last executing test programs: 2.207209653s ago: executing program 3 (id=3678): socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x7) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x46, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x7d, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x1b, &(0x7f0000000c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9f}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}, @alu={0x7, 0x0, 0x0, 0x1, 0x0, 0x40, 0x1}]}, &(0x7f0000000580)='GPL\x00', 0xd, 0xc8, &(0x7f0000000700)=""/200, 0xfc10c1017a9d755e, 0x44, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0xc, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000006c0)=[0x1, r7], &(0x7f0000000880)=[{0x4, 0x2, 0x6}, {0x5, 0x4, 0x5, 0xb}, {0x1, 0x3, 0x5, 0x4}, {0xfffffffc, 0x3, 0xa, 0x3}, {0x3, 0x8001, 0x1, 0x8}], 0x10, 0x1}, 0x94) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x144, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}, @tfcpad={0x8, 0x29, 0x4}]}, 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async, rerun: 32) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x3, 0x8, &(0x7f0000000ec0)=ANY=[@ANYRESDEC=r6], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r7, 0x0, 0xa2, 0x7c, &(0x7f0000000900)="8cb38700af9bab94091e0e4fd78e829d567bebcacbd8c0f38014ed1d3d4ef3b3e9da39f72c6dab9dcb8b60db1e025a763be21aef694635490264dc978ae7f0fde5001d39acd11a80a18e37539e923f1f72b330f9128874f95f2830584a35fc29b2890592949b61d086158fa89ee2ba827d2e9f0fa007e8d91bd64d82bcdbf4e3b7d06baedea673e260a18073d2b0c859956e09abc9c89dca5a971a4c896fd7da404e", &(0x7f0000000a80)=""/124, 0x1, 0x0, 0x66, 0x3, &(0x7f0000000d00)="a1d152cbf24c59017fe0e839b9b574b610ba2ba81ed3c50c1b8e6bff588a84f2a53e06c2158c11deb4678fa4e8fa365f008f0415d5af67089fe33008a784d9c2236d947778336751b8e361f37dca49fd6fa9380c98f8ccf4808315d324d64ab5232b5e796af1", &(0x7f0000000b00)="c2c38f", 0x6, 0x0, 0x2}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)=ANY=[@ANYRES32=r11, @ANYRES32=r11, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r10, @ANYRES32=r11, @ANYBLOB='/'], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r11, 0x2f, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x40) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000009c0)={r4}, 0x4) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a40)=@o_path={&(0x7f0000000a00)='./file0\x00', 0x0, 0x0, r0}, 0x18) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="000000001300020028bd7000f9dbdf2500000000", @ANYRES32=r5, @ANYBLOB="08130000020000000000250000000000000023000600000000000100aaaaaaaaaabb000000002800c592000000002b8000000100", @ANYRES32=r0, @ANYBLOB="00001e000a000000000008000bcd4100002ba000000c53002000", @ANYRES32=r7, @ANYBLOB="00000100", @ANYRES32=r8, @ANYBLOB="00000100", @ANYRES32=r11, @ANYBLOB="000003000000000000000100", @ANYRES32=r8, @ANYBLOB='\x00\x00\b\x00', @ANYRES32=r12, @ANYBLOB="000020000b00000000002800e66b0000"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008040) (async, rerun: 64) r13 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r3, @ANYRES8=r8], 0x340a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r14, 0x29, 0x49, 0x0, 0x0) 2.116162942s ago: executing program 0 (id=3682): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) r1 = socket$kcm(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x28, &(0x7f0000000040), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r2, 0x8b1a, &(0x7f0000000040)) r3 = socket(0x25, 0x1, 0x0) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x34000) syz_80211_inject_frame(0x0, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64=r0, @ANYRES16=r1, @ANYRESOCT=r3, @ANYRESDEC=r2, @ANYRES16=r0], 0x2b) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) 2.029384832s ago: executing program 3 (id=3683): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff02c}, {0x80000006, 0xfc, 0x0, 0xfffffffd}]}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) r3 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x2b, r4}) r7 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl(r6, 0x8916, &(0x7f0000000000)) ioctl(r7, 0x8936, &(0x7f0000000000)) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.80363401s ago: executing program 4 (id=3686): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) sendmsg$xdp(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x2c, 0x3, 0x0, 0x3e}, 0x10, &(0x7f0000000800)=[{&(0x7f00000001c0)}, {&(0x7f0000000200)="17cec3c0c6da3472ee5701271a750313bc66", 0x12}, {&(0x7f0000000400)}, {&(0x7f0000000500)="7feeaf8962c97d03ea75fb0a510f948732040dc6dfa2da59ddaeff71994277b5f872e5256c4c8b49139c7af210c5db83f52d8b36c49bb41f60c82dd4dc78ae1248c4e51ca69f323061817445ddc5baa4c0139f4cdbb56eb616dad8057d46dab4f29a8465dbb66ae5d011e910ea25dbfafeca0e2f8dade2b85aff3f95f2113d5615a7cfdfd194adbe42047d58027091caffc0598471127aea0ff78f6afdc38f0627a732b7a376174c3cdf32f6575d16b261", 0xb1}, {&(0x7f00000005c0)="6e6013b5c108f9d3bc22c987ee038edfd7edb6316ab6d69b7b5f11f4fbfae50540a024c3e1c3c174f8d0a1dc531a5069f069a0cd35948f55ebb300d2d68a3d9524c914fcc594a6c3b35a2d3f5a92f288f372b851898ee103e3e6aee1e593ea9dbfec105979634133028c690ca6368a7a1d", 0x71}, {&(0x7f0000000640)="84d50eb96e38467581376e10020db379ed7a834da9bf5f3615070d36db14877ba4fb6dbcf86a1a75148df208479b12db9a6fd2091bd72a902f", 0x39}], 0x6, 0x0, 0x0, 0x200008c0}, 0x24004000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000ad000000799000000000000063008000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x13, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) 1.654034578s ago: executing program 2 (id=3688): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@ipv6_newroute={0x30, 0x18, 0x1, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, 0xfd, 0x4, 0xfd, 0xa, 0x500}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x4800) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) socket(0x2d, 0x80000, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=@bridge_getvlan={0x18, 0x68, 0x1}, 0x18}}, 0x80a0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf2505000000080009e401000000a7800100059c1a5a6e380605a80a000008000b000400008d0500140001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 1.457945s ago: executing program 2 (id=3691): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000800010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800e000100696d6d65646961746500000018000280080001"], 0xe0}}, 0x0) 1.326691462s ago: executing program 1 (id=3692): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000508000240000000000800044000000000080003400000001508000540000000020900010073797a30000000000900020073797a32"], 0x98}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth0_to_hsr\x00', &(0x7f0000000140)=@ethtool_test={0x1a, 0x6, 0x5, 0x5, [0x2, 0x8, 0x0, 0xe04, 0x6]}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) 1.041371501s ago: executing program 0 (id=3693): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}, 0x200ce0c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x1, 0x7, 0x4, 0x8, {{0xb, 0x4, 0x2, 0x0, 0x2c, 0x66, 0x0, 0x5, 0x4, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x8a, 0x0, 0x3, [0x415, 0x101, 0x6, 0x5, 0x48]}]}}}}}) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004002}, 0x2000400c) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x94, r2, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2d, 'io'}, {0x2b, 'memory'}, {0x2b, 'cpu'}, {0x2d, 'rdma'}, {0x2b, 'net_prio'}, {0x2b, 'memory'}, {0x2b, 'net_prio'}]}, 0x33) close(0x3) 1.040243643s ago: executing program 1 (id=3694): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb5, &(0x7f000000cf3d)=""/181, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd}, 0x10}, 0x94) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x0, 0x101, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x8000, 0x1, 0x7, 0x7}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000fddbdf250c0000003000018008000100", @ANYRESOCT=r2, @ANYBLOB="140002002d0ec3d3463ef37f000000000000000008000100", @ANYRES32=r3, @ANYBLOB="0800030001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={&(0x7f0000000040)="1c285626a9fad5bb6b139c53187eba7710655db410b2737437e8baf60cfbb8fa78c1871ddb352d561da2464db3a885169afcbfd0a47de3a1975a4ab5d42fba86cf242b0940cb335c61c5181a578b5780fb90671d09a7f919839bbc42cb9930e1d750b3750129a4ce7e597c40c9def479", &(0x7f00000000c0)=""/83, &(0x7f0000000140)="2c74266451988149af6b6601cf7ebc79a037f98fd00aa5cc32c194a75b64f05b52d738c5c737b684b307267437583468011b223c88527fdd0e63f9ffd0827b38dfe40d10fd80018affaee051c596ae1d3f88402276a645f053f2dcc0a3", &(0x7f00000001c0)="bab30d8067bc51538011208fdae8a783ea99d2d70c", 0x8, r0}, 0x38) 1.026553125s ago: executing program 3 (id=3695): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c001480080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x3ec0) (async) r3 = socket(0x28, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x1100, 0x0, 0x200000, {{0x5, 0x4, 0x0, 0x1d, 0x14, 0x1, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1}}}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r4, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r5}, 0x4) (async) r8 = socket$unix(0x1, 0x5, 0x0) readv(r8, &(0x7f0000000140)=[{&(0x7f0000000040)=""/161, 0xa1}], 0x1) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000003000000030000008e920400", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="0000000000820fc14d87630dea0000000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r7, r9}, 0xc) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2f00020b, 0x809, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) ppoll(&(0x7f0000000600)=[{r2, 0x101}], 0x1, 0x0, 0x0, 0x0) (async) close(r1) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001e0001"], 0x28}}, 0x0) (async) sendmmsg$alg(r10, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r11) sendmsg$NBD_CMD_RECONFIGURE(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r12, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007800c"], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 961.894614ms ago: executing program 2 (id=3696): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x50, r3, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'skcipher\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x8080) accept(r1, &(0x7f00000003c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000340)=0x80) setsockopt$inet_tcp_TLS_RX(r4, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, "280c7b2916efbfb1", "459b0c9326aad280d6d267c04cfb455620c738b3ce29e98b75211d0d79e8611c", "8646f6bd", "dedd92c0152403f0"}, 0x38) r5 = accept4(r1, 0x0, 0x0, 0x800) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8923, &(0x7f0000000000)={'veth1_vlan\x00', 0x1ba}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r5}]}, 0x1c}}, 0x20000080) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56641, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r11 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r11, 0x84, 0x20, &(0x7f00000001c0)=0x4, 0x4) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 958.78736ms ago: executing program 1 (id=3697): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8}, @IFLA_BOND_MIN_LINKS={0x8}]}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8}, @IFLA_BOND_MIN_LINKS={0x8}]}}}]}, 0x44}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x444c}}}}}}, @IFLA_GROUP={0x8, 0x1b, 0x55690764}]}, 0x50}}, 0x0) 867.660439ms ago: executing program 3 (id=3698): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x140, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x114, 0x3, 0x0, 0x1, [{0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x103, 0x6, 0x1, 0x0, "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"}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x232}, 0x1, 0x0, 0x0, 0x190}, 0x0) 843.586534ms ago: executing program 0 (id=3699): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="33030000000000000000150000000c0001800800030004"], 0x20}}, 0x0) 757.787218ms ago: executing program 4 (id=3700): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) (async, rerun: 32) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x7fe}, 0x1c, 0x0}}], 0x1, 0x20048000) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x1, 0x7c}, [@nested={0x4, 0x1c2}, @typed={0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r3 = socket(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x9c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x5c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8040}, 0x10) (async) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x40000) (async) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c009e0101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e23", 0x48}, {0x0}], 0x2}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001e00010000000000000000000200000001000007000000000800010000000000080005"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r9 = accept(r0, &(0x7f0000000540)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000005c0)=0x80) (async) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r9, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000940)={0x104, r10, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}]}, 0x104}, 0x1, 0x0, 0x0, 0x4044851}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x118, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xf3, 0x2, {{}, [@TCA_NETEM_RATE64={0xc}, @TCA_NETEM_DELAY_DIST={0xa, 0x2, "58d5c080bbdd"}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x8}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0xe}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_LOSS={0x60, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_REORDER={0xc}]}}}]}, 0x118}}, 0x0) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r11, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x20044805) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@remote, 0x0, 0x0, 0x4, 0x7, 0x2, 0x0, 0x0, 0x57}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x4}, {0x0, 0xfffffffffffffffd, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x5b7919ae7a41d112, 0x1}, {{@in=@multicast2, 0x4d6, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x40000}}, 0xe8) (async) socket(0x40000000015, 0x5, 0x0) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETGROUP(r12, 0x400454ce, 0x0) 683.244869ms ago: executing program 4 (id=3701): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000004b40), r1) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000004c00)={0x0, 0x0, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x34, r4, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x80) socket$inet6(0xa, 0x2, 0x0) (async) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190) syz_emit_ethernet(0x3e, &(0x7f00000008c0)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @mlv2_report}}}}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 677.2608ms ago: executing program 3 (id=3702): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x20000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) (async, rerun: 32) r4 = socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f00000002c0), &(0x7f0000001840)=@udp6=r4}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000440)='kmem_cache_free\x00', r2}, 0x18) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r6], 0x4) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0x708, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xfff3, 0x4}, {0x7, 0xc}, {0x10, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4028040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001840)=@newqdisc={0x470, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {0xffff, 0xffff}, {0xc, 0x7}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x444, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8}, @TCA_TBF_RTAB={0x404, 0x2, [0x5, 0x9, 0x3, 0x38, 0x8d, 0xffffffe0, 0x8, 0x4, 0x0, 0x1, 0x4, 0xfffff4bf, 0xa, 0x6, 0x6, 0x6, 0x6e5, 0x5, 0x9, 0x4, 0x401, 0x7ff, 0x8, 0x0, 0x3, 0x8, 0x3ff, 0x3, 0x5, 0xf8, 0x3, 0x4, 0x2, 0x9e21, 0x7ecf, 0x2, 0xc, 0x8977, 0x4312, 0x5, 0x80000000, 0xa, 0x1, 0x4, 0xd9, 0x4, 0x3, 0x3, 0x2d, 0x7a8, 0x7, 0x0, 0x1000, 0x0, 0x1, 0xe, 0xfffffffb, 0x8000, 0x27, 0xffffffff, 0xffff, 0x5, 0x9, 0xfffffffe, 0x5, 0xe, 0x101, 0x9677, 0xffffffa2, 0x8000, 0xeeec, 0x60, 0xe35, 0x9, 0xfee, 0x81, 0x400, 0x81, 0x3, 0x3362, 0x8, 0x9b6, 0x400, 0x5, 0x9, 0x7fffffff, 0x1000, 0xe6d, 0x7fffffff, 0x4, 0x1, 0x7, 0xff, 0x6, 0x5, 0x1, 0x7, 0x2, 0x10000, 0x3ff, 0xe2, 0x1, 0x8, 0x6, 0x0, 0x7fffffff, 0xfffffff9, 0x140, 0x2, 0x7, 0x81, 0x7, 0x5, 0x6, 0x69b, 0x9, 0x7fffffff, 0x7, 0xf, 0xd3bd, 0x453, 0x7, 0x8, 0x4, 0xf, 0x6, 0x400, 0x7, 0x7ff, 0x4, 0x0, 0x9, 0xdf60, 0x7, 0x10000000, 0xd, 0xfffffffc, 0x80000001, 0xfffffff8, 0xf, 0x7ff, 0x6, 0x2c8, 0x40, 0x9, 0xfffffffe, 0x0, 0x3, 0x9603, 0x719b, 0x5, 0x7, 0x10000, 0xfff, 0x5, 0x6, 0x6, 0x20000, 0xfffffff7, 0x49d, 0xf, 0x7fffffff, 0x200, 0x6, 0x0, 0x7, 0x6, 0xa, 0x2f28, 0x10000, 0x400, 0x8001, 0x6, 0x5, 0x5a2, 0x7, 0x800, 0x2, 0xaa, 0x7348fb54, 0x93a8, 0x5, 0x8000, 0x80000001, 0xfff, 0x5, 0x5, 0x3, 0xc, 0xc5, 0x4, 0x4, 0x7, 0x8001, 0x3, 0xfffffff8, 0x3ff, 0xff, 0x400, 0x8, 0x9, 0x3, 0x8, 0x8, 0x1be, 0xffffa9ab, 0x5868b5c9, 0x401, 0x1, 0x0, 0x3, 0x9, 0x7f, 0x200, 0x4b4975b4, 0xf39, 0x1, 0x101, 0x800, 0x4, 0x1000, 0xc, 0x80, 0x1dff, 0xc, 0x7, 0x8, 0xb390, 0x7f, 0xff, 0x8, 0x0, 0x8001, 0x1, 0x2, 0xddf5, 0x2, 0x5, 0xfffc0000, 0x6541, 0x5, 0x9, 0x69c, 0x2, 0x2, 0x7, 0x8001, 0x0, 0x8, 0x400, 0xfff, 0x474861a7, 0x8, 0x3, 0xd, 0x5]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x2, 0x9, 0x2, 0x1, 0x8d}, {0x7, 0x0, 0x64, 0x40, 0x424, 0xe}, 0x0, 0x1, 0xdd8}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x97bdea2cc2d43cda}]}}]}, 0x470}, 0x1, 0x0, 0x0, 0x10}, 0x0) 561.879775ms ago: executing program 3 (id=3703): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x63}}}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000894}, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 506.150921ms ago: executing program 0 (id=3704): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x1170, 0x1398, 0x120, 0x1170, 0x2a8, 0x1398, 0x1398, 0x2a8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xff, 0xffffffff], [], 'veth1_to_bridge\x00', 'veth0_to_hsr\x00', {}, {}, 0x2b, 0x3b, 0x3}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@set2={{}, {{0x1, 0x3, 0x1}}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x0, 'NFQUEUE\x00', 0x2, {0xfffe, 0x10, 0x2}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x1, 0x0, 0x0, 0x0, 0x0, @loopback, @private0, @loopback, [0x0, 0x0, 0x0, 0xff], [], [0xffffff, 0x0, 0xff000000], 0x0, 0x803}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xffffffffffffff36) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xade, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @empty, @empty}}}}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x50, r5, 0x21, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_VLAN_ID={0x0, 0xe, 0x401}, @L2TP_ATTR_FD={0x0, 0x17, @udp=r3}, @L2TP_ATTR_SEND_SEQ={0x0, 0x13, 0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}]}, 0x50}, 0x1, 0x620b, 0x0, 0x1}, 0x14040) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="60000000b35d418882cf9eafa7d48eaedeb6505c5953a1c1ccdd60a8e2344c6540997c724a85635b91416f64a4b3e869d09d25c4fdbb66e3599f1300"/70, @ANYRES16=r5, @ANYBLOB="00042abd7000fddbdf2501000000050007000300000006000e00090000000c001600070000000000000008000b000300000006001c004897000005001300f800000006001b004e23000008000900030000000500040004000000"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x48000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "3d186e85f3a07d09", "a373047e6878fdb57fc2596912f8bdfd", "27edd157", "3684fa3381fd0182"}, 0x28) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 494.714133ms ago: executing program 4 (id=3705): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_DREG={0x8, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$unix(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000003140)="fa", 0x1}], 0x1, &(0x7f00000046c0)=ANY=[@ANYBLOB="1c0000000000000001000000020b0000", @ANYRES32=r1, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="0000000010000000000000000100000001000000"], 0x30}, 0x0) r3 = socket(0x2a, 0x2, 0x0) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r4, 0xd7735000) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x44}}, 