0, 0x6, 0x97, 0x9, 0x0, 0x9, 0x6, 0x9, 0xfffffffa, 0x5, 0x3, 0x14, 0x6ffc31d4, 0x0, 0x10000, 0x8001, 0xecf4, 0x0, 0x7, 0x9, 0x4, 0xfffff801, 0x5c2, 0x7, 0xfffffe01, 0xd02d, 0x0, 0x8c, 0x68, 0x4d, 0x9, 0x100, 0x9, 0xc3, 0x6, 0x8, 0x9, 0xe75, 0x7fffffff, 0x5, 0x9, 0x4, 0x6, 0x6, 0x80, 0x8, 0x8, 0xffff, 0x9793, 0x0, 0x80, 0x764, 0x4, 0x6, 0xff, 0x4, 0x9, 0x80000000, 0xffff1210, 0xe, 0x0, 0xe, 0x80, 0x7fffffff, 0xc28, 0x1, 0xef0, 0x4, 0x4, 0x1000, 0x9, 0x2db7d283, 0x1, 0xffff, 0x10000, 0x0, 0xc, 0xc8, 0x0, 0x5, 0x6, 0xcdf, 0x1, 0xd, 0x7271b763, 0xffffff99, 0x100, 0xa, 0x8d4, 0x9, 0x6, 0x0, 0xfa9, 0x3dd2, 0x1, 0x1, 0x3, 0x4, 0x0, 0xb, 0x3, 0x40a75b70, 0x10, 0x2, 0x8, 0x0, 0x5, 0x6, 0xffff, 0x7a9bafa6, 0xffff, 0xc, 0x2, 0xff80000, 0x0, 0x6, 0x8, 0x4, 0x0, 0x0, 0x800, 0x9, 0x10001, 0x2, 0xb139, 0x7, 0x914c, 0x7, 0xad, 0x80, 0x9, 0x8001, 0x5a36, 0x4, 0x8, 0x3, 0x5f9, 0xd1b, 0x9, 0x10000, 0x8001, 0x2, 0x100, 0x3, 0xffff, 0xc9, 0x7, 0x8, 0x4, 0x4, 0x0, 0x4c86, 0x2, 0xbb, 0x2, 0x8, 0xf7a, 0xab1, 0x2, 0x1, 0x8000, 0x4b75, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xfff, 0x2, 0x3, 0x0, 0xfe32, 0x3, 0x9241, 0x1, 0x8000, 0xa000000, 0x3, 0x8, 0x8001, 0xd, 0x1, 0x9, 0x400, 0x8000004, 0x1000, 0x8, 0x6, 0x101, 0xe6, 0x9, 0x1, 0xfffff18a, 0x58a8, 0x5e7, 0x0, 0xfffffff7, 0x7fff, 0x2, 0x7, 0x7ff, 0x0, 0xffffff81, 0x6, 0x0, 0x1, 0x3, 0x8, 0xc6, 0x7, 0x6, 0x9, 0xfffffff8, 0x8dd, 0x3861, 0x101, 0x1, 0xfffffffa, 0x1, 0x8, 0x5, 0x0, 0x0, 0x1, 0x9, 0xa, 0xa, 0x10000, 0xffff, 0x9, 0x40, 0xfffffffb, 0x103, 0x1, 0x8, 0x0, 0x7, 0x4, 0xc56, 0xfffffffd, 0x98, 0x1000, 0x24f8, 0xde2d03b, 0x9, 0xfffff8db, 0x76, 0x7, 0xff, 0xc, 0x2, 0x2, 0xc, 0x2, 0x4, 0x4, 0x5, 0x7, 0x1, 0x8, 0x8, 0x3, 0x0, 0x1, 0x8, 0x3, 0x54c8, 0x3ff, 0x7, 0x78, 0x3, 0x1, 0xfff, 0xf, 0xfffffff7, 0x6, 0x8, 0x6, 0xfffffffb, 0x1, 0x2, 0xffff, 0x9, 0x5, 0x5, 0x1, 0x8000, 0xff, 0x2, 0x242c, 0x10000, 0x8, 0x6bc95a6, 0x5, 0xff, 0x3, 0x9, 0x4, 0x1ff, 0x7c67, 0x86b3, 0x5, 0x6, 0xd, 0x3, 0x1, 0x7fff, 0xfffffffa, 0x6, 0x7fffffff, 0x9, 0x85, 0x8, 0xadaf, 0xfff, 0xb1f0, 0x23b760c5, 0x7, 0x8, 0x3cf, 0x6, 0x2, 0x32, 0x8, 0x56, 0x7ebf, 0x3, 0x2, 0x7, 0x4, 0x4128, 0xd, 0x9, 0x5, 0x8000, 0x8, 0x8, 0x3, 0x10, 0x1d8, 0x0, 0x6, 0xffffe055, 0x8, 0x2, 0xff, 0x800, 0x5, 0x8, 0x4, 0x5, 0x5, 0x1, 0x6, 0x0, 0xffffffff, 0x8, 0x7, 0x36, 0x8, 0x71a5, 0xffffffff, 0x6, 0x8000, 0x40, 0x1, 0xfb32, 0x10000, 0x503, 0xa222, 0x7, 0x2675, 0x1, 0x0, 0x2, 0x7fff, 0x1, 0x10000, 0x1e80, 0x4, 0x3ff, 0xfffffefd, 0x0, 0x8, 0x9, 0x3f5, 0x9, 0x4600, 0x401, 0x0, 0x3, 0xffff8000, 0x2, 0x3, 0x8, 0x7f, 0x4, 0x1, 0x9, 0x6, 0x40, 0x6, 0x200, 0xb, 0x0, 0xc9, 0x0, 0xc5, 0x1, 0x10, 0x80, 0x9, 0x6, 0x2, 0xa5, 0x0, 0x401, 0x678, 0x8001, 0x200, 0x5, 0x8]}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r3}]}}, @TCA_RATE={0x6, 0x5, {0x73, 0xb6}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0xff}]}}]}, 0x2768}, 0x1, 0x0, 0x0, 0x800}, 0xc1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendto$inet6(r4, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x8) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x24020400) close(r9) splice(r8, 0x0, r9, 0x0, 0x10500, 0x0) shutdown(r4, 0x1) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) recvmmsg(r4, &(0x7f0000005000)=[{{0x0, 0x2a, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c}}}}]}]}, 0x48}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 6.696273821s ago: executing program 1 (id=2741): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000002100010326bd7078fadbdf2505"], 0x14}}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000009c0)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0xfffd, 0x14}, @ipv4=@generic={{0x7, 0x4, 0x1, 0x22, 0xfc0, 0x69, 0x0, 0x60, 0x2, 0x0, @empty, @broadcast, {[@generic={0x9, 0x2}, @generic={0x94, 0x5, "d507c0"}]}}, "14f3305280f125e6e11a9314b296b53b5d25867c0a8c27b6478984da4eb5a28ada390a7b0a58177e7d56be4ee0efb45c215a64d718cb6f639e60026f3fcd218590d2fd47a1803f67d8c3c5ebe25ed9991203e04d3bdc1e70ef759d8f6ca8744bd9d672c1c9368faa9f538c1e6d3f741c022ddc02e6d3e1881c4ebf6d62df9fc11edf041909cea12539f7b05232c1cd9a748ff7e4a6b7ce7420bab33b3ce6da2742316d128730875e8c1d068a59aef9030e56546effdf83fe2b6fcadf2a73552e77d9cfdb452639cae6aa8f5c7aba74516be0a290f60c30c51e8de293376c07b999d87ac564e47f21f28fda4d277beb21a78ab228bfa2b84461fc73b9a82c9ac29bf066fa44f3f676ef64edab4c6dcaa57c48c0065817b0cbf3263361e93334a400fd74ae663ccc959da070390c833a3dc9381a771d719ae9417cd07b43c30e6a10ae8a59c4fd0a9004cc3f9cb772a64d240d7a0d0dac57f4d7978a304adf48f94ce0b7d6a2dff5d3ff8738a81daad9df5b8d6f361e7032c0d2cc84c73a7a2f07a35b1b26966bb08fe07ecb2438006de2d9ff9b9ca0b94bc44c858e785a261bbfbf5f6cfa78b017d671ee8180312522c8031744591711d0517fb8b120e27fb7752f0a0e85bbf1e7059aa2711bf2355fe98e3df0d7cece9741623e2fa492af8287e0fa75daea5725e0519e70aba398c00ae69c572e327755ba2fa81dc47bdcd4e5b722e0ecc8f92f4cd821d575f5f8421dc2e2994621d17da042fd59a2c3ee0ba998a771e066fcf3646007ef3c731edb9472baaa6a5722b09aa6a4da93d855fee7bc2a4db816880160449c576ed46b4ca1e299595f0116946b841308bbd9c2d8e82ce9bcd9173476523bfa8abb82cbd16ddf2efb4aeb5476ab0f5dadbe2528360195a317f3106d25b016901b65b6eed65062083234f205cf4fefe2ee0af15a86feb5d7473d1cdf202387127171d633c02dc39faca7d69721074c0e7eee28ff71fb9e75d80d8fa6bc70a50bd71f60569cb9a30b0cf5599c790353590fd3fb91f77ec89257faa66ff3d13913906166604af616d8de1b92b9cc459a05daad927ebf023c53afdf5ebad5e1d73632777374dfe33b0b90e0cc4cf85bbba301ffe94b26b9f792bdde6d5a9c644bd15ad45c373f768a3a3868ed96c112f2429a27a97bd7756cec800e4ed644a22a81f1010ec376a5726e530d5bcecc635db756ff9a6e2ee89248949d52f88c84cf71be5428a4675430ecef15f1c8ff6a786e5b74eeb76fd26b53dd6287b8e9134b8096b9425f650039af1b3465ab57662ce70c5e29c559e6ffed62f731fd95d31c2f7fa57d98a8aa0b30e454ea73d4f8ba1242bb511e2d0d0e7a764f87cc6b208f85b79b980285cd890dacf77dc2668e3c2ad211998f5e3f15be32a3600a2c59821e7e48d46974d17d642ff7b3f1334057c88bea888120095582d257ccaa903d341c850bd2b446c31980acc6f02f0c559a895614f62aea0eee4a904bd1b35193fd2cbff4354834b5f7e8698bad049cfea27a76ec83dfbe2071ff1523bf127713b062ee3ebf6986bd12c31ab386a490734a47466cdde3a82dc7535b1b068a1aa585322c4bf8dd8cf0ca2b8eb56fcf98cf8129148142344d00fca2cd5611e42c607168abcf92c94be28c15be3485375290b825136e0f4047212a866831bc670b9b038355e0c976673b80584c640ec6681ae724ea58685581d493c809fc8861c60ff245cdc486228b0c3c0ac562a3fd777b7d3d43dcc4cf031b70a101bc64a3727d1f5890890070dfc14847f225a82f5a1b3c702970a25a672aa8c4a24bd7d414bb52c839611e48afe3a9022aa9eeedb2dc4cb20aaeb244b0e438f28d3c6cac9fb16171a8b66b93e48d1afb3feae84bb6a4ed0d00ba862dc6fd474fe210faa0d6d51132dcdc4dcdd5d4f94f1ba7dc8b5712188b0f80bd7f6cc211c1a2796d5c8568a97dbfb9e1bcc6e43858342767ffe5d648873215971e968382870afb0f0b33e3a0dbfe70b982abd73b340abaedd3f71ea30c90544b6a3fb8ce0c240d0bc9da7c12a927223185e5ba907d93c30089ca68525983f04ff85ef98314f69e5c9b4a388ca67813fcd0a9b2c083defac488cb3f7e4ebabc7bf6f4f7601a6c4c1a8d10c2fb13f6863c29cf3dcb8bd56768bb0a9e642bb6b94e5957deaeab3e24223e03764bbb16a7084a05735a8d188cbfabcccfce95848a804b56bd5e2051b1755a0e4262044ea2b037113af2e4e90bfed33bdcdc33824245cad3f94c4c9ea0f414a539c36b55d423fbfe4461774696012ee12e9d9c1d645d6dd72b57cca7e8526cc98b2f9e97e23503428642bd8793a87ab120f20092b6e4cbcbb52ec9a406dbb893e303077b675ecbd48e6bec13b700ab09d55e17c8815077a31cd75057c9cd65e7a881924a50bed228517be9c0abb19c3d24c458160405dab3ad0deb989a4e1b2e509b7fa57bcddbe8292512c9656df46acc62a028bb484ad0a6548ed9efdff0e83ca82a1d4c86c7d8810d1e4ff1846d1dc8e80f8206c6834bf9c433bc92ce73560d22ba0c8030b694d737fa0f4deb8b59ea9a35147efc891e993b6489a1ed86bbbf159c590bad0b5892c72383f5afedd58b7fa5e11271b35381dbf4a14daf70505b346cbd83b3258b1b413f7247d04e30e1a9eddbf82e8a25a70903c21e6a16ea34f6d7fe3cad0d51812e827596d50549153e394c4926e5e87b78d0faf440472c12929bb7fd49c959e5b06eb48c51915d80f003c2019525c91bdd4efc0e58d7811b083af3164f254c9c6cf3f8345525770033901308d02a9439131e632d073705e7a28312f8c1ccbeec064113009a34f177d7cd953c9a635f6bb12f0ed871a1d80ba86011e13df3220bda5e49c7c3d70f8c49397f69720f31b38cac3ddc7758f7bd1c99dca967a5aa5c788faf18eb2d996be835c3e5901349104ea63bdf1c195f4d29b8c63a0dcf58d501a102b8ac34709e82c0b0d19f762b1d3c40f01e0cb05b0909b90fb587ea260cdc0a043ac67f649486d3c57b9dbf94e44334fd8034218f82c937e6b8c97b627e8803cab0a27f33ebf0e447ab198cdbfc81371fdb6061dcf8c87c24084614ddfdc71cc2a5324e0ea9a1f7cb21ec46d7e5fd936a2a9224e5fe3c39051eb7269f51832751a36814db4aa01eb1a79eca73480c12b1d7f79bb20ba7b957f7e8343af7c38c81edb6aa48eeb82e17f47f5335f4086ef2cb57c4e70e847a77362271e16158e010f95c3227162caa7f911e94893d3bdf17fb914dddddf7f982ae898914378e3f5a4bc810f246d84ae977290d20773761b8d52bb493076052022586b8ce915b1f4c8f6ef6093e3e12f56e642b1cde9dda220fd7fb26f40ba08899e0217cf2a0883ab552c9432a7d60c6316f936b57c271e13b35d5cc4f20dfbe5fb1b13e916e62cd39e5bec37d0885f6fb5523860f8ae09592d32574e3d9c570c651fa9f4db0d4b9fbd002af8b6919d7587504989123533804e4a496def7d1d9740ec83e0670233a732d55425014276efcf6b6634c5ed5a97f25deaab14fe934efe0eb13992ef48e29a7f190f253d3cce9929f3183c01c72315b6a36998016af08f84155ca1ad18acf1a54d23fe605957f7016873187a47d7ded54667d3ba4aab222319c5968d0192a1af47be415fce025329b81d5034d2c608ddb108d7acac2c145bf4abadb97cc6a05398c04a8385dab86979a0c857d2b27eeb7bdcd154e9f3ea7e394d3a41d81b0410356e252f5d0fba812d5099ede64b20d4a865fc359092ed619f0e3e6728acc69ce41b585e3c54f73fac28c38aa41ea53440cec35cebf03caaef987b18d9942c644c3f6a389970f3d7d18db8ea1f2c5ab2c0bb84478ce5e439c10749b278dfe8348391cb2bd4c7634a3ac813a6ea36f95bdd80c87fae037775834eb5029854cfe59c99a9597944e7cbce895d14ed0ee8b84ea586e77dc12fe709cf9a083c2a4806913d8914b379b4ecf27525e84fc1df3ff520f79ec244da60f680b59d848e591c89f069cec4b497d9579a86c19a710c5cc00239d6cf3c8596c924561843ae20ad5cac9bc92bf42157ab35329cd62242fec48117f1f6f801c68f9f3ec9677875916ceea7795dfbdd23121cfb3bb1813fe1ee14ddbd5a45985bc496449f82a2cc200905eaaadd1333bf79128459f47b580fdd5a10787094b08418c1dac843ab0e15d824aff2b3d242fe78d9762d39c713ded38cf972c227831ba6fb963c956458eef5689180baa3ef2aef3d3e57c63c2d4509759fb711dfe2772341ae308a7892e583be0917ef5355bfe68becce5bc5971733ca260055ee6481c0998698a49a1f03a0f537145d051179601c04cd887a64917480ba96ac046638dd6977599f72a7235506737e7e81a03095cc7e102586ec33b79eff0d1dc2b34912fa89dfb434f0256be53f6695685688af05361d3b6954d416f4be06b9ab7846a44ce25b39c7c79012b2f16159fdf96a3998098691364dbbf930a8e224701ee6f8b899fcde632077a03f649bcfad6f506924db17558b708d38d0b286d6f16f286b26cbf11094def0d017eda65328fe2a24d129bd7ac28679f2a98999e6ae508c3bb31b4e384de7593cf8ac46727cb8a07c30d97c87b638f154e1ae2223a8158e292d9467049cd9115051d3dc0c090f9e9ff6cc425f2fbcd3a4471af5182c0e45485194b6627839d356adf2cf7159b6360f7983a5c50f5cdfcf253cc40a413ed280b9ce7d9d70bef8233fbc8f6e0f5e9100f110519088ce84b41d861171f607338f5acf0664f56c88dd50e86851f59e81c2601f66ee9ced3ecae2dcbd37c55f6058390d6237837ff601900971806e987abbca25221d08f7ccb11a41b3a6246efffaff359e04fa52d7ac630f7d96bc5976817f8a347ddacfe079da0633d855343884bf4d2eb58638cd29d499de7af8490a6d9db3922363839371e819e49e54ef7dc953aa8125e053e3689a22d785c3c1729936eedccf682fd56e0aa6069c1ac88d46b0c06c1f43e631f74f9c8b4557678e90ad7788d25caca67b70da4470cc8d28606acf1fed5d4585085449ced76b1a871ebe8ede8d86570d505010c4f6f4656d2195b6190a1dfe423860b5f767f96c1e0fbf1194b9cab5c87dc2f6ce5f408681e2af319ada237e4232cd356574d7a5edbf7c292acc0c0ca04303614e46b6875f2b58f8b400fda08e24020739c2493ecf7c5d0695ecac14e486bc36a575e6a765d43313c4a4c43c5cc32488c045466504cc690f6b14f12e0a669b701d305a056c610b5f3e696e002bd5b940abac2edde34dbadc88881a5a5fc1d7db4389f33eed574ff8ed69eaf3a656635963e297cf2915c2da4bc7739c5d24017c4757a4aaca2b3323bd4fefefc004d2a675a40b7b31a221d825f79fc12f12b9d6637ca48fc2b55c9e982db14d8cce59172d7d7ee6a1f98a2839d263d7382e81ee306d27e7463a3a0cc71c74df84060ca69331afa4e19e0b124ddf430f4323e682d99f7d77854ba416162182dc161a41af02c75eef1688bef190ca86f712994db24d81831cfe4f54229ba2f5df634e45c2d2980cec96d8aefecdb35dcd7fb360c6117af12bcf894ada94069ba44814334ba4b4d487a866e484b45d7348e07a49460ab64c89f45f8b6f74507179fb6b5f03c202dedbc7cc70723ddb56a"}}, 0xfce) 5.420418863s ago: executing program 4 (id=2744): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xffff8001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0x27}, @private0, @remote, 0x81, 0x5, 0x8, 0x200, 0x7, 0x100, r2}) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000180), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/87, 0x57}], 0x1}, 0xe}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/44, 0x2c}], 0x1}, 0x7}], 0x2, 0x40, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r6, &(0x7f0000000040)=""/60, 0xdb, 0x40, 0x0, 0x0) connect$rds(r4, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000f2c0000000b0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000140000001000010000000000000000000084000ad0f54123bf59095bf92f3d38d61fbd16ba8e"], 0xc0}}, 0x0) 5.344263575s ago: executing program 1 (id=2745): unshare(0x20000400) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x80087601, 0x0) 5.180040313s ago: executing program 4 (id=2747): r0 = socket$inet6(0xa, 0x6, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x3, 0x4) 5.118855603s ago: executing program 1 (id=2749): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000014c0)={0x3, &(0x7f0000000000)=[{0x50, 0x6, 0x8}, {0x28, 0x80, 0x1a, 0xfffff034}, {0x6, 0x5, 0xf9, 0x207}]}, 0x10) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0xb0000000}, 0xd, 0xb, 0x4, 0x1, 0x5, 'syz0\x00', "96d4fd6246bdc42b7f9e10dab6626b776b7002b182016800", "69d30d8077e63b207fb7d8c959cf6e019f203869fa621d1434d98a0100534173", [{0x4, 0x1, {0x2, 0x565}}, {0xfffa, 0x2, {0x0, 0x6}}, {0xc, 0x1, {0x3, 0x76f0}}, {0x6, 0x6, {0x3}}, {0x0, 0x6, {0x0, 0xfffffff6}}, {0x7b84, 0x8, {0x3, 0x1}}, {0x6, 0x0, {0x2, 0xc46}}, {0x66af, 0xe, {0x1, 0x4}}, {0x2, 0x49, {0x0, 0x20}}, {0x2, 0x4, {0x0, 0x200}}, {0x402, 0x0, {0x2, 0x10}}, {0x401, 0x5, {0x2, 0xf8d7}}, {0x3bc, 0xb, {0x2, 0x4}}, {0x23b, 0x3, {0x2, 0x4}}, {0x10, 0x8, {0x2, 0x6}}, {0x7, 0x7fff, {0x3, 0x6}}, {0x7, 0x1, {0x1, 0xd}}, {0x100, 0x7fff, {0x2, 0x2}}, {0x80, 0x7, {0x3, 0x7}}, {0xfdc3, 0x400, {0x3, 0x6}}, {0xff7f, 0xd3, {0x1, 0xc3e2}}, {0x3, 0xcc, {0x3, 0x4}}, {0x10c4, 0x6, {0x1, 0xff}}, {0x5, 0xcddd}, {0xf, 0xfff7, {0x2, 0x7fffffff}}, {0x2, 0xfffb, {0x1, 0x7ff}}, {0xc9, 0x0, {0x1, 0x9}}, {0x8, 0x80, {0x2, 0x1ff}}, {0x3, 0x6e9, {0x2, 0x1ff}}, {0x6, 0x1, {0x2, 0x100000}}, {0x824b, 0x5, {0x0, 0x9}}, {0x6, 0x5, {0x3, 0x8}}, {0x9, 0x5, {0x2, 0xfffffffc}}, {0x8, 0xb7c5, {0x3, 0x8a52}}, {0x10, 0xdfe4, {0x2, 0x8}}, {0x1ff, 0x9, {0x2, 0x2}}, {0xf918, 0x5, {0x3, 0x2}}, {0x6, 0xc62a, {0x1, 0x7}}, {0xffff, 0x800, {0x2, 0x1}}, {0x2, 0x2, {0x1, 0x401}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x24004081}, 0x4004040) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000200081054e81f782db4cb904021d080006007c09e8fe04a1180008800a00142603600e1208000f", 0x2b}], 0x1}, 0x8000) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x8a6e1000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x1000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f0000000680)=@device_b, &(0x7f0000000640)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x35) bpf$PROG_LOAD(0x5, 0x0, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000540)=@mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7}, @broadcast, @device_a, @random="2d12f4153c03", {0x8, 0x7}}, 0x10, 0x4, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x5}, {0x48, 0x1}, {0x60}, {0x60, 0x1}, {0x48}, {}, {0x1}, {0x18}]}, @val={0x2d, 0x1a, {0x2000, 0x0, 0x1, 0x0, {0x7b, 0x1, 0x0, 0x6}, 0x8, 0x1, 0x9}}, [{0xdd, 0x6, "5209e13591e6"}, {0xdd, 0x19, "1630a82e2b25a7ccbcd5c1105c4a98b89ab306d917f31b61e6"}, {0xdd, 0x6, "3039c7b6dead"}, {0xdd, 0x84, "2ee3643fdea5588e7af7a48d3d16bc37cd895c8ccdd7b77c814c25c9b64acbd4ca3fa65381a40f33b6ff4bc18fdea9eb41ff3a92c884ba14890451b7df8d4224f076cdf3e569a7d81c16eb86196370c2b5ef21761c7bc7edb75bf3e02442d4bdd9824caea2f203cca24564584577eac003dd5279f8fb1d91ac4d3c76838e3c45956c361c"}]}, 0xfb) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a0000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000000206030000000000000000000000000705000100070000000900020073797a310000000014000780050015000600000008001240000000000500050002000000050004000100000008000300686173683a69f7d6702c706f72740000"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @random="e5b411858725", {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfe, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$nl_xfrm(r8, &(0x7f0000000840)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000900)=@newpolicy={0x1dc, 0x13, 0x100, 0x70bd2a, 0x25dfdbfb, {{@in=@loopback, @in=@multicast1, 0x4e24, 0x6a4, 0x4e21, 0x6, 0xa, 0x20, 0x1b0, 0x5e, r10}, {0x1000, 0x2000000000001, 0xb, 0x200, 0xff, 0x6, 0x8, 0xf59}, {0x81, 0x8000000000000001, 0x7, 0x5}, 0x2, 0x6e6bbe, 0x1, 0x0, 0x1, 0x2}, [@mark={0xc, 0x15, {0x35075b, 0xfffffffd}}, @replay_thresh={0x8, 0xb, 0x8000}, @replay_thresh={0x8, 0xb, 0x8}, @algo_auth_trunc={0xf3, 0x14, {{'sha1_mb\x00'}, 0x538, 0x160, "aee55097d465559a639388df3ac3907981683388c97383503e70b0bd2cb74b1996cfa7a7259b860e057c6a132c91fa27471932f7946f315075d3d5be8624420e8a040512f01969a8960e6fd63b6b5185919b77f746bc5f5fd579cb957e610b8b0de4247683f7fb31c67c1e1a83fa0d4f5c98eef11f15074d3c9acd567a9be63b9ed225555251da980767d4f97f7684f29f963034526bf80fff2533ccfc97c6c53e8bdc21878f1b"}}, @srcaddr={0x14, 0xd, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x20000004}, 0x20008000) 4.911653857s ago: executing program 4 (id=2752): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$igmp6(0xa, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1ffffdc1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000ff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 4.525864503s ago: executing program 4 (id=2757): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r2, &(0x7f0000007480)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FITHAW(r1, 0xc0045878) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r5, &(0x7f0000000040)={@val={0x0, 0x18}, @val={0x3, 0x1, 0x3, 0xffff, 0xc4, 0x10}, @ipv4=@dccp={{0x6, 0x4, 0x0, 0xd, 0xd8, 0x68, 0x0, 0x54, 0x21, 0x0, @private=0xa010101, @private=0xa010102, {[@noop]}}, {{0x4e20, 0x4e20, 0x4, 0x1, 0x9, 0x0, 0x0, 0x7, 0x5, "2d0634", 0x1, "3630be"}, "46c0c3bf13d91d99dd4425eda6cb8e7b015c3c29591b52f7f2c26c04e0602cadb5170f6fc17e1e4a0819fb819167e4eb796ee2b49294d1d580e246c969fb9fec28a5a062f6b614c7fde7d0d12cbb4e49292acb82544621d19ecc2b35683b5aac01aba125dbf66fd7074892c3cf9d26bce6c2c4389b7d9d45d7e6865f8514e9038bd0a166f3c29d94c3f3981bead6bdec0efb768b4a076e7b3654c59481af35cc83ae3cddd5d64027ad0788ec91ed8779"}}}, 0xe6) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x400dc) 4.387646169s ago: executing program 0 (id=2758): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x80, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@bridge_setlink={0x6c, 0x13, 0x800, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, r2, 0x3a136f9bce70f08a, 0x1280}, [@IFLA_EVENT={0x8, 0x2c, 0x8}, @IFLA_MAP={0x24, 0xe, {0x6, 0x8000000000000000, 0x80, 0x1, 0x6, 0xf8}}, @IFLA_PHYS_PORT_ID={0x1f, 0x22, "3d72bf5cd2c8f1143de3d5de74b68b4b843400290d2bad12ff919d"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa4}]}], {0x14, 0x10}}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xd}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x74, 0x10, 0x401, 0x400000, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3bda4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x28, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}, @IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8}, @IFLA_BRPORT_BCAST_FLOOD={0x5, 0x1e, 0x1}, @IFLA_BRPORT_MCAST_TO_UCAST={0x5}, @IFLA_BRPORT_FLUSH={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r5) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000900)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/220, 0xdc, 0x1, &(0x7f0000000800)=""/254, 0xfe}, &(0x7f0000000940)=0x40) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r11, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x375d985370b0020e}, 0x80) 4.386190428s ago: executing program 3 (id=2759): unshare(0x20000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x80087601, 0x0) 4.255092055s ago: executing program 0 (id=2760): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000000080)={&(0x7f0000000000)=[{0x2, 0x0, 0x4, 0x401, 0x2, 0x8, 0x8, 0x8}, {0x2, 