0x24000041) (async, rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 369.651947ms ago: executing program 1 (id=3706): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000002e00090025bd7000000000000400000008001a"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) socket$nl_generic(0x10, 0x3, 0x10) 342.693165ms ago: executing program 2 (id=3707): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) ioctl$PPPIOCGCHAN(r1, 0x80047437, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0xb1, 0x0, 0x0, 0xfffffffd}, {0x6}]}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$sock(r2, &(0x7f0000001240)={&(0x7f0000000c40)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1}, &(0x7f0000000180)=0xc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000200)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', r3, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) 280.678872ms ago: executing program 0 (id=3708): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000200)={0xffffffffffffffff, 0x200, "00fa00"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=@framed={{}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfff8, 0x17000000}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 197.925326ms ago: executing program 1 (id=3709): ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000080)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x20c0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x20) (async) write$rfkill(r0, &(0x7f0000000080)={0x2, 0x0, 0x5, 0x1, 0x4}, 0x8) 190.672778ms ago: executing program 2 (id=3710): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070400008500000021000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b7020000000100004870000000ffffffdc0700001000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2681d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e6e83d15645aa818d92b21aa6459512f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa8666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e517232586872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000600001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736dd19363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419dfc75c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a0ea49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2ddf267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed186a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d36df524b760ab92efcce7dd1574a0730a9e015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbe4fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c63fb9450dd03985d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921bd4d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a980010000fdf278218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9d3696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f21d9d5bc27d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c30600a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86da86b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3d70001500e34ad2e1b2e64af4e37211b524e20f4ae1ba89a32bad2af9030f8add5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e90eb1fffffffffffffcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c2615318bf813e788c84409dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f11b615c87c441dc970ec896a5af6bf69b50a244bc138a1cae3d220bcff6bcb3058c6e0d1cc0da889710f33f5638f805ce602365492282863cc8092b16656dea03cd50182aabbac78a14506dcbf823bec4a5dad14c4d7353b6a55c28321647df3a85bf9fca4e18aeaf4867e6a3dbdd7a5dbe1a52bddae83fc368404a032b75649cf74d7af8e9e3e43fad643ad3e8575a2bb0507531eac5e10b631575f1360803c8f556e07f292ab66b9bcea0c2f09db289a5934a4f2f5fe5cfc52b270a4a5fa2a8de62dcaf7ef52f1fd84c55e6a0c5a365a3b4e73c4ac6fc26367f3f6c07b06a0874c039622ba2bd369b105f57099f742a000a36c2f044a5de24604f82a1f197d9a70b5a62f794f57ec02df70d459fedd6125ae41479a2661360a79e175f0add2820018d5985183ee80f681403a7d08e0e2b88d0750c90b7ed5fed6f81ce797f3b60445ce811d2b4e45005a5ea06c1fe927af06433cd3885dc954e698a7a73416c73bfab7773a6e5e14338797ce9148cda4c0bf05fb67915aeb3661e755e4e1a0ceedfe8e91ee5361ff4c7c07b422e1443a6616b6eb3c325d5687644a4c0a1d44d9dfd82896f56bdfa0790406984c123e1d37da4a9a9444485e9b1e3b6b548528989d2aecc1e7b6ee92ca19298801105ced8964e000000000000000000000000000000000000000000000000000000000003d1c031ee2fc25c7ad34283187545b1343f7ab862e66cf5bf4ba4dbf5fda31619c05ddb97199ad4d01471e9b3c7f485b1e74d0ed34201915e79d5ed229f0773ab6b38529c45b10d0796e005b6d663b942320339b9fe1d4e393b4bcb596898cde06955a345db3cb956b0e5da1c1dba7046f4d12fc65085302f333516804d9f"], &(0x7f0000000140)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0xff0e}, 0x48) 188.125264ms ago: executing program 4 (id=3711): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400010000000000000044000500200100000000000000000000ff0f0000000000002b0000000a000000fc0100000000000000000000000000000400"/180], 0xfc}, 0x1, 0x0, 0x0, 0x48000}, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000440)=[{&(0x7f0000000cc0)="aac84dd7bfeccc2fcdc1aa2f2377151420826b16", 0x14}], 0x1, 0x6) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0500"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x8000, 0x0) 121.534988ms ago: executing program 2 (id=3712): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r0 = socket$phonet(0x23, 0x2, 0x1) recvmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f00000000c0)='syz1\x00', 0x1ff) recvmsg$unix(r1, &(0x7f00000008c0)={&(0x7f0000000080), 0x6e, &(0x7f0000000780)=[{&(0x7f0000000200)=""/205, 0xcd}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f0000000300)=""/186, 0xba}, {&(0x7f00000003c0)=""/237, 0xed}, {&(0x7f0000000180)}, {&(0x7f00000004c0)=""/134, 0x86}, {&(0x7f0000000600)=""/195, 0xc3}, {&(0x7f0000000700)=""/94, 0x5e}, {&(0x7f0000000580)=""/16, 0x10}], 0x9, &(0x7f0000000840)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}, 0x40012042) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r8}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b6090800400000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r11 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r11, &(0x7f0000001d40)={0x0, 0x0, 0x0}, 0x60) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4086, 0xff6}, 0x40) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000c80)={'ip_vti0\x00', &(0x7f0000000d80)={'sit0\x00', 0x0, 0x7, 0x0, 0x9, 0x8, {{0x24, 0x4, 0x2, 0x6, 0x90, 0x68, 0x0, 0x8, 0x29, 0x0, @multicast2, @private=0xa010102, {[@ssrr={0x89, 0x13, 0xe8, [@multicast2, @broadcast, @broadcast, @empty]}, @timestamp={0x44, 0x8, 0x87, 0x0, 0x0, [0x9]}, @cipso={0x86, 0x36, 0x8000000000000003, [{0x2, 0x9, "7a2e63b1e61876"}, {0x0, 0x9, "d9a63d063c9ff2"}, {0x6, 0xc, "99f10594ed8cb0f5d376"}, {0x7, 0x9, "b5f58b57a8ad64"}, {0x6, 0x6, "90a2c5ef"}, {0x6, 0x3, '['}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0xf0, 0x0, 0x6}, @generic={0xebcea914e3e2ee5a, 0xd, "be0169a5000d9159f21453"}, @cipso={0x86, 0x16, 0x0, [{0x2, 0x4, "4caa"}, {0x5, 0xc, "6b509a24f15b61890351"}]}]}}}}}) sendmsg$nl_route_sched(r5, &(0x7f0000000d40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0xfff2, 0xa}, {0x4, 0x6}, {0x7, 0xfff2}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20048000) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000600)) r14 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r14, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008a3000036000000"], 0x24}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x160, 0x1170, 0x1398, 0x0, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYRES16=0x0], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10}, 0x94) 105.625771ms ago: executing program 0 (id=3713): r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000540)="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", 0x118) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x890, &(0x7f0000000200)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x890, &(0x7f0000000200)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$netlink(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000003f000106"], 0x1c}], 0x1}, 0xc0) (async) sendmsg$netlink(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000003f000106"], 0x1c}], 0x1}, 0xc0) r2 = socket(0x8, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000680)="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", 0x12c) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000680)="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", 0x12c) accept4(r5, 0x0, 0x0, 0x0) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0) shutdown(r3, 0x1) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r4, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) ioctl$IMGETCOUNT(r2, 0x61e5, 0x0) (async) ioctl$IMGETCOUNT(r2, 0x61e5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = gettid() syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r8, 0x101, 0x6, &(0x7f0000000080), &(0x7f0000000000)=0x4) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32, @ANYBLOB="049c01000750050008001300", @ANYRES32=r7, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) sendmsg$AUDIT_SET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x3e9, 0x800, 0x70bd29, 0x25dfdbfe, {0x9, 0x1, 0x0, r7, 0x3, 0xb, 0x7, 0x1, 0x0, 0x4, 0x7}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004001}, 0x40000) syz_emit_ethernet(0x3c, &(0x7f0000001680)={@random="9de05b7bd0c8", @random="2b89a1b7a248", @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "2a85ae", 0x6, 0x73, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], "abf5dd51d434"}}}}}, 0x0) 61.748986ms ago: executing program 1 (id=3714): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x40}}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xffff, 'syz0\x00', @default, 0xfffffdba, 0x80002, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006f6164"], 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x6, 0x9, 0x8, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x20, 0x7, 0x6}}) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0xb7, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xbd, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r10 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000380)={0x1d, r11, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) getpeername$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000580)=0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xbc, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4480}, 0x80) 0s ago: executing program 4 (id=3715): r0 = socket$netlink(0x10, 0x3, 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x15, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x7, 0x1, 0x7, 0x6, 0x6, 0x80, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @call={0x85, 0x0, 0x0, 0xa}, @jmp={0x5, 0x1, 0xd, 0xa, 0x6, 0x50, 0xfffffffffffffffc}, @map_fd={0x18, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x68, &(0x7f0000000240)=""/104, 0x40f00, 0x7e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000400)=[{0x2, 0x4, 0x7, 0x9}, {0x5, 0x2, 0xa, 0xa}, {0x5, 0x4, 0xf, 0x1}, {0x0, 0x2, 0x5, 0x5}, {0x2, 0x4, 0x4, 0x4}, {0x0, 0x5, 0x10, 0x6}, {0x3, 0x4, 0x2, 0x3}, {0x5, 0x2, 0xb, 0x1}, {0x2, 0x2, 0xd, 0xc}, {0x4, 0x2, 0xf, 0xc}]}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000004e80)=@newtaction={0x5228, 0x30, 0x12f, 0x0, 0x0, {}, [{0x3f8, 0x1, [@m_vlan={0x160, 0x18, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4ba}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0xfffffffe, 0x4, 0x3, 0x7}, 0x1}}]}, {0xf6, 0x6, "99c3d9e19be838249ef82d665457caddce301c042743ace957abc9230909334816dbbe3401a5d801399e86f0df897d362fcf7af6f1b439167b95f4d9e01079d66b37e05eb1a164ef707c4d98c64d6d533f45860567d1cf20b7e1df3745b6b3e855de8febf4c7869f7fce9ce7145b4702537d771a5544a92166a0adcd19cdf84033368de0e49394b4bb0fb813d9f17e247dffd7c3f357b3e5de9a006ccccdcde13ec321de124057fbabdf06880e6e1d44a3f18fc4e62f93b2135ab38efe21def544dcd6de53a4bb276bdccf9f7ce91fdf14fd45b31b30bb61c71fbbba9c632a37295f38108c2625e638098382aab6aa38714a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0xd4, 0x16, 0x0, 0x0, {{0x8}, {0x4}, {0xab, 0x6, "3648173976fdb0437d023100213c20fddd5871ba0d63134c381de5d74d459692ad4880d7f27a47560099478246f217c62702798628a6b8653e6bf38514c9608aae37c0e409391784b2189f5b18b0dc76c634f529ac7b060701c28cb156d05c54d0881b9bc2922c73246176d0abff5cbc9634733f01f82cb55e2c9b7ef37f4bb62a2f6ccb7bfd62d611adab2bac78bc64cb74fd4209994ea2ee100ab1414adfadc4fc51affa9e28"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x19a2070206319a41}}}}, @m_tunnel_key={0x108, 0x1c, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @rand_addr=' \x01\x00'}]}, {0xb9, 0x6, "4ab389acbe057d77f4e70000a4d92c21afd4e05f5f68efa06cda4e449ea308b56839cdcea7c0d271ce0899f424de3a0d49beb33d8a88c1ef76350d6d84055a382f5687291cc02b9fe64f2d009cda10d0e6f64306a1c9d5900f10088efd8e471276656c6bc28ae23b502238097ee495e60b46412be6dde691819cf59b6dc1cfa7c88bb1e6cd3d27819cf072fa3c1d18539c021d39da10d019e4973d64e135a668a094b91b6192029ce1a4ae94bf87f37b10e2428f52"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7, 0x3}}}}, @m_tunnel_key={0xb8, 0x6, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x22}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x24}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x36, 0x6, "b2d6997381a315df0364f8f0d032f198caa3eca87d3f7342d6187c9a6263ad2e5896ee1ac7a9dd567233e286aa8217e049ef"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}, {0x11ec, 0x1, [@m_bpf={0xb8, 0x4, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0x6a, 0x6, "a772f368b3a46035caf67caacb3a61c2d41ab721875e3257390afd9f9ce7d82f361bae6a1e1d63052e13e30327e7ed369c678274df6bf35ff1e2f56a9bb006cb142825d8632d8d4efbc12e7df3d619d3687fa8083a5429add87efcf16566f0b425945c15b044"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_bpf={0xc8, 0x1f, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xff, 0x5, 0x5, 0x1000, 0x9}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x7f, 0x6, "d7bf16e0479742f2fa953dcffa1b104efaef8de5ef29d0fd6adc85b464c0ab10c536fd694c15f8b707a38bbd80082715c941ef574f62c5819225f22bda2f36e13d9542808432ddc4741cd6cae556e1c5aa650756153bb9058db39fc9822dcc49626ee7f597d29f4bc4340e89a1285beeb03f4f8571609f252b175d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5c5b00bdf5d6af14, 0x3}}}}, @m_csum={0x1068, 0x1, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xffffffff, 0x7, 0x7, 0x2}, 0x17}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xe, 0x2, 0x69, 0x400}, 0x56}}]}, {0x1004, 0x6, "4ed140f05ca14a6775ea02323c06205544238e19f5551ff2edd4e9f4eeddb52c6c6ab84f49774edcbb62577014a7e27a090f0ccf4821507adfca65dbe740c85e88b27368fda948e63f51015bf969fffa95f8ac35322183f00f3394be42bef5ff2358d27ddb1870419052eb4c8866b9be3d69a403940d4f947ec476d52d99b9d7373c4059802c194d6a7a8c5005070d8f03a29b66701f8dad8f914391fdee46c87c177117f13d11e327e4d77b75bbb480904ba2427e6aa125d6121da5cda705fdab2ccc8a0075f9f50bb67ded28b61c56e89db7fc7e612240915b04d7b78ff61d1dd776409c6a74115091f012c253979de9a22497af8763e29eb1d832437202d747b7867c2d80658e65abe35ef79634e738aae6f13529e37647f48ca6de35b505483c88caf105131c173f62a9e52b16e838e78fd38d9ef7e62ce764172e5a44a172c006b62f7dbc05646dd442847d0bcc73b2c409bf7adfbf7aa510f614ff173e160d3693e3c33675b044fa109602d4d647ba9ac5787155403cab633a4677f39fae6739a16e709203f83e70879a639723244d35f86023b7d7ce72a1a11946f665df65671df99511b988bec724ce9330c74caff5368c0e13dcc97ec69c26dac30a96cb05a7d0310a6aa804de66073c8efa957dcb174f3583839734126c9e6805a1c7483cdd2796be0075e1195807094ba7e29626e3fe158f9f4b58a6f0609b70efd6787b2f030b67f95578441d756c0277824a59c91ee9821f6cb6ecc04a17622334150ce40e46a75b77f6c52d665eeb0a07a96dfedf1173afa28e51ae756deb92336c6988e9747b7b416b54bc479e22531fb3995d6fe5646bf75dfe7ac146215a9db4a221ab09e155a97cd84cfd35545c62a4262ce902b6244a9938e9ed4b2e4141000ae43cc64d11a2931c77e128f2fcaeba3782c3beea72ce5e1a57c763c21fd598b633a1a809f628d0ce9b0a19418c5d8b9b993f7c8621ed1d7c0ae2c39253201f2dd04efc4fa42eb5cb4e03df9901733ace9ab520c5882f1ed90c00c013c637d5d64c436883eefd23841773abf7084363afacfcb5444d92b87317464dd1c7be53ae172010f9b78322d41cac141c003b79bbf99aa4303e0c731d12c47a69ada44ed55a3f17df8ed6eaa41576666d4ac0ec128b45308638b77ccd7cbc5c7c09e17ee909695322c44092a013010c0bd534580419104c561a2c1a9d982e49766a0aa62fc6ded474ca16dbbbf611f62e590584a6d84b8f80284a3523b682b33a9c98ea6f1831fc1ece64ac431e1403336728d0d4978334ad79f806ab4bd226c964bcb47166ff7fc34fdfa3a09ed5d32f35d19aa175ad8168849c38c7e39b22575799931f7e5c75f23665e82d130cb79ada0ebbe4a542a43d8c5091f011c5f67f4769addc3c0a4724bec79fa6747097e438136dce3670fb4051619fc59e5d6911d66daa80a8420e6fcc0b5add41aa76151e76b4893a2634ecc23649bffaf7701fb2cb40208c2ba40fd943ead9254e5375fe2a70662490c39b76c2e856427e7c073593fcc939210431fc1ad1d4d48508035e9f0761e81ef9f26e1de78300af71fce14db08707257846ab927137130431c1f8b5636f4eb060f3e180039c060d7319636e1168b41ef2ebf81e0f6389156dbd424605e94e2aa5acc05cb55bb98c009667d39259bd0cfeafefe54dc3f2e9f579e9185612e04c63ebbbacdd1e62e5f62eccea74bc4d7f8ed611017585c418ef7fb9fcc0c00881139a3cd09ed11a5e3bf8dbda189f216c8fb6e01f6c09d139b7f22d02a02f9ffaf5baf21ce1f76ed832b6bad0c9a06fdf79f268212f3bd0b79ef66e620944bf25c92f5ce98864bf053dca363da384d83775d81b780197c2da907292ed9adad5acf02c3ff81df7dae6621aacd401bca98d13b1999a47ffcaee75844b9843a9c6ef6551c3b58de91b2257d0c2b24d1f82f818b07591f1042f15cb72375b09aa21ac56b7521faf83fc8d6edf66478abeae6690eec9cb2519136d7bbed94f819caee5a52ba375ec8b20e692769fc0300f52a14c6aed53fcc85cc697d5cbc0d7ac69096219dc0983e5f13c605f838f471df0b5c02d029668d42f5813503350904c07dcffb62047242c0777538c17a46bd9f1059fe1fee814bce61e92a221abaeb022551909afe7cbb7dcf8031bafe273072f1fbe459995bd80cd4108678854723f4ef047fe8ea1e812d6f30ff690028188a03517ff9544169b71779f17d9f12149c67d740229ac68135db959d8db40c9d7e51dd0aef4df9e926771ca9a2e1aa2382ca5ce6512395fe65d34ff4cf2f519ebebd55e315d1d92ce9392387547763c8745b7e4dae7bf51ecfb9f347e3d787b95d5c5bb2ffa3df8d5d150026c0ad6adaf4e720107b1b22267978f75b052d619babdb216a245744ac01128e9f116a722182e4b94bb87d4d6fd78cec279237c47dfd1e2500eab4e4196ea23fe5814e7ff96cd50a9a1ae05326fe1a37276bf44b9456bfac7f8d52faaae42753595d21d8db90397b1603db344cd49e7b4f976b3046bbc210509eefdaabea0d172ec3406f45354930a79f277b41f65c46fd552fc11bfbfdcc659ff0427ad2bc672c9f251c38a09b4cf53d0331531faac6f7bf2f19043b55633542195b63a4c14ac87da7b7069d2dbd7c3cbd5d60c6a9928846bf8bb1217a69737864274309dfb2a6eaffb3ad811b405ba1be68251d4d15c6eb3eafb14bebb90ff53e95713c68c11c76bd7535141c6f2fa271834d3bb336baf410b93573d62239aa1f8b1ec550d14c0489580e0aa2304da57d25e65e368f8aba363c6a51046fc0a4c79d906124440fad42c26698b2799a22d5bd13d23580264a09fa6adfc5d3f736dd31f46dc5c624bc640e1672a11266a6dc1bbcb94d5ecd456022de05b50019eb43a7ca093e0bc7fb94e5f6e751f3ae21272e39cfb0030f57c7b23e50914c00c0f5b4be3787814a325e249199cbe93e7a023302e247e528a6d5e2ab490a995ce3ce5f0fb4f8c4e9126a1a2b399cf5fe33bed4c933250305c6a4d839f88902171598856a44e7201b0d9de3809035fa525d86f554b23adf1bb713084db0e29b49afe3182f3c973e9365fd534c29133bdb9acbcfcb4cd2064ed0735af396e1275e6dac6aa9c4585ce99cae443c0fc0bc736d301de0e20545a06b661806bb5085561f8e9a1f2f71cde3f22dfeb0c5cf520e4c99d65d5a647c27e734fc1fc2f475694e02630a38e26c50c3b4d4ff41ffd64f025903ab7d5520cb422e0fa9e1941b36bdfb782cdf47ec6027b781a5b2cef0b88738b37f56f565ae0fc012d3150c52ee6305408cdbff95945dd7b12f135b2b66f1242ca2c87eaefd3e7df27b41464b768174bd273a35a1425a7fb172e4b420ad28280b239e20486c4442a0d5fd49ed94ee0e6abed64a43c64625fa1d732930913e80da7bb68be4753adea9df7e5cab8a42aff1c81129576e40c34bb8d8fde7c85ce14637c9f38eedb28f018e918c588df4e63f648c879a73f69789f811546d540bcb0d215366d093a9285f65b6793424e7948317c0a4bc30902f03a9220bac370487a3b75c3548a912a1df4aac8edf574cd20b12c61b80e2e56c7a103c322427ead14f9ebd6f9d50617cea48d56439806e9d77d90c4e9125549a2c0a5c21d1b0a3e3d1c6635ed2a6a66421e2ba129f958024c914a39b0502e0c226ab858ea685b4102912c26c15ef9e583290e4f752524433289a789e935b513c84652c63ace242ad21666488f2e6a27d4dc727e4de1bf0dff21461a9f844012a498827e0f81ebc0c382a7ee959ab8e08644aaecf3a0196f33f120337d616d36f7033ab678b158c85a2e41ff651fe44237e94b3724acb96abe10b309eeca157dcaa3b1b978a9c3cd9bf62999f9d5128cec17271136b72fc913552188371ee218ca8efaba0cb91bbdcf945429fc06343a86cb48bbd555c2a2ca6e04e9ac8aea665fe086dd86a6a230c9d47f4dc6a516630500101538091c4457b03f71a5939feb5b8ea0981d7a6c07c7e69ee41ef0c9b7ca0e76ad177f14f3df2f1482142d4c49514f7b21c20dc2f668223792fb2fc37ece1f9a00af7f488272a52052ebcd99473478480cb4654ab57ee95ff9969d58960e675f9479a6aedbaca00ae40e92aae3422f09618ad5544a45f4919c7580804240d5e948acf5b240c99141a048db7833f277795da362b25c3960780a2250484c5eab179e6de1c9a39aced29b148ac7e05a65358e42f72e3a1df8f2b790b30e408a29785092c789a978895bced55d38712ec349bb1b4aa03c71cebddfd08bcccdb5c174c472b0e31bda50a6e9a0e11368f5145b26385a23d605470d3dd888b2da7e49f84c6565f50527129df8f5050e8e02861656eb79c6cd166de6ac7adf2525e1b6f533db6bf3b43843f0e9a728f3baf25c2f317187c78e2e54f3680da5576a3efb17681636dae3a89583f0a029858b1fd2e2bc422d2c5d7c5d7c1928f2e567ebc1ce8ca5ba4e22320eae490cece6fb57b32a7db084e4ecf813d5f70f78f8ed016ed0325be3d8a1dc902d42eda38da3adf92dd3b10837b4d1f5b702fe42c0fb5c01c6ef82c8a6e4e5e0e96140d8641193b172526c910b9cba011662ca7eb19cbccce4826f01042e5b6313923cd0c6b2d90da788d17e884d2c2077f0698e3ebeb5d9b03d5b35b9d32d91023a403ec2c3d0ef78ed76ca783e491c500b0985234b52414c7fd3f1c5e1e6b950fc07ed057d7e300271f5293291fc51ab96ce0792fba62a984d0e1b42d92237f51ecb5df7f0b3dc7002ecf729c2498d6dedf0dc627a863a170487332a91fd323da0f3f70bb74ac4d99d0fb867a3b727e24995b78d8b8b30e71bc55f71840ebbce21adc8de41f68c5aec0611c21608d1f3cd39d5a3b009cd6141fcc478c31c0d95ea245bc24a3d7d8f92401dd940c314222971b1225bc347f9dd52fa8aa959f247a3d09889f573a50d7a54cd7d24ce44da80fe986e7279f345ebf81b6db83cc4e624f47562f4ccc62e6f58c34c4a22ed008812bc120688c256547d84be51de6dc0c0cbe1c230352f3653a00e91f334a69b258b898b216fe88ee5cf3f6e120c1bb86495d0657eb187cf8e77022be2dad970e0af152d90a6f78095387ed3ab1a571f80f40678c0bff0e6b497ae57b4a7df17c5aa972aadb228a0e2b2d0120413ef770ece0445588ee1614f5faa0930d80b6f1628a6d28a0043113e0304be8eb65520d74fa4468f12a286d3958b2c87f1f5684901d2edc0f7ecc03658fac6fb5af9bb9af52c8f950c39ffd2c9c353a6180f76a38f7cc6004554e5a6c91b0182d54704c352f73c412da5033c0a7f580607d50b6f96b6ff75b64232b335a3efb0337c8ee66ce593c526a370f570dd0766cc12bcf59dec6363629df88952306528da4f2fed2b9f60bfffb696075cb43890469570bf028bdc1f32fc1eb91b46f277d41d07dbfdef9a1ed2e13bfb77dadb2813227d83e2476c224a95093f907c308746ed6badb175c8069d4e7f5214c0ccffcb9247890f32c52e9a6f2d41e951828545a91a57036d5bfb9d2a1516ad2a0e5b2063fb8093f24f9799db613441258cf0e9290777032e2351ba03b406673696badf61ebeedee1a0ecbaabef95efd8644ebfe61433a6f8c3a19c68eead2d81bd0f88c7e6ab7757a616d0243d8605f35550d956af699a9b3310c51ef2f45f30bfb8a9b8919a7ae082c87215c1c99b7b0366c2d6f7b83774f7f602112e39c4f7baf8812649c7bb0f969d9387e56cbae8a0237362fce1505f36a0e1f22f39a72c71293dfd78a09e4efb23"}, {0xc}, {0xc, 