0x0, 0x4, 0x6a, 0x6, 0x40, 0x3, 0x6}], 0x2, 0x38, 0x1, 0xfffffffffffff001}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f00000000c0)=0x80000002, 0x12) socket(0x40000000015, 0x5, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="0f0000000440000008000000020000c3a12e2400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) r6 = socket$unix(0x1, 0x2, 0x0) recvmmsg$unix(r6, &(0x7f00000009c0)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f0000001a40)=""/182, 0xb6}, {&(0x7f00000005c0)=""/239, 0xef}, {&(0x7f00000006c0)=""/134, 0x86}, {&(0x7f0000000780)=""/117, 0x75}, {&(0x7f0000000440)=""/27, 0x1b}], 0x5, &(0x7f0000001780)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x88}}], 0x1, 0x40018020, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x19, &(0x7f0000001180)=ANY=[@ANYBLOB="18000000ff0f000000000000080000001841000002000000000000000000000018170000", @ANYRES32, @ANYBLOB="0000000000980bfbbb196c00", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000757afbff01000000852000000300000097b9060000000000183300000200000000000000000000009500000000000000"], &(0x7f0000001280)='GPL\x00', 0x68, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001340)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001380)={0x2, 0x5, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001000)=[{0x0, 0x4, 0xc, 0x7}, {0x2, 0x2, 0x1, 0x5}], 0x10, 0x1}, 0x94) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) shutdown(r3, 0x0) socket(0xf, 0x5, 0x2000000) r7 = socket(0x28, 0x5, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000002a80)=ANY=[@ANYBLOB="09000000000000000a004e2400000008fe8000000000000000000000000000bb100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000a004e20000000072001000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e22fffffff700000000000000000000ffffffffffff02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e240000091dff01000000000000000000000000000106000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e240000000400000000000000000000000000000001d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2400000057fe880000000000000000000000000001c80e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e21000000000000000000000000000000000000000101010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000100fe8000000000000000000000000000bbf0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100010000fe8000000000000000000000000000bb0500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a2687bf32c46fe02e1cf9b062214659829ac7456446b8084edb54475bf7dfb8b1323157a38e8f2cbc95791a1a75cee6dc63cec69cc88e6c8108a513b50ee953804033b"], 0x490) listen(r7, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000000), 0x4) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c940000, 0x0, 0x3, 0x1}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) sendmsg$unix(r10, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) 3.93811492s ago: executing program 2 (id=2761): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x10040, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x3) 3.691332945s ago: executing program 1 (id=2762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, r5, {0x5, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x6, 0x200) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {0x0, 0x1}, {0x7, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x5) r12 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) connect$unix(r12, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf0, {0x0, 0x0, 0x0, 0x0, 0x40835}}, 0x20}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x5, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) 3.482257924s ago: executing program 4 (id=2763): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) listen(r1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) (async) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) (async, rerun: 64) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) (rerun: 64) openat$cgroup_devices(r6, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) (async) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) (async) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="3201000000000000c200000052c600084cb83c0000000000860bc6753c12f9cae27c7f14dd3896d99046534bbd59c5675dc6b7a7b7"], 0x18) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5) 3.457209256s ago: executing program 3 (id=2764): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000900)=@security={'security\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x188, 0xd8, 0x188, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@local, @rand_addr=0x64010100, 0xffffff, 0xff000000, 'lo\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0x6, 0x0, 0x5}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30}, {[0x4, 0x800], 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x4, 0x2}, {0x0, 0x3}, {0x4, 0x3}, 0x9, 0x3}}}, {{@ip={@multicast1, @multicast1, 0xff, 0xffffff00, 'nr0\x00', 'veth0_to_hsr\x00', {}, {}, 0x4, 0x1, 0x20}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3e, 0xb, {0xd20}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x5, 0x1}, {0x2, 0x3, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000006000000040000000000000e04000000000fffff000000006100cf235721d5f41f33e4aae1e7da163f9e47867e230a8239406b3589fc7a469d8369de8869cb3aea9796a31103ba814284c9c6dbe5afcc65aa807cd1ff2dfcceda595c35e87513c0d17fa08859540076010d2cc4e07d6606f6ccd3e702680861c5cc1c983fa58a81f9b7efa3129ecc3ea5bf7ed69ad5b5f84ee6119802014bf56af1"], 0x0, 0x2e}, 0x28) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x142}, {&(0x7f0000000d00)="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", 0x33f}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) r1 = epoll_create1(0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x10000000}) 3.260043937s ago: executing program 0 (id=2765): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x1c, 0x15, 0x1, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3b5e04dbece314b7}, 0xc000) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @loopback, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@rthdrdstopts={{0x18, 0x29, 0x43, {0x2f}}}], 0x18}, 0x1400c0c0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="53742fca05", @ANYRESHEX=r3, @ANYRESOCT=r3, @ANYRESOCT=r0], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r7) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r9, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000240)=0x1) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x10001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x104b}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x1, 0xb, 0x0, 0xdad1124f55525059, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0xfffffe91}, 0x94) 3.185825662s ago: executing program 3 (id=2766): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) recvmmsg(0xffffffffffffffff, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f00000066c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000006640)=""/126, 0x7e}], 0x6}, 0x9a9}], 0x1, 0x21, 0x0) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000001166080000000000001800000000000000000000000000100a020000000001180100002220782500000000002020207b1af8fd00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000000000001a800482a9a31fc7b229b8e61e45000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 3.162413773s ago: executing program 4 (id=2767): unshare(0x20000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89a3, &(0x7f00000000c0)={'ip6gretap0\x00', @ifru_names='gretap0\x00'}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001e40)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001e80)={0x0, 0x0}, &(0x7f0000001ec0)=0xc) r5 = getgid() sendmmsg$unix(r1, &(0x7f0000001f80)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000000200)="1fa356ba9f967b530143166cb6499b279ba358342a47c7906ee0778cffe820b14203f8dc046049480a189a46a3074791deac63596b400efc1a5d936763e27bd0bf7a7bb303b6714b73f6de2021a947059eacfdd5c4f1885b118642925e4ad82e58cd52b7cbb615be438b0f72bf67267a16f538d2924bed366e354755c2fce9c4b810090c3da447b9ebf2b369b3e3d5f3e12166b1ceae4704c38dd0c32bc799ebf46da322600029175d1720da63fa45c8d27dfa", 0xb3}, {&(0x7f0000000880)="26153832ed34b60613d873f49852e27da3c9f714d04f9f115a152078875e608eb8ec98cb3d985a5ecb2a896ff913cd2988204df6e03b3b112ce4454fce742dfc4cc32a9defba96b75df718ceff9098723e3e0d4a989289ec032cc1aafbd2a62166b52431eb60def2959478651955191c51d9ad636c8fb598a7f6dee419bfd09d8ba14fd06506f7b38789d8851707bc1abf7a8f94f1492907af40aab20612a4a9d81933204911ca8bef6f932db1eaf151d58c4a7b784695449d4ee31d006500f8d3d95b09db1b892ddd7190291959d0554d37919074bd775d227889c6431db32733", 0xe1}, {&(0x7f0000000980)="302579f4928066afcc1a91fdc69bf13a29abb2079a49b7b343d577e3ef8d4ebe566354aa9d77fe9fccb71d3e423457cf57e658c9470d87df09936326e12735e9ad7e5281b1084e571ee123333fac305c0cb7196705fa7b21a5e95f53cc00ff3d947a7b9fdf7105ea31def9e4178f0e7a42655ca84ed196a8e6719ff36247858584d4c7776e26787bca5f", 0x8a}, {&(0x7f0000000a40)="b4ad8d0db887f322e6ce2727b8e8d162b812e43bb08f33bc7dfc38fac4bab643b5d409d4b7845e6a968eb1a34e41994da411bc1b83bfa3bbcfe4016ca6a920fdda5d498c005a65b38a12ec62dc31b9e1436cc107782eb5f5e051dbf904c64940def2f6507f22d1bfbc1ef3828499de52679524f8d89ff32ee2f2047a46d32472a6a9e5aa52cec1f9312d6485900c1958d82133cc87f68a36f316096b0f8c8da233195e3016cb7b24b46c37725e020a75b06a9e241ae2418d001d90ec4738aae0cc19e95360622874932ab409ec906b37033900", 0xd3}, {&(0x7f0000000b40)="b352fa681f4305e9896b29182017f874c168b2efffbd1dc01ffa4fc2fbaff96b6f80c1c62ffbc8ee42bc595b56d424e6228c8f9e00d92bed828f6b80eb266716531eab56c83af5e271f1b0aef21f77c1bc1701cdcbac27c0067a6d53c4c36a6ee15583648e413bc080d85beeaa4ea46fc3cf7c79dfd313c80fd5210c49aa6b", 0x7f}, {&(0x7f0000000bc0)="2cf02b417cf983928ea6d951bd10d6acd4c46a9acaa252eb8fae57fd4732a95b974136fb3f9f5958e1fc876d21df4f34d894f9161ef0ac3ea5c6f3f674debe308d5edf4e77e2e1a5a253997a62cc93d91911166f6c075f67fe3cf479b944a9ecb5dd859042b450420641de5c9c7805ba17c761ad9f6e6b5de7564a0ecc55f5a9db42f6cf9ae95706283d63abd2401afc0aadabf4bbe9d917b9e76f846ba312386751bbb7da5c0254511f19e207c3b37d07a1d0c25eefd06af24309d527a5982bdae7bde2fc5f2d2ebfc88da33fcf1b4e9acdfcb29a48ae72f1ed436d9b17a02d1cebffa9a60cd89688e7962a1f13bcb3ec2c4bffe12f23c75e", 0xf9}, {&(0x7f0000000cc0)="161cdee948f7443f9db69bc482af1901325e16d6c85318e42a4d5c3ca573e289e0f0cc53a90dbf2e5480e508bf98820e81a69d40ea48e4843cd9ecfd6a9d170a2dc49a1e18d9019fbf3eed869bef53f350da92494279c0bb8030c32411645a11a817c2732af40b1b36b6473e59f48c739c8b03650ba9600a2a2107b8d72b3a", 0x7f}, {&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000001d40)="d5eab81023172ef8c6f48e", 0xb}], 0x9, &(0x7f0000001f00)=[@rights={{0x1c, 0x1, 0x1, [r1, r0, r1]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}], 0x58, 0x24000088}}], 0x1, 0x4008080) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x1a, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000002000000000000000600000018110000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000183b00000100000000000000000000008520000004000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xe0, &(0x7f0000000340)=""/224, 0x41100, 0x3d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x10, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x2f}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000040)=r6, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x80087601, 0x0) 2.99228581s ago: executing program 2 (id=2768): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=@newtfilter={0x44, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r3, {0x9}, {0xf9d690b100bbf911}, {0x10, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0xfff2}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x40) (async) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xe, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x30000}, [@map_fd={0x18, 0x7, 0x1, 0x0, r5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6020823bad875214, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.991758131s ago: executing program 3 (id=2769): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x9, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r5, 0x6, 0x21, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) pipe(&(0x7f0000000000)) (async) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x9, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) (async) close(r2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write(r0, 0x0, 0x0) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$inet6_tcp_buf(r5, 0x6, 0x21, 0x0, &(0x7f0000000100)) (async) 2.645879066s ago: executing program 3 (id=2770): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async, rerun: 32) listen(r0, 0xffffffff) (async, rerun: 32) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) (async) sendmsg$netlink(r1, &(0x7f0000000800)={0x0, 0xd, &(0x7f0000000540)=[{&(0x7f0000000ac0)={0x10, 0x2a, 0x800, 0x70bd27, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x2000c040}, 0x20000000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendmmsg$alg(r1, &(0x7f000000c600)=[{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000000)='L', 0x1}], 0x1, 0x0, 0x0, 0x4000080}], 0x1, 0x4008010) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) (async) close(r1) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$bt_hci(r2, 0x84, 0x3, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0xb0, 0x4b, 0x107, 0x70bd26, 0xffffffff, {0xff, 0x7c}, [@nested={0x9c, 0x3, 0x0, 0x1, [@nested={0x95, 0x5b, 0x0, 0x1, [@generic="af1a32d5ac8a58454645e34db8000d05131d4764224e99cada1fa1be6037c2b41cda8b0fe0ff06186691008323af658ef90cc4b96e92cdd3201c9dea1e9ef6f264b0e5a10b957c1aa15c78f7aedad74cedb1b3ef2173b6c600851afbc73df31b649e9e3f0f19f59af54bf0fff17c8dbc74cf32bc7876f4ec101911960d4b60972d41c03abccf39153d3d72f1f868149f53"]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c0d1}, 0xc000) 2.570069267s ago: executing program 3 (id=2771): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b '], 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r0, 0x0, r3, 0x0, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000030a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000dfffffffffffffff00000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000601000000004400050000000000000000000000ffffffffffff000000003c00000002000000ac1414aa000000000000000000000000060000000403"], 0xfc}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r11, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r13, 0x2000000, 0xe, 0x0, &(0x7f0000000940)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="88010000100001000000000000000000fe8000000000000000000000000000bb000000000000000000000000000000000000ecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000c73b0000000000000700000000000000040000800000000000000000000000000200000000000000ffffffff2dbd700000008000020004004c00000000000000480002006362632873657270656e742900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e001400686d61632873686132351529000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000001000000080000000aef30000"], 0x188}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r9, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c76436ffffff8800135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) 127.929108ms ago: executing program 0 (id=2772): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="a3a9a63985b8b0d9f865c428faff7fff", @ANYRESOCT, @ANYRES64], 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) (async) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="a3a9a63985b8b0d9f865c428faff7fff", @ANYRESOCT, @ANYRES64], 0xa) (async) 92.087955ms ago: executing program 0 (id=2773): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) close(r0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000201000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_emit_ethernet(0x8e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606dd31800580600fc010000000000000000000000000002fe8000000000000000000000000000aa08004001a1d81c45165e3d55eca5"], 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x36}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000380)={r4, &(0x7f0000000280)='#$\x17^*%\x00', 0x40400, &(0x7f00000002c0)={@align=0x3, {0x1, 0x2, 0x200, 0x4}}, 0x5, &(0x7f0000000300), &(0x7f0000000340)=0x3}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x7, &(0x7f00000001c0)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xfffff466}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], &(0x7f0000000040)='syzkaller\x00', 0x3ffffe, 0x0, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) 0s ago: executing program 0 (id=2774): unshare(0x20000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x80087601, 0x0) kernel console output (not intermixed with test programs): with invalid ether address [ 174.300154][ T9131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.799'. [ 174.402017][ T9107] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.413069][ T9107] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.489561][ T9127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.798'. [ 174.662678][ T9107] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.724978][ T9107] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.805123][ T9163] netlink: 'syz.0.804': attribute type 13 has an invalid length. [ 174.823476][ T9163] netlink: 'syz.0.804': attribute type 5 has an invalid length. [ 174.917381][ T9107] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.939719][ T9107] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.966530][ T9160] tipc: Started in network mode [ 174.971483][ T9160] tipc: Node identity , cluster identity 4711 [ 174.978005][ T9160] tipc: Failed to obtain node identity [ 174.984012][ T9160] tipc: Enabling of bearer rejected, failed to enable media [ 175.038897][ T9173] syzkaller0: entered promiscuous mode [ 175.041329][ T9172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.807'. [ 175.044496][ T9173] syzkaller0: entered allmulticast mode [ 175.096259][ T9107] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.106981][ T9107] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.631605][ T3340] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.653063][ T3340] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.709714][ T9180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.808'. [ 176.738680][ T6164] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.745449][ T9180] IPv6: NLM_F_CREATE should be specified when creating new route [ 176.769026][ T6164] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.787367][ T9185] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.810'. [ 176.805327][ T9185] openvswitch: netlink: Message has 16 unknown bytes. [ 176.834567][ T9190] netlink: 'syz.1.812': attribute type 8 has an invalid length. [ 176.840441][ T9180] ip6tnl0: Caught tx_queue_len zero misconfig [ 176.857966][ T6164] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.869658][ T6164] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.921758][ T9194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.810'. [ 176.932904][ T6164] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.947669][ T6164] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.983590][ T9194] bond0: Unable to set down delay as MII monitoring is disabled [ 177.049555][ T9202] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20001 [ 177.185974][ T9210] syzkaller1: entered promiscuous mode [ 177.201046][ T9210] syzkaller1: entered allmulticast mode [ 177.827108][ T9249] netlink: 56 bytes leftover after parsing attributes in process `syz.3.825'. [ 177.891338][ T9249] netlink: 44 bytes leftover after parsing attributes in process `syz.3.825'. [ 177.942962][ T9253] netlink: 24 bytes leftover after parsing attributes in process `syz.0.827'. [ 178.127996][ T9260] nbd: socks must be embedded in a SOCK_ITEM attr [ 178.168410][ T9260] block nbd2: shutting down sockets [ 178.173384][ T9265] netlink: 20 bytes leftover after parsing attributes in process `syz.1.832'. [ 178.350701][ T9281] bridge4: entered promiscuous mode [ 178.364284][ T9281] bridge4: entered allmulticast mode [ 178.382660][ T9281] team0: Port device bridge4 added [ 178.394283][ T9277] netlink: 80 bytes leftover after parsing attributes in process `syz.2.835'. [ 178.437193][ T9283] bridge0: port 1(team0) entered blocking state [ 178.459899][ T9283] bridge0: port 1(team0) entered disabled state [ 178.481177][ T9283] team0: entered allmulticast mode [ 178.513151][ T9283] team0: entered promiscuous mode [ 178.770188][ T9299] netlink: 'syz.3.838': attribute type 1 has an invalid length. [ 179.145638][ T9299] 8021q: adding VLAN 0 to HW filter on device bond5 [ 179.289040][ T9311] netlink: 164 bytes leftover after parsing attributes in process `syz.0.840'. [ 179.578389][ T9335] netlink: 24 bytes leftover after parsing attributes in process `syz.1.847'. [ 179.733968][ T9341] netlink: 'syz.1.847': attribute type 4 has an invalid length. [ 179.807712][ T9344] IPv6: NLM_F_CREATE should be specified when creating new route [ 179.828274][ T9344] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 179.835579][ T9344] IPv6: NLM_F_CREATE should be set when creating new route [ 179.842853][ T9344] IPv6: NLM_F_CREATE should be set when creating new route [ 179.850115][ T9344] IPv6: NLM_F_CREATE should be set when creating new route [ 181.110704][ T9414] macsec0: entered allmulticast mode [ 181.130365][ T9414] veth1_macvtap: entered allmulticast mode [ 181.141598][ T9415] netlink: 'syz.1.870': attribute type 1 has an invalid length. [ 181.145362][ T9414] macsec0: left allmulticast mode [ 181.168507][ T9414] veth1_macvtap: left allmulticast mode [ 181.258787][ T9415] bond4: entered promiscuous mode [ 181.285382][ T9415] 8021q: adding VLAN 0 to HW filter on device bond4 [ 181.462698][ T9425] IPVS: length: 15 != 8 [ 182.212213][ T9462] tipc: Enabling of bearer rejected, failed to enable media [ 182.223278][ T9458] __nla_validate_parse: 9 callbacks suppressed [ 182.223293][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.881'. [ 182.245222][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.881'. [ 182.288454][ T9467] netlink: 84 bytes leftover after parsing attributes in process `syz.4.884'. [ 182.302633][ T9467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.884'. [ 182.329073][ T9467] netlink: 48 bytes leftover after parsing attributes in process `syz.4.884'. [ 182.831905][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.894'. [ 182.898858][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.893'. [ 182.910833][ T9507] netlink: 'syz.0.893': attribute type 2 has an invalid length. [ 182.919639][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.893'. [ 182.928842][ T9507] netlink: 'syz.0.893': attribute type 2 has an invalid length. [ 183.010419][ T9511] netlink: 36 bytes leftover after parsing attributes in process `syz.3.895'. [ 183.047180][ T9509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.897'. [ 183.148263][ T7462] IPVS: starting estimator thread 0... [ 183.183530][ T9523] netlink: 'syz.0.900': attribute type 1 has an invalid length. [ 183.239118][ T9523] bond4: entered promiscuous mode [ 183.245182][ T9523] 8021q: adding VLAN 0 to HW filter on device bond4 [ 183.250239][ T9519] IPVS: using max 29 ests per chain, 69600 per kthread [ 183.318444][ T9523] bond4: (slave bridge1): making interface the new active one [ 183.326281][ T9523] bridge1: entered promiscuous mode [ 183.349013][ T9523] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 183.690149][ T9550] tipc: Failed to obtain node identity [ 183.720764][ T9550] tipc: Enabling of bearer rejected, failed to enable media [ 183.964377][ T9566] netlink: 'syz.0.912': attribute type 8 has an invalid length. [ 184.587661][ T9593] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 185.066424][ T9612] ipvlan0: entered allmulticast mode [ 185.079141][ T9612] dummy0: entered allmulticast mode [ 185.830345][ T1650] block nbd0: Possible stuck request ffff888027cf5080: control (read@0,1024B). Runtime 30 seconds [ 185.843522][ T1650] block nbd0: Possible stuck request ffff888027cf5240: control (read@1024,1024B). Runtime 30 seconds [ 185.854624][ T1650] block nbd0: Possible stuck request ffff888027cf5400: control (read@2048,1024B). Runtime 30 seconds [ 185.866166][ T1650] block nbd0: Possible stuck request ffff888027cf55c0: control (read@3072,1024B). Runtime 30 seconds [ 186.243159][ T9678] netlink: 'syz.0.941': attribute type 10 has an invalid length. [ 186.256264][ T9678] dummy0: entered promiscuous mode [ 186.336863][ T9639] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 186.372405][ T9639] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 186.559729][ T9696] batadv0: entered promiscuous mode [ 186.572344][ T9639] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 186.586052][ T9696] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 186.608450][ T9639] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 186.617164][ T9699] unsupported nlmsg_type 40 [ 186.711815][ T9639] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 186.734924][ T9639] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 186.812885][ T9639] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 186.832138][ T9639] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 186.884182][ T9639] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 186.904702][ T9639] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 187.157955][ T9717] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 187.334363][ T9739] __nla_validate_parse: 15 callbacks suppressed [ 187.334381][ T9739] netlink: 24 bytes leftover after parsing attributes in process `syz.3.952'. [ 187.893765][ T9770] netlink: 'syz.3.956': attribute type 83 has an invalid length. [ 187.912334][ T9766] ip6gre1: entered allmulticast mode [ 187.919234][ T6164] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 187.946581][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.956'. [ 187.968216][ T9770] team0: No ports can be present during mode change [ 188.063918][ T9776] netlink: 200 bytes leftover after parsing attributes in process `syz.1.959'. [ 188.180119][ T9782] v: renamed from dummy0 [ 188.534554][ T9798] netlink: 72 bytes leftover after parsing attributes in process `syz.3.965'. [ 188.673096][ T9806] netlink: 'syz.2.968': attribute type 21 has an invalid length. [ 188.777405][ T9803] Cannot find set identified by id 0 to match [ 188.815746][ T9816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.971'. [ 189.030293][ T9818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.972'. [ 189.050594][ T9818] netlink: 38 bytes leftover after parsing attributes in process `syz.1.972'. [ 189.170265][ T9837] netlink: 1696 bytes leftover after parsing attributes in process `syz.0.976'. [ 189.362549][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.980'. [ 189.375525][ T9853] netlink: 52 bytes leftover after parsing attributes in process `syz.1.980'. [ 190.052522][ T9874] 8021q: adding VLAN 0 to HW filter on device bond5 [ 190.098670][ T9874] bond4: (slave bond5): Enslaving as an active interface with an up link [ 190.142128][ T9887] netlink: 'syz.3.990': attribute type 1 has an invalid length. [ 190.334603][ T9895] dummy0: entered allmulticast mode [ 190.522332][ T9903] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 190.604425][ T9909] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 191.675083][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.802798][ T9979] netlink: 'syz.4.1017': attribute type 1 has an invalid length. [ 191.930883][ T9979] 8021q: adding VLAN 0 to HW filter on device bond6 [ 191.988683][ T9989] vlan0: entered allmulticast mode [ 191.993959][ T9989] bond6: entered allmulticast mode [ 192.487306][T10009] syzkaller1: entered promiscuous mode [ 192.508580][T10009] syzkaller1: entered allmulticast mode [ 192.649500][T10022] __nla_validate_parse: 9 callbacks suppressed [ 192.649516][T10022] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1030'. [ 192.666944][T10022] netlink: 'syz.3.1030': attribute type 1 has an invalid length. [ 192.734068][T10028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1030'. [ 193.091763][T10049] tipc: Started in network mode [ 193.114571][T10049] tipc: Node identity ac1414aa, cluster identity 4711 [ 193.131734][T10049] tipc: Enabled bearer , priority 10 [ 193.141044][T10056] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1035'. [ 193.229872][T10058] xt_connbytes: Forcing CT accounting to be enabled [ 193.277497][T10052] sit0: left promiscuous mode [ 193.336031][T10052] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.421951][T10052] batadv0: left promiscuous mode [ 193.458246][T10062] netlink: 'syz.0.1042': attribute type 13 has an invalid length. [ 193.475466][T10062] netlink: 'syz.0.1042': attribute type 27 has an invalid length. [ 193.487655][T10062] netlink: 'syz.0.1042': attribute type 30 has an invalid length. [ 193.583782][T10052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.610405][T10052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.931568][T10062] bond5: option arp_missed_max: invalid value (0) [ 193.946302][T10062] bond5: option arp_missed_max: allowed values 1 - 255 [ 193.967570][T10062] bond5 (unregistering): Released all slaves [ 193.967641][T10074] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1045'. [ 193.982936][T10074] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1045'. [ 194.007026][ T528] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.025269][ T528] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.045549][ T528] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.074005][ T528] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.093889][ T528] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.126549][ T528] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.153903][ T528] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.154087][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.168895][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.192750][ T528] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.231592][ T7451] tipc: Node number set to 2886997162 [ 194.242164][T10078] netlink: 91 bytes leftover after parsing attributes in process `syz.2.1047'. [ 194.456681][T10093] SET target dimension over the limit! [ 194.651547][T10099] team0: left allmulticast mode [ 194.660074][T10099] team0: left promiscuous mode [ 194.667118][T10099] bridge0: port 1(team0) entered disabled state [ 194.702023][T10099] bond0: (slave dummy0): Releasing backup interface [ 194.761152][T10099] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 194.783000][T10095] syzkaller1: entered promiscuous mode [ 194.793083][T10095] syzkaller1: entered allmulticast mode [ 194.804593][T10099] team0: No ports can be present during mode change [ 195.406880][T10139] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1061'. [ 195.580957][T10154] netlink: 'syz.3.1062': attribute type 11 has an invalid length. [ 195.589288][T10154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1062'. [ 195.702523][T10158] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1065'. [ 196.104766][T10182] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 196.116730][T10182] xt_SECMARK: invalid mode: 9 [ 196.209626][T10184] macvlan0: entered allmulticast mode [ 196.226052][T10184] batman_adv: batadv0: Adding interface: macvlan0 [ 196.244995][T10184] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.295999][T10184] batman_adv: batadv0: Interface activated: macvlan0 [ 196.400768][ T7451] IPVS: starting estimator thread 0... [ 196.454456][T10193] ipip2: entered promiscuous mode [ 196.495033][T10191] IPVS: using max 35 ests per chain, 84000 per kthread [ 196.627491][T10200] raw_sendmsg: syz.4.1077 forgot to set AF_INET. Fix it! [ 196.914114][T10207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1080'. [ 197.346542][ T11] block nbd1: Possible stuck request ffff888027d55080: control (read@0,4096B). Runtime 30 seconds [ 197.837143][T10233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1086'. [ 197.856741][T10233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1086'. [ 199.482142][T10271] netlink: 'syz.2.1097': attribute type 1 has an invalid length. [ 199.904965][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 199.927666][T10284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1099'. [ 199.952746][T10284] tipc: Enabling of bearer rejected, failed to enable media [ 200.360091][T10307] netlink: 'syz.3.1104': attribute type 4 has an invalid length. [ 200.397997][T10307] netlink: 'syz.3.1104': attribute type 4 has an invalid length. [ 200.472665][T10306] netlink: 'syz.4.1105': attribute type 23 has an invalid length. [ 200.689908][T10311] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 200.692112][T10310] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 201.077825][T10333] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1110'. [ 201.659550][T10342] netlink: 50 bytes leftover after parsing attributes in process `syz.1.1112'. [ 201.806690][T10345] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1113'. [ 202.975139][T10378] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1121'. [ 202.980756][T10376] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 203.148582][T10376] tipc: Enabled bearer , priority 0 [ 203.498917][T10394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1124'. [ 203.554314][T10394] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1124'. [ 203.805735][T10385] scsi_nl_rcv_msg: discarding partial skb [ 204.100776][T10408] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.330779][T10279] Set syz1 is full, maxelem 65536 reached [ 204.409626][ T29] audit: type=1107 audit(1785006935.482:5): pid=10424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 204.519586][T10427] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 204.584552][T10429] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1134'. [ 204.730872][T10433] tipc: Started in network mode [ 204.740388][T10433] tipc: Node identity 9af9c700538b, cluster identity 4711 [ 204.764653][T10433] tipc: Enabled bearer , priority 0 [ 204.828540][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1140'. [ 204.858041][T10441] syzkaller0: entered promiscuous mode [ 204.863516][T10441] syzkaller0: entered allmulticast mode [ 204.871356][T10441] tipc: Resetting bearer [ 204.918992][T10433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1136'. [ 204.954723][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1140'. [ 204.972120][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1140'. [ 205.006314][T10448] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 205.089370][T10432] tipc: Resetting bearer [ 205.487257][T10464] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1144'. [ 205.940139][T10478] "syz.3.1147" (10478) uses obsolete ecb(arc4) skcipher [ 205.974111][T10486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1148'. [ 206.964327][T10432] tipc: Disabling bearer [ 206.996162][ T5353] tipc: Node number set to 3379742464 [ 207.276158][T10499] netlink: 'syz.0.1152': attribute type 1 has an invalid length. [ 207.458267][T10511] bond6: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 207.470041][T10511] bond6 (unregistering): Released all slaves [ 207.718832][T10524] block nbd0: Unsupported socket: should be TCP or UNIX. [ 207.789015][T10528] netlink: 'syz.4.1159': attribute type 11 has an invalid length. [ 207.812006][T10528] netlink: 'syz.4.1159': attribute type 4 has an invalid length. [ 207.959536][T10532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.003603][T10532] __nla_validate_parse: 2 callbacks suppressed [ 208.003620][T10532] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1163'. [ 208.008582][T10540] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1165'. [ 208.149656][T10537] bond7: entered promiscuous mode [ 208.353738][T10566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1172'. [ 208.378916][T10566] netlink: 'syz.3.1172': attribute type 5 has an invalid length. [ 208.406374][T10566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1172'. [ 208.444205][T10566] geneve4: entered promiscuous mode [ 208.461810][T10566] geneve4: entered allmulticast mode [ 208.484486][T10571] @: entered promiscuous mode [ 208.489987][ T6164] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 58964 - 0 [ 208.508044][ T6164] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 58964 - 0 [ 208.543830][ T6164] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 58964 - 0 [ 208.564283][ T6164] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 58964 - 0 [ 210.922324][T10606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1183'. [ 211.333304][T10636] tc action pedit 'at' offset 36021 out of bounds [ 211.731306][T10670] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1197'. [ 211.749436][T10670] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1197'. [ 211.759001][T10666] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 211.782466][T10666] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1196'. [ 212.086439][T10678] veth1_to_hsr: entered promiscuous mode [ 212.100112][T10678] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1200'. [ 212.114129][T10678] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 212.125106][T10676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1199'. [ 212.351751][T10689] xt_hashlimit: size too large, truncated to 1048576 [ 212.381205][T10693] ip6gre2: entered promiscuous mode [ 212.403856][T10693] ip6gre2: entered allmulticast mode [ 212.428290][ T6164] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 212.450577][ T6164] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 212.458452][ T46] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 212.823259][T10712] netlink: 'syz.2.1208': attribute type 13 has an invalid length. [ 213.141703][T10724] ip6tnl0: Caught tx_queue_len zero misconfig [ 213.181846][T10743] __nla_validate_parse: 1 callbacks suppressed [ 213.181864][T10743] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1209'. [ 213.265113][ T46] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 213.333282][T10748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1215'. [ 213.367956][T10748] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1215'. [ 213.389966][T10748] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1215'. [ 213.505633][ T46] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 213.569355][T10763] netlink: 'syz.2.1217': attribute type 4 has an invalid length. [ 213.581785][T10763] netlink: 'syz.2.1217': attribute type 4 has an invalid length. [ 213.879368][T10779] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1219'. [ 213.924651][T10778] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1220'. [ 213.968931][T10792] netlink: 'syz.1.1222': attribute type 1 has an invalid length. [ 214.267050][T10799] Bluetooth: MGMT ver 1.23 [ 214.432368][T10803] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1224'. [ 214.661790][T10792] ipvlan0: entered promiscuous mode [ 214.676389][T10792] bridge0: port 3(ipvlan0) entered blocking state [ 214.683051][T10792] bridge0: port 3(ipvlan0) entered disabled state [ 214.689784][T10792] ipvlan0: entered allmulticast mode [ 214.695162][T10792] bridge0: entered allmulticast mode [ 214.703375][T10792] ipvlan0: left allmulticast mode [ 214.709049][T10792] bridge0: left allmulticast mode [ 214.813728][T10809] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 214.831181][T10809] syzkaller1: linktype set to 773 [ 214.899452][T10811] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1228'. [ 214.964965][T10811] dummy0: left promiscuous mode [ 215.159428][T10826] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1230'. [ 215.707855][T10811] vlan2: left promiscuous mode [ 215.715182][T10811] gretap0: left promiscuous mode [ 215.723919][T10811] batman_adv: batadv0: Interface deactivated: macvlan2 [ 215.737906][T10811] macvlan2: left allmulticast mode [ 215.750673][T10811] gre1: left allmulticast mode [ 215.762619][T10811] vlan3: left allmulticast mode [ 215.773409][T10811] bond0: left allmulticast mode [ 215.783342][T10811] bond_slave_0: left allmulticast mode [ 215.794739][T10811] bond_slave_1: left allmulticast mode [ 215.817117][T10811] bond3: left promiscuous mode [ 215.836862][T10811] bond4: left promiscuous mode [ 215.852604][T10811] bridge1: left promiscuous mode [ 215.873115][T10811] batman_adv: batadv0: Interface deactivated: macvlan0 [ 215.903090][T10811] batadv_slave_1: left allmulticast mode [ 215.914407][ T1650] block nbd0: Possible stuck request ffff888027cf5080: control (read@0,1024B). Runtime 60 seconds [ 215.925949][ T1650] block nbd0: Possible stuck request ffff888027cf5240: control (read@1024,1024B). Runtime 60 seconds [ 215.936999][T10811] macvlan0: left allmulticast mode [ 215.937024][ T1650] block nbd0: Possible stuck request ffff888027cf5400: control (read@2048,1024B). Runtime 60 seconds [ 215.956156][ T1650] block nbd0: Possible stuck request ffff888027cf55c0: control (read@3072,1024B). Runtime 60 seconds [ 215.967825][T10811] ipip2: left promiscuous mode [ 216.118553][T10841] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1234'. [ 216.224993][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 216.256610][T10847] netlink: 'syz.0.1236': attribute type 4 has an invalid length. [ 216.983738][T10878] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 217.171326][T10885] netlink: 'syz.0.1243': attribute type 11 has an invalid length. [ 217.231748][T10880] netlink: 'syz.0.1243': attribute type 2 has an invalid length. [ 217.883585][T10890] dvmrp0: entered allmulticast mode [ 218.166616][ T13] dvmrp0: left allmulticast mode [ 218.476464][T10926] __nla_validate_parse: 3 callbacks suppressed [ 218.476483][T10926] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1258'. [ 218.669785][T10934] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1260'. [ 219.049889][ T6606] tipc: Subscription rejected, illegal request [ 219.157001][T10951] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 219.177588][T10956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1265'. [ 219.206123][T10956] block nbd0: reconnected socket [ 219.219219][ T5625] block nbd0: Receive control failed (result -32) [ 219.742139][T10979] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1270'. [ 221.339745][T10999] syzkaller0: entered promiscuous mode [ 221.354945][T10999] syzkaller0: entered allmulticast mode [ 221.737241][T11005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.748936][T11005] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.763031][T11005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.849698][T11005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.860641][T11005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.879541][T11005] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 221.890254][T11005] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.913935][T11005] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 221.972398][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.979620][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.017090][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.024254][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.659745][T11015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1280'. [ 223.124355][T11044] 8021q: VLANs not supported on wg2 [ 223.248730][T11055] ipvlan0: Caught tx_queue_len zero misconfig [ 223.468803][T11060] pim6reg1: entered promiscuous mode [ 223.474245][T11060] pim6reg1: entered allmulticast mode [ 223.501867][T11065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1294'. [ 223.515564][T11061] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1291'. [ 223.561131][T11061] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1291'. [ 223.573656][T11029] netlink: 'syz.1.1285': attribute type 1 has an invalid length. [ 223.589455][T11029] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1285'. [ 223.613953][T11029] x_tables: duplicate underflow at hook 2 [ 223.648954][T11070] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1291'. [ 223.819509][T11073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1295'. [ 224.224992][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 224.756453][T11128] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 224.780392][T11128] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 224.816783][T11128] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 225.332058][T11124] netlink: 'syz.0.1307': attribute type 1 has an invalid length. [ 225.349958][T11124] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1307'. [ 225.361218][T11124] x_tables: duplicate underflow at hook 2 [ 225.467297][T11162] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1316'. [ 225.488066][T11161] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1316'. [ 225.510904][T11161] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1316'. [ 225.991651][T11187] pim6reg: entered allmulticast mode [ 226.026779][T11187] pim6reg99999999: entered allmulticast mode [ 226.262135][T11207] netlink: 'syz.0.1329': attribute type 11 has an invalid length. [ 226.458382][T11214] ieee802154 phy1 wpan1: encryption failed: -22 [ 226.670935][T11198] netlink: 'syz.2.1328': attribute type 1 has an invalid length. [ 226.687920][T11198] x_tables: duplicate underflow at hook 2 [ 226.710064][T11220] netlink: 'syz.0.1333': attribute type 4 has an invalid length. [ 226.933142][T11229] netlink: 'syz.4.1336': attribute type 1 has an invalid length. [ 227.001914][T11227] netlink: 'syz.0.1335': attribute type 3 has an invalid length. [ 227.023764][T11229] 8021q: adding VLAN 0 to HW filter on device bond8 [ 227.036457][T11227] netlink: 'syz.0.1335': attribute type 3 has an invalid length. [ 227.107849][T11232] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 227.180708][T11233] macvlan0: entered promiscuous mode [ 227.199407][T11233] macvlan0: entered allmulticast mode [ 227.213342][T11233] bond8: entered promiscuous mode [ 227.225299][T11233] veth0_to_bond: entered promiscuous mode [ 227.234536][T11233] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 227.249637][T11233] bond8: left promiscuous mode [ 227.254548][T11233] veth0_to_bond: left promiscuous mode [ 227.425880][ T11] block nbd1: Possible stuck request ffff888027d55080: control (read@0,4096B). Runtime 60 seconds [ 227.642567][T11250] syzkaller0: entered promiscuous mode [ 227.655123][T11250] syzkaller0: entered allmulticast mode [ 228.237880][T11300] tipc: Enabled bearer , priority 0 [ 228.291086][T11269] netlink: 'syz.2.1344': attribute type 1 has an invalid length. [ 228.315035][T11269] x_tables: duplicate underflow at hook 2 [ 228.339858][T11296] tipc: Disabling bearer [ 228.598124][T11322] __nla_validate_parse: 33 callbacks suppressed [ 228.598141][T11322] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1357'. [ 228.704762][T11330] netlink: 'syz.4.1360': attribute type 1 has an invalid length. [ 228.756646][T11330] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1360'. [ 229.144609][T11356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1366'. [ 229.438739][T11362] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 229.458078][T11360] netlink: 14439 bytes leftover after parsing attributes in process `syz.4.1365'. [ 229.552708][T11372] gretap1: entered promiscuous mode [ 229.639538][T11379] syzkaller0: entered promiscuous mode [ 229.645710][T11379] syzkaller0: entered allmulticast mode [ 229.665323][T11366] sit0: entered promiscuous mode [ 229.677554][T11366] netlink: 'syz.2.1369': attribute type 1 has an invalid length. [ 229.703116][T11366] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1369'. [ 229.737674][T11379] netlink: 'syz.0.1372': attribute type 4 has an invalid length. [ 229.751063][T11379] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1372'. [ 229.752998][T11366] x_tables: duplicate underflow at hook 2 [ 230.122464][T11395] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1376'. [ 230.155243][T11397] netlink: 'syz.2.1377': attribute type 19 has an invalid length. [ 230.183840][T11397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1377'. [ 230.209364][T11403] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1380'. [ 230.219933][T11397] netlink: 'syz.2.1377': attribute type 19 has an invalid length. [ 230.231543][T11400] žÿ: renamed from team_slave_1 [ 230.237746][T11405] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1378'. [ 231.179279][T11451] hsr_slave_1 (unregistering): left promiscuous mode [ 231.402819][T11463] tipc: Enabling of bearer rejected, failed to enable media [ 231.436613][T11463] netlink: 'syz.2.1394': attribute type 1 has an invalid length. [ 231.461740][T11468] netlink: 'syz.3.1396': attribute type 6 has an invalid length. [ 231.480688][T11468] netlink: 'syz.3.1396': attribute type 5 has an invalid length. [ 231.534458][T11437] netlink: 'syz.1.1388': attribute type 1 has an invalid length. [ 231.566450][T11437] x_tables: duplicate underflow at hook 2 [ 231.766726][T11485] syzkaller1: entered promiscuous mode [ 231.780485][T11485] syzkaller1: entered allmulticast mode [ 232.873162][T11527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.960112][T11535] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 233.441292][T11529] netlink: 'syz.1.1412': attribute type 1 has an invalid length. [ 233.465974][T11529] x_tables: duplicate underflow at hook 2 [ 233.488037][T11548] syzkaller0: entered promiscuous mode [ 233.514922][T11548] syzkaller0: entered allmulticast mode [ 233.710772][T11558] __nla_validate_parse: 16 callbacks suppressed [ 233.710867][T11558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1420'. [ 233.839383][T11568] veth1: Caught tx_queue_len zero misconfig [ 234.133038][T11577] nbd: nbd0 already in use [ 234.384217][T11579] 8021q: adding VLAN 0 to HW filter on device bond4 [ 234.421356][T11579] bridge0: port 3(bond4) entered blocking state [ 234.428448][T11579] bridge0: port 3(bond4) entered disabled state [ 234.435475][T11579] bond4: entered allmulticast mode [ 234.443167][T11579] bond4: entered promiscuous mode [ 234.453962][T11587] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1431'. [ 234.604627][T11591] block nbd2: server does not support multiple connections per device. [ 234.644290][T11598] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 234.661139][T11591] block nbd2: shutting down sockets [ 234.745883][T11601] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1434'. [ 234.776947][T11602] netlink: 'syz.2.1434': attribute type 12 has an invalid length. [ 234.786005][T11609] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1435'. [ 234.805230][T11602] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1434'. [ 234.853291][T11609] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 234.872069][T11609] bond5 (unregistering): Released all slaves [ 235.022526][T11592] netlink: 'syz.3.1430': attribute type 1 has an invalid length. [ 235.038385][T11592] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1430'. [ 235.050370][T11592] x_tables: duplicate underflow at hook 2 [ 235.360507][T11637] ip6gre0: Caught tx_queue_len zero misconfig [ 235.372599][T11637] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1442'. [ 235.456762][T11640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1443'. [ 235.563796][T11645] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1445'. [ 236.334199][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1450'. [ 236.777275][T11677] xt_SECMARK: invalid mode: 9 [ 236.959328][T11666] sit0: entered promiscuous mode [ 236.976557][T11666] netlink: 'syz.4.1452': attribute type 1 has an invalid length. [ 237.015114][T11666] x_tables: duplicate underflow at hook 2 [ 237.388276][T11699] netlink: 'syz.4.1460': attribute type 1 has an invalid length. [ 238.313169][T11749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.478858][T11749] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 238.512303][T11749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.551529][T11749] veth1_macvtap: left promiscuous mode [ 238.571893][T11749] veth0_macvtap: left promiscuous mode [ 238.590360][T11749] veth0_macvtap: entered promiscuous mode [ 238.606302][T11749] veth1_macvtap: entered promiscuous mode [ 238.639791][T11749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 238.659064][T11749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 238.679676][T11749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 238.702520][T11749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 238.737922][T11749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 238.840852][T11749] 8021q: adding VLAN 0 to HW filter on device bond2 [ 238.861410][T11749] 8021q: adding VLAN 0 to HW filter on device bond3 [ 238.900287][T11749] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 239.480371][T11774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.584990][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 239.728630][T11784] __nla_validate_parse: 5 callbacks suppressed [ 239.728649][T11784] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1482'. [ 241.109708][ T3340] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.116905][ T3340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.143149][ T3340] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.151202][ T3340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.253034][T11764] netlink: 'syz.2.1478': attribute type 1 has an invalid length. [ 241.269164][ T6164] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.442960][ T6152] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 241.474164][ T6152] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 241.483680][ T7710] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 241.528125][ T6164] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.549458][ T6164] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.601492][ T6164] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.706543][T11812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1490'. [ 241.720032][T11798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1486'. [ 241.759319][T11812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.823379][T11812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.875895][ T7708] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 241.912894][T11811] syzkaller1: entered promiscuous mode [ 241.923906][T11811] syzkaller1: entered allmulticast mode [ 242.258007][T11843] netlink: 'syz.2.1493': attribute type 1 has an invalid length. [ 242.290160][T11843] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1493'. [ 242.307017][ T7708] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 242.479692][T11853] sctp: [Deprecated]: syz.3.1497 (pid 11853) Use of int in max_burst socket option deprecated. [ 242.479692][T11853] Use struct sctp_assoc_value instead [ 243.158790][T11881] IPVS: length: 807419198 != 80577142056 [ 243.369309][T11908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1510'. [ 243.623733][T11917] bond6: option arp_all_targets: invalid value (1848577283) [ 243.633835][T11917] bond6 (unregistering): Released all slaves [ 243.677978][T11919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1511'. [ 243.980098][T11940] netlink: 'syz.0.1519': attribute type 1 has an invalid length. [ 244.036310][T11947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1519'. [ 244.099103][T11949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1518'. [ 244.745249][T11980] wlan0: renamed from sit0 (while UP) [ 244.813924][T11980] wlan0: entered promiscuous mode [ 244.842566][T11980] wlan0: entered allmulticast mode [ 244.924767][T11980] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1525'. [ 244.937606][T11991] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1525'. [ 244.996242][T11980] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 245.045658][T11987] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1528'. [ 245.062624][T11987] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1528'. [ 245.265088][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 245.518126][T12019] xt_CT: You must specify a L4 protocol and not use inversions on it [ 245.664403][T12033] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1540'. [ 245.696619][T12033] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1540'. [ 245.734300][T12035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1541'. [ 245.879877][T12040] netlink: 'syz.3.1540': attribute type 23 has an invalid length. [ 245.987968][ T1650] block nbd0: Connection timed out, retrying (0/1 alive) [ 245.995744][ T1650] block nbd0: Connection timed out, retrying (0/1 alive) [ 246.002930][ T1650] block nbd0: Connection timed out, retrying (0/1 alive) [ 246.010393][ T1650] block nbd0: Connection timed out, retrying (0/1 alive) [ 246.018281][ T1650] block nbd0: Dead connection, failed to find a fallback [ 246.041061][T12045] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1543'. [ 246.097761][T12045] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1543'. [ 246.099859][T12047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1544'. [ 246.812550][T12084] netlink: 'syz.4.1553': attribute type 1 has an invalid length. [ 247.162904][T12105] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 247.464589][T12097] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 247.484289][T12097] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 247.794087][T12129] syzkaller1: entered promiscuous mode [ 247.815306][T12129] syzkaller1: entered allmulticast mode [ 248.251553][T12146] netlink: 'syz.1.1566': attribute type 10 has an invalid length. [ 248.275766][T12146] openvswitch: netlink: Flow key attr not present in new flow. [ 248.323776][T12146] xt_TCPMSS: Only works on TCP SYN packets [ 248.358260][T12157] tipc: Enabling of bearer rejected, already enabled [ 248.712876][T12170] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 249.104018][T12191] netlink: 'syz.0.1579': attribute type 1 has an invalid length. [ 249.244099][T12191] bond7: entered promiscuous mode [ 249.250585][T12191] 8021q: adding VLAN 0 to HW filter on device bond7 [ 249.258783][T12199] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 249.903185][T12198] bond7: (slave bridge3): making interface the new active one [ 249.920792][T12198] bridge3: entered promiscuous mode [ 249.933195][T12198] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 250.133430][T12233] __nla_validate_parse: 17 callbacks suppressed [ 250.133447][T12233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1590'. [ 250.313614][T12241] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1591'. [ 250.323288][T12232] netlink: 'syz.3.1589': attribute type 11 has an invalid length. [ 250.574719][T12252] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1595'. [ 250.598948][T12254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.610787][T12257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.639933][T12250] tipc: Started in network mode [ 250.661750][T12250] tipc: Node identity ac14140f, cluster identity 4711 [ 250.689459][T12250] tipc: New replicast peer: 172.20.20.187 [ 250.741613][T12250] tipc: Enabled bearer , priority 10 [ 250.761974][T12261] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1596'. [ 251.321589][T12299] netlink: 'syz.2.1607': attribute type 1 has an invalid length. [ 251.394838][T12299] 8021q: adding VLAN 0 to HW filter on device bond5 [ 251.438836][T12302] bond5: (slave syz_tun): Enslaving as a backup interface with an up link [ 251.484445][T12299] sit0: left promiscuous mode [ 251.860104][ T7462] tipc: Node number set to 2886997007 [ 252.099066][T12338] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1619'. [ 252.190042][T12339] block nbd2: server does not support multiple connections per device. [ 252.225860][T12339] block nbd2: shutting down sockets [ 252.276489][T12343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1621'. [ 252.346015][T12345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1621'. [ 252.410303][T12346] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 252.459541][T12343] 8021q: adding VLAN 0 to HW filter on device bond10 [ 252.512152][T12345] vlan1: entered promiscuous mode [ 252.530352][T12345] erspan0: entered promiscuous mode [ 252.741019][T12351] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1623'. [ 252.980310][T12360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1627'. [ 253.001301][ T528] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x7 [ 253.019159][T12360] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1627'. [ 253.034940][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 253.062528][T12354] tipc: Enabling of bearer rejected, already enabled [ 253.142802][T12354] tipc: Resetting bearer [ 253.178998][T12368] geneve3: entered promiscuous mode [ 253.319750][T12370] veth5: entered promiscuous mode [ 253.331582][T12370] veth5: entered allmulticast mode [ 253.338705][T12370] team0: Device veth5 is up. Set it down before adding it as a team port [ 253.856833][T12385] veth1_macvtap: left promiscuous mode [ 253.883589][T12385] veth0_macvtap: left promiscuous mode [ 253.917921][T12385] veth0_macvtap: entered promiscuous mode [ 253.946458][T12385] veth1_macvtap: entered promiscuous mode [ 253.981311][T12385] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 254.025172][T12385] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 254.068750][T12385] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 254.108581][T12385] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 254.205691][T12385] batadv_slave_1: entered promiscuous mode [ 254.213502][T12385] batman_adv: batadv0: Interface activated: macvlan2 [ 254.227837][T12385] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.236101][T12385] 8021q: adding VLAN 0 to HW filter on device bond2 [ 254.253212][T12385] 8021q: adding VLAN 0 to HW filter on device bond3 [ 254.262719][T12410] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 254.304743][T12418] netlink: 'syz.4.1640': attribute type 13 has an invalid length. [ 254.320200][T12385] 8021q: adding VLAN 0 to HW filter on device bond4 [ 254.327671][T12400] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 254.356088][T12385] batman_adv: batadv0: Interface activated: macvlan0 [ 254.383072][T12385] 8021q: adding VLAN 0 to HW filter on device bond5 [ 254.430462][T12385] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 254.497144][T12385] 8021q: adding VLAN 0 to HW filter on device bond6 [ 254.540924][T12385] bond7: left promiscuous mode [ 254.564488][T12385] bridge3: left promiscuous mode [ 254.650836][ T6604] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.717321][T12423] syzkaller0: entered promiscuous mode [ 254.727171][T12423] syzkaller0: entered allmulticast mode [ 254.737163][T12440] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 254.750841][ T6604] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.783425][ T6604] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.864582][ T6164] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 254.875791][ T6164] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 254.883712][ T6604] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.894515][ T7710] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 254.908106][ T6604] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.917207][ T6604] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.927447][ T7462] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 254.952304][ T6604] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.966799][ T7462] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 254.979849][ T6604] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.591930][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.626885][T12487] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 255.848089][T12503] netlink: 'syz.2.1659': attribute type 1 has an invalid length. [ 255.856180][T12502] netlink: 'syz.2.1659': attribute type 1 has an invalid length. [ 255.963398][T12508] __nla_validate_parse: 9 callbacks suppressed [ 255.963415][T12508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1663'. [ 256.027265][T12501] bond6: (slave dummy0): making interface the new active one [ 256.058333][T12501] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 256.471859][T12542] netlink: 'syz.4.1667': attribute type 4 has an invalid length. [ 256.499673][T12542] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1667'. [ 256.652407][T12551] netlink: 'syz.0.1671': attribute type 46 has an invalid length. [ 256.878905][T12557] bond8 (unregistering): Released all slaves [ 256.889726][T12551] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1671'. [ 256.933534][T12555] geneve3: entered allmulticast mode [ 256.964315][T12551] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 257.197811][T12573] netlink: 'syz.3.1676': attribute type 1 has an invalid length. [ 257.251873][T12571] netlink: 632 bytes leftover after parsing attributes in process `syz.3.1676'. [ 257.286204][T12573] 8021q: adding VLAN 0 to HW filter on device bond6 [ 257.433161][T12571] bond6: (slave veth5): Enslaving as an active interface with a down link [ 257.447563][T12584] tunl0: Caught tx_queue_len zero misconfig [ 257.505156][ T11] block nbd1: Possible stuck request ffff888027d55080: control (read@0,4096B). Runtime 90 seconds [ 258.704956][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 258.826966][T12657] netlink: 'syz.0.1698': attribute type 1 has an invalid length. [ 258.850548][T12657] netlink: 'syz.0.1698': attribute type 1 has an invalid length. [ 258.871223][T12658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1696'. [ 258.889584][T12658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1696'. [ 258.908790][T12658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1696'. [ 258.941238][T12658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1696'. [ 258.956981][T12658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1696'. [ 259.457281][T12687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1704'. [ 259.645981][T12694] netlink: 'syz.4.1706': attribute type 1 has an invalid length. [ 259.840974][T12671] netlink: 'syz.1.1701': attribute type 1 has an invalid length. [ 259.861874][T12671] x_tables: duplicate underflow at hook 2 [ 260.324111][T12727] bridge_slave_0: left allmulticast mode [ 260.335767][T12727] bridge_slave_0: left promiscuous mode [ 260.341938][T12727] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.354617][T12727] bridge_slave_1: left allmulticast mode [ 260.363200][T12727] bridge_slave_1: left promiscuous mode [ 260.370905][T12727] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.395192][T12727] bond0: (slave bond_slave_0): Releasing backup interface [ 260.396198][ T29] audit: type=1800 audit(1785006991.462:6): pid=12729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1716" name="memory.events" dev="tmpfs" ino=1645 res=0 errno=0 [ 260.452707][T12727] bond0: (slave bond_slave_1): Releasing backup interface [ 260.490157][T12727] team0: Port device team_slave_0 removed [ 260.532018][T12727] team0: Port device team_slave_1 removed [ 260.556018][T12727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.575289][T12727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.598614][T12727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.616872][T12727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.640790][T12727] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 260.696835][T12730] team0: Port device xfrm0 added [ 260.732360][T12733] tipc: Enabled bearer , priority 0 [ 260.888074][T12749] sctp: [Deprecated]: syz.1.1718 (pid 12749) Use of int in max_burst socket option deprecated. [ 260.888074][T12749] Use struct sctp_assoc_value instead [ 260.967928][T12749] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 261.157786][T12766] __nla_validate_parse: 6 callbacks suppressed [ 261.157804][T12766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1721'. [ 261.243737][T12774] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1724'. [ 261.298495][T12779] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1724'. [ 261.340363][T12779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1724'. [ 261.393319][T12779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1724'. [ 262.534188][T12799] netlink: 'syz.4.1726': attribute type 1 has an invalid length. [ 262.557140][T12799] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1726'. [ 262.580884][T12799] x_tables: duplicate underflow at hook 2 [ 263.301629][T12855] netlink: 'syz.2.1737': attribute type 1 has an invalid length. [ 263.368630][T12855] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1737'. [ 266.465065][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 266.714940][ T4987] udevd[4987]: worker [6199] /devices/virtual/block/nbd0 is taking a long time [ 266.724083][ T4987] udevd[4987]: worker [5642] /devices/virtual/block/nbd1 is taking a long time [ 268.386321][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 269.026413][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 281.185185][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 287.585404][ T11] block nbd1: Possible stuck request ffff888027d55080: control (read@0,4096B). Runtime 120 seconds [ 295.161596][T12902] netlink: 'syz.2.1740': attribute type 12 has an invalid length. [ 295.200911][T12902] netlink: 'syz.2.1740': attribute type 29 has an invalid length. [ 295.272459][T12902] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1740'. [ 295.362811][T12909] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1743'. [ 296.148916][T12928] x_tables: duplicate underflow at hook 2 [ 297.824992][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 298.073499][T12937] netpci0: tun_chr_ioctl cmd 1074025678 [ 298.079980][T12937] netpci0: group set to 0 [ 298.093005][T12968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1750'. [ 299.525611][T13029] netlink: 'syz.2.1765': attribute type 5 has an invalid length. [ 299.572449][T13027] syzkaller0: left promiscuous mode [ 299.575066][T13035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1764'. [ 299.586532][T13027] syzkaller0: left allmulticast mode [ 299.600498][T13027] tipc: Resetting bearer [ 299.615338][T13033] xfrm0: Caught tx_queue_len zero misconfig [ 299.941143][T13044] tipc: Resetting bearer [ 299.971339][T13044] tipc: Resetting bearer [ 300.336481][T13043] x_tables: duplicate underflow at hook 2 [ 300.713756][T13076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1776'. [ 300.778126][T13074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1776'. [ 301.153629][T13093] netlink: 'syz.0.1783': attribute type 1 has an invalid length. [ 301.292395][T13093] 8021q: adding VLAN 0 to HW filter on device bond8 [ 301.336026][T13093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1783'. [ 301.673730][T13111] x_tables: duplicate underflow at hook 1 [ 301.718103][T13111] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1787'. [ 301.767731][T13109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1786'. [ 301.819947][T13124] x_tables: duplicate underflow at hook 1 [ 301.997113][T13138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.153078][T13145] netlink: 'syz.3.1795': attribute type 1 has an invalid length. [ 302.245924][T13146] nbd: must specify a device to reconfigure [ 302.439996][T13145] 8021q: adding VLAN 0 to HW filter on device bond7 [ 302.627377][T13162] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1797'. [ 302.675715][T13171] syzkaller1: entered promiscuous mode [ 302.689638][T13171] syzkaller1: entered allmulticast mode [ 302.701268][T13174] netlink: 'syz.1.1801': attribute type 13 has an invalid length. [ 302.800240][T13191] netlink: 'syz.3.1804': attribute type 4 has an invalid length. [ 302.827397][T13174] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.836494][T13174] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.863100][T13193] netlink: 'syz.3.1804': attribute type 4 has an invalid length. [ 303.679277][ T6152] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.762502][ T6152] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.778013][ T6152] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.833167][ T6152] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.018668][T13220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1811'. [ 304.137223][T13231] netlink: 'syz.1.1813': attribute type 1 has an invalid length. [ 304.518669][T13251] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1819'. [ 304.771997][T13262] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1821'. [ 304.808361][T13262] batadv_slave_0: Caught tx_queue_len zero misconfig [ 304.942915][ T29] audit: type=1800 audit(1785007036.012:7): pid=13264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1822" name="r" dev="tmpfs" ino=1866 res=0 errno=0 [ 305.150722][T13280] netlink: 'syz.0.1826': attribute type 13 has an invalid length. [ 305.164491][T13280] netlink: 'syz.0.1826': attribute type 17 has an invalid length. [ 305.363968][T13275] tipc: Resetting bearer [ 305.439869][T13275] batman_adv: batadv0: Interface deactivated: macvlan2 [ 305.481470][T13275] batman_adv: batadv0: Interface deactivated: macvlan0 [ 305.600910][T13280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.610084][T13280] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.617612][T13280] tipc: Resetting bearer [ 305.623407][T13280] tipc: Resetting bearer [ 305.631225][T13280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.680702][T13280] batadv_slave_1: left promiscuous mode [ 305.703695][T13280] veth1_macvtap: left promiscuous mode [ 305.714031][T13280] veth0_macvtap: left promiscuous mode [ 305.724118][T13280] veth0_macvtap: entered promiscuous mode [ 305.741230][T13280] veth1_macvtap: entered promiscuous mode [ 305.754043][T13280] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 305.767846][T13280] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 305.781056][T13280] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 305.789832][T13280] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 305.801193][T13280] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 305.820634][T13280] batadv_slave_1: entered promiscuous mode [ 305.827577][T13280] batman_adv: batadv0: Interface activated: macvlan2 [ 305.838957][T13280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 305.846642][T13280] 8021q: adding VLAN 0 to HW filter on device bond2 [ 305.855770][T13280] 8021q: adding VLAN 0 to HW filter on device bond3 [ 305.868786][T13280] 8021q: adding VLAN 0 to HW filter on device bond4 [ 305.880361][T13280] batman_adv: batadv0: Interface activated: macvlan0 [ 305.889437][T13280] 8021q: adding VLAN 0 to HW filter on device bond5 [ 305.897169][T13280] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 305.906708][T13280] 8021q: adding VLAN 0 to HW filter on device bond6 [ 305.920693][T13280] 8021q: adding VLAN 0 to HW filter on device bond7 [ 305.936298][T13280] 8021q: adding VLAN 0 to HW filter on device bond8 [ 305.943681][T13285] tipc: Enabling of bearer rejected, already enabled [ 306.007907][T13292] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 306.048043][T13292] bond8 (unregistering): Released all slaves [ 306.265491][ T3340] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 306.301875][T13319] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 306.481702][T13332] netlink: 'syz.3.1838': attribute type 1 has an invalid length. [ 306.501877][T13327] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1836'. [ 306.847221][T13348] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 306.878968][T13348] bond5 (unregistering): Released all slaves [ 306.901448][T13356] xt_hashlimit: max too large, truncated to 1048576 [ 306.909048][T13356] xt_hashlimit: overflow, try lower: 2/0 [ 306.934301][T13349] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 306.937834][T13356] vlan0: entered promiscuous mode [ 306.955459][T13356] bond6: entered promiscuous mode [ 306.962887][T13356] vlan0: left allmulticast mode [ 306.968609][T13356] bond6: left allmulticast mode [ 307.048753][T13362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1848'. [ 307.099372][T13364] netlink: 'syz.2.1849': attribute type 2 has an invalid length. [ 307.147683][T13368] netlink: 'syz.1.1850': attribute type 2 has an invalid length. [ 307.165374][T13364] netlink: 'syz.2.1849': attribute type 21 has an invalid length. [ 307.180895][T13368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1850'. [ 307.260148][T13374] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1853'. [ 307.505220][ T5625] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 307.788292][T13407] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 307.843597][T13413] ipvlan0: entered promiscuous mode [ 307.862372][T13413] bridge0: port 1(ipvlan0) entered blocking state [ 307.887187][T13413] bridge0: port 1(ipvlan0) entered disabled state [ 307.933734][T13413] ipvlan0: entered allmulticast mode [ 307.963136][T13413] bridge0: entered allmulticast mode [ 307.984726][T13413] ipvlan0: left allmulticast mode [ 307.992109][T13413] bridge0: left allmulticast mode [ 308.054581][T13426] netlink: 368 bytes leftover after parsing attributes in process `syz.2.1866'. [ 308.077352][T13426] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1866'. [ 308.095035][T13426] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1866'. [ 308.119115][T13426] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1866'. [ 308.175395][T13420] vlan1: entered promiscuous mode [ 308.193423][T13420] bridge0: entered promiscuous mode [ 308.218535][T13433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1864'. [ 308.270299][T13424] sit0: left promiscuous mode [ 308.291285][T13424] bridge0: left allmulticast mode [ 308.329675][T13424] veth1_to_hsr: left promiscuous mode [ 308.351468][T13424] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 308.369696][T13424] xfrm1: left allmulticast mode [ 308.383205][T13424] bond1: left promiscuous mode [ 308.399039][T13424] bond1: left allmulticast mode [ 308.411670][T13424] vlan2: left promiscuous mode [ 308.422623][T13424] bond2: left promiscuous mode [ 308.434346][T13424] batadv1: left promiscuous mode [ 308.446626][T13424] vlan2: left allmulticast mode [ 308.457932][T13424] bond2: left allmulticast mode [ 308.469830][T13424] batadv1: left allmulticast mode [ 308.483453][T13424] bond3: left promiscuous mode [ 308.496839][T13424] macsec1: left promiscuous mode [ 308.508935][T13424] geneve2: left promiscuous mode [ 308.520696][T13424] geneve2: left allmulticast mode [ 308.540043][T13424] tipc: Resetting bearer [ 308.607445][T13444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1869'. [ 308.687849][T13424] vlan0: left promiscuous mode [ 308.693751][T13424] bond6: left promiscuous mode [ 308.706213][T13424] bond7: left promiscuous mode [ 308.786711][ T35] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.796218][ T35] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.806298][ T35] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.817009][ T35] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.857211][T13452] netlink: 'syz.4.1872': attribute type 1 has an invalid length. [ 308.879993][ T35] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.890302][ T35] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.903727][ T35] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.917995][ T35] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.059719][T13452] bond11: entered promiscuous mode [ 309.065450][T13452] 8021q: adding VLAN 0 to HW filter on device bond11 [ 309.186120][T13464] bond11: (slave bridge4): making interface the new active one [ 309.215963][T13464] bridge4: entered promiscuous mode [ 309.235758][T13464] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 309.674370][T13505] netlink: 'syz.3.1883': attribute type 1 has an invalid length. [ 309.790508][T13510] gretap2: entered allmulticast mode [ 309.833317][T13510] bond8: (slave gretap2): making interface the new active one [ 309.862654][T13510] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 310.036881][T13520] syzkaller0: entered promiscuous