0x8, {0x0, 0x35d7c8c5c7b43230}}}}]}, {0x240, 0x1, [@m_ctinfo={0x120, 0x15, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xd3, 0x7, 0x7, 0x5, 0x5}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}]}, {0xd4, 0x6, "ffffd6b5b0bcaf35f732749d310f232e5b496cd70f6d253453d65df6f91ebf750ec98fe03ec170956af8e95654c703f45c2a1ff88b2434efe2c24786338bf214f13cc13ff44ba5a3d7935aae300e8eb933e9058b5e16607cf5c699f954a8ae477041c0cb98da9028c90a359d685aed65678efdcff757013792f8f3ab1677489e3d4a940aeb083288b7810e3d101e4b6029aaefe45f5ca89ed5e10357916805a1a2a434a11dca837b075ffbfeb20e635840dc4c549f47f295f77b8bdd1442f219d433bccc957bad60ac1f2687bf304451"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbmod={0x11c, 0x12, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x26c, 0x10, 0x20000000, 0x6, 0x7}, 0x9}}]}, {0xb1, 0x6, "2a40598ed82fb916c3db715dc6f14fc6d057d16f7408f09b7bdcd8e838969b6176c7141a5fa2855e680fe2539f269227269be7bbf82a136158ff02db3bab1aa2023e8bd3d0186cc1af3b5f473544ef4d0348c131b7a3d06fcac48712501a81a6c60f9ceec825b141bfc2258b3f4395fc8990051aab830292429e1b45d2ef19ee8a749a48fde510a1e5e6791da3e02097b8d56eef12767f03afc771393039f78fbe7979533c6c5348324b846755"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x3980, 0x1, [@m_connmark={0x104, 0x1a, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x47d3820b, 0x0, 0x1, 0x3, 0x5}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x6, 0x7, 0x589, 0x1000}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x0, 0x9, 0x3}, 0xe}}]}, {0x7e, 0x6, "fdf9ddb516e9886f228fe21afc1bb00cfa28e128971c601dd95b58d35a78de30c59048654395e5600686c6069bbf247d596a4b1ed6b46b74a9c7b1ea56a412f1502aff6e53314902845ee6ddad7f42b795a938b157d2760974e34914fbe1572ab0c8190589bf1e41f95b7c25396b7f464087b7645bb7b371dc3a"}, {0xc}, {0xc, 0x8, {0x7, 0x1}}}}, @m_police={0x19a4, 0x5, 0x0, 0x0, {{0xb}, {0x18f8, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x100, 0x10000000, 0x7, 0x8001, 0x8d9, {0x80, 0x2, 0x81, 0xc1, 0x7, 0xc7}, {0x9, 0x2, 0x7, 0x5, 0x0, 0x9}, 0xfffff3a8, 0xffff7fff, 0x6}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0x80000000, 0x100, 0x958d, 0x9, 0x0, 0x7bd, 0x4, 0xffff, 0x8, 0x800, 0x4, 0xef73, 0xa1, 0x1b, 0x7, 0x47, 0x9b4, 0xfffffffe, 0x5, 0x81, 0xfffffffd, 0x7, 0x9, 0xa, 0xffff, 0xffffffec, 0x2b94a6ea, 0x4, 0x3, 0x8000000, 0x8000, 0x1, 0x4faa, 0x1, 0x5, 0x4, 0x5, 0x0, 0xff, 0x29f5, 0x2, 0x3, 0x1, 0x2, 0x8000, 0xbb9, 0x0, 0x0, 0x10000, 0xfbb, 0x4, 0x8, 0x7ff, 0x8, 0x2, 0x8, 0x8, 0x9, 0x80000001, 0x4, 0x8, 0x2, 0x5e, 0x6, 0xc591, 0x145, 0x1, 0xd3c, 0xfd, 0x80, 0xfffffffd, 0x5, 0x4, 0x7, 0xf, 0x2, 0x5, 0x5, 0x100, 0x2, 0x8, 0x81, 0xfff, 0x4, 0xffffffff, 0x3, 0x10000, 0x6, 0x3, 0x4, 0x2a7, 0xfffffff9, 0x800, 0x5e, 0x0, 0x0, 0x2, 0x9, 0xd425, 0x3, 0x6, 0x4, 0x5, 0x5, 0x1, 0xb, 0x1ff, 0x9, 0xab, 0x6, 0x0, 0x4, 0xff, 0x1, 0x1000, 0x62, 0x1950, 0xd7, 0x1ca, 0x2, 0x5, 0x100, 0x6, 0x2, 0x4, 0x9, 0x7f51, 0x3, 0x7, 0x4, 0xb17, 0x21, 0x4420, 0x9, 0xfffffffc, 0xfffffff7, 0x6, 0x4, 0x4, 0x883, 0x5, 0x80000001, 0x7, 0x9, 0x2, 0xff, 0xfffffff9, 0x3, 0x1, 0x6, 0xc8b2, 0x9, 0x8000, 0xb9f0, 0x8, 0xfff, 0x3, 0x7fff, 0xf, 0x78, 0x7, 0x100, 0x3, 0x3, 0x6, 0x0, 0xe, 0x4, 0x3, 0xe64, 0x8, 0x7, 0x80000001, 0x6, 0x2, 0x7, 0x6, 0x9, 0x8, 0x30, 0x8, 0x4, 0x2, 0xfffffffa, 0x8, 0xfffeffff, 0x6, 0x5, 0x7, 0xfffffe00, 0xffffff80, 0x6f4, 0x1000, 0xb, 0x7, 0x1000, 0xc, 0x3, 0x66f, 0x4, 0x9, 0x6, 0x7, 0x1, 0x87, 0xb6, 0x3, 0x101, 0x9, 0x9, 0x10, 0x8, 0xffff574e, 0xffffffff, 0x7fffffff, 0x1, 0x0, 0x9, 0x0, 0x1, 0x7, 0xd, 0x7, 0xfffffff9, 0x0, 0x4, 0x6, 0x7fff, 0x5, 0xb, 0x8, 0x100, 0x5, 0xf2, 0xc1a, 0x2, 0x14, 0x1ff, 0x4, 0x9, 0x23, 0x6, 0x2, 0x40, 0x3e, 0x6, 0x1, 0x5, 0x7, 0x7fff, 0x5, 0x9, 0x8, 0x8]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x10000, 0xfffffffd, 0x8, 0x8000, 0x8200, 0xc9, 0xa, 0x1000, 0x9, 0x1000, 0xd28, 0x3, 0x9, 0x6, 0xb8, 0x4, 0x0, 0x0, 0x1ff, 0x9, 0xeb17, 0x2, 0x1, 0x6, 0x73200000, 0x9145, 0x5, 0x0, 0x8, 0xffffb68a, 0x1, 0x2, 0x6, 0x2, 0x80000000, 0x31a, 0x7f, 0x5, 0x7, 0x9, 0x94c8, 0x5, 0x1c000, 0x0, 0xf2, 0x7, 0x9, 0x4, 0xfd4, 0x8, 0x6a19c966, 0x90, 0x4, 0x7ff, 0x1, 0x4, 0x3, 0x0, 0x2, 0x37, 0x2, 0x7, 0x7, 0x4, 0x3, 0xfffffff7, 0xa8, 0x4, 0x400, 0x8000, 0x9, 0xa25, 0xc00000, 0x0, 0x6, 0x9, 0xe5c, 0xf, 0x4, 0x80000000, 0x5, 0x4, 0x40, 0xe766, 0x2, 0x7, 0xd, 0x7, 0x4, 0x5, 0xffff0000, 0x9, 0x8, 0x9, 0x48, 0x8, 0x3, 0xa6f, 0x30, 0x7, 0xf2f6, 0x3, 0x7, 0x7, 0xfffffffd, 0x80, 0x2, 0x2, 0x3, 0x3ff, 0x432f, 0x489, 0x5, 0x65ef, 0x4, 0x4, 0x6, 0x10000, 0x3, 0x101, 0x1, 0x32, 0xffffff0d, 0x1000, 0x80, 0x0, 0xff, 0x6, 0x8, 0x81, 0x27, 0x9, 0x9, 0x0, 0x80000000, 0x80000001, 0x1a1, 0x2c1, 0x4ca, 0x0, 0x2, 0x1, 0x3, 0x7ff, 0xfffffff6, 0xb9, 0x2df, 0x4, 0x9, 0xe, 0xffffffff, 0x6, 0x2, 0xef28, 0x7, 0x2, 0x6, 0x57c, 0x9, 0x43a, 0xfffffff8, 0xfffffff7, 0xc, 0xff, 0x100, 0x9, 0x6879bf7e, 0x7fffffff, 0x200, 0x8000, 0x9, 0x0, 0x1, 0x4, 0xfffffffc, 0x0, 0xfd1e, 0x100, 0x3, 0x7, 0xd, 0x7, 0x4, 0x800, 0x80, 0x6, 0xfff, 0x7, 0xfffffffd, 0x5, 0x3, 0x1, 0x2, 0x36, 0x6, 0x9f, 0x1, 0x81, 0x71f, 0x0, 0xfffffffa, 0x7fff, 0x80000000, 0x4, 0xfffffffd, 0x7, 0x9, 0x7, 0x7, 0x0, 0x2, 0xff, 0x2b158d2, 0x780, 0xa, 0x6, 0xfffffff7, 0x1, 0x3, 0x40, 0x9, 0x40, 0x8a, 0x7fffffff, 0xe, 0xff, 0x1000, 0x0, 0x5, 0xebd, 0x2, 0xa29, 0xf6e, 0x2, 0x5, 0x4, 0xffff, 0x1, 0x40, 0x0, 0x3, 0x4, 0x3, 0x4, 0x3, 0x6, 0xa, 0x8, 0xde8000, 0xf05, 0xa590, 0x3, 0x99a, 0x3fe9, 0x7f, 0xff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xbe4, 0x4, 0xe, 0x2, 0x400, 0x4, 0x8, 0xff, 0x0, 0x2, 0xc, 0x49, 0x800, 0x3, 0x4, 0x3, 0x4a, 0x0, 0x0, 0x2, 0xf, 0x7, 0x5, 0x9, 0x4, 0x7, 0xfffffffd, 0x7, 0x883, 0x160f, 0x9d, 0xd42d, 0xbb82, 0x8a1, 0x9, 0x3, 0x3, 0x8, 0x0, 0x7ff, 0x3, 0x10001, 0x7ab, 0x58120, 0x6, 0x9, 0x800, 0x6, 0xf6, 0x6, 0x9, 0x8, 0xfffffff9, 0xd, 0x0, 0x8000, 0x1000, 0x3ff, 0x3, 0x5, 0x80, 0x2, 0x7, 0x401, 0x60, 0xffffa129, 0x754, 0xfffffff7, 0x68c8, 0x4, 0x3, 0x1, 0x7fff, 0xe, 0xac, 0x40, 0x9, 0x2, 0x3ff, 0x7ff, 0x9, 0x20, 0x400, 0x7f, 0x9, 0x7, 0x3ef, 0x4, 0x1, 0x1e5d92ac, 0x9d, 0x4, 0x7ff, 0x0, 0x0, 0x9, 0x2b5cf228, 0x6, 0xffffffff, 0xe, 0x7f, 0x2, 0x8001, 0x1, 0x2, 0x3, 0x58, 0x9, 0x1, 0x7, 0x3, 0xffffffff, 0x0, 0xab, 0x45, 0x1, 0x9, 0x4, 0x4, 0x3, 0x2, 0x1ff, 0x20000000, 0x0, 0x1, 0x5, 0x10001, 0x3, 0x9, 0x80000001, 0x3, 0x1, 0x7, 0x3, 0x4, 0x1, 0x6, 0x2, 0x9, 0x2, 0x4, 0x2, 0x9, 0x0, 0x8000, 0x2, 0x36b, 0x2, 0x4, 0xffffffff, 0x1ff, 0x3ff, 0x4, 0x3ff, 0x6, 0x2872, 0x9, 0x8, 0x75, 0x0, 0x4, 0x1e5, 0x573, 0x15, 0xb3, 0x6, 0x5, 0x4, 0x0, 0x4, 0x100, 0x12000000, 0x8, 0xffffffff, 0x3a, 0x5, 0x6, 0x2, 0x9, 0x80, 0x8001, 0xfff, 0xc7c0, 0x1ff, 0x81, 0xef, 0x5, 0xffffffff, 0x7, 0x10000, 0x0, 0x7, 0xfff, 0x7ff, 0x5, 0x8000, 0x0, 0x7, 0x1, 0xffffffff, 0x7, 0xfffffffa, 0x8, 0x3, 0x2, 0xffff, 0x7, 0x7, 0x7fffffff, 0x3, 0x80000001, 0xffff, 0x10000, 0x1d81529, 0x1, 0x3, 0x8, 0x8, 0x545c0dc1, 0x40, 0x1, 0xe89e, 0x401, 0x3, 0x9, 0x401, 0x5, 0x1261, 0x4, 0x0, 0xfffffff5, 0xfff, 0xa, 0xfff, 0x0, 0xfee, 0x4, 0x4, 0x7fff, 0x4, 0x8, 0x200, 0x1df, 0x8, 0x4, 0x6, 0x1, 0x6, 0x5, 0x0, 0x2, 0x9, 0xda36, 0xfd9, 0x2, 0xff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x3, 0x2, 0xfffffff9, 0x400, 0x10001, 0x5261, 0x33, 0xa, 0x7, 0x2, 0x5, 0x7fffffff, 0xa, 0x3, 0x0, 0x3, 0x10001, 0x9, 0x7, 0x0, 0xff, 0xdf, 0x7, 0x8, 0x9, 0x7f, 0xc, 0x948, 0x2, 0xc, 0x9, 0x7, 0x8, 0x3ddd, 0x4, 0x101, 0x28b3fcfa, 0x33, 0xff, 0x10001, 0x5, 0xfffffff9, 0x9, 0xc000000, 0x2e8, 0x9, 0x0, 0x4, 0x2, 0xfffffd56, 0x8, 0x1, 0xfffffeff, 0x0, 0x81, 0x6, 0x100, 0x3, 0x0, 0x2, 0x7, 0x5, 0x8, 0x6, 0x9, 0x1ff, 0x4f, 0x0, 0x101, 0xc, 0x7, 0x6, 0xfffffff7, 0x0, 0x57cf, 0x155b, 0xfffffbff, 0x5, 0x8, 0x8, 0xa, 0x1, 0x47800, 0x2, 0x1000, 0x5, 0x9, 0x5, 0x2, 0x8001, 0x82a, 0xd14, 0x3, 0x211, 0x4dd2211b, 0x101, 0x5, 0x7, 0xffff, 0x809, 0x8, 0x1, 0x2, 0x4, 0x2, 0x2b, 0x3, 0x80000000, 0x7, 0x7, 0xa, 0xf, 0x3, 0x9, 0x7, 0x2, 0x38000000, 0x2, 0x3, 0x9, 0xa592, 0x8, 0x92f23ecb, 0x272d9bbb, 0x6, 0x4, 0x7, 0xe8, 0xb363, 0xfffffffb, 0x8, 0x4d2, 0x0, 0x5, 0x61aa, 0x1, 0xb, 0xb57, 0x0, 0x8, 0x20000, 0x9, 0x6, 0x2, 0x800, 0x9, 0x6, 0x1751bb7e, 0x357, 0x1, 0x4f, 0x8, 0x80000000, 0x7fffffff, 0x80000000, 0x0, 0xff, 0xb1d, 0x7f, 0x6a7, 0x3, 0x7ff, 0xca59, 0xfe0, 0x6, 0x5, 0x6, 0xfffffff5, 0xf8c, 0x80, 0x2, 0x0, 0x7ff, 0x1, 0x3, 0x6, 0x100, 0x3, 0x6, 0x205, 0xfffffffd, 0xf, 0x7fff, 0x0, 0x6, 0x2, 0xfffffffc, 0x6, 0x1, 0x4, 0x1, 0x9, 0x9, 0x98, 0x0, 0x6, 0xf, 0x3, 0x3, 0x1000, 0x200, 0x1, 0x8, 0x4, 0xee, 0x5, 0x8, 0x2, 0x9, 0x2, 0xfffff616, 0x3, 0x9, 0x230cdc73, 0xff, 0x2ba, 0x80, 0xfffffffe, 0xf, 0xffffffff, 0x92, 0x9, 0xa03, 0x6, 0xfffffffb, 0x4, 0x1, 0x1, 0x6, 0x9, 0x0, 0x7, 0x40, 0x4b580000, 0x80000000, 0x5, 0x283, 0x4, 0x8, 0x3, 0x7f, 0x9, 0x6, 0x220000, 0x7, 0x4, 0x1, 0x80000001, 0x1, 0xa98, 0x1, 0x0, 0x1, 0x4, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80000000}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x6, 0x10001, 0x6, 0x7, 0x3, 0xffffffff, 0x2, 0x8000, 0x7ff, 0x0, 0x8, 0x9, 0x5, 0xb237, 0x5, 0x1ff, 0x0, 0x6f02, 0x2, 0x1, 0x7fffffff, 0x3, 0x5, 0xfffffffc, 0x10000, 0x3, 0x7, 0x6, 0xd81, 0x9, 0x10000, 0x5, 0x7fff, 0x3, 0x5, 0x9, 0x9, 0x2, 0x76c, 0xfff, 0x5, 0x7, 0x9, 0xd463, 0x97, 0x24, 0x2, 0x3, 0xffffffff, 0x10000, 0x4, 0x0, 0x900, 0x9, 0xd1ac, 0x9, 0x0, 0x7fffffff, 0x9a12, 0x8c6c, 0x3, 0x0, 0x48, 0xfff, 0x3, 0x4, 0x101, 0x3, 0xff, 0xa783, 0x2, 0x4, 0x9, 0x3, 0x1abc, 0x80000000, 0x7729f3a3, 0x9, 0x9, 0x0, 0x9, 0x98dd, 0xf7, 0x3, 0x2, 0x4, 0x1, 0x2, 0x800, 0x8, 0x10, 0x2, 0x7f, 0x1000, 0x2, 0x3, 0x6, 0x9, 0xd, 0x6, 0x4, 0x5, 0xc4ac, 0x4, 0xf000, 0x10000, 0x0, 0x6, 0x4, 0xa5d, 0x2, 0x1, 0x7ff, 0xf, 0xffffff2f, 0x5, 0x4, 0x7, 0x1ff, 0x0, 0x2, 0xbf9, 0x5ec, 0xf, 0x6f, 0x0, 0x3, 0x4, 0x4, 0x1000, 0x9, 0x5, 0x100, 0x8, 0xca, 0x3, 0x5, 0x8, 0x4, 0x120000, 0x3, 0x9, 0x7, 0x56, 0xff, 0x1bd, 0x6937e6a7, 0x1000, 0x1, 0x9, 0x5, 0x3, 0x6, 0x9, 0x200, 0x10001, 0x6, 0x79, 0x3, 0x3, 0x3ff, 0xe46, 0x8, 0x2, 0x3ec, 0x9, 0x4, 0x3, 0x8, 0x84, 0x3, 0x9, 0x2, 0x5, 0x0, 0x3, 0x1, 0x8, 0x40, 0x3ff, 0x7fff, 0x0, 0xc7, 0x4, 0x5fc, 0x8, 0xcc, 0xaa, 0x7f, 0x6, 0x0, 0x200, 0x7, 0x0, 0xd, 0x101, 0x6, 0x8, 0x8, 0x1, 0x1000, 0x38, 0x1, 0x81, 0xe, 0x2, 0x9f20, 0x9, 0xfffffffe, 0x1, 0xaab, 0x7, 0xc6, 0x10000, 0x2, 0x7, 0x1, 0x8, 0x6, 0xce, 0x5, 0x645800, 0x2, 0x3, 0xb42, 0x435, 0xaf, 0x0, 0x7f, 0x6d3, 0x3ff, 0x1, 0x104, 0x1, 0xb, 0x1, 0x25e9c7a7, 0xa72, 0x0, 0x1, 0x4, 0x3, 0x1, 0x7, 0xfffffffd, 0xd, 0x6, 0xfff, 0xfffffffa, 0x40000000, 0xa, 0x9, 0x7, 0xd7, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffff}], [], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffff5ebf, 0x2e4, 0x0, 0x8, 0x7, 0x3, 0x401, 0x5, 0x602b, 0x9, 0x9, 0x40, 0x29b, 0x7, 0x7f, 0x80000000, 0x1, 0x1ff, 0x7, 0x4, 0x0, 0x6, 0x1, 0x81, 0xea, 0x100, 0x2, 0x9, 0x0, 0x0, 0x8, 0x4, 0x3, 0x9a0b, 0xfffffffa, 0x498, 0x0, 0x6, 0xffffffff, 0x61bc, 0x6, 0x5384c128, 0xd, 0xa7c6, 0x235, 0x3ff, 0x1, 0x7fffffff, 0x8, 0x10, 0x3, 0x2, 0x1, 0x0, 0x4, 0x5, 0x232f95ad, 0x8, 0x4e0f, 0x1, 0x0, 0x7, 0x3, 0x7, 0x4, 0x0, 0x7fffffff, 0x8000, 0x8, 0x7, 0x1, 0xb1, 0x7de67bf7, 0x80000000, 0x0, 0xcd, 0x4, 0x9, 0x677d, 0x6a4, 0x1326fb25, 0x1, 0x7, 0x6, 0x56, 0x9, 0xe5eb, 0x7f, 0x4, 0x5, 0x81, 0x6, 0x3, 0xd, 0x8, 0x4, 0x0, 0x200, 0x2, 0x80, 0x5, 0x200, 0x0, 0x2, 0x8, 0x5, 0x3, 0x7f, 0x2, 0x8, 0x9, 0x101, 0x1, 0x0, 0x9, 0x2, 0x8, 0x1, 0x8, 0x1000, 0x8, 0x7, 0x8, 0x1, 0x0, 0x8, 0xaf81, 0x832, 0x2, 0x1de7, 0xe, 0x4, 0x7fff, 0xb, 0x3, 0x8, 0x0, 0x9, 0x9, 0x5, 0x11, 0x6, 0x2, 0x5, 0x1, 0x2, 0xfffffff6, 0x8, 0x4, 0xa46, 0x0, 0x8a, 0x9214, 0x7, 0x0, 0x7, 0x1, 0x2, 0x5, 0x522e, 0x3a27fd78, 0x7fffffff, 0x0, 0x8, 0xfff, 0x1, 0x0, 0x100, 0x0, 0x61, 0x9, 0x69, 0x101, 0x6, 0xfffff800, 0x424, 0x7, 0x4, 0x2, 0x4, 0x2, 0x1, 0x7, 0x9, 0x81, 0xa7ec0000, 0xf, 0x0, 0x8, 0x3, 0x7cb2, 0x9, 0x7, 0x6, 0x3, 0x5, 0x3, 0x347dd03e, 0x5, 0x7fff, 0xffff, 0x5a3, 0xc9, 0xe57, 0x9, 0x9, 0x3, 0x5, 0x101, 0x1, 0x7, 0x0, 0x7, 0x2, 0x1, 0x9, 0x800, 0xfff, 0x1, 0x7, 0x5, 0x895a, 0x5, 0x6, 0x4, 0x80000000, 0x80000000, 0x9b, 0x7, 0x8a1, 0x1, 0x0, 0x8000000, 0x574d, 0xfffffff0, 0x80000000, 0x0, 0x7fff, 0x9, 0x9a0, 0x8000, 0x8, 0xfffffff6, 0x7ff, 0x7, 0x1ff, 0x8b, 0x6fa9eeaa, 0xfffffd8f, 0x8, 0xb, 0xffff, 0x0, 0x9, 0x100, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0xffffffff, 0x4, 0x3, {0x2, 0x1, 0x8001, 0x8, 0x7fff, 0x200}, {0x0, 0x1, 0x3, 0xfab8, 0x501, 0x7}, 0x3, 0x2, 0x9}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80}]]}, {0x82, 0x6, "bf121110cb0048779413c02cc0ade9cdd8f465cf1f514f2f12564e0542a04d4d16d9604fad5ef54b0ff6b29135482d71c1673f5be9d1e863351fe56dbc02efe8e9802651452cb976bc358c5d69ae800b95a656c94afd0d0b1d327311c1455407ba0cd5d7d1ac0976e2589dcac3f09a2f4c7d82d8835a29422257cc638273"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_skbedit={0x6c, 0x1, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x4, 0x5, 0x5, 0x6}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xc7}]}, {0xd, 0x6, "961020233147b733b6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_pedit={0x1db8, 0xa, 0x0, 0x0, {{0xa}, {0x1d04, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x3, 0x4, 0x8, 0x5, 0x8}, 0x90, 0x2, [{0x2, 0x4243c9d2, 0x7, 0x2, 0x2, 0x7fff}, {0xfff, 0xd03, 0x100, 0x400, 0xd}, {0x2, 0x6, 0x9, 0x9, 0x3, 0x9}, {0x4, 0x31, 0x4, 0x148, 0x5, 0x4}]}, [{0x7fff, 0xe209, 0xf7a, 0x849d, 0x40, 0x1}, {0x5, 0x9, 0x100, 0x7, 0x9, 0x6}, {0x3, 0x227b, 0x40, 0x7, 0x8, 0x93b}, {0xffffff80, 0x8, 0x851, 0x2, 0x7, 0x80000000}, {0x3, 0x8, 0xffff, 0x4, 0x0, 0xff}, {0x4, 0x5, 0x7fffffff, 0xffff, 0x5, 0x6}, {0x9, 0x9, 0x8, 0xd, 0x7, 0x80000000}, {0xa, 0x1, 0x6, 0x5, 0x1, 0x4}, {0x209d, 0x80000001, 0x6, 0x81, 0x7ff, 0x7}, {0x1ff, 0x2849babc, 0x2, 0xc, 0xf3}, {0x96, 0x9, 0x34a4, 0x8, 0x4, 0x7ff}, {0xfffffff8, 0x81, 0x4, 0xfffffffc, 0x400, 0xffffffff}, {0x80000001, 0x29, 0xcf95, 0x15, 0x0, 0x5}, {0x0, 0xffffffbb, 0xf, 0x30, 0x7fff, 0x4}, {0x3, 0x3, 0x3, 0x3, 0x46, 0x7ad5}, {0x5, 0x3, 0x8ebc, 0x9, 0x2, 0x2}, {0x101, 0x6, 0x0, 0x101, 0x7}, {0x7, 0x3, 0x8, 0x8, 0x8, 0x10001}, {0x40, 0x8, 0xfffff000, 0x2, 0x80000001, 0x2}, {0x15, 0x7, 0x8, 0x7, 0x9, 0x9}, {0x3, 0x3, 0x1, 0x8, 0x3, 0x8}, {0x3, 0x2, 0x1, 0xff, 0x10000, 0xcde}, {0xe, 0x80, 0xffffffff, 0x5, 0x3, 0x1c42a61c}, {0x8, 0xc8, 0x3, 0x2, 0x8, 0x8ddd}, {0x6, 0x4, 0x7, 0x4, 0xc, 0x568}, {0x0, 0x2, 0x8, 0x1, 0xffffffff, 0x748}, {0x5, 0x8, 0x9, 0xa463, 0x8, 0xfffffffd}, {0xe1d, 0x4, 0x200, 0x9, 0x7, 0x8f8}, {0x6df, 0xc0a, 0x0, 0xfff, 0x331, 0x520}, {0x8, 0x5, 0x1c, 0x8, 0x4, 0xffff}, {0x400, 0xb, 0x8, 0x8000, 0x7, 0xf}, {0xce, 0x7, 0xffffffff, 0x7, 0x2, 0x8}, {0x3, 0x5, 0xffffff42, 0x7fffffff, 0xba, 0x8}, {0x3, 0x7fff, 0x700, 0x2, 0xa18b, 0x6}, {0x7ff, 0x3, 0x7ff, 0x9, 0x7fff, 0x5}, {0x60, 0x9, 0x1, 0x3, 0x4, 0x4}, {0xffffffff, 0x7, 0x3, 0x8, 0xcbf1, 0x7}, {0xfffffffa, 0x9, 0x9, 0x8, 0x3}, {0xffff, 0x0, 0x8, 0x0, 0xad5, 0xffffffff}, {0xbe, 0x5, 0x40, 0xffffffff, 0x545, 0x1}, {0x8, 0xca8f, 0x6, 0x21d, 0x6, 0xde7}, {0x9, 0x8, 0x5, 0x9, 0x8, 0x6}, {0x80000001, 0xb7, 0x8, 0xffff, 0x5, 0x6}, {0x0, 0x2, 0x3, 0x0, 0x9, 0x7fff}, {0x7fff, 0x6, 0x8, 0x2, 0x4, 0xc}, {0xc0000000, 0x6, 0x8, 0x7fff, 0x4, 0x4}, {0x80000000, 0x5, 0x2, 0x4, 0x1, 0x9}, {0x2, 0x3b, 0x6, 0x1000, 0x15b4, 0xfff}, {0xc2, 0x337, 0x6, 0x17, 0x3, 0x733}, {0x8, 0xfff, 0x2, 0x3, 0x3, 0x4}, {0xc1c, 0x2, 0x5, 0x9, 0x6, 0x8d04}, {0x800, 0x7, 0xfffff3d1, 0xfffffe00, 0x101, 0x4}, {0xffff, 0x2, 0x4, 0x4, 0x3, 0x65}, {0xb3e, 0x373c, 0x2, 0x5, 0x953, 0x2aec}, {0xd, 0x400, 0x2, 0x1, 0xffff, 0x80}, {0x8, 0x100, 0xfff, 0x0, 0x4, 0xb}, {0x0, 0xe19, 0x81, 0x9, 0xdf3d, 0x1}, {0x3, 0x8, 0x1, 0x0, 0xb, 0x9}, {0x8, 0x8, 0x200, 0x2173, 0x5, 0x7fffffff}, {0x13, 0x0, 0xff, 0x3, 0xfffffffd, 0xb1e}, {0x9, 0x80000001, 0x0, 0x5, 0x5, 0x8}, {0x80000000, 0x6, 0x7, 0x0, 0x4, 0x1}, {0x3, 0x13, 0x80b4, 0x8, 0x5, 0x5}, {0x6, 0x0, 0x2, 0x7, 0x5, 0x3ff}, {0xfff, 0x4, 0x5, 0x713d, 0x4, 0x5}, {0xa9, 0x7, 0x1, 0xc1, 0x0, 0x1}, {0x1000, 0x2, 0x8023, 0x8, 0x3, 0x6}, {0x0, 0x4be, 0x0, 0x1, 0xd, 0x1}, {0xfffffff1, 0x2, 0x7, 0x9, 0x401, 0x9}, {0x1aa1, 0x2, 0x0, 0x3, 0xfc, 0x1}, {0xc466, 0xa4, 0x3, 0xc, 0x5, 0x100}, {0x200, 0x5, 0xc, 0x5, 0x5, 0xf4}, {0x8, 0x94, 0xe, 0x4, 0x7a8, 0x10001}, {0x1, 0x0, 0x2, 0x8, 0x4fb9, 0x7}, {0x2217, 0x4, 0x400, 0x1000, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x9, 0x9, 0x5}, {0x6, 0x80000001, 0x40, 0x0, 0x100, 0x6}, {0x4, 0x9, 0x5, 0x1, 0x6, 0x47}, {0x0, 0x2, 0x2, 0x2, 0xb, 0x7}, {0x1, 0x3, 0x7f, 0x2, 0xc79e}, {0x0, 0x7ff, 0x6, 0x3, 0x8, 0x8000}, {0xfc, 0x1, 0x4, 0x1, 0x3, 0x8000}, {0x8, 0x220a, 0x8, 0xe, 0x0, 0x200}, {0x5, 0xffffffff, 0xd31d, 0x3, 0x2, 0x9}, {0x5, 0x4, 0xac6, 0x4, 0x1, 0x6}, {0x6, 0x4, 0x3, 0x7, 0x7, 0x4}, {0x40, 0x1, 0x1, 0x9, 0x2, 0x1}, {0x8, 0x10, 0x5, 0x0, 0xbf}, {0x6, 0x4, 0x1, 0x6, 0x6da5, 0x2}, {0x9, 0x1, 0x10, 0x7f, 0x2, 0xb}, {0x7, 0x80000000, 0x1, 0x800, 0x1000, 0x4ed}, {0x9, 0x2, 0x6, 0x2a4, 0x81, 0x3}, {0x0, 0x0, 0xa8, 0x7, 0x3, 0x6}, {0xf04, 0x3, 0x7ff, 0x8000, 0x800, 0x9}, {0x2, 0x41, 0xe546, 0xffffffff, 0xa3, 0x30}, {0x6, 0x9000, 0x679b, 0x0, 0x10}, {0x0, 0xb147189, 0x1ff, 0x2, 0x1, 0xd05b}, {0xf00, 0xb, 0x1, 0x5, 0x3ff, 0x6}, {0x0, 0xf, 0xd6, 0x6, 0xc, 0x2}, {0x7, 0x4, 0x2, 0xdd97, 0x6, 0x3}, {0x5, 0x7f6b850, 0x6, 0x6, 0x7, 0x23ad}, {0x3, 0x8, 0xff, 0x9, 0x8, 0x9}, {0x1000, 0x10000, 0xe3f, 0x2, 0x1ff, 0x7fffffff}, {0x5, 0x3, 0xa, 0x9, 0x100, 0x7}, {0x4, 0x101, 0x9, 0xc2b5, 0x80000001, 0x80}, {0xfd, 0x1, 0x7, 0x5, 0x9}, {0x7, 0x800, 0x80, 0x0, 0xff, 0x9}, {0xfffffff1, 0x7, 0x0, 0xe73, 0xfffffff8, 0x80}, {0xbdec, 0x80000001, 0x4, 0xffffffac, 0x51db, 0x6}, {0x3, 0x1, 0x10, 0xdc, 0x318c, 0x5}, {0x8, 0x7, 0x1000000, 0x3, 0x9, 0x9}, {0x1, 0x1ff, 0x3f80000, 0xfffffff1, 0x0, 0x1}, {0x5, 0x8, 0xff, 0x447, 0x0, 0x6}, {0xc, 0x5, 0x3, 0x2, 0x0, 0x7}, {0x0, 0xfff, 0x9, 0xd, 0x8, 0x3}, {0x55, 0x3e83b353, 0x8, 0x0, 0x3, 0x2}, {0x2, 0x80000000, 0x1f0, 0x0, 0x7, 0x7f07f0ed}, {0xfffffc00, 0x7, 0x0, 0x2a7, 0x8, 0x9}, {0x7, 0x8, 0x4b009cb7, 0x5, 0x0, 0xfffffffc}, {0x4, 0xdcf1, 0x8, 0xf3b, 0x7, 0x2}, {0x2, 0x5, 0x400, 0x8, 0xf, 0x8}, {0x0, 0x5, 0x7fffffff, 0x6, 0x9, 0x7ff}, {0xfffffff8, 0xf, 0x0, 0x2400000, 0x7fffffff, 0x4}, {0xc181, 0xc, 0x1c58f0a0, 0x0, 0x3, 0x9}, {0x7, 0x6d2c, 0x7fff, 0x6, 0x6, 0x101}, {0x9, 0xf, 0x8000, 0x8, 0x1, 0x5}, {0x0, 0x0, 0x2, 0x2, 0xffffffff, 0x9}, {0xcc70, 0x4, 0x2, 0x4, 0x779d, 0xa}], [{0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x5}, {0x5}, {0x3, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x5}, {}, {0x1, 0x1}, {0x2}, {0x4}, {0x3}, {0x4}, {0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {}, {0x2}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {}, {0x1, 0x1}, {}, {}, {0x2}, {0x1}, {0x4, 0xd58b8ea4eaa67525}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x95b6864d4248b39c}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x1}, {}, {}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {}, {0x5}, {0x5}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x4, 0xfff, 0x20000000, 0x54, 0x1}, 0xb8, 0x2b, [{0x101, 0xff, 0x1000, 0x4, 0x2, 0x9b00}, {0xfffffc00, 0x6, 0x9, 0x89c5, 0x3, 0x3ff}, {0x4, 0x3754, 0x820, 0x4, 0x9, 0x1}, {0x7, 0x3, 0x9, 0x6, 0xd6b8, 0x4}]}, [{0xfffff17b, 0xffff, 0x6, 0x101, 0x80000001, 0xe19}, {0x401, 0x81, 0x6f, 0x3, 0x1824, 0x2609ec24}, {0x400, 0x3, 0x3, 0x10, 0x6, 0x1}, {0x7fffffff, 0xd4, 0x1ff, 0x1, 0x1, 0x7}, {0x2, 0x9, 0x8, 0x401, 0x1000, 0x6}, {0x8001, 0x2b, 0x800000, 0xca4a, 0x1, 0x6d0}, {0x1, 0x7ff, 0x4, 0x5a3, 0x573b, 0x6}, {0x4, 0x6, 0x1, 0x0, 0x8}, {0x1, 0xe, 0x8, 0x78, 0x1000, 0x5870}, {0x4, 0x1, 0x2, 0x3, 0x7fff, 0x1}, {0x8, 0x0, 0x5, 0x80000001, 0x6, 0x8}, {0xfffffff7, 0x81, 0x0, 0x7fffffff, 0x9, 0xc}, {0x0, 0xffffffff, 0x7, 0x2, 0x997, 0x7}, {0x5421, 0xf4, 0x8, 0x3, 0x2, 0xffffffff}, {0x6, 0xfffffffd, 0xffffffed, 0x6, 0x7, 0x1}, {0x1, 0x6, 0x3, 0x0, 0x183c, 0x8}, {0x2, 0xc, 0x7, 0x1, 0x2, 0x3}, {0x80000001, 0x5, 0x4, 0x216e4b9f, 0xb, 0x1}, {0x5, 0x4, 0x8, 0x9, 0x3, 0x9}, {0x2a, 0x54df, 0x8, 0x8c9d, 0x7ff, 0xa}, {0x3, 0x8, 0x4, 0x9, 0x7, 0x2}, {0x2, 0x200, 0xff, 0x8, 0x8000, 0x7}, {0x3, 0x2, 0x2, 0x200000, 0x6, 0x10000}, {0x8001, 0x2, 0xfffffff5, 0x5, 0xc, 0x1fe00000}, {0x2, 0x8, 0x1, 0x100, 0x9, 0x50000}, {0xb1, 0x1fd, 0x3, 0x81, 0x8, 0x2}, {0x0, 0x400, 0x1000, 0x6, 0x2, 0x2}, {0x7, 0x6, 0xffe, 0x10001, 0xd8, 0x8}, {0xfffffffd, 0x7, 0x2, 0x5, 0x6, 0x8000}, {0x5, 0x13e2, 0x3, 0x100, 0x5, 0x1}, {0x3, 0xf2, 0x82, 0x6, 0x6, 0x7}, {0x8, 0x4, 0x6a0, 0x7, 0x1, 0x5}, {0x7, 0x9, 0x8, 0x101, 0x10000, 0xf069}, {0x5, 0x6, 0x10000, 0x7fff, 0xe921, 0x8}, {0xa0e1685b, 0x7ed4, 0x5, 0xfff, 0x7d, 0xe450}, {0xb, 0x5, 0x800, 0x401, 0x6, 0x200}, {0x6, 0x10, 0x1, 0x1, 0xeec, 0x7fff}, {0x2, 0x4, 0x6, 0x1, 0x5, 0x1fffc000}, {0x2, 0x734, 0x64dfe209, 0x5, 0x200, 0x1ff}, {0x0, 0x5, 0x28dd3721, 0x4, 0xd009, 0x7}, {0x2, 0x5, 0x2, 0x5e6c4eee, 0x4, 0xd13}, {0x7f, 0x6, 0x1, 0xfff, 0x9, 0xa19}, {0xfffffffc, 0x707a9080, 0x43, 0x7, 0x9d, 0xa7}, {0x1, 0x0, 0x5, 0x2, 0xcf4, 0x8}, {0xf, 0x4, 0x7, 0x8001, 0xe03, 0xecd}, {0x9298, 0x8, 0xffff1126, 0x2, 0xa, 0xe}, {0x2, 0x2, 0x7f, 0x8, 0x80000000, 0x1ff}, {0x2, 0x0, 0x2, 0xd, 0x8, 0x6}, {0xfffffff9, 0x40, 0xffc9, 0x80000000, 0x3, 0x2}, {0x0, 0x2, 0x8, 0x5, 0xfff, 0x6}, {0x4, 0xfffffffa, 0x90, 0x81, 0x356c, 0x8}, {0x4, 0x400, 0xe3, 0x5, 0x4, 0xefa6}, {0x9, 0x9, 0x8, 0x6, 0x400, 0x1}, {0x7, 0x4, 0x7fff, 0x7, 0x2, 0x15}, {0x9, 0x0, 0x4, 0x7, 0x1000, 0x4}, {0x5, 0x1ff, 0x0, 0x3, 0x0, 0x6}, {0xa, 0xa, 0xff, 0x7, 0xffff1b95, 0x3}, {0x10001, 0x81, 0x7, 0x9, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x7, 0x2, 0x40}, {0x9, 0x8, 0x0, 0xe, 0x4, 0x8}, {0x1, 0x3, 0x7, 0x42, 0xe, 0x10}, {0x4, 0x2, 0xfff, 0xffff3967, 0x5, 0xffffffff}, {0x8, 0x4d, 0x7, 0xc3d, 0x25, 0x8001}, {0x8, 0x7f, 0xbdf, 0x9, 0x5c5f, 0x6ee1}, {0x101, 0x7, 0x0, 0x81, 0x1, 0x7f}, {0x9, 0xfff, 0x5, 0x5, 0x5, 0x15}, {0x5, 0x7, 0xfffffffe, 0x2, 0x8, 0x4}, {0x5, 0x80, 0x4, 0x9, 0x8, 0x3}, {0x0, 0x7f, 0x6, 0x7}, {0x9, 0x1, 0xfffffff7, 0xff, 0xfff, 0x4}, {0x0, 0x6, 0x6, 0x4, 0xfff, 0x80000001}, {0x0, 0xf80, 0x10000, 0x7f, 0x581, 0x100}, {0xb, 0xc91, 0x1, 0x81, 0x27d, 0x1}, {0x1, 0x472b, 0x6, 0x5, 0x24, 0x2}, {0x6, 0xa3, 0x6, 0x3793, 0x8, 0x3ff}, {0x6, 0x401, 0x7fff, 0x1, 0x1ff6, 0x7}, {0x9, 0x27197b7, 0x3, 0x2, 0x8, 0x9}, {0xfffff8fe, 0xc00, 0x2, 0x7, 0x800, 0x8000}, {0x0, 0x8, 0xc, 0x1, 0x401, 0xffffff6c}, {0x1000, 0x1, 0x9, 0x8, 0x6, 0x7}, {0xffff, 0x6, 0xf, 0x4, 0x9, 0x6}, {0x7fffffff, 0x5, 0x0, 0x3, 0x4, 0x45bd}, {0xed4, 0x6, 0x5, 0x2, 0xe43c, 0xde}, {0x80000001, 0x7, 0x10000, 0xc2, 0x1}, {0x100, 0xffffffff, 0x2, 0x8, 0x2, 0x6000}, {0xf, 0x8, 0x46201129, 0x100, 0xd, 0xad0}, {0x9, 0xfffffe00, 0x8, 0x2, 0x4, 0xffffffff}, {0x5, 0xb344, 0xea9, 0x0, 0x3, 0x100}, {0x6, 0xffff8578, 0x1, 0x7}, {0x7, 0x8, 0xffff23e7, 0x503d8736, 0x9, 0x8}, {0xf1, 0x7, 0x0, 0x6, 0x8, 0x3}, {0x80, 0x3, 0x0, 0xba2, 0x0, 0x10}, {0x80000000, 0x6, 0x817, 0x3, 0x9, 0x5}, {0x7, 0xfffffff9, 0x7, 0x6, 0x8, 0x4}, {0x5, 0x7fffffff, 0x8000, 0x5, 0x0, 0x2}, {0x8, 0x80, 0x128, 0x6, 0x80000000, 0x8000}, {0x100, 0x1ff, 0x1ed, 0x2, 0x3, 0x3}, {0x78, 0xc, 0x1a0, 0x5, 0x10, 0x6}, {0x8, 0x0, 0xb, 0x5fd, 0xffffffff, 0xfffffffd}, {0x5, 0x5, 0x7fff, 0x101, 0x64a9, 0xf5a}, {0x1, 0x1e, 0x6, 0x2, 0x9}, {0x3ff, 0x1, 0x9, 0x8, 0x4, 0xc}, {0x7, 0xc, 0x5, 0x7fffffff, 0xb95}, {0x9, 0x4, 0x2, 0x5, 0x100, 0xc}, {0x101, 0x8, 0x8, 0x1ff, 0x3, 0x100}, {0xeb, 0x2, 0x9, 0x2, 0x8b82, 0x6}, {0x8, 0x1, 0x3, 0x0, 0x4f, 0xd62f}, {0x7fff, 0x3, 0xd, 0xd3, 0x8000}, {0x0, 0x100, 0x5, 0x100, 0x7, 0x4}, {0xa0b7, 0x9e, 0x3ff, 0x7, 0x3, 0x9}, {0x7, 0x5, 0x81, 0x1, 0xffffffff, 0x80}, {0x33, 0xa92, 0x7, 0x7f, 0xd, 0x25}, {0x8, 0x0, 0x80, 0x5, 0x4, 0xcf8}, {0x7, 0x4, 0xb, 0x1000, 0x3, 0x6}, {0x2, 0x4, 0x4, 0x28a, 0x6, 0x3}, {0x6, 0x4, 0x47, 0x6, 0x5, 0x3}, {0xbcb9, 0x4, 0x6, 0x63, 0x7, 0x9b2c}, {0xffffffff, 0x7fff, 0xfffffc01, 0x8, 0x0, 0xc9e}, {0x5, 0xffff, 0x8, 0x200225a8, 0x0, 0x3}, {0x9, 0x0, 0x6bb, 0x40, 0x4e82, 0x8d}, {0x9, 0x5, 0xa, 0x8, 0x6, 0x1}, {0x1, 0x4000, 0x6, 0x7, 0x100, 0xb360}, {0x1, 0x5, 0x3ff, 0x0, 0x40, 0x40}, {0x80000000, 0x8, 0x2, 0x5, 0x7c0, 0x2}, {0xffffff81, 0x400, 0x800, 0x5, 0x0, 0xf}, {0x4, 0x10, 0x1, 0x7, 0x7, 0x4}, {0x1858, 0x4, 0x32e, 0x4, 0x1, 0x80}, {0x1, 0x80, 0x0, 0x2, 0xfff, 0x7f6d}], [{0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x7}, {0x0, 0x1}, {0x3}, {}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x2cb889d9d37b3323}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {}, {}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x1}, {0x2}, {0x3}, {0x2}, {0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x69c2ea27d71bdc2b, 0x1}, {0x1}, {0x5}, {}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x2}]}}]}, {0x8a, 0x6, "1c934343b691db4a84ea0d5f9ed4459199902edd62a35791b12d84a3e3e4645e71c203c166dc7fb361288c777012e67b4e37b328f5a644abf2609b4e22e1ae3fa9f5bcaf53d59680c1d73a9f5620561c5f150bbe544879fba762aea4552aa251ef1920e41dc8461120174f2c0b0c5b5a73d19b2fcb7f0f9426cd5e22fcf485330e96efab27c0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_connmark={0xb0, 0xe, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x400, 0x40, 0x0, 0x0, 0x2}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x0, 0xfffffff6, 0x4}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x4, 0x2, 0x100, 0x46a0}, 0xd8ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ff, 0xd, 0x6, 0xac78c40, 0x1}, 0x2aa}}]}, {0xf, 0x6, "221a18806cc7bd359c35fb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x5228}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x11, 0x0, 0x1, 0xf7, 0x6, @multicast}, 0x14) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = gettid() r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r5, @ANYBLOB="049c01000750050008001300", @ANYRES32=r6, @ANYBLOB="14000300766574e8305f766972745f7769666900"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) syz_emit_ethernet(0xe2, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000088a8050081001a000004bc422d761912d286b8992ee94e619722cd4d450685ddb1816c5baccef70f0b04c24740cfee4f1af583ba05b71af43badef7d16b14e3374963cc1e062df688b2db5b7151a08463c26bb4065a049d18e65b06820eeb065d9b174ed313c7a42fb0b6b7bc9937a305c9780a629a14016725e1221a250e274648619d6dc49f694c9a5f11029cb34ad2cca58d3c233ff233fe7961db3c0766cf7b4c0bdc4390f1312a6dc84a9d7c6e2e2541d444ffd1398d1bf309c802fc4e077b29126c25edf5cec0389b78f5c9054e50de1ad99df"], &(0x7f0000000140)={0x1, 0x4, [0xf52, 0x6ad, 0x1ca, 0x13e]}) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r13, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x90) sendmsg$unix(r10, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14"], 0x18}, 0xc800) sendmsg$NFT_BATCH(r0, &(0x7f0000000900)={&(0x7f0000000580), 0xc, &(0x7f00000008c0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELCHAIN={0xcc, 0x5, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xc2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xa}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x200}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}}, @NFT_MSG_DELOBJ={0x194, 0x14, 0xa, 0x402, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x34, 0x8, "b501aba063862221e6058685cccdee6d5035be1c4cada905c0cce7fa88ee9eea8e714e3903a86badfb9163a2b95c89ad"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0xec, 0x8, "ff0f5f243a0c33f3bf2f67ecd057adddc2510514300b4f05744dde594f7e66cc5537bbec6ca9295588f948b759a7d71e5b917c322b12c997d46ee471124bc75c599307621cf8bf9226a423ec2115df7e940a8d3bcd951aaac9946b77f84fdd4466190be3a410a4955ec3c64c9cd429bc918a0a1795f734be9605b3033c4204c074184b9a4f3b73729f3ad0498cdcfd082f8e537fb4586db7a2d8fe68b7ffc5efede91b44250d7c6efbbba973ecfb51ed1845695024d7f727fc670f86e8b517ad220b69e1c57cb2cc987bdb276fa6800d4c541ed4e87f676649d1e40b85a5ff001eb951524525c284"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x2c4}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$sock_int(r11, 0x1, 0x2a, &(0x7f0000000000), 0x4) r15 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r15, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000280001"], 0xb8}}, 0x0) recvmmsg(r11, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x2, 0x0) sendto(r10, 0x0, 0x0, 0x20000044, 0x0, 0x0) kernel console output (not intermixed with test programs): ing attributes in process `syz.2.1927'. [ 266.150012][T12515] syzkaller0: entered promiscuous mode [ 266.169325][T12515] syzkaller0: entered allmulticast mode [ 266.438243][T12546] netlink: 'syz.3.1938': attribute type 1 has an invalid length. [ 266.485290][T12542] geneve2: entered promiscuous mode [ 266.494637][T12542] geneve2: entered allmulticast mode [ 266.580499][ T9793] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 266.588976][ T9793] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 266.612698][T12552] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 266.629250][T12552] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 266.774328][ T9793] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 266.805936][ T9793] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 267.462279][T12611] netlink: 'syz.0.1957': attribute type 21 has an invalid length. [ 267.486222][T12611] IPv6: NLM_F_CREATE should be specified when creating new route [ 267.737262][T12627] vxcan1 speed is unknown, defaulting to 1000 [ 267.825859][T12639] netlink: 'syz.3.1967': attribute type 1 has an invalid length. [ 268.285962][T12660] syzkaller0: entered promiscuous mode [ 268.291653][T12660] syzkaller0: entered allmulticast mode [ 268.631508][T12673] netlink: 'syz.2.1977': attribute type 12 has an invalid length. [ 268.644808][T12673] __nla_validate_parse: 73 callbacks suppressed [ 268.644826][T12673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1977'. [ 268.659118][T12679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1978'. [ 268.672592][T12679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1978'. [ 268.691969][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1979'. [ 268.739765][T12682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1980'. [ 268.863162][T12682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1980'. [ 268.869325][T12686] bond7: Removing last arp target with arp_interval on [ 268.901606][T12691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1984'. [ 268.911172][T12691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1984'. [ 269.069345][T12705] vlan1: entered allmulticast mode [ 269.138083][T12709] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1992'. [ 269.451031][T12718] syzkaller0: entered promiscuous mode [ 269.456616][T12718] syzkaller0: entered allmulticast mode [ 272.102580][T12729] netlink: 'syz.4.1997': attribute type 1 has an invalid length. [ 272.110669][T12729] netlink: 16179 bytes leftover after parsing attributes in process `syz.4.1997'. [ 272.308772][T12739] netlink: 'syz.4.2002': attribute type 1 has an invalid length. [ 273.035488][T12791] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 273.044780][T12791] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 273.053201][T12791] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 273.246896][T12793] netlink: 'syz.3.2014': attribute type 1 has an invalid length. [ 273.258816][T12793] netlink: 'syz.3.2014': attribute type 2 has an invalid length. [ 273.334478][T12800] netlink: 'syz.3.2014': attribute type 1 has an invalid length. [ 273.353620][T12800] netlink: 'syz.3.2014': attribute type 2 has an invalid length. [ 273.480246][T12807] veth0_to_bridge: left allmulticast mode [ 273.492574][T12807] veth0_to_bridge: left promiscuous mode [ 273.499530][T12807] bridge0: port 3(veth0_to_bridge) entered disabled state [ 273.516108][T12807] bridge_slave_0: left allmulticast mode [ 273.521792][T12807] bridge_slave_0: left promiscuous mode [ 273.528002][T12807] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.540793][T12807] bridge_slave_1: left allmulticast mode [ 273.553620][T12807] bridge_slave_1: left promiscuous mode [ 273.559544][T12807] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.572336][T12807] bond0: (slave bond_slave_0): Releasing backup interface [ 273.586058][T12807] team0: Port device team_slave_0 removed [ 273.597037][T12807] team0: Port device team_slave_1 removed [ 273.603176][T12807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.611892][T12807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.621028][T12807] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 273.655405][T12811] team0: Mode changed to "loadbalance" [ 273.746251][T12825] sctp: [Deprecated]: syz.0.2020 (pid 12825) Use of int in max_burst socket option deprecated. [ 273.746251][T12825] Use struct sctp_assoc_value instead [ 273.969511][T12837] __nla_validate_parse: 6 callbacks suppressed [ 273.969529][T12837] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2024'. [ 274.342034][T12865] netlink: 'syz.1.2032': attribute type 1 has an invalid length. [ 274.452006][T12870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2034'. [ 274.505619][T12879] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.2036'. [ 274.606338][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2037'. [ 274.817864][T12904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2041'. [ 274.894795][T12911] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2043'. [ 274.926276][T12911] xt_HMARK: proto mask must be zero with L3 mode [ 274.958606][T12915] netlink: 'syz.0.2044': attribute type 4 has an invalid length. [ 275.051212][T12924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2048'. [ 275.256128][T12933] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2052'. [ 275.521898][T12960] IPVS: set_ctl: invalid protocol: 59 100.1.1.2:20004 [ 275.547017][T12964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2059'. [ 275.750255][T12984] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2064'. [ 276.149741][T13014] netlink: 'syz.2.2073': attribute type 178 has an invalid length. [ 276.482627][T13035] netlink: 'syz.4.2078': attribute type 1 has an invalid length. [ 276.538764][T13030] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 277.336431][T13083] sctp: [Deprecated]: syz.3.2090 (pid 13083) Use of int in maxseg socket option. [ 277.336431][T13083] Use struct sctp_assoc_value instead [ 277.401709][T13082] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 277.567838][T13100] bond6: entered allmulticast mode [ 277.574623][T13100] 8021q: adding VLAN 0 to HW filter on device bond6 [ 277.582193][T13100] bridge0: port 3(bond6) entered blocking state [ 277.588957][T13100] bridge0: port 3(bond6) entered disabled state [ 277.597897][T13100] bond6: entered promiscuous mode [ 277.669296][T13112] openvswitch: netlink: IP tunnel dst address not specified [ 277.910289][T13132] validate_nla: 1 callbacks suppressed [ 277.910307][T13132] netlink: 'syz.4.2107': attribute type 21 has an invalid length. [ 278.028100][T13141] gre0: entered promiscuous mode [ 278.037141][T13141] gre0: entered allmulticast mode [ 278.067305][T13144] SET target dimension over the limit! [ 278.264420][T13162] gretap1: entered promiscuous mode [ 278.274622][T13162] gretap1: entered allmulticast mode [ 278.572373][T13183] gre0: left promiscuous mode [ 278.588503][T13183] gre0: left allmulticast mode [ 278.617058][T13183] erspan0: left allmulticast mode [ 278.622736][T13183] sit0: left promiscuous mode [ 278.641357][T13183] veth0_to_team: left allmulticast mode [ 278.650293][T13198] block nbd0: not configured, cannot reconfigure [ 278.652461][T13183] team1: left promiscuous mode [ 278.665302][T13183] team1: left allmulticast mode [ 278.672169][T13183] ip6gre2: left promiscuous mode [ 278.683365][T13183] geneve2: left promiscuous mode [ 278.688329][T13183] geneve2: left allmulticast mode [ 278.746411][ T9794] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 278.818383][ T9794] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 278.853887][ T9794] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 278.862753][ T9794] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 278.918409][T13207] netlink: 'syz.1.2132': attribute type 1 has an invalid length. [ 279.059380][T13229] __nla_validate_parse: 85 callbacks suppressed [ 279.059391][T13229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2138'. [ 279.075542][T13229] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2138'. [ 279.253986][T13235] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 279.274166][T13237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2141'. [ 279.277040][T13235] tap0: tun_chr_ioctl cmd 1074025677 [ 279.404219][T13235] tap0: linktype set to 65534 [ 279.612514][T13254] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 279.645714][T13261] syzkaller1: entered promiscuous mode [ 279.682149][T13261] syzkaller1: entered allmulticast mode [ 279.720015][ T9794] tipc: Subscription rejected, illegal request [ 279.767213][T13270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2149'. [ 279.785705][T13270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2149'. [ 279.935749][T13280] netlink: 'syz.0.2150': attribute type 8 has an invalid length. [ 279.950159][T13280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2150'. [ 279.969503][T13282] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2154'. [ 280.019479][T13280] bond0: entered promiscuous mode [ 280.046838][T13280] gretap0: entered promiscuous mode [ 280.070567][T13280] bond0: left promiscuous mode [ 280.104938][T13280] gretap0: left promiscuous mode [ 280.143112][T13301] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 280.198899][T13290] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_tx_wq": -EINTR [ 280.318872][T13314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2160'. [ 280.450806][T13314] bond0: (slave dummy0): Releasing backup interface [ 280.712550][T13347] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2169'. [ 280.848595][T13361] xt_hashlimit: max too large, truncated to 1048576 [ 280.875468][T13362] xt_hashlimit: max too large, truncated to 1048576 [ 281.205249][T13370] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2178'. [ 281.335832][T13375] netlink: 'syz.2.2180': attribute type 58 has an invalid length. [ 281.576768][T13394] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 281.651106][T13403] netlink: 'syz.1.2186': attribute type 1 has an invalid length. [ 281.761642][T13408] bond8: (slave bridge4): making interface the new active one [ 281.770005][T13408] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 282.136397][T13440] netlink: 'syz.3.2195': attribute type 1 has an invalid length. [ 282.152746][T13438] netlink: 'syz.2.2194': attribute type 2 has an invalid length. [ 282.505508][T13476] netlink: 'syz.1.2206': attribute type 1 has an invalid length. [ 282.638054][T13486] netlink: 'syz.0.2207': attribute type 1 has an invalid length. [ 