mode [ 310.063769][T13520] syzkaller0: entered allmulticast mode [ 310.234984][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 311.017739][T13536] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 312.092551][T13622] tipc: Resetting bearer [ 312.430193][T13622] bridge1: left allmulticast mode [ 312.461201][T13622] ip6tnl1: left allmulticast mode [ 312.478687][T13622] ip6gre1: left allmulticast mode [ 312.492857][T13622] bond3: left allmulticast mode [ 312.499786][T13622] macvtap1: left allmulticast mode [ 312.522839][T13622] bridge2: left promiscuous mode [ 312.529178][T13622] bridge2: left allmulticast mode [ 312.537012][T13622] bridge3: left promiscuous mode [ 312.542011][T13622] bridge3: left allmulticast mode [ 312.553730][T13622] vlan3: left promiscuous mode [ 312.562984][T13622] geneve3: left promiscuous mode [ 312.578861][T13622] bond4: left promiscuous mode [ 312.585562][T13622] bridge4: left promiscuous mode [ 312.590834][T13622] bridge4: left allmulticast mode [ 312.604017][T13622] geneve4: left promiscuous mode [ 312.611010][T13622] geneve4: left allmulticast mode [ 312.621622][T13622] gretap1: left promiscuous mode [ 312.661005][T13622] gretap2: left allmulticast mode [ 312.674600][ T35] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.685235][ T35] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 58964 - 0 [ 312.693942][ T35] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.702758][ T35] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 58964 - 0 [ 312.712454][ T35] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.725794][ T35] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 58964 - 0 [ 312.737952][ T35] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.747032][ T35] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 58964 - 0 [ 314.329313][T13599] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 314.530230][T13670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1909'. [ 314.537675][T13673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1908'. [ 314.560890][T13675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1909'. [ 314.720800][T13680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1912'. [ 314.750554][T13685] erspan0: entered allmulticast mode [ 314.861774][T13683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1913'. [ 314.922199][T13696] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1916'. [ 315.162789][T13705] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 315.494402][T13711] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1920'. [ 315.672241][T13708] bridge0: port 4(macvlan1) entered blocking state [ 315.690739][T13708] bridge0: port 4(macvlan1) entered disabled state [ 315.709733][T13708] macvlan1: entered allmulticast mode [ 315.722856][T13708] gretap0: entered allmulticast mode [ 315.748285][T13708] macvlan1: entered promiscuous mode [ 315.967832][T13728] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1926'. [ 316.040339][T13730] ip6tnl2: entered allmulticast mode [ 316.063141][ T6164] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 316.093409][ T6164] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 316.102329][ T10] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 316.201179][T13740] netlink: 'syz.1.1929': attribute type 1 has an invalid length. [ 316.220940][T13740] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1929'. [ 316.241684][T13740] netlink: 'syz.1.1929': attribute type 1 has an invalid length. [ 316.416095][T13746] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1931'. [ 316.429137][T13746] atomic_op ffff888029ec3998 conn xmit_atomic 0000000000000000 [ 316.433252][T13743] 0·: renamed from hsr0 [ 316.456022][T13743] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 316.474953][T13743] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 316.493848][T13743] 0·: entered allmulticast mode [ 316.503796][T13743] hsr_slave_0: entered allmulticast mode [ 316.519813][T13743] hsr_slave_1: entered allmulticast mode [ 316.533162][T13743] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 316.615363][ T10] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 316.897160][T13762] netlink: 'syz.2.1937': attribute type 1 has an invalid length. [ 317.005504][T13769] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 317.030543][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.139107][T13764] bond7: (slave bridge8): making interface the new active one [ 317.147401][T13764] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 317.157012][T13776] gre0: entered promiscuous mode [ 317.169446][T13776] gre0: entered allmulticast mode [ 317.183367][T13776] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 317.490184][T13795] gre2: entered promiscuous mode [ 317.517747][T13795] gre2: entered allmulticast mode [ 317.676558][ T11] block nbd1: Possible stuck request ffff888027d55080: control (read@0,4096B). Runtime 150 seconds [ 318.256292][T13832] sch_fq: defrate 8 ignored. [ 318.274476][T13834] sch_fq: defrate 8 ignored. [ 318.306791][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 319.600394][T13876] __nla_validate_parse: 5 callbacks suppressed [ 319.600412][T13876] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1963'. [ 319.904992][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 319.929891][T13890] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1966'. [ 320.363894][T13901] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 320.583305][T13910] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1972'. [ 320.875409][T13927] netlink: 'syz.0.1977': attribute type 1 has an invalid length. [ 321.043875][T13927] bond9: (slave bridge4): Enslaving as a backup interface with an up link [ 321.070542][T13931] syzkaller0: entered promiscuous mode [ 321.085878][T13931] syzkaller0: entered allmulticast mode [ 321.140009][T13927] macvlan3: entered promiscuous mode [ 321.151327][T13927] macvlan3: entered allmulticast mode [ 321.165718][T13927] bond9: entered promiscuous mode [ 321.173206][T13927] bridge4: entered promiscuous mode [ 321.188460][T13927] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 321.208688][T13927] bond9: left promiscuous mode [ 321.220495][T13927] bridge4: left promiscuous mode [ 321.353631][T13927] tipc: Enabled bearer , priority 0 [ 321.379162][T13926] tipc: Disabling bearer [ 321.381794][T13941] netlink: 'syz.1.1980': attribute type 8 has an invalid length. [ 321.408792][T13941] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1980'. [ 321.426664][T13941] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1980'. [ 321.481435][T13941] bridge0: entered promiscuous mode [ 321.554509][T13947] netlink: 'syz.1.1980': attribute type 23 has an invalid length. [ 321.574367][T13946] netlink: 'syz.0.1982': attribute type 1 has an invalid length. [ 321.642994][ T29] audit: type=1800 audit(1785007052.712:8): pid=13954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1984" name="memory.events" dev="tmpfs" ino=2201 res=0 errno=0 [ 321.663929][T13946] 8021q: adding VLAN 0 to HW filter on device bond10 [ 321.917765][T13949] syzkaller0: entered promiscuous mode [ 321.925658][T13949] syzkaller0: entered allmulticast mode [ 322.721398][T13987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1988'. [ 323.944214][T13990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1989'. [ 324.021121][T13940] bridge0: left promiscuous mode [ 324.148534][T13999] netlink: 'syz.1.1993': attribute type 1 has an invalid length. [ 324.167186][T13999] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1993'. [ 324.177283][T13999] netlink: 'syz.1.1993': attribute type 1 has an invalid length. [ 324.203899][T13997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1991'. [ 324.338525][T14005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1994'. [ 324.383976][T14018] syzkaller0: entered promiscuous mode [ 324.405841][T14018] syzkaller0: entered allmulticast mode [ 324.475906][T14018] tipc: Enabled bearer , priority 0 [ 324.497351][T14018] tipc: Resetting bearer [ 324.506579][T14013] tipc: Resetting bearer [ 324.532460][T14013] tipc: Disabling bearer [ 324.974212][T14039] wlan0: left promiscuous mode [ 325.081452][T14039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.282262][T14039] veth1_macvtap: left promiscuous mode [ 325.300708][T14039] veth0_macvtap: left promiscuous mode [ 325.321228][T14039] veth0_macvtap: entered promiscuous mode [ 325.343629][T14039] veth1_macvtap: entered promiscuous mode [ 325.361670][T14039] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 325.376170][T14039] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 325.390806][T14039] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 325.403838][T14039] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 325.417868][T14039] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 325.428970][T14039] 8021q: adding VLAN 0 to HW filter on device bond1 [ 325.436950][T14056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2007'. [ 325.473618][T14039] 8021q: adding VLAN 0 to HW filter on device bond2 [ 325.483092][T14039] 8021q: adding VLAN 0 to HW filter on device bond3 [ 325.501220][T14039] geneve2: left promiscuous mode [ 325.507011][T14039] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 325.530400][ T3340] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.537736][ T3340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.549437][ T3340] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.556672][ T3340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.583223][ T6606] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.603960][ T6606] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.637336][ T3340] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.671595][ T3340] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.715476][ T6152] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 325.752151][ T10] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 325.760307][ T6152] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 325.822273][T14064] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2010'. [ 326.145716][ T7711] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 326.173842][ T7711] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 326.658568][T14123] netlink: 'syz.0.2024': attribute type 46 has an invalid length. [ 326.967703][T14140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2026'. [ 326.980696][T14131] netlink: 'syz.3.2027': attribute type 1 has an invalid length. [ 327.058794][T14140] 8021q: adding VLAN 0 to HW filter on device bond11 [ 327.123679][T14131] 8021q: adding VLAN 0 to HW filter on device bond9 [ 327.153977][T14153] bond9: entered promiscuous mode [ 327.160939][T14153] bond9: entered allmulticast mode [ 327.264995][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 327.363350][T14163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2032'. [ 327.384099][T14164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2032'. [ 327.408762][T14161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 327.426847][T14163] tipc: Invalid UDP bearer configuration [ 327.426899][T14163] tipc: Enabling of bearer rejected, failed to enable media [ 327.442094][T14164] tipc: Invalid UDP bearer configuration [ 327.442137][T14164] tipc: Enabling of bearer rejected, failed to enable media [ 327.462429][T14168] netlink: 'syz.3.2033': attribute type 1 has an invalid length. [ 327.598469][T14173] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 327.845999][T14185] netlink: 'syz.1.2038': attribute type 13 has an invalid length. [ 327.857764][T14185] netlink: 'syz.1.2038': attribute type 13 has an invalid length. [ 327.919564][T14187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2039'. [ 327.956220][T14187] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2039'. [ 328.165662][T14199] netlink: 'syz.2.2043': attribute type 18 has an invalid length. [ 328.268809][T14208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2047'. [ 328.279581][T14208] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 328.683253][T14228] syzkaller0: entered promiscuous mode [ 328.705227][T14228] syzkaller0: entered allmulticast mode [ 328.848797][T14243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2058'. [ 328.856185][T14241] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 328.874399][T14240] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 329.571939][T14284] netlink: 'syz.0.2069': attribute type 11 has an invalid length. [ 329.764317][T14294] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2073'. [ 330.035988][T14306] lo speed is unknown, defaulting to 1000 [ 330.049183][T14306] lo speed is unknown, defaulting to 1000 [ 330.053722][T14309] lo speed is unknown, defaulting to 1000 [ 330.059383][T14306] lo speed is unknown, defaulting to 1000 [ 330.080776][T14309] lo speed is unknown, defaulting to 1000 [ 330.145259][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 330.159950][T14309] lo speed is unknown, defaulting to 1000 [ 330.242227][T14309] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 330.271235][T14309] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 330.291922][T14309] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 330.313606][T14309] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 330.491235][T14309] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 330.736928][T14309] lo speed is unknown, defaulting to 1000 [ 330.750204][T14309] lo speed is unknown, defaulting to 1000 [ 330.772928][T14309] lo speed is unknown, defaulting to 1000 [ 330.812049][T14309] lo speed is unknown, defaulting to 1000 [ 330.847039][T14309] lo speed is unknown, defaulting to 1000 [ 330.862485][ T7455] lo speed is unknown, defaulting to 1000 [ 330.873765][T14306] infiniband sz1: set active [ 330.882838][T14306] infiniband sz1: added lo [ 330.885951][T14341] __nla_validate_parse: 2 callbacks suppressed [ 330.885968][T14341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2085'. [ 330.897197][T14306] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 330.908533][T14306] infiniband sz1: Couldn't open port 1 [ 330.925448][T14306] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 330.942502][T14306] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 330.965211][T14306] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 331.152944][T14306] RDS/IB: sz1: added [ 331.160677][T14306] smc: adding ib device sz1 with port count 1 [ 331.179320][T14306] smc: ib device sz1 port 1 has no pnetid [ 331.254493][ T7450] lo speed is unknown, defaulting to 1000 [ 331.277736][T14306] lo speed is unknown, defaulting to 1000 [ 331.637019][T14392] IPVS: Unknown mcast interface: vcan0 [ 331.800515][T14411] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2101'. [ 331.813391][T14408] syzkaller0: entered promiscuous mode [ 331.822114][T14408] syzkaller0: entered allmulticast mode [ 331.858931][T14413] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 332.053601][T14306] lo speed is unknown, defaulting to 1000 [ 332.708168][T14306] lo speed is unknown, defaulting to 1000 [ 333.013005][T14466] netlink: 'syz.3.2114': attribute type 1 has an invalid length. [ 333.477075][T14306] lo speed is unknown, defaulting to 1000 [ 333.664927][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 333.828148][T14306] lo speed is unknown, defaulting to 1000 [ 336.218472][T14480] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 336.624070][T14539] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2131'. [ 336.685124][T14539] xt_hl: Unknown TTL match mode: 237 [ 336.921644][T14558] sctp: [Deprecated]: syz.4.2138 (pid 14558) Use of struct sctp_assoc_value in delayed_ack socket option. [ 336.921644][T14558] Use struct sctp_sack_info instead [ 336.982451][T14553] lo speed is unknown, defaulting to 1000 [ 337.022370][T14553] lo speed is unknown, defaulting to 1000 [ 337.770305][T14591] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2146'. [ 338.005187][T14605] sctp: [Deprecated]: syz.2.2150 (pid 14605) Use of int in max_burst socket option. [ 338.005187][T14605] Use struct sctp_assoc_value instead [ 338.037054][T14602] bond12: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 338.057125][T14602] bond12 (unregistering): Released all slaves [ 338.172146][T14589] syzkaller0: entered promiscuous mode [ 338.183419][T14589] syzkaller0: entered allmulticast mode [ 338.233158][T14610] ipip1: entered promiscuous mode [ 338.638517][T14623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.828065][T14630] gretap0: entered promiscuous mode [ 339.061920][T14648] lo speed is unknown, defaulting to 1000 [ 339.068973][T14648] lo speed is unknown, defaulting to 1000 [ 339.426973][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 339.614555][T14632] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 339.775179][T14664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2167'. [ 339.793241][T14664] netlink: 'syz.2.2167': attribute type 10 has an invalid length. [ 339.808762][T14667] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2164'. [ 339.824722][T14664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2167'. [ 340.002633][T14678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2168'. [ 340.074181][T14677] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2170'. [ 340.564607][T14704] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2176'. [ 342.242873][T14703] tipc: Enabling of bearer rejected, failed to enable media [ 342.412095][T14717] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 342.412095][T14717] Please contact the netfilter-devel mailing list or update your nftables rules. [ 342.438906][T14719] tipc: Enabling of bearer rejected, already enabled [ 342.467009][T14719] syzkaller0: entered promiscuous mode [ 342.474208][T14719] syzkaller0: entered allmulticast mode [ 342.481309][T14719] tipc: Resetting bearer [ 342.624943][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 342.726719][T14734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2185'. [ 342.797669][T14740] netlink: 'syz.2.2185': attribute type 12 has an invalid length. [ 342.815144][T14740] netlink: 'syz.2.2185': attribute type 29 has an invalid length. [ 342.833484][T14740] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2185'. [ 342.860583][T14740] netlink: 'syz.2.2185': attribute type 1 has an invalid length. [ 342.889150][T14740] netlink: 'syz.2.2185': attribute type 2 has an invalid length. [ 342.917889][T14740] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2185'. [ 343.146351][T14753] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2188'. [ 343.313285][T14762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2191'. [ 344.027612][T14790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2197'. [ 344.169434][T14792] syzkaller0: entered promiscuous mode [ 344.188422][T14792] syzkaller0: entered allmulticast mode [ 344.292917][T14798] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2198'. [ 344.305903][T14793] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2198'. [ 344.367806][T14792] tipc: Enabled bearer , priority 0 [ 344.378908][T14791] tipc: Resetting bearer [ 344.436926][T14791] tipc: Disabling bearer [ 344.469808][T14800] netlink: 'syz.0.2199': attribute type 1 has an invalid length. [ 344.498897][T14800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2199'. [ 346.251523][T14853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2214'. [ 346.319698][T14376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.346441][T14376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.574475][T14874] netlink: 'syz.4.2221': attribute type 1 has an invalid length. [ 347.751535][ T11] block nbd1: Possible stuck request ffff888027d55080: control (read@0,4096B). Runtime 180 seconds [ 347.910906][T14941] __nla_validate_parse: 4 callbacks suppressed [ 347.910924][T14941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2238'. [ 348.022739][T14944] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2239'. [ 348.108369][T14950] netlink: 'syz.1.2242': attribute type 1 has