282.652849][T13471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.716447][T13476] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 283.087785][T13520] xt_CT: You must specify a L4 protocol and not use inversions on it [ 283.216143][T13520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.367444][T13535] bridge6: entered promiscuous mode [ 283.372840][T13535] bridge6: entered allmulticast mode [ 283.393624][T13533] veth1_to_bond: entered allmulticast mode [ 283.461244][T13533] bond0: (slave bond_slave_1): Releasing backup interface [ 283.558229][T13533] veth1_to_bond (unregistering): left allmulticast mode [ 283.650266][T13559] ip6t_srh: unknown srh invflags 4000 [ 283.958552][T13571] can: request_module (can-proto-0) failed. [ 284.341501][T13613] __nla_validate_parse: 8 callbacks suppressed [ 284.341518][T13613] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.2246'. [ 284.624897][T13634] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2251'. [ 284.789441][T13645] ipt_ECN: cannot use operation on non-tcp rule [ 285.037414][T13659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2259'. [ 285.070005][T13659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2259'. [ 285.314536][T13667] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2260'. [ 285.370320][T13667] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 285.446424][T13673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2262'. [ 285.461747][T13678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 285.583903][T13681] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2263'. [ 285.588719][T13686] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2267'. [ 285.708394][T13694] sctp: [Deprecated]: syz.2.2268 (pid 13694) Use of int in maxseg socket option. [ 285.708394][T13694] Use struct sctp_assoc_value instead [ 285.750504][T13686] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 285.788311][T13686] bond9 (unregistering): Released all slaves [ 285.796645][T13705] sctp: [Deprecated]: syz.4.2271 (pid 13705) Use of int in maxseg socket option. [ 285.796645][T13705] Use struct sctp_assoc_value instead [ 286.011391][T13722] netlink: 'syz.4.2273': attribute type 1 has an invalid length. [ 286.158863][T13726] bond7: (slave bridge8): making interface the new active one [ 286.171465][T13726] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 286.181383][T13729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2275'. [ 286.214302][T13734] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2277'. [ 286.397895][T13745] bond9: (slave gretap0): Device is not bonding slave [ 286.404819][T13745] bond9: option active_slave: invalid value (gretap0) [ 286.447046][T13745] bond9 (unregistering): Released all slaves [ 286.706887][T13777] bond8 (unregistering): Released all slaves [ 287.012903][T13803] tipc: Enabled bearer , priority 0 [ 287.028555][T13803] syzkaller0: entered promiscuous mode [ 287.034409][T13803] syzkaller0: entered allmulticast mode [ 287.053657][T13803] tipc: Resetting bearer [ 287.062503][T13802] tipc: Resetting bearer [ 287.089087][T13802] tipc: Disabling bearer [ 287.313926][T13835] netlink: 'syz.2.2299': attribute type 1 has an invalid length. [ 287.373091][T13835] bond7: (slave bridge7): making interface the new active one [ 287.381704][T13835] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 287.600151][T13853] netlink: 'syz.0.2303': attribute type 33 has an invalid length. [ 287.960782][T13875] netlink: 'syz.2.2310': attribute type 1 has an invalid length. [ 288.013203][T13881] netlink: zone id is out of range [ 288.397711][ T9791] nci: nci_rsp_packet: unknown rsp opcode 0x2e [ 288.449580][T13901] bond9: option all_slaves_active: invalid value (222) [ 288.472000][T13901] bond9 (unregistering): Released all slaves [ 289.428564][T13963] sctp: [Deprecated]: syz.3.2340 (pid 13963) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.428564][T13963] Use struct sctp_sack_info instead [ 289.436265][T13962] macvtap1: entered promiscuous mode [ 289.450350][T13962] vlan0: entered promiscuous mode [ 289.457091][T13962] macvtap1: entered allmulticast mode [ 289.462598][T13962] vlan0: entered allmulticast mode [ 289.468216][T13962] veth0_vlan: entered allmulticast mode [ 289.485060][T13962] macvtap2: entered promiscuous mode [ 289.490470][T13962] macvtap2: entered allmulticast mode [ 289.527436][T13971] C: renamed from team_slave_0 [ 289.534006][T13975] __nla_validate_parse: 16 callbacks suppressed [ 289.534022][T13975] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2342'. [ 289.551413][T13971] netlink: 'syz.1.2343': attribute type 1 has an invalid length. [ 289.560315][T13971] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 289.721033][T13978] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2344'. [ 289.809482][T13982] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2346'. [ 289.906194][T13987] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2346'. [ 289.915388][T13987] nbd: device at index 64 is going down [ 290.088689][T13993] ipt_ECN: cannot use operation on non-tcp rule [ 290.204685][T13999] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2350'. [ 290.211553][T14001] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2349'. [ 290.224098][T14000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2350'. [ 290.238102][T14001] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2349'. [ 290.271589][T14001] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2349'. [ 290.419552][T14016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2355'. [ 290.440784][T14016] netlink: 'syz.2.2355': attribute type 1 has an invalid length. [ 290.450758][T14016] netlink: 'syz.2.2355': attribute type 1 has an invalid length. [ 290.460106][T14016] netlink: 'syz.2.2355': attribute type 2 has an invalid length. [ 291.001984][T14062] bridge9: entered promiscuous mode [ 291.010825][T14062] bridge9: entered allmulticast mode [ 291.161794][T14081] dvmrp6: entered allmulticast mode [ 291.399502][T14111] syzkaller1: entered promiscuous mode [ 291.445180][T14111] syzkaller1: entered allmulticast mode [ 291.454603][T14112] netlink: 'syz.0.2381': attribute type 16 has an invalid length. [ 291.464537][T14112] netlink: 'syz.0.2381': attribute type 3 has an invalid length. [ 291.535975][T14118] netlink: 'syz.3.2385': attribute type 1 has an invalid length. [ 291.915837][T14135] netlink: 'syz.4.2388': attribute type 39 has an invalid length. [ 292.145999][T14147] syzkaller0: entered allmulticast mode [ 292.238007][T14151] netlink: 'syz.1.2394': attribute type 7 has an invalid length. [ 292.317511][T14154] veth0_to_bridge: entered promiscuous mode [ 292.359520][T14159] veth0_to_bridge: left promiscuous mode [ 292.460715][T14173] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 292.468142][T14177] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 292.470689][T14175] netlink: 'syz.1.2402': attribute type 5 has an invalid length. [ 292.533791][T14175] mac80211_hwsim hwsim11 ÿ: renamed from wlan1 [ 292.826704][T14205] syzkaller0: entered promiscuous mode [ 292.842302][T14207] netlink: 'syz.2.2412': attribute type 3 has an invalid length. [ 292.855522][T14207] netlink: 'syz.2.2412': attribute type 13 has an invalid length. [ 292.865195][T14207] netlink: 'syz.2.2412': attribute type 17 has an invalid length. [ 292.874075][T14205] syzkaller0: entered allmulticast mode [ 292.903942][T14211] netlink: 'syz.3.2413': attribute type 58 has an invalid length. [ 292.956861][T14207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.967008][T14207] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.976642][T14207] dummy0: left promiscuous mode [ 292.985498][T14207] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.033496][T14212] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 293.146814][T14222] syzkaller0: entered promiscuous mode [ 293.152328][T14222] syzkaller0: entered allmulticast mode [ 293.240270][T14224] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 293.254033][T14224] bond8 (unregistering): Released all slaves [ 293.727141][T14267] sch_fq: defrate 0 ignored. [ 293.889538][T14280] vxcan1 speed is unknown, defaulting to 1000 [ 294.415337][ T5150] Bluetooth: hci4: command 0x0405 tx timeout [ 294.661122][T14310] lo: entered allmulticast mode [ 294.666399][T14310] lo: left allmulticast mode [ 294.706331][T14310] º: renamed from veth1_vlan (while UP) [ 294.733058][T14312] __nla_validate_parse: 28 callbacks suppressed [ 294.733074][T14312] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2444'. [ 294.803841][T14317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2445'. [ 295.005949][T14326] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2449'. [ 295.037728][T14323] 8021q: adding VLAN 0 to HW filter on device bond9 [ 295.048953][T14326] SET target dimension over the limit! [ 295.055862][T14334] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2451'. [ 295.086304][T14334] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2451'. [ 295.108695][T14337] mac80211_hwsim hwsim5 ÿ: renamed from wlan1 [ 295.302119][T14352] xt_addrtype: ipv6 does not support BROADCAST matching [ 295.385107][ T9796] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.405960][ T9796] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.499847][ T9796] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.508728][ T9796] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.551016][T14358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2459'. [ 296.869836][T14381] syz_tun: entered allmulticast mode [ 296.883036][T14382] dvmrp8: entered allmulticast mode [ 296.905371][T14387] validate_nla: 6 callbacks suppressed [ 296.905389][T14387] netlink: 'syz.2.2464': attribute type 3 has an invalid length. [ 296.925999][T14387] netlink: 'syz.2.2464': attribute type 1 has an invalid length. [ 296.926296][T14382] syz_tun: left allmulticast mode [ 296.992788][T14390] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2466'. [ 297.022310][T14393] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2465'. [ 297.073349][T14398] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2466'. [ 297.127316][T14403] bond0: Caught tx_queue_len zero misconfig [ 297.253991][T14403] syzkaller1: entered promiscuous mode [ 297.270593][T14403] syzkaller1: entered allmulticast mode [ 297.297488][T14414] syzkaller0: entered promiscuous mode [ 297.311114][T14414] syzkaller0: entered allmulticast mode [ 297.406414][T14419] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2474'. [ 297.449650][T14418] 8021q: adding VLAN 0 to HW filter on device bond7 [ 297.460120][T14418] bond0: (slave bond7): Enslaving as an active interface with an up link [ 297.576158][T14438] netlink: 'syz.1.2478': attribute type 1 has an invalid length. [ 297.588781][T14439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.756613][T14449] gre0: entered promiscuous mode [ 297.761723][T14449] gre0: entered allmulticast mode [ 297.941926][T14457] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 298.164295][T14472] syzkaller0: entered allmulticast mode [ 298.298550][T14480] ip6t_srh: unknown srh match flags 5F28 [ 298.479478][T14490] º: renamed from veth1_vlan [ 298.570022][T14498] bond8: Removing last arp target with arp_interval on [ 298.638286][T14502] netlink: 'syz.0.2505': attribute type 21 has an invalid length. [ 298.702895][T14513] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 298.716054][T14513] bond8 (unregistering): Released all slaves [ 298.979063][T14530] netlink: 'syz.0.2509': attribute type 15 has an invalid length. [ 298.999671][ T9791] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 299.008200][T14530] netlink: 'syz.0.2509': attribute type 15 has an invalid length. [ 299.017894][ T9791] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 299.026921][ T9791] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 299.057392][ T9791] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 299.280732][T14555] sch_fq: defrate 0 ignored. [ 299.328163][T14557] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 299.402759][T14562] netlink: 'syz.0.2521': attribute type 33 has an invalid length. [ 300.276133][T14593] __nla_validate_parse: 16 callbacks suppressed [ 300.276150][T14593] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2534'. [ 300.284918][T14594] netlink: 'syz.0.2533': attribute type 13 has an invalid length. [ 300.294930][T14598] 8021q: VLANs not supported on ip_vti0 [ 300.498550][T14613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2539'. [ 300.674011][T14618] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2544'. [ 300.724035][T14618] netlink: 'syz.1.2544': attribute type 8 has an invalid length. [ 300.753918][T14619] netlink: 'syz.1.2544': attribute type 8 has an invalid length. [ 301.023779][T14645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2552'. [ 301.122122][ T5939] IPVS: starting estimator thread 0... [ 301.123833][T14651] x_tables: duplicate underflow at hook 2 [ 301.153928][T14645] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2552'. [ 301.246787][T14654] IPVS: using max 31 ests per chain, 74400 per kthread [ 301.478937][T14680] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 301.498574][T14680] batadv_slave_0: entered promiscuous mode [ 301.510247][T14684] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2565'. [ 301.518880][ T30] audit: type=1107 audit(1763462601.328:3): pid=14681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 301.534316][T14684] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2565'. [ 301.544387][T14680] debugfs: 'hsr1' already exists in 'hsr' [ 301.550628][T14680] Cannot create hsr debugfs directory [ 301.557898][T14686] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2564'. [ 301.567266][T14684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2565'. [ 301.577055][T14680] hsr1: Slave A (wlan0) is not up; please bring it up to get a fully working HSR network [ 301.591327][T14683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.608453][T14680] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 301.628578][T14680] hsr1: entered allmulticast mode [ 301.633926][T14680] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 301.643628][T14680] batadv_slave_0: entered allmulticast mode [ 301.695156][T14683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.807898][T14706] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2573'. [ 301.944308][T14717] syzkaller0: entered promiscuous mode [ 301.949821][T14717] syzkaller0: entered allmulticast mode [ 302.068521][T14729] nftables ruleset with unbound set [ 302.292484][T14742] validate_nla: 2 callbacks suppressed [ 302.292502][T14742] netlink: 'syz.2.2581': attribute type 2 has an invalid length. [ 302.307305][T14742] netlink: 'syz.2.2581': attribute type 1 has an invalid length. [ 302.316670][T14742] netlink: 'syz.2.2581': attribute type 1 has an invalid length. [ 302.324970][T14738] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 302.331513][T14742] netlink: 'syz.2.2581': attribute type 1 has an invalid length. [ 302.341752][T14738] 0ªî{X¹¦: entered allmulticast mode [ 302.347962][T14738] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 302.365103][T14742] netlink: 'syz.2.2581': attribute type 2 has an invalid length. [ 302.372909][T14742] netlink: 'syz.2.2581': attribute type 2 has an invalid length. [ 302.381537][T14742] netlink: 'syz.2.2581': attribute type 1 has an invalid length. [ 302.390405][T14742] netlink: 'syz.2.2581': attribute type 1 has an invalid length. [ 302.922803][T14773] vlan3: entered promiscuous mode [ 302.928765][T14773] vlan3: entered allmulticast mode [ 302.935122][T14773] hsr_slave_1: entered allmulticast mode [ 303.157646][T14773] vxcan1 speed is unknown, defaulting to 1000 [ 303.438801][T14803] Unsupported ieee802154 address type: 0 [ 303.450943][T14803] netlink: 'syz.4.2601': attribute type 29 has an invalid length. [ 303.484458][T14803] netlink: 'syz.4.2601': attribute type 29 has an invalid length. [ 303.710177][T14815] veth9: entered allmulticast mode [ 303.933982][T14835] bond10: invalid ARP target 0.0.0.0 specified for addition [ 303.951878][T14835] bond10: option arp_ip_target: invalid value (0) [ 303.971434][T14835] bond10 (unregistering): Released all slaves [ 304.235836][T14854] nft_compat: unsupported protocol 0 [ 304.633000][T14884] IPv6: NLM_F_CREATE should be specified when creating new route [ 304.641720][T14884] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 304.649008][T14884] IPv6: NLM_F_CREATE should be set when creating new route [ 304.656378][T14884] IPv6: NLM_F_CREATE should be set when creating new route [ 304.663632][T14884] IPv6: NLM_F_CREATE should be set when creating new route [ 304.770489][T14892] C: renamed from lo (while UP) [ 305.237623][T14916] bond0: (slave bond_slave_0): Releasing backup interface [ 305.249380][T14916] team0: Port device team_slave_0 removed [ 305.258498][T14916] team0: Port device team_slave_1 removed [ 305.268807][T14916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.277697][T14916] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 305.349153][T14918] vxcan1 speed is unknown, defaulting to 1000 [ 305.487865][T14925] __nla_validate_parse: 13 callbacks suppressed [ 305.487882][T14925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2643'. [ 305.493062][T14928] IPVS: length: 196 != 24 [ 305.722631][T14939] lo: Caught tx_queue_len zero misconfig [ 305.908315][T14946] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2649'. [ 306.028312][T14957] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2653'. [ 306.076565][T14957] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 306.110595][T14960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2655'. [ 306.120056][T14960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2655'. [ 306.248575][T14972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2657'. [ 306.289462][T14975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2659'. [ 306.402098][T14975] 8021q: adding VLAN 0 to HW filter on device bond10 [ 306.426193][T14975] bond0: (slave bond10): Enslaving as an active interface with an up link [ 306.723189][T15005] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2664'. [ 306.760901][T15008] erspan0: entered allmulticast mode [ 307.603002][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2676'. [ 307.732597][T15058] sctp: [Deprecated]: syz.1.2682 (pid 15058) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.732597][T15058] Use struct sctp_sack_info instead [ 307.817002][T15063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2684'. [ 307.833154][T15066] tipc: Enabling of bearer rejected, failed to enable media [ 308.203446][T15090] geneve3: entered promiscuous mode [ 308.210352][ T9791] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.234355][ T9791] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.251215][T15084] syzkaller0: entered promiscuous mode [ 308.259550][T15084] syzkaller0: entered allmulticast mode [ 308.287530][ T9791] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.295871][ T9791] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.375792][T15106] validate_nla: 5 callbacks suppressed [ 308.375809][T15106] netlink: 'syz.0.2698': attribute type 1 has an invalid length. [ 308.429598][T15106] bond8: (slave xfrm1): The slave device specified does not support setting the MAC address [ 308.440458][T15106] bond8: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 308.454184][T15106] bond8: (slave xfrm1): making interface the new active one [ 308.462402][T15106] bond8: (slave xfrm1): Enslaving as an active interface with an up link [ 308.598968][T15117] vxcan1 speed is unknown, defaulting to 1000 [ 308.931344][T15136] netlink: 'syz.3.2706': attribute type 29 has an invalid length. [ 309.236135][T15148] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:0 [ 310.259464][T15136] netlink: 'syz.3.2706': attribute type 29 has an invalid length. [ 310.273934][T15157] netlink: 'syz.4.2712': attribute type 2 has an invalid length. [ 310.312812][T15137] netlink: 'syz.3.2706': attribute type 29 has an invalid length. [ 310.323074][T15137] netlink: 'syz.3.2706': attribute type 29 has an invalid length. [ 310.766370][T15187] __nla_validate_parse: 11 callbacks suppressed [ 310.766387][T15187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2720'. [ 310.812364][T15192] netlink: 'syz.3.2718': attribute type 13 has an invalid length. [ 310.820664][T15192] netlink: 'syz.3.2718': attribute type 17 has an invalid length. [ 310.846244][T15192] gre0: left promiscuous mode [ 310.851115][T15192] gre0: left allmulticast mode [ 310.948358][T15192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 310.979286][T15197] tipc: Enabled bearer , priority 0 [ 310.995906][T15199] syzkaller0: entered promiscuous mode [ 311.002354][T15199] syzkaller0: entered allmulticast mode [ 311.018613][T15191] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 311.024537][T15203] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2725'. [ 311.049374][T15204] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 311.086640][T15191] tipc: Resetting bearer [ 311.121915][T15190] tipc: Resetting bearer [ 311.177556][T15190] tipc: Disabling bearer [ 311.219212][T15218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.917274][T15264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2744'. [ 312.296705][T15272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2746'. [ 313.057787][T15261] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 313.159942][T15274] netlink: 'syz.0.2747': attribute type 13 has an invalid length. [ 313.191925][T15280] netlink: 'syz.2.2750': attribute type 1 has an invalid length. [ 313.232825][T15274] gretap0: refused to change device tx_queue_len [ 313.272807][T15274] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 313.320362][T15288] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.2752'. [ 313.340233][T15288] syzkaller0: entered allmulticast mode [ 313.356213][T15288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2752'. [ 313.434038][T15292] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 313.447431][T15292] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 313.466499][T15294] netlink: ct family unspecified [ 313.471478][T15294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.508222][T15292] validate_nla: 2 callbacks suppressed [ 313.508239][T15292] netlink: 'syz.1.2753': attribute type 7 has an invalid length. [ 313.542332][T15292] netlink: 'syz.1.2753': attribute type 8 has an invalid length. [ 313.595815][T15304] netlink: 'syz.2.2759': attribute type 16 has an invalid length. [ 313.628021][T15304] netlink: 'syz.2.2759': attribute type 17 has an invalid length. [ 313.668892][T15304] 0ªî{X¹¦: left allmulticast mode [ 313.706202][T15304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 313.993789][T15339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2770'. [ 314.022986][T15336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2769'. [ 314.079728][T15344] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2772'. [ 314.142216][T15347] netlink: 'syz.4.2773': attribute type 7 has an invalid length. [ 314.245533][T15350] delete_channel: no stack [ 314.412747][T15363] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2780'. [ 314.510923][T15369] netlink: 'syz.4.2784': attribute type 5 has an invalid length. [ 314.619001][T15375] tc_dump_action: action bad kind [ 314.669736][T15385] netlink: 'syz.4.2788': attribute type 9 has an invalid length. [ 314.682622][T15387] netlink: 'syz.4.2788': attribute type 9 has an invalid length. [ 315.182359][T15429] can: request_module (can-proto-3) failed. [ 315.235921][T15434] netlink: zone id is out of range [ 315.241082][T15434] netlink: zone id is out of range [ 315.246529][T15434] netlink: zone id is out of range [ 315.314340][T15441] tipc: Enabling of bearer rejected, failed to enable media [ 316.109177][T15477] lo: entered promiscuous mode [ 316.139476][T15477] net_ratelimit: 411 callbacks suppressed [ 316.139495][T15477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.552971][T15502] __nla_validate_parse: 18 callbacks suppressed [ 316.552991][T15502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2824'. [ 316.601116][T15502] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2824'. [ 316.655111][ T5150] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 316.665159][ T5150] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 316.677342][ T5150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 316.685536][ T5150] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 316.697935][T15506] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 316.706442][ T5150] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 316.732838][T15506] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 316.781483][T15509] vxcan1 speed is unknown, defaulting to 1000 [ 316.835903][T15514] IPv6: sit3: Disabled Multicast RS [ 316.935081][T15522] netlink: 'syz.0.2831': attribute type 1 has an invalid length. [ 316.942857][T15522] netlink: 'syz.0.2831': attribute type 2 has an invalid length. [ 317.296553][T15542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2836'. [ 317.312304][T15542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2836'. [ 317.366526][T15549] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 317.426995][T15546] geneve5: entered promiscuous mode [ 317.432236][T15546] geneve5: entered allmulticast mode [ 317.481102][ T9781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 317.512820][ T9781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 317.550728][T15509] chnl_net:caif_netlink_parms(): no params data found [ 317.578178][ T9781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 317.597844][ T9781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 317.835248][T15569] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2841'. [ 317.942552][T15509] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.950099][T15509] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.962183][T15509] bridge_slave_0: entered allmulticast mode [ 317.981793][T15509] bridge_slave_0: entered promiscuous mode [ 317.995960][T15574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2843'. [ 318.014822][T15509] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.023425][T15509] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.038341][T15509] bridge_slave_1: entered allmulticast mode [ 318.052560][T15509] bridge_slave_1: entered promiscuous mode [ 318.169183][T15509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.188930][T15587] ip6tnl0: Caught tx_queue_len zero misconfig [ 318.209837][T15509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.248987][T15590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2848'. [ 318.326118][T15509] team0: Port device team_slave_0 added [ 318.346912][T15509] team0: Port device team_slave_1 added [ 318.484012][T15509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.490992][T15509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.517727][T15509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.531638][T15509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.538756][T15509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.567210][T15509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.613813][T15608] tipc: Enabled bearer , priority 0 [ 318.621149][T15612] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 318.671853][T15601] syzkaller0: entered promiscuous mode [ 318.680722][T15601] syzkaller0: entered allmulticast mode [ 318.765984][T15509] hsr_slave_0: entered promiscuous mode [ 318.772916][T15509] hsr_slave_1: entered promiscuous mode [ 318.780414][T15509] debugfs: 'hsr0' already exists in 'hsr' [ 318.787305][T15509] Cannot create hsr debugfs directory [ 318.813544][ T5150] Bluetooth: hci2: command tx timeout [ 318.830114][T15601] tipc: Resetting bearer [ 318.868391][T15617] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 318.896432][T15600] tipc: Resetting bearer [ 318.918878][T15600] tipc: Disabling bearer [ 318.937822][T15625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2859'. [ 319.412569][T15509] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.446031][T15509] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.598521][T15653] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 319.617447][T15653] bond11 (unregistering): Released all slaves [ 319.706381][T15509] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.772883][T15509] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.935032][T15509] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.964152][T15509] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.985073][T15686] validate_nla: 3 callbacks suppressed [ 319.985090][T15686] netlink: 'syz.2.2877': attribute type 2 has an invalid length. [ 320.023771][T15686] netlink: 119 bytes leftover after parsing attributes in process `syz.2.2877'. [ 320.073139][T15509] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.083623][T15509] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.129610][T15702] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2881'. [ 320.431145][T15509] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 320.480630][T15509] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 320.509413][T15509] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 320.526973][T15509] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 320.704719][T15509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.761652][T15509] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.784949][T15732] netlink: 'syz.2.2890': attribute type 13 has an invalid length. [ 320.899067][ T5150] Bluetooth: hci2: command tx timeout [ 321.052847][ T9797] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.060045][ T9797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.093761][ T9797] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.100970][ T9797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.181181][T15757] netlink: 'syz.4.2897': attribute type 1 has an invalid length. [ 321.189235][T15757] netlink: 'syz.4.2897': attribute type 11 has an invalid length. [ 321.213058][T15766] IPVS: length: 140 != 24 [ 321.362611][T15773] tipc: Enabling of bearer rejected, failed to enable media [ 321.569968][T15509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.589848][T15786] __nla_validate_parse: 3 callbacks suppressed [ 321.589864][T15786] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2905'. [ 321.621992][T15509] veth0_vlan: entered promiscuous mode [ 321.685302][T15509] veth1_vlan: entered promiscuous mode [ 321.733181][T15509] veth0_macvtap: entered promiscuous mode [ 321.748852][T15509] veth1_macvtap: entered promiscuous mode [ 321.777255][T15793] bond0: entered allmulticast mode [ 321.798724][T15509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.821344][T15509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.907794][ T9794] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.919017][ T9794] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.953907][ T9794] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.007453][ T9794] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.041944][T15800] netlink: 'syz.2.2910': attribute type 1 has an invalid length. [ 322.239121][T15814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2914'. [ 322.250839][T15814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2914'. [ 322.274908][T15814] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2914'. [ 322.292365][ T9781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.301376][ T9781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.342724][ T9781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.351238][ T9781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.428894][T15820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2917'. [ 322.539880][T15824] xt_CT: No such helper "snmp_trap" [ 322.660598][T15835] pim6reg: entered allmulticast mode [ 322.842564][T15852] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2925'. [ 322.973586][ T5150] Bluetooth: hci2: command tx timeout [ 322.989615][T15846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2925'. [ 323.009746][T15861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.100626][T15865] netlink: 189888 bytes leftover after parsing attributes in process `syz.1.2930'. [ 323.236288][T15873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2933'. [ 323.505688][T15891] bond9: option resend_igmp: invalid value (32767) [ 323.524470][T15897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2940'. [ 323.535401][T15891] bond9: option resend_igmp: allowed values 0 - 255 [ 323.547237][T15891] bond9 (unregistering): Released all slaves [ 324.031681][T15929] netlink: 'syz.0.2945': attribute type 29 has an invalid length. [ 324.042876][T15929] netlink: 'syz.0.2945': attribute type 29 has an invalid length. [ 324.054978][T15929] unsupported nla_type 58 [ 324.603967][T15967] xt_policy: output policy not valid in PREROUTING and INPUT [ 324.667415][T15973] batadv0: left allmulticast mode [ 324.683967][T15967] netlink: 'syz.1.2956': attribute type 15 has an invalid length. [ 324.704033][T15973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.937631][T15991] syzkaller0: entered promiscuous mode [ 324.950038][T15991] syzkaller0: entered allmulticast mode [ 324.958776][T15990] tipc: Enabled bearer , priority 0 [ 324.966311][T15990] tipc: Enabling of bearer rejected, already enabled [ 325.051797][T15991] tipc: Resetting bearer [ 325.064007][ T5150] Bluetooth: hci2: command tx timeout [ 325.099738][T15991] tipc: Disabling bearer [ 325.222597][T16019] bridge: RTM_NEWNEIGH with invalid ether address [ 325.290503][T16022] netlink: 'syz.3.2975': attribute type 1 has an invalid length. [ 326.029530][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 326.040262][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 326.048104][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 326.056604][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 326.067939][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 326.121950][T16054] vxcan1 speed is unknown, defaulting to 1000 [ 326.553593][T16054] chnl_net:caif_netlink_parms(): no params data found [ 326.871909][ T9798] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.894182][ T9798] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 326.989101][T16054] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.013443][T16054] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.031180][T16054] bridge_slave_0: entered allmulticast mode [ 327.070949][T16054] bridge_slave_0: entered promiscuous mode [ 327.080713][T16086] __nla_validate_parse: 9 callbacks suppressed [ 327.080731][T16086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2989'. [ 327.129677][T16054] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.146843][T16054] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.175823][T16054] bridge_slave_1: entered allmulticast mode [ 327.185035][T16054] bridge_slave_1: entered promiscuous mode [ 327.290077][ T9798] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.310052][ T9798] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 327.320697][T16106] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.2997'. [ 327.320728][T16106] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 327.366389][T16054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.440240][ T9798] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.455007][ T9798] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 327.527501][T16119] netlink: 'syz.4.3001': attribute type 30 has an invalid length. [ 327.529931][T16054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.686669][ T9798] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.715315][ T9798] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 327.852029][T16117] syzkaller0: entered promiscuous mode [ 327.873371][T16117] syzkaller0: entered allmulticast mode [ 327.977767][T16163] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3007'. [ 328.062882][T16054] team0: Port device team_slave_0 added [ 328.086988][T16054] team0: Port device team_slave_1 added [ 328.095068][ T5150] Bluetooth: hci4: command tx timeout [ 328.122085][T16163] nbd: socks must be embedded in a SOCK_ITEM attr [ 328.213900][T16054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.223121][T16054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.276634][T16054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.292655][T16054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.300914][T16054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.329096][T16054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.382369][T16172] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3011'. [ 328.542176][T16054] hsr_slave_0: entered promiscuous mode [ 328.551296][T16054] hsr_slave_1: entered promiscuous mode [ 328.557971][T16054] debugfs: 'hsr0' already exists in 'hsr' [ 328.563983][T16054] Cannot create hsr debugfs directory [ 328.737772][T16190] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3016'. [ 328.780898][T16194] syzkaller1: entered promiscuous mode [ 328.788311][T16194] syzkaller1: entered allmulticast mode [ 328.818955][T16194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3018'. [ 328.835176][T16194] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3018'. [ 329.047988][T16211] IPVS: set_ctl: invalid protocol: 89 127.0.0.1:20002 [ 329.078139][T16213] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3024'. [ 329.139861][T16215] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3024'. [ 329.276484][ T9798] bond3 (unregistering): (slave gre2): Releasing backup interface [ 329.310124][ T9798] dvmrp8 (unregistering): left allmulticast mode [ 329.371687][ T9798] team0: Port device geneve0 removed [ 329.573446][ T9798] bond8 (unregistering): (slave bridge4): Releasing active interface [ 329.819677][ T9798] bond0 (unregistering): (slave bond10): Releasing backup interface [ 329.828813][ T9798] bond0 (unregistering): Released all slaves [ 329.913059][ T9798] bond1 (unregistering): Released all slaves [ 329.926559][ T9798] bond2 (unregistering): Released all slaves [ 330.017832][ T9798] bond3 (unregistering): Released all slaves [ 330.037898][ T9798] bond4 (unregistering): Released all slaves [ 330.055638][ T9798] bond5 (unregistering): Released all slaves [ 330.082223][ T9798] bond6 (unregistering): Released all slaves [ 330.101073][T16223] netlink: 'syz.2.3027': attribute type 9 has an invalid length. [ 330.173560][ T5150] Bluetooth: hci4: command tx timeout [ 330.174761][ T9798] bond7 (unregistering): Released all slaves [ 330.191463][ T9798] bond8 (unregistering): Released all slaves [ 330.280036][ T9798] bond9 (unregistering): Released all slaves [ 330.362058][ T9798] bond10 (unregistering): Released all slaves [ 330.407688][T16209] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3024'. [ 330.598424][T16227] lo: entered promiscuous mode [ 330.604697][T16227] netlink: 'syz.0.3029': attribute type 2 has an invalid length. [ 330.612438][T16227] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 330.682667][T16232] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 330.712169][T16234] netlink: 'syz.3.3031': attribute type 1 has an invalid length. [ 331.414381][T16054] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 331.501844][T16054] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 331.552470][T16054] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 331.571268][T16054] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 331.699279][T16269] netlink: 'syz.3.3039': attribute type 1 has an invalid length. [ 331.769062][T16281] netlink: 'syz.4.3040': attribute type 1 has an invalid length. [ 331.837476][T16284] bond9 (unregistering): Released all slaves [ 331.874481][T16271] tipc: Enabled bearer , priority 0 [ 331.968631][T16271] syzkaller0: entered promiscuous mode [ 331.974474][T16271] syzkaller0: entered allmulticast mode [ 331.980840][T16271] tipc: Resetting bearer [ 331.992149][ T9798] tipc: Left network mode [ 331.996838][T16054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.019762][T16270] tipc: Resetting bearer [ 332.050696][ T9798] IPVS: stopping backup sync thread 15204 ... [ 332.268532][ T5150] Bluetooth: hci4: command tx timeout [ 333.255964][T16270] tipc: Disabling bearer [ 333.270063][T16054] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.288368][ T5891] tipc: Node number set to 1529057595 [ 333.378393][ T9794] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.385599][ T9794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.420723][T16312] __nla_validate_parse: 4 callbacks suppressed [ 333.420741][T16312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3048'. [ 333.440400][ T9794] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.447600][ T9794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.450335][T16312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3048'. [ 333.507243][T16314] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 333.641442][T16323] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3050'. [ 333.675876][T16326] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3051'. [ 333.692252][T16326] netlink: 'syz.3.3051': attribute type 10 has an invalid length. [ 333.772913][T16330] netlink: 'syz.3.3051': attribute type 10 has an invalid length. [ 333.803400][T16326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.812490][T16330] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3051'. [ 333.856338][T16326] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 333.889506][T16330] batadv0: entered promiscuous mode [ 333.897944][T16330] batadv0: entered allmulticast mode [ 333.905740][T16330] bond0: (slave batadv0): Releasing backup interface [ 333.907853][T16340] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3056'. [ 333.928827][T16330] bridge0: port 3(batadv0) entered blocking state [ 333.936580][T16330] bridge0: port 3(batadv0) entered disabled state [ 334.056612][ T9781] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 334.066448][ T9781] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 334.266897][T16361] netlink: 'syz.2.3061': attribute type 21 has an invalid length. [ 334.291015][T16361] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3061'. [ 334.333536][ T5150] Bluetooth: hci4: command tx timeout [ 334.350547][T16368] netlink: 'syz.0.3064': attribute type 1 has an invalid length. [ 334.500104][T16054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.697938][T16385] sit2: entered promiscuous mode [ 334.703020][T16385] sit2: entered allmulticast mode [ 334.835524][T16398] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3072'. [ 334.846233][T16397] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3071'. [ 334.851664][T16054] veth0_vlan: entered promiscuous mode [ 334.869155][T16397] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3071'. [ 334.933811][T16054] veth1_vlan: entered promiscuous mode [ 335.166921][ T9798] hsr_slave_0: left promiscuous mode [ 335.184831][ T9798] hsr_slave_1: left promiscuous mode [ 335.204365][ T9798] vlan0: left allmulticast mode [ 335.209283][ T9798] veth0_vlan: left allmulticast mode [ 335.221533][ T9798] vlan0: left promiscuous mode [ 335.445718][T16428] netlink: 'syz.2.3079': attribute type 75 has an invalid length. [ 335.861567][T16407] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 335.864804][T16420] netlink: 'syz.3.3078': attribute type 1 has an invalid length. [ 335.925584][T16054] veth0_macvtap: entered promiscuous mode [ 335.936796][T16054] veth1_macvtap: entered promiscuous mode [ 335.960211][T16054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.972453][T16054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.036433][ T9791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.073034][ T9791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.109903][ T9791] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.136959][ T9791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.212125][T16433] : renamed from bridge_slave_0 (while UP) [ 336.412157][ T9798] IPVS: stop unused estimator thread 0... [ 336.465547][T16456] syzkaller0: entered promiscuous mode [ 336.471046][T16456] syzkaller0: entered allmulticast mode [ 336.569998][ T9797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.583498][ T9797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.623060][T16470] vlan3: entered promiscuous mode [ 336.628407][T16470] vlan3: entered allmulticast mode [ 336.634640][T16470] hsr_slave_1: entered allmulticast mode [ 336.681860][ T9798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.693047][ T9798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.773221][T16483] xfrm2: entered allmulticast mode [ 337.234919][T16515] IPVS: length: 239 != 24 [ 337.769020][T16538] bridge0: port 3(batadv0) entered disabled state [ 337.780228][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.785580][T16540] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 337.803828][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.812549][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.821897][T16538] bridge_slave_1: left allmulticast mode [ 337.834320][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.845506][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 337.856678][T16538] bridge_slave_1: left promiscuous mode [ 337.863306][T16538] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.910035][T16538] bridge_slave_0: left allmulticast mode [ 337.931752][T16538] bridge_slave_0: left promiscuous mode [ 337.942725][T16538] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.995920][ T9794] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.006765][ T9794] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 338.017298][ T9794] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.141155][ T9794] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.157689][ T9794] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 338.170618][ T9794] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.226401][T16539] vxcan1 speed is unknown, defaulting to 1000 [ 338.250344][ T9794] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.267771][ T9794] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 338.281826][ T9794] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.398250][ T9794] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.422351][ T9794] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 338.457092][ T9794] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.818126][ T9794] bond6: left allmulticast mode [ 338.823071][ T9794] bond6: left promiscuous mode [ 338.835054][ T9794] bridge0: port 4(bond6) entered disabled state [ 338.835353][T16598] __nla_validate_parse: 13 callbacks suppressed [ 338.835367][T16598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3121'. [ 339.017748][ T9794] bond8 (unregistering): (slave xfrm1): Releasing backup interface [ 339.121682][ T9794] bond4 (unregistering): (slave gretap1): Releasing active interface [ 339.690133][ T9794] bond0 (unregistering): (slave bond7): Releasing backup interface [ 339.700621][ T9794] bond0 (unregistering): Released all slaves [ 339.714590][ T9794] bond1 (unregistering): Released all slaves [ 339.728408][ T9794] bond2 (unregistering): Released all slaves [ 339.746286][ T9794] bond3 (unregistering): Released all slaves [ 339.870309][ T9794] bond4 (unregistering): Released all slaves [ 339.882978][ T9794] bond5 (unregistering): Released all slaves [ 339.936232][ T5834] Bluetooth: hci0: command tx timeout [ 340.002656][ T9794] bond6 (unregistering): Released all slaves [ 340.088248][ T9794] bond7 (unregistering): Released all slaves [ 340.101567][ T9794] bond8 (unregistering): Released all slaves [ 340.115965][ T9794] bond9 (unregistering): Released all slaves [ 340.138842][T16598] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 340.151567][T16598] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 340.160316][T16598] gretap1: entered promiscuous mode [ 340.166744][T16598] gretap1: entered allmulticast mode [ 340.220637][ T9794] 9: left promiscuous mode [ 340.283822][T16619] tipc: Started in network mode [ 340.288750][T16619] tipc: Node identity ae0f6a53faa, cluster identity 4711 [ 340.300369][T16619] tipc: Enabled bearer , priority 0 [ 340.313927][T16620] syzkaller0: entered promiscuous mode [ 340.319433][T16620] syzkaller0: entered allmulticast mode [ 340.380872][T16628] tipc: Resetting bearer [ 340.430893][ T9794] tipc: Left network mode [ 340.465264][T16642] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3130'. [ 340.506567][T16646] Unsupported ieee802154 address type: 0 [ 340.514072][T16642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3130'. [ 340.534843][T16628] tipc: Resetting bearer [ 340.627994][T16628] tipc: Disabling bearer [ 341.057999][T16539] chnl_net:caif_netlink_parms(): no params data found [ 341.548519][ T9794] mac80211_hwsim hwsim3 wlan0 (unregistering): left promiscuous mode [ 341.613220][T16539] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.626595][T16539] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.635675][T16539] bridge_slave_0: entered allmulticast mode [ 341.649871][T16539] bridge_slave_0: entered promiscuous mode [ 341.677097][T16539] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.693604][T16539] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.700886][T16539] bridge_slave_1: entered allmulticast mode [ 341.717257][T16539] bridge_slave_1: entered promiscuous mode [ 341.834781][T16539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.926023][T16539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.998150][T16729] xt_CT: You must specify a L4 protocol and not use inversions on it [ 342.009322][ T9794] batadv_slave_0: left promiscuous mode [ 342.016938][ T5150] Bluetooth: hci0: command tx timeout [ 342.031854][ T9794] hsr_slave_0: left promiscuous mode [ 342.044300][T16731] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3151'. [ 342.053762][ T9794] hsr_slave_1: left promiscuous mode [ 342.224361][T16737] netlink: 'syz.3.3152': attribute type 27 has an invalid length. [ 342.232348][T16737] netlink: 'syz.3.3152': attribute type 4 has an invalid length. [ 342.240571][T16737] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3152'. [ 342.560918][ T9795] smc: removing ib device syz2 [ 342.752451][T16539] team0: Port device team_slave_0 added [ 342.842688][T16731] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 342.967757][T16739] ip6gretap2: entered allmulticast mode [ 343.084043][T16539] team0: Port device team_slave_1 added [ 343.112484][T16747] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3155'. [ 343.338019][T16539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.353619][T16539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.414900][T16759] netlink: 'syz.3.3161': attribute type 105 has an invalid length. [ 343.441186][T16539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.460328][T16756] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3158'. [ 343.473847][T16755] netdevsim netdevsim1: Direct firmware load for /.€ failed with error -2 [ 343.516985][T16755] netdevsim netdevsim1: Falling back to sysfs fallback for: /.€ [ 343.526265][T16539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.538574][T16539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.578614][T16539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.591258][T16769] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3161'. [ 343.762443][T16771] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 343.796276][T16775] netlink: 'syz.1.3164': attribute type 2 has an invalid length. [ 343.829539][T16775] netlink: 'syz.1.3164': attribute type 11 has an invalid length. [ 343.844292][T16775] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3164'. [ 343.992260][T16539] hsr_slave_0: entered promiscuous mode [ 344.018672][T16539] hsr_slave_1: entered promiscuous mode [ 344.029470][T16539] debugfs: 'hsr0' already exists in 'hsr' [ 344.047455][T16539] Cannot create hsr debugfs directory [ 344.093825][ T5150] Bluetooth: hci0: command 0x040f tx timeout [ 344.352431][T16797] netlink: 'syz.4.3171': attribute type 1 has an invalid length. [ 344.449179][T16797] 8021q: adding VLAN 0 to HW filter on device bond9 [ 344.475543][T16798] 8021q: adding VLAN 0 to HW filter on device bond9 [ 344.489712][T16798] bond9: (slave vxcan7): The slave device specified does not support setting the MAC address [ 344.502712][T16798] bond9: (slave vxcan7): Error -95 calling set_mac_address [ 344.548461][T16802] sit0: entered promiscuous mode [ 344.579336][T16802] netlink: 'syz.2.3172': attribute type 1 has an invalid length. [ 344.610147][T16802] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3172'. [ 344.678225][ T9794] IPVS: stop unused estimator thread 0... [ 344.822377][T16826] xt_CT: You must specify a L4 protocol and not use inversions on it [ 345.053686][T16845] netlink: 'syz.3.3182': attribute type 21 has an invalid length. [ 345.082531][T16845] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3182'. [ 345.119566][T16845] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3182'. [ 345.148232][T16845] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3182'. [ 345.348217][T16539] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 345.367678][T16539] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 345.394596][T16539] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 345.415527][T16539] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 345.643010][T16539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.681256][T16539] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.698019][ T9793] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.705235][ T9793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.745908][ T9794] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.753125][ T9794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.797360][T16889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3195'. [ 345.844162][T16889] 8021q: VLANs not supported on ip6_vti0 [ 345.929416][T16889] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3195'. [ 346.019082][T16889] bond1 (unregistering): Released all slaves [ 346.096932][T16909] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3201'. [ 346.122551][T16909] bond9 (unregistering): Released all slaves [ 346.175776][ T5834] Bluetooth: hci0: command 0x040f tx timeout [ 346.389442][T16539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.536685][T16933] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3207'. [ 346.538758][T16539] veth0_vlan: entered promiscuous mode [ 346.588673][T16539] veth1_vlan: entered promiscuous mode [ 346.692443][T16539] veth0_macvtap: entered promiscuous mode [ 346.699214][T16942] netlink: 'syz.4.3212': attribute type 3 has an invalid length. [ 346.710744][T16944] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3210'. [ 346.716531][T16539] veth1_macvtap: entered promiscuous mode [ 346.747201][T16938] bridge1: entered promiscuous mode [ 346.765356][T16938] bridge1: entered allmulticast mode [ 346.789344][T16938] team0: Port device bridge1 added [ 346.829467][T16938] bridge0: port 3(team0) entered blocking state [ 346.836831][T16938] bridge0: port 3(team0) entered disabled state [ 346.843777][T16938] team0: entered allmulticast mode [ 346.849032][T16938] team_slave_0: entered allmulticast mode [ 346.857081][T16938] team_slave_1: entered allmulticast mode [ 346.870583][T16938] team0: entered promiscuous mode [ 346.876067][T16938] team_slave_0: entered promiscuous mode [ 346.881943][T16938] team_slave_1: entered promiscuous mode [ 346.888972][T16938] bridge0: port 3(team0) entered blocking state [ 346.895617][T16938] bridge0: port 3(team0) entered forwarding state [ 346.912624][T16539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.943105][T16539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.002999][ T9796] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.012230][ T9796] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.022418][ T9796] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.041258][ T9796] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.193625][ T9796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.205011][ T9796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.270815][ T9795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.297894][ T9795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.430272][T16974] vlan0: entered promiscuous mode [ 347.435701][T16974] vlan0: entered allmulticast mode [ 347.447601][T16974] veth0_vlan: entered allmulticast mode [ 348.253442][ T5834] Bluetooth: hci0: command 0x040f tx timeout [ 348.345536][ T5150] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 348.355096][ T5150] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 348.362997][ T5150] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 348.371730][ T5150] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 348.379640][ T5150] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 348.849689][T17024] netlink: 'syz.1.3235': attribute type 33 has an invalid length. [ 348.868897][T17024] __nla_validate_parse: 4 callbacks suppressed [ 348.868914][T17024] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3235'. [ 348.884854][T17028] netlink: 'syz.3.3238': attribute type 4 has an invalid length. [ 348.894361][T17034] delete_channel: no stack [ 348.921019][T16996] chnl_net:caif_netlink_parms(): no params data found [ 348.959331][T17024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3235'. [ 349.395923][T16996] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.407565][T16996] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.425851][T16996] bridge_slave_0: entered allmulticast mode [ 349.441334][T17080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3247'. [ 349.456272][T16996] bridge_slave_0: entered promiscuous mode [ 349.466074][T16996] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.485800][T16996] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.503705][T16996] bridge_slave_1: entered allmulticast mode [ 349.517775][T16996] bridge_slave_1: entered promiscuous mode [ 349.580543][T17079] syzkaller1: entered promiscuous mode [ 349.604198][T17079] syzkaller1: entered allmulticast mode [ 349.671104][T17090] GUP no longer grows the stack in syz.2.3248 (17090): 200000003000-20000000a000 (200000001000) [ 349.688375][T17090] CPU: 0 UID: 0 PID: 17090 Comm: syz.2.3248 Not tainted syzkaller #0 PREEMPT(full) [ 349.688400][T17090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 349.688415][T17090] Call Trace: [ 349.688422][T17090] [ 349.688430][T17090] dump_stack_lvl+0x189/0x250 [ 349.688460][T17090] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.688483][T17090] ? __pfx__printk+0x10/0x10 [ 349.688497][T17090] ? find_vma+0xe7/0x160 [ 349.688533][T17090] __get_user_pages+0x2470/0x2a00 [ 349.688580][T17090] ? __gup_longterm_locked+0xc63/0x1660 [ 349.688600][T17090] ? down_read_killable+0x1d1/0x350 [ 349.688624][T17090] __gup_longterm_locked+0xde4/0x1660 [ 349.688651][T17090] ? try_grab_folio_fast+0x1bf/0x6a0 [ 349.688689][T17090] ? gup_fast_fallback+0x1b86/0x22d0 [ 349.688714][T17090] gup_fast_fallback+0x1d65/0x22d0 [ 349.688769][T17090] ? __pfx_gup_fast_fallback+0x10/0x10 [ 349.688785][T17090] ? __mutex_lock+0x335/0x1350 [ 349.688814][T17090] ? is_valid_gup_args+0x11f/0x200 [ 349.688835][T17090] ? get_user_pages_fast+0x4d/0xb0 [ 349.688857][T17090] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 349.688885][T17090] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 349.688901][T17090] ? wait_for_space+0x248/0x2d0 [ 349.688919][T17090] iov_iter_get_pages2+0x5e/0xa0 [ 349.688941][T17090] __se_sys_vmsplice+0x548/0x10d0 [ 349.688976][T17090] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 349.688996][T17090] ? __pfx_futex_wake+0x10/0x10 [ 349.689085][T17090] ? do_syscall_64+0xbe/0xfa0 [ 349.689112][T17090] do_syscall_64+0xfa/0xfa0 [ 349.689130][T17090] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.689152][T17090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.689169][T17090] ? clear_bhb_loop+0x60/0xb0 [ 349.689189][T17090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.689206][T17090] RIP: 0033:0x7f434398f6c9 [ 349.689232][T17090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.689247][T17090] RSP: 002b:00007f4344889038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 349.689272][T17090] RAX: ffffffffffffffda RBX: 00007f4343be5fa0 RCX: 00007f434398f6c9 [ 349.689283][T17090] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 349.689293][T17090] RBP: 00007f4343a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 349.689304][T17090] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 349.689314][T17090] R13: 