an invalid length. [ 348.200421][T14948] lo speed is unknown, defaulting to 1000 [ 348.209345][T14954] syzkaller1: entered promiscuous mode [ 348.215173][T14954] syzkaller1: entered allmulticast mode [ 348.230643][T14948] lo speed is unknown, defaulting to 1000 [ 349.189422][T14990] syzkaller0: entered promiscuous mode [ 349.203981][T14990] syzkaller0: entered allmulticast mode [ 349.616731][T15009] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 349.761156][T15017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2256'. [ 349.793312][T15017] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2256'. [ 349.841507][T15014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2256'. [ 349.924942][T15024] tc action pedit 'at' offset 976 out of bounds [ 350.040167][T15033] netlink: 'syz.4.2264': attribute type 1 has an invalid length. [ 350.048790][T15033] netlink: 'syz.4.2264': attribute type 3 has an invalid length. [ 350.057355][T15033] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2264'. [ 350.071127][T15029] sctp: [Deprecated]: syz.1.2262 (pid 15029) Use of struct sctp_assoc_value in delayed_ack socket option. [ 350.071127][T15029] Use struct sctp_sack_info instead [ 350.196666][T15043] SET target dimension over the limit! [ 350.377481][T15053] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2269'. [ 350.415928][T15058] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2271'. [ 350.427861][T15058] 1·: renamed from c0· (while UP) [ 350.446466][T15058] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 350.608600][T15071] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 350.626879][T15071] bond7 (unregistering): Released all slaves [ 350.647325][T15077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2274'. [ 350.670490][T15077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2274'. [ 351.669294][T15136] xt_cgroup: invalid path, errno=-2 [ 351.869309][T15142] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 351.899831][T15142] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 352.722558][T15161] syzkaller0: entered promiscuous mode [ 352.755283][T15161] syzkaller0: entered allmulticast mode [ 352.884609][T15161] tipc: Enabled bearer , priority 0 [ 352.912319][T15159] tipc: Resetting bearer [ 353.010617][T15159] tipc: Disabling bearer [ 353.692518][T14376] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc9 [ 353.731885][T15212] bond8: option mode: invalid value (254) [ 353.739294][T15212] bond8 (unregistering): Released all slaves [ 353.747094][T15224] netlink: 'syz.1.2314': attribute type 2 has an invalid length. [ 354.033591][T15233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.137287][T15235] __nla_validate_parse: 4 callbacks suppressed [ 354.137304][T15235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2319'. [ 354.289573][T15206] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 354.421937][T15244] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2321'. [ 354.559392][T15251] syzkaller0: entered promiscuous mode [ 354.571449][T15251] syzkaller0: entered allmulticast mode [ 355.082899][T15275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2330'. [ 355.391925][T15301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2336'. [ 355.401150][T15301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2336'. [ 355.415850][T15301] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2336'. [ 355.427629][T15301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2336'. [ 355.482021][T15304] netlink: 'syz.0.2337': attribute type 33 has an invalid length. [ 355.554687][T15306] xfrm1: entered allmulticast mode [ 355.793254][T15316] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 355.823673][T15320] 8021q: VLANs not supported on team0 [ 356.108189][T15343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2349'. [ 356.137442][T15343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2349'. [ 356.174063][T15352] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2349'. [ 356.537495][T15367] tipc: Enabled bearer , priority 0 [ 356.555639][T15367] syzkaller0: entered promiscuous mode [ 356.561557][T15367] syzkaller0: entered allmulticast mode [ 356.623663][T15367] tipc: Resetting bearer [ 356.725518][T15376] netlink: 'syz.3.2358': attribute type 11 has an invalid length. [ 356.746394][T15376] netlink: 'syz.3.2358': attribute type 4 has an invalid length. [ 356.869332][T15366] tipc: Resetting bearer [ 356.882078][T15390] SET target dimension over the limit! [ 356.909852][T15366] tipc: Disabling bearer [ 356.942174][T15390] bond8: (slave veth0_to_bond): Releasing backup interface [ 356.990571][T15394] netlink: 'syz.3.2361': attribute type 2 has an invalid length. [ 356.995846][T15390] syzkaller0: left promiscuous mode [ 357.017874][T15390] syzkaller0: left allmulticast mode [ 357.019506][T15394] netlink: 'syz.3.2361': attribute type 2 has an invalid length. [ 357.036071][T15390] tipc: Resetting bearer [ 357.116327][T15400] nbd: must specify a size in bytes for the device [ 357.346355][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 357.423144][T15422] openvswitch: netlink: Message has -2 unknown bytes. [ 357.456641][T15422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.478135][T14377] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 357.503205][T15412] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 357.591717][T15432] netlink: 'syz.2.2372': attribute type 61 has an invalid length. [ 357.609178][T15432] netlink: 'syz.2.2372': attribute type 62 has an invalid length. [ 357.730928][T15442] netlink: 'syz.4.2373': attribute type 1 has an invalid length. [ 357.769928][T15442] netlink: 'syz.4.2373': attribute type 1 has an invalid length. [ 358.035207][T15460] bridge0: port 3(macvlan0) entered blocking state [ 358.045211][T15460] bridge0: port 3(macvlan0) entered disabled state [ 358.059538][T15460] macvlan0: entered allmulticast mode [ 358.100860][T15460] macvlan0: entered promiscuous mode [ 358.123311][T15460] netlink: 'syz.1.2378': attribute type 9 has an invalid length. [ 358.214571][T15465] batadv_slave_1: entered promiscuous mode [ 358.229500][T15465] batadv_slave_1: entered allmulticast mode [ 358.243317][T15465] bridge0: port 3(macvlan0) entered blocking state [ 358.250032][T15465] bridge0: port 3(macvlan0) entered forwarding state [ 358.404706][T15477] block nbd0: Unsupported socket: should be TCP or UNIX. [ 358.736784][T15492] 0: reclassify loop, rule prio 0, protocol 700 [ 358.993297][ T29] audit: type=1804 audit(1785007090.062:9): pid=15497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2391" name="/newroot/469/cgroup.controllers" dev="tmpfs" ino=2438 res=1 errno=0 [ 359.021100][ T29] audit: type=1800 audit(1785007090.062:10): pid=15497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2391" name="cgroup.controllers" dev="tmpfs" ino=2438 res=0 errno=0 [ 359.281958][T15512] netlink: 'syz.2.2395': attribute type 23 has an invalid length. [ 359.512778][T15526] sctp: [Deprecated]: syz.4.2400 (pid 15526) Use of struct sctp_assoc_value in delayed_ack socket option. [ 359.512778][T15526] Use struct sctp_sack_info instead [ 359.668930][T15535] __nla_validate_parse: 8 callbacks suppressed [ 359.668948][T15535] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2404'. [ 359.830367][T15545] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2407'. [ 359.884672][T15539] bond12: option arp_all_targets: invalid value (3) [ 359.911625][T15539] bond12 (unregistering): Released all slaves [ 360.013271][T15545] netlink: 'syz.2.2407': attribute type 2 has an invalid length. [ 360.030629][T15545] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2407'. [ 360.039891][T15545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 360.137963][T15564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2413'. [ 360.202542][T15564] pim6reg1: entered promiscuous mode [ 360.210735][T15564] pim6reg1: entered allmulticast mode [ 360.297274][T15570] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2413'. [ 360.352482][T15572] syzkaller0: entered promiscuous mode [ 360.367376][T15572] syzkaller0: entered allmulticast mode [ 360.385939][T15572] tipc: Resetting bearer [ 360.460335][T15579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2416'. [ 360.460490][T15580] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2415'. [ 360.500830][T15575] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2415'. [ 360.776943][T15588] syzkaller0: entered promiscuous mode [ 360.805222][T15588] syzkaller0: entered allmulticast mode [ 360.882942][T15607] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2423'. [ 361.128018][T15620] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2427'. [ 361.260084][T15631] x_tables: duplicate underflow at hook 2 [ 361.811299][T15654] syzkaller0: entered promiscuous mode [ 361.842401][T15654] syzkaller0: entered allmulticast mode [ 362.131331][T15665] tipc: Enabled bearer , priority 0 [ 362.282871][T15665] syzkaller0: entered promiscuous mode [ 362.298881][T15665] syzkaller0: entered allmulticast mode [ 362.317375][T15668] tipc: Resetting bearer [ 362.683585][T15690] batadv0: entered promiscuous mode [ 362.696911][T15690] batadv0: entered allmulticast mode [ 362.707719][T14380] wlan1: Trigger new scan to find an IBSS to join [ 362.716095][T15690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.876950][T15661] tipc: Resetting bearer [ 363.112202][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 364.953385][T15661] tipc: Disabling bearer [ 365.232116][T15728] x_tables: duplicate underflow at hook 1 [ 365.286964][T15739] __nla_validate_parse: 2 callbacks suppressed [ 365.316464][T15739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2448'. [ 365.341907][T15740] netlink: 'syz.4.2448': attribute type 1 has an invalid length. [ 365.621168][T15757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2451'. [ 365.859579][T15769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2454'. [ 365.894465][T15772] netlink: 'syz.0.2456': attribute type 1 has an invalid length. [ 365.902837][T15772] netlink: 'syz.0.2456': attribute type 2 has an invalid length. [ 366.028573][T15777] tipc: Enabled bearer , priority 0 [ 366.135265][T15784] syzkaller1: entered promiscuous mode [ 366.148517][T15784] syzkaller1: entered allmulticast mode [ 366.364978][T15796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2464'. [ 366.543963][T15806] netlink: 'syz.4.2465': attribute type 1 has an invalid length. [ 366.773944][T15806] 8021q: adding VLAN 0 to HW filter on device bond12 [ 367.031182][T15840] netlink: 'syz.3.2471': attribute type 1 has an invalid length. [ 367.056692][T15840] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2471'. [ 367.118036][T15847] netlink: 'syz.1.2472': attribute type 1 has an invalid length. [ 367.467108][T15869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.568123][T15875] lo speed is unknown, defaulting to 1000 [ 367.596721][T15875] lo speed is unknown, defaulting to 1000 [ 367.916753][T15869] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2479'. [ 368.036475][T15894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2486'. [ 368.276981][T15900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2488'. [ 368.495635][T15905] syzkaller0: left promiscuous mode [ 368.504394][T15905] syzkaller0: left allmulticast mode [ 368.518326][T15905] tipc: Resetting bearer [ 368.532451][T15905] netlink: 'syz.4.2492': attribute type 1 has an invalid length. [ 368.748140][T15921] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2495'. [ 369.045188][T15936] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 369.292753][T15943] lo speed is unknown, defaulting to 1000 [ 369.300724][T15943] lo speed is unknown, defaulting to 1000 [ 369.810125][T15963] tc action pedit 'at' offset 976 out of bounds [ 369.963919][T15970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2510'. [ 370.440565][T15974] syzkaller0: entered promiscuous mode [ 370.448966][T15974] syzkaller0: entered allmulticast mode [ 370.466373][T15979] tipc: Enabled bearer , priority 0 [ 370.536180][T15971] tipc: Resetting bearer [ 370.568668][T15971] tipc: Disabling bearer [ 370.621558][T15980] wlan0: entered promiscuous mode [ 370.633820][T15980] wlan0: left allmulticast mode [ 370.641398][T15989] x_tables: duplicate underflow at hook 2 [ 370.652661][T15980] netlink: 'syz.1.2512': attribute type 1 has an invalid length. [ 370.674830][T15980] __nla_validate_parse: 1 callbacks suppressed [ 370.674846][T15980] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2512'. [ 370.819688][T15997] netlink: 'syz.0.2516': attribute type 6 has an invalid length. [ 370.969256][T15996] lo speed is unknown, defaulting to 1000 [ 371.011266][T15996] lo speed is unknown, defaulting to 1000 [ 371.159095][T16005] tc action pedit 'at' offset 976 out of bounds [ 371.382211][T16012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2522'. [ 371.391405][T16012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2522'. [ 371.410461][T14378] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.410550][T16012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2522'. [ 371.431209][T14378] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.445892][T16012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2522'. [ 371.446092][T14378] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.473057][T14378] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.650904][T16019] netlink: 'syz.0.2525': attribute type 4 has an invalid length. [ 371.659131][T16019] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2525'. [ 371.919868][T16028] netlink: 284 bytes leftover after parsing attributes in process `syz.2.2528'. [ 372.368220][T16041] xt_hashlimit: max too large, truncated to 1048576 [ 372.378786][T16041] xt_hashlimit: overflow, try lower: 2/0 [ 372.446832][T16047] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20001 [ 372.579772][T16050] netlink: 'syz.2.2535': attribute type 11 has an invalid length. [ 372.597177][T16050] netlink: 'syz.2.2535': attribute type 4 has an invalid length. [ 372.605917][T16050] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2535'. [ 372.732508][T16056] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.807465][T16058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2539'. [ 372.831634][T16058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2539'. [ 372.943505][T16067] syzkaller1: entered promiscuous mode [ 372.960651][T16067] syzkaller1: entered allmulticast mode [ 373.004435][T16074] bond0: (slave ip6tnl0): refused to change device type [ 373.049971][T16074] ip6erspan1: entered allmulticast mode [ 373.481585][T16098] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 373.491877][T16100] xt_hashlimit: size too large, truncated to 1048576 [ 373.493597][T16098] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 373.754865][T16110] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 373.791903][T16112] veth0_macvtap: left promiscuous mode [ 373.985028][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 374.113588][T16130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.200762][T16128] syzkaller0: entered promiscuous mode [ 374.214015][T16128] syzkaller0: entered allmulticast mode [ 374.245067][T16128] tipc: Resetting bearer [ 374.401544][T16144] macvlan2: entered promiscuous mode [ 374.409551][T16144] batadv0: entered promiscuous mode [ 374.419885][T16144] macvlan2: entered allmulticast mode [ 374.431077][T16144] batadv0: entered allmulticast mode [ 374.438019][T16144] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 374.447771][T16144] batadv0: left allmulticast mode [ 374.459140][T16144] batadv0: left promiscuous mode [ 375.010867][T16175] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 375.467913][T16192] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.507710][T16201] gretap0: entered promiscuous mode [ 375.562006][T16201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.588632][T16201] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.605647][T16201] tipc: Resetting bearer [ 375.613948][T16201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.669158][T16201] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 375.694133][T16201] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 375.720461][T16201] 8021q: adding VLAN 0 to HW filter on device bond1 [ 375.733297][T16201] 8021q: adding VLAN 0 to HW filter on device bond2 [ 375.752508][T16201] 8021q: adding VLAN 0 to HW filter on device bond3 [ 375.769675][T16201] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 375.785542][T16201] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 375.796304][T16201] 8021q: adding VLAN 0 to HW filter on device eth0 [ 375.804184][T16201] 8021q: adding VLAN 0 to HW filter on device eth1 [ 375.812640][T16201] 8021q: adding VLAN 0 to HW filter on device eth2 [ 375.820779][T16201] 8021q: adding VLAN 0 to HW filter on device eth3 [ 375.828680][T16201] 8021q: adding VLAN 0 to HW filter on device bond4 [ 375.837085][T16201] 8021q: adding VLAN 0 to HW filter on device bond5 [ 375.887699][T16201] 8021q: adding VLAN 0 to HW filter on device bond6 [ 375.898385][T16201] 8021q: adding VLAN 0 to HW filter on device bond7 [ 375.908028][T16201] 8021q: adding VLAN 0 to HW filter on device bond8 [ 375.917023][T16201] 8021q: adding VLAN 0 to HW filter on device bond9 [ 375.958721][T14378] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.968678][T14378] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 38805 - 0 [ 376.012276][T16192] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.034901][T16210] __nla_validate_parse: 6 callbacks suppressed [ 376.034919][T16210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2586'. [ 376.054576][T14378] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.064696][T14378] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 38805 - 0 [ 376.073660][T14378] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.084271][T14378] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 38805 - 0 [ 376.129665][T14378] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.149162][T14378] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 38805 - 0 [ 376.292899][T16192] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.400528][T14375] bond6: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 376.446848][T14375] bond6: (slave veth5): making interface the new active one [ 376.480472][T14375] bond6: active interface up! [ 376.578726][T16192] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.728827][T16247] netlink: 'syz.4.2593': attribute type 1 has an invalid length. [ 376.754629][T16234] syzkaller0: entered promiscuous mode [ 376.763812][T16234] syzkaller0: entered allmulticast mode [ 376.823801][T16247] 8021q: adding VLAN 0 to HW filter on device bond13 [ 376.868242][T16250] bond13: (slave veth1): Enslaving as an active interface with a down link [ 377.507551][T16260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2594'. [ 377.837748][ T11] block nbd1: Possible stuck request ffff888027d55080: control (read@0,4096B). Runtime 210 seconds [ 378.690459][T16250] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 378.699952][T16250] bond13: (slave batadv2): making interface the new active one [ 378.708894][T16250] batadv2: entered promiscuous mode [ 378.714601][T16250] bond13: (slave batadv2): Enslaving as an active interface with an up link [ 378.768665][T14370] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.810032][T14378] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.812987][T16263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2595'. [ 378.843475][T14378] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.889892][T14380] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.496859][T16237] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 379.742946][T16288] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2603'. [ 380.014269][T16297] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 380.025062][T16297] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 380.033622][T16297] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 380.061002][T16299] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2606'. [ 380.080469][T16299] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2606'. [ 380.094957][T16299] netlink: 'syz.3.2606': attribute type 5 has an invalid length. [ 380.103011][T16299] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2606'. [ 380.243930][T16303] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2608'. [ 380.271354][T16303] bond0 (unregistering): Released all slaves [ 380.984197][T16333] netlink: 'syz.0.2616': attribute type 29 has an invalid length. [ 381.006183][T16333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2616'. [ 381.036716][T16333] netlink: 'syz.0.2616': attribute type 29 has an invalid length. [ 381.044858][T16333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2616'. [ 381.054025][T16333] netlink: 'syz.0.2616': attribute type 29 has an invalid length. [ 381.069706][T16333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2616'. [ 381.085741][T16335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2617'. [ 381.101454][T16333] netlink: 'syz.0.2616': attribute type 29 has an invalid length. [ 381.119514][T16333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2616'. [ 381.138047][T16333] netlink: 'syz.0.2616': attribute type 29 has an invalid length. [ 381.158662][T16333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2616'. [ 381.200944][T16333] netlink: 'syz.0.2616': attribute type 29 has an invalid length. [ 381.231984][T16333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2616'. [ 381.232579][T16340] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2619'. [ 381.234618][T16340] netlink: 'syz.3.2619': attribute type 10 has an invalid length. [ 381.254338][T16333] netlink: 'syz.0.2616': attribute type 29 has an invalid length. [ 381.284831][T16333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2616'. [ 381.304627][T16333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2616'. [ 381.329191][T16333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2616'. [ 381.626907][T16351] lo speed is unknown, defaulting to 1000 [ 381.649186][T16353] lo speed is unknown, defaulting to 1000 [ 381.744680][T16361] validate_nla: 21 callbacks suppressed [ 381.744697][T16361] netlink: 'syz.2.2627': attribute type 1 has an invalid length. [ 381.779795][T16351] lo speed is unknown, defaulting to 1000 [ 381.829748][T16363] bond6: (slave dummy0): Releasing active interface [ 381.847723][T16361] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 382.032828][T16378] xfrm0: Caught tx_queue_len zero misconfig [ 382.218095][T16356] dvmrp0: entered allmulticast mode [ 382.433091][T16353] lo speed is unknown, defaulting to 1000 [ 386.202735][T16451] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.214024][T16451] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 38805 - 0 [ 386.260696][T16452] lo speed is unknown, defaulting to 1000 [ 386.329984][T16451] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.340426][T16451] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 38805 - 0 [ 386.382927][T16452] lo speed is unknown, defaulting to 1000 [ 386.467149][T16451] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.487385][T16451] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 38805 - 0 [ 386.686984][T16451] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.706537][T16451] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 38805 - 0 [ 386.766974][T16469] netlink: 'syz.0.2654': attribute type 4 has an invalid length. [ 386.789285][T16453] netlink: 'syz.2.2648': attribute type 13 has an invalid length. [ 386.817851][T16470] netlink: 'syz.0.2654': attribute type 4 has an invalid length. [ 386.862200][ T7452] lo speed is unknown, defaulting to 1000 [ 386.875699][ T7452] sz1: Port: 1 Link DOWN [ 386.951254][ T7452] lo speed is unknown, defaulting to 1000 [ 386.976748][ T7455] lo speed is unknown, defaulting to 1000 [ 386.991418][ T7455] sz1: Port: 1 Link ACTIVE [ 387.027832][ T6156] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 38805 - 0 [ 387.053136][ T6156] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 387.232377][ T1059] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 38805 - 0 [ 387.249772][ T1059] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 387.328573][ T1059] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 38805 - 0 [ 387.344550][ T1059] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 387.371384][ T1059] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 38805 - 0 [ 387.380290][ T1059] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 387.500873][T16506] netlink: 'syz.3.2660': attribute type 1 has an invalid length. [ 387.513248][T16504] __nla_validate_parse: 24 callbacks suppressed [ 387.513263][T16504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2661'. [ 387.521387][T16490] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 387.982876][T16514] lo speed is unknown, defaulting to 1000 [ 388.000178][T16513] dvmrp0: left allmulticast mode [ 388.036126][T16514] lo speed is unknown, defaulting to 1000 [ 388.586944][T16549] tipc: Enabled bearer , priority 10 [ 388.624364][T16554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.648168][T16556] sock: sock_set_timeout: `syz.1.2674' (pid 16556) tries to set negative timeout [ 388.661162][T16554] netlink: 'syz.2.2671': attribute type 29 has an invalid length. [ 388.712802][T16556] netlink: 'syz.1.2674': attribute type 1 has an invalid length. [ 389.417201][T16595] netlink: zone id is out of range [ 389.446256][T16595] netlink: 'syz.3.2684': attribute type 2 has an invalid length. [ 389.472604][T16595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2684'. [ 389.543271][T16598] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .²ôKâne5•Ww æþ@)~ú ëàË©a y³;™ [ 389.808834][T16615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2689'. [ 389.886878][T16617] netlink: 380 bytes leftover after parsing attributes in process `syz.2.2690'. [ 389.901751][T16617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2690'. [ 389.940905][T16617] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2690'. [ 390.121149][T16620] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 390.176126][T14378] batadv2: left promiscuous mode [ 390.228672][T16634] netlink: 'syz.1.2694': attribute type 3 has an invalid length. [ 390.360931][T16645] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 390.387304][T16645] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 391.259369][T16681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2702'. [ 391.412316][T16692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2706'. [ 391.472537][T16696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2706'. [ 392.223655][T16677] bond0: (slave netdevsim0): Releasing backup interface [ 392.440216][T16736] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 392.454676][ T10] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 392.463628][ T10] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 392.545672][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 392.564459][T16740] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2715'. [ 392.813910][T16762] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2720'. [ 392.987814][T16771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2724'. [ 392.994080][T16772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2724'. [ 393.046112][T16771] netlink: set zone limit has 4 unknown bytes [ 393.231902][T16786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2723'. [ 393.572486][T16796] bridge0: port 1(syz_tun) entered blocking state [ 393.579436][T16796] bridge0: port 1(syz_tun) entered disabled state [ 393.588885][T16796] syz_tun: entered allmulticast mode [ 393.612311][T16796] syz_tun: entered promiscuous mode [ 393.643734][T16796] bridge0: port 1(syz_tun) entered blocking state [ 393.651778][T16796] bridge0: port 1(syz_tun) entered listening state [ 394.229042][T16822] xt_hashlimit: size too large, truncated to 1048576 [ 394.283614][T16827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2737'. [ 394.284248][T16828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2737'. [ 394.471502][T16837] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2738'. [ 394.589715][T16816] tipc: Resetting bearer [ 394.714611][T16843] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2740'. [ 395.798600][T16816] bond9: left promiscuous mode [ 395.805296][T16816] bond9: left allmulticast mode [ 395.817356][T16816] ipip1: left promiscuous mode [ 395.897133][T16816] xfrm1: left allmulticast mode [ 395.939629][T16830] @0Ù: renamed from bond_slave_1 [ 396.038362][T14376] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 38805 - 0 [ 396.073115][T16852] netlink: 212 bytes leftover after parsing attributes in process `syz.3.2742'. [ 396.084942][T14376] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 396.110326][T14376] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 38805 - 0 [ 396.119086][T14376] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 396.128097][T14376] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 38805 - 0 [ 396.141603][T14376] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 396.159425][T14376] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 38805 - 0 [ 396.186621][T14376] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 396.241993][T16856] netlink: 'syz.0.2743': attribute type 15 has an invalid length. [ 397.883693][T16915] syzkaller0: entered promiscuous mode [ 397.889411][T16915] syzkaller0: entered allmulticast mode [ 398.603359][T16936] __nla_validate_parse: 5 callbacks suppressed [ 398.603376][T16936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2768'. [ 401.405261][ T4987] udevd[4987]: worker [6199] /devices/virtual/block/nbd0 timeout; kill it [ 401.426305][ T4987] udevd[4987]: seq 13624 '/devices/virtual/block/nbd0' killed [ 401.444868][ T4987] udevd[4987]: worker [5642] /devices/virtual/block/nbd1 timeout; kill it [ 401.455073][ T4987] udevd[4987]: seq 14046 '/devices/virtual/block/nbd1' killed [ 401.505407][ T30] INFO: task kworker/1:1H:1650 blocked for more than 143 seconds. [ 401.513322][ T30] Not tainted syzkaller #0 [ 401.519369][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 401.530418][ T30] task:kworker/1:1H state:D stack:25656 pid:1650 tgid:1650 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 401.542970][ T30] Workqueue: kblockd blk_mq_requeue_work [ 401.549128][ T30] Call Trace: [ 401.552473][ T30] [ 401.559935][ T30] __schedule+0x17d9/0x56c0 [ 401.565097][ T30] ? __lock_acquire+0x683/0x2cf0 [ 401.570375][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 401.576329][ T30] ? __pfx___schedule+0x10/0x10 [ 401.582301][ T30] ? schedule+0x90/0x2b0 [ 401.593478][ T30] schedule+0x164/0x2b0 [ 401.600273][ T30] schedule_timeout+0x152/0x2c0 [ 401.605693][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 401.611263][ T30] ? __pfx_process_timeout+0x10/0x10 [ 401.618573][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 401.624644][ T30] ? prepare_to_wait_event+0x436/0x480 [ 401.631276][ T30] nbd_queue_rq+0x889/0x1150 [ 401.636461][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 401.641770][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 401.648481][ T30] blk_mq_dispatch_rq_list+0x499/0x1990 [ 401.654389][ T30] ? sbitmap_get+0x229/0x390 [ 401.660466][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 401.672073][ T30] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 401.678445][ T30] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 401.685769][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 401.692796][ T30] ? blk_mq_hw_queue_need_run+0x134/0x630 [ 401.700225][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 401.705980][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 401.711457][ T30] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 401.719519][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 401.725208][ T30] blk_mq_run_hw_queue+0x348/0x4f0 [ 401.730584][ T30] blk_mq_run_hw_queues+0x268/0x3f0 [ 401.736884][ T30] blk_mq_requeue_work+0x703/0x760 [ 401.742257][ T30] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 401.749374][ T30] ? rcu_is_watching+0x15/0xb0 [ 401.754429][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 401.760801][ T30] process_scheduled_works+0xa8e/0x14e0 [ 401.771327][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 401.778656][ T30] ? assign_work+0x3cf/0x5d0 [ 401.783411][ T30] worker_thread+0xa47/0xfb0 [ 401.788514][ T30] ? __kthread_parkme+0x71/0x1f0 [ 401.793729][ T30] kthread+0x388/0x470 [ 401.798826][ T30] ? __pfx_worker_thread+0x10/0x10 [ 401.804154][ T30] ? __pfx_kthread+0x10/0x10 [ 401.813382][ T30] ret_from_fork+0x514/0xb70 [ 401.821852][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 401.827425][ T30] ? __switch_to+0xc89/0x1420 [ 401.832382][ T30] ? __pfx_kthread+0x10/0x10 [ 401.837556][ T30] ret_from_fork_asm+0x1a/0x30 [ 401.842656][ T30] [ 401.846765][ T30] [ 401.846765][ T30] Showing all locks held in the system: [ 401.855112][ T30] 3 locks held by kworker/0:1/10: [ 401.860262][ T30] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 401.873219][ T30] #1: ffffc900000f7c40 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 401.884393][ T30] #2: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 401.895971][ T30] 1 lock held by khungtaskd/30: [ 401.900944][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 401.912650][ T30] 4 locks held by kworker/1:1H/1650: [ 401.919489][ T30] #0: ffff88801eaa4540 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 401.932799][ T30] #1: ffffc9000627fc40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 401.946315][ T30] #2: ffff88802773e998 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 401.956876][ T30] #3: ffff888027cf5738 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150 [ 401.966278][ T30] 2 locks held by getty/5372: [ 401.971216][ T30] #0: ffff8880358d70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 401.981622][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 401.994818][ T30] 1 lock held by udevd/5642: [ 401.999544][ T30] #0: ffff888025d91350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 402.009253][ T30] 1 lock held by udevd/6199: [ 402.013886][ T30] #0: ffff888025ded350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 402.023298][ T30] 3 locks held by kworker/u8:29/14378: [ 402.029817][ T30] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 402.041553][ T30] #1: ffffc90002577c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 402.052607][ T30] #2: ffffffff9002d500 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 402.061749][ T30] 2 locks held by syz.1.2762/16914: [ 402.069794][ T30] #0: ffffffff9002d500 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 402.078905][ T30] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 402.089826][ T30] 2 locks held by syz.4.2767/16928: [ 402.095068][ T30] #0: ffffffff9000e240 (br_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x4b8/0x7e0 [ 402.104322][ T30] #1: ffffffff9002d500 (rtnl_mutex){+.+.}-{4:4}, at: br_ioctl_stub+0x1a8/0xd60 [ 402.113539][ T30] 2 locks held by syz.2.2768/16936: [ 402.118860][ T30] #0: ffffffff90595520 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 402.128437][ T30] #1: ffffffff9002d500 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 402.138244][ T30] 1 lock held by syz.2.2768/16937: [ 402.143459][ T30] #0: ffffffff9002d500 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 402.153023][ T30] 1 lock held by syz.2.2768/16939: [ 402.158216][ T30] #0: ffffffff9002d500 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 402.167707][ T30] 1 lock held by syz.3.2771/16947: [ 402.172816][ T30] #0: ffff888077b452c0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 402.183313][ T30] [ 402.197011][ T30] ============================================= [ 402.197011][ T30] [ 402.225459][ T30] NMI backtrace for cpu 1 [ 402.225485][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 402.225505][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 402.225516][ T30] Call Trace: [ 402.225522][ T30] [ 402.225531][ T30] dump_stack_lvl+0xe8/0x150 [ 402.225563][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 402.225666][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 402.225704][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 402.225725][ T30] sys_info+0x135/0x170 [ 402.225749][ T30] watchdog+0xfd7/0x1030 [ 402.225795][ T30] ? watchdog+0x1c7/0x1030 [ 402.225822][ T30] kthread+0x388/0x470 [ 402.225849][ T30] ? __pfx_watchdog+0x10/0x10 [ 402.225868][ T30] ? __pfx_kthread+0x10/0x10 [ 402.225894][ T30] ret_from_fork+0x514/0xb70 [ 402.225922][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 402.225947][ T30] ? __switch_to+0xc89/0x1420 [ 402.225972][ T30] ? __pfx_kthread+0x10/0x10 [ 402.225998][ T30] ret_from_fork_asm+0x1a/0x30 [ 402.226029][ T30] [ 402.226036][ T30] Sending NMI from CPU 1 to CPUs 0: [ 402.338811][ C0] NMI backtrace for cpu 0 [ 402.338829][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 402.338848][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 402.338858][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 402.338939][ C0] Code: 0c 7f 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 ae 18 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 402.338954][ C0] RSP: 0018:ffffffff8e807de0 EFLAGS: 00000246 [ 402.338969][ C0] RAX: 000000000015eedd RBX: ffffffff819b4450 RCX: 0000000080000001 [ 402.338982][ C0] RDX: 0000000000000001 RSI: ffffffff8e22ddae RDI: ffffffff8c4bdb80 [ 402.338994][ C0] RBP: ffffffff8e807eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 402.339007][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 402.339018][ C0] R13: 1ffffffff1d11de8 R14: 1ffffffff1d00fc4 R15: dffffc0000000000 [ 402.339031][ C0] FS: 0000000000000000(0000) GS:ffff888124f54000(0000) knlGS:0000000000000000 [ 402.339045][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 402.339057][ C0] CR2: 00007f03ae5ef4b8 CR3: 0000000074c9a000 CR4: 00000000003526f0 [ 402.339071][ C0] Call Trace: [ 402.339078][ C0] [ 402.339084][ C0] default_idle+0x9/0x20 [ 402.339106][ C0] default_idle_call+0x72/0xb0 [ 402.339130][ C0] do_idle+0x2e0/0x540 [ 402.339154][ C0] ? __pfx_do_idle+0x10/0x10 [ 402.339177][ C0] ? do_idle+0xc/0x540 [ 402.339200][ C0] cpu_startup_entry+0x43/0x60 [ 402.339222][ C0] rest_init+0x2de/0x300 [ 402.339247][ C0] start_kernel+0x392/0x3e0 [ 402.339323][ C0] x86_64_start_reservations+0x24/0x30 [ 402.339373][ C0] x86_64_start_kernel+0x137/0x1b0 [ 402.339391][ C0] common_startup_64+0x13e/0x157 [ 402.339418][ C0] [ 402.521273][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 402.528142][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 402.537259][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 402.547314][ T30] Call Trace: [ 402.550588][ T30] [ 402.553509][ T30] vpanic+0x56c/0xa60 [ 402.557503][ T30] ? __pfx___schedule+0x10/0x10 [ 402.562404][ T30] ? __pfx_vpanic+0x10/0x10 [ 402.566903][ T30] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 402.573053][ T30] panic+0xc5/0xd0 [ 402.576772][ T30] ? __pfx_panic+0x10/0x10 [ 402.581187][ T30] ? preempt_schedule_common+0x82/0xd0 [ 402.586642][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 402.592008][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 402.598156][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 402.604300][ T30] watchdog+0x1030/0x1030 [ 402.608629][ T30] ? watchdog+0x1c7/0x1030 [ 402.613043][ T30] kthread+0x388/0x470 [ 402.617110][ T30] ? __pfx_watchdog+0x10/0x10 [ 402.621787][ T30] ? __pfx_kthread+0x10/0x10 [ 402.626375][ T30] ret_from_fork+0x514/0xb70 [ 402.630983][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 402.636090][ T30] ? __switch_to+0xc89/0x1420 [ 402.640762][ T30] ? __pfx_kthread+0x10/0x10 [ 402.645351][ T30] ret_from_fork_asm+0x1a/0x30 [ 402.650203][ T30] [ 402.653473][ T30] Kernel Offset: disabled [ 402.657902][ T30] Rebooting in 86400 seconds..