00007f4343be6038 R14: 00007f4343be5fa0 R15: 00007ffeedf0bf58 [ 349.689345][T17090] [ 349.701184][T17090] netlink: 'syz.2.3248': attribute type 1 has an invalid length. [ 349.983133][T16996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.007299][T16996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.129807][T17106] netlink: 'syz.2.3253': attribute type 1 has an invalid length. [ 350.135725][T16996] team0: Port device team_slave_0 added [ 350.149322][T17108] netlink: 'syz.1.3254': attribute type 1 has an invalid length. [ 350.186950][T17111] netlink: 'syz.0.3255': attribute type 1 has an invalid length. [ 350.187705][T16996] team0: Port device team_slave_1 added [ 350.280566][T17112] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 350.295302][T17112] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 350.319256][T17108] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3254'. [ 350.444608][T17117] 8021q: VLANs not supported on vcan0 [ 350.493676][ T5150] Bluetooth: hci5: command tx timeout [ 350.511484][T16996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.556935][T16996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.618602][T16996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.649530][T16996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.670060][T16996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.716404][T16996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.760432][T17135] SET target dimension over the limit! [ 350.918105][T16996] hsr_slave_0: entered promiscuous mode [ 350.925614][T16996] hsr_slave_1: entered promiscuous mode [ 350.932276][T16996] debugfs: 'hsr0' already exists in 'hsr' [ 350.938892][T16996] Cannot create hsr debugfs directory [ 351.344200][T17156] netlink: 'syz.3.3265': attribute type 9 has an invalid length. [ 351.560445][T16996] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.572811][T16996] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.766157][T16996] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.781398][T16996] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.889794][T17189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3276'. [ 351.912193][T16996] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.957404][T16996] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.964002][T17192] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3277'. [ 352.008357][T17197] netlink: 'syz.2.3278': attribute type 3 has an invalid length. [ 352.028338][T17197] netlink: 'syz.2.3278': attribute type 3 has an invalid length. [ 352.078039][T16996] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.097109][T16996] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.181553][T17209] netlink: 'syz.2.3281': attribute type 1 has an invalid length. [ 352.376133][T17220] bond10: entered promiscuous mode [ 352.381591][T17220] macvlan4: entered promiscuous mode [ 352.387113][T17220] macvlan4: entered allmulticast mode [ 352.392583][T17220] bond10: entered allmulticast mode [ 352.398545][T17220] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 352.408487][T17220] bond10: left promiscuous mode [ 352.475826][T17225] xt_TCPMSS: Only works on TCP SYN packets [ 352.519689][T16996] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 352.542934][T16996] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 352.558984][T16996] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 352.573608][ T5830] Bluetooth: hci5: command tx timeout [ 352.601601][T16996] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 352.740030][T16996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.783975][T16996] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.802418][ T9794] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.809647][ T9794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.820899][T17251] xt_ipcomp: unknown flags 1D [ 352.846421][ T9795] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.853697][ T9795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.853937][T17251] IPv6: NLM_F_CREATE should be specified when creating new route [ 353.038904][T17260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.231338][T17268] syzkaller0: entered promiscuous mode [ 353.239235][T17268] syzkaller0: entered allmulticast mode [ 353.311586][T17276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3299'. [ 353.332993][T17276] hsr_slave_0: left promiscuous mode [ 353.342719][T17276] hsr_slave_1: left promiscuous mode [ 353.416650][T16996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.758059][T17302] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3306'. [ 353.866315][T16996] veth0_vlan: entered promiscuous mode [ 353.886308][T16996] veth1_vlan: entered promiscuous mode [ 353.906715][T17309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3308'. [ 353.940419][T17309] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3308'. [ 353.962441][T16996] veth0_macvtap: entered promiscuous mode [ 353.977939][T16996] veth1_macvtap: entered promiscuous mode [ 353.999417][T16996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.033661][T16996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.061168][ T9793] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.091842][ T9793] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.128787][ T9793] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.157793][ T9793] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.173187][T17313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3310'. [ 354.175177][T17314] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3310'. [ 354.241727][T17314] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3310'. [ 354.253190][T17314] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3310'. [ 354.279998][T17314] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3310'. [ 354.307059][T17314] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3310'. [ 354.335719][T17314] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3310'. [ 354.345285][T17314] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3310'. [ 354.440935][ T9793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.461663][ T9793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.538983][ T9793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.554719][ T9793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.654763][ T5830] Bluetooth: hci5: command 0x040f tx timeout [ 354.978739][T17351] netlink: 'syz.3.3321': attribute type 11 has an invalid length. [ 355.150599][T17361] syzkaller1: entered promiscuous mode [ 355.156439][T17361] syzkaller1: entered allmulticast mode [ 355.175840][T17361] veth1_to_bond: entered allmulticast mode [ 355.240157][T17361] bond0: (slave bond_slave_1): Releasing backup interface [ 355.386374][T17361] veth1_to_bond (unregistering): left allmulticast mode [ 355.563592][T17383] bond0: entered allmulticast mode [ 355.573579][T17383] bond_slave_0: entered allmulticast mode [ 355.579513][T17383] bond_slave_1: entered allmulticast mode [ 355.794759][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 355.804367][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 355.812171][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 355.818762][T17377] syzkaller0: entered promiscuous mode [ 355.834811][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 355.844669][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 355.885558][T17377] syzkaller0: entered allmulticast mode [ 356.079909][ T5884] IPVS: starting estimator thread 0... [ 356.131508][T17412] netlink: 'syz.1.3339': attribute type 5 has an invalid length. [ 356.208428][T17410] IPVS: using max 38 ests per chain, 91200 per kthread [ 356.743398][ T5830] Bluetooth: hci5: command 0x040f tx timeout [ 357.351235][ T9795] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.393415][T17420] netlink: 'syz.4.3340': attribute type 5 has an invalid length. [ 357.582589][ T9795] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.678066][T17437] netlink: 'syz.1.3345': attribute type 1 has an invalid length. [ 357.700850][ T9795] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.715095][T17441] netlink: 'syz.0.3347': attribute type 21 has an invalid length. [ 357.716069][T17438] netlink: 'syz.4.3346': attribute type 1 has an invalid length. [ 357.778923][T17437] 8021q: adding VLAN 0 to HW filter on device bond2 [ 357.801157][T17441] netlink: 'syz.0.3347': attribute type 6 has an invalid length. [ 357.868297][ T9795] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.933866][ T5830] Bluetooth: hci1: command tx timeout [ 358.024474][T17461] openvswitch: netlink: nsh attribute has 996 unknown bytes. [ 358.042987][T17461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.209188][T17392] chnl_net:caif_netlink_parms(): no params data found [ 358.320535][T17473] netlink: 'syz.0.3355': attribute type 3 has an invalid length. [ 358.446903][ T9795] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 358.455380][ T9795] ip6gretap1 (unregistering): left allmulticast mode [ 358.656814][ T9795] bond4 (unregistering): (slave geneve2): Releasing active interface [ 358.813442][ T5830] Bluetooth: hci5: command 0x040f tx timeout [ 358.993195][ T9795] bond7 (unregistering): (slave bridge7): Releasing active interface [ 359.184805][ T9795] bond0 (unregistering): Released all slaves [ 359.271926][ T9795] bond1 (unregistering): Released all slaves [ 359.284589][ T9795] bond2 (unregistering): Released all slaves [ 359.297045][ T9795] bond3 (unregistering): Released all slaves [ 359.391285][ T9795] bond4 (unregistering): Released all slaves [ 359.479149][ T9795] bond5 (unregistering): Released all slaves [ 359.491521][ T9795] bond6 (unregistering): Released all slaves [ 359.504338][ T9795] bond7 (unregistering): Released all slaves [ 359.516615][ T9795] bond8 (unregistering): Released all slaves [ 359.532649][ T9795] bond9 (unregistering): Released all slaves [ 359.550662][ T9795] bond10 (unregistering): Released all slaves [ 359.590193][T17473] geneve2: entered promiscuous mode [ 359.763099][ T9795] 9: left promiscuous mode [ 359.927869][T17392] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.943614][T17392] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.953580][T17392] bridge_slave_0: entered allmulticast mode [ 359.973753][T17392] bridge_slave_0: entered promiscuous mode [ 359.994881][ T9795] tipc: Left network mode [ 360.010346][T17392] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.018218][ T5830] Bluetooth: hci1: command tx timeout [ 360.025679][T17392] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.032915][T17392] bridge_slave_1: entered allmulticast mode [ 360.042109][T17392] bridge_slave_1: entered promiscuous mode [ 360.377280][T17392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.461519][T17392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.556307][T17524] __nla_validate_parse: 27 callbacks suppressed [ 360.556324][T17524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3368'. [ 360.571680][T17525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3370'. [ 360.590903][T17524] : entered promiscuous mode [ 360.598152][T17392] team0: Port device team_slave_0 added [ 360.626276][T17392] team0: Port device team_slave_1 added [ 360.703951][T17392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.711187][T17392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.739125][T17392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.754774][T17392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.761728][T17392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.790080][T17392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.827103][T17504] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 360.836239][T17504] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 360.917586][T17392] hsr_slave_0: entered promiscuous mode [ 360.924961][T17392] hsr_slave_1: entered promiscuous mode [ 360.931719][T17392] debugfs: 'hsr0' already exists in 'hsr' [ 360.938029][T17392] Cannot create hsr debugfs directory [ 360.943855][T17504] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 360.960031][T17504] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 361.067958][T17504] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 361.081156][T17504] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 361.164429][T17504] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 361.176922][T17504] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 361.276842][T17553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.305193][T17554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3378'. [ 361.309781][T17556] netlink: 'syz.4.3379': attribute type 12 has an invalid length. [ 361.317143][T17553] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3378'. [ 361.525873][T17568] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3382'. [ 361.560111][T17573] x_tables: (null)_tables: connlabel.0 match: invalid size 8 (kernel) != (user) 16 [ 361.571883][T17573] netlink: 'syz.3.3384': attribute type 3 has an invalid length. [ 361.576678][T17562] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 361.589401][T17566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3381'. [ 361.589420][T17566] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3381'. [ 361.609793][T17562] bond2 (unregistering): Released all slaves [ 361.830738][ T9795] hsr_slave_0: left promiscuous mode [ 361.892740][T17586] netlink: 'syz.0.3388': attribute type 2 has an invalid length. [ 361.923909][ T9795] vlan0: left allmulticast mode [ 361.937087][ T9795] veth0_vlan: left allmulticast mode [ 361.951339][ T9795] vlan0: left promiscuous mode [ 362.096062][T17604] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3387'. [ 362.184947][ T5884] IPVS: starting estimator thread 0... [ 362.190615][T17605] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 362.293922][T17608] IPVS: using max 30 ests per chain, 72000 per kthread [ 362.350637][T17611] netlink: ct family unspecified [ 362.356488][T17611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.289969][T17615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.467552][T17392] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 363.516987][T17392] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 363.540458][T17621] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3396'. [ 363.556388][T17392] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 363.594284][T17392] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 363.750281][ T9795] IPVS: stop unused estimator thread 0... [ 363.766976][T17637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.972454][T17655] tipc: Enabling of bearer rejected, failed to enable media [ 363.989689][T17392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.019529][T17661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3403'. [ 364.032925][T17392] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.110301][ T9795] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.117541][ T9795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.167897][ T9798] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.175097][ T9798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.192189][T17674] netlink: ct family unspecified [ 364.200551][T17674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.487528][T17693] block nbd4: not configured, cannot reconfigure [ 364.596099][T17392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.662604][T17392] veth0_vlan: entered promiscuous mode [ 364.698232][T17392] veth1_vlan: entered promiscuous mode [ 364.816995][T17711] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 364.828415][T17711] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 364.838384][T17711] gretap1: entered promiscuous mode [ 364.841887][T17713] netlink: 'syz.3.3420': attribute type 3 has an invalid length. [ 364.844222][T17711] gretap1: entered allmulticast mode [ 364.894802][T17392] veth0_macvtap: entered promiscuous mode [ 364.905903][T17392] veth1_macvtap: entered promiscuous mode [ 364.933143][T17392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.943332][T17714] netlink: 'syz.3.3420': attribute type 20 has an invalid length. [ 364.971372][T17392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.001412][T17714] netlink: 'syz.3.3420': attribute type 20 has an invalid length. [ 365.027274][ T9795] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.038853][ T9795] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.073765][ T9795] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.087851][ T9795] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.107108][T17723] netlink: 'syz.0.3423': attribute type 1 has an invalid length. [ 365.131188][ T9795] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.170377][T17723] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 365.183056][T17723] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 365.212036][ T9795] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.249865][T17720] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 365.264181][T17720] bond1 (unregistering): Released all slaves [ 365.301596][ T9795] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.312525][ T9795] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.351745][ T9795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.367506][ T9795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.396807][T17723] macvlan2: entered promiscuous mode [ 365.410596][T17723] macvlan2: entered allmulticast mode [ 365.417315][T17723] bond2: entered promiscuous mode [ 365.423198][T17723] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 365.436547][T17723] bond2: left promiscuous mode [ 365.549349][ T9781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.559352][ T9781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.608799][T17746] __nla_validate_parse: 8 callbacks suppressed [ 365.608817][T17746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3429'. [ 365.787298][T17758] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3433'. [ 365.892655][T17770] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3436'. [ 365.904932][T17770] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3436'. [ 365.973694][T17776] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3438'. [ 365.982890][T17776] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3438'. [ 366.036204][T17779] netlink: 'syz.2.3439': attribute type 11 has an invalid length. [ 366.044491][T17779] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.3439'. [ 366.124260][T17782] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3440'. [ 366.137004][T17782] netlink: 'syz.2.3440': attribute type 11 has an invalid length. [ 366.211577][T17784] xt_l2tp: missing protocol rule (udp|l2tpip) [ 366.347549][T17791] delete_channel: no stack [ 366.352533][T17791] delete_channel: no stack [ 366.357847][T17791] delete_channel: no stack [ 366.362621][T17791] delete_channel: no stack [ 366.367495][T17791] delete_channel: no stack [ 366.372280][T17791] delete_channel: no stack [ 366.377077][T17791] delete_channel: no stack [ 366.382004][T17791] delete_channel: no stack [ 366.388214][T17791] delete_channel: no stack [ 366.393417][T17791] delete_channel: no stack [ 366.399267][T17791] delete_channel: no stack [ 366.407573][T17791] delete_channel: no stack [ 366.418024][T17791] delete_channel: no stack [ 366.422642][T17791] delete_channel: no stack [ 366.429108][T17791] delete_channel: no stack [ 366.435793][T17791] delete_channel: no stack [ 366.440543][T17791] delete_channel: no stack [ 366.446360][T17791] delete_channel: no stack [ 366.451094][T17791] delete_channel: no stack [ 366.456191][T17791] delete_channel: no stack [ 366.461042][T17791] delete_channel: no stack [ 366.466339][T17791] delete_channel: no stack [ 366.471205][T17791] delete_channel: no stack [ 366.476319][T17791] delete_channel: no stack [ 366.481150][T17791] delete_channel: no stack [ 366.486297][T17791] delete_channel: no stack [ 366.490895][T17791] delete_channel: no stack [ 366.501915][T17791] delete_channel: no stack [ 366.517466][T17791] delete_channel: no stack [ 366.522227][T17791] delete_channel: no stack [ 366.528012][T17791] delete_channel: no stack [ 366.541794][T17791] delete_channel: no stack [ 366.694905][T17808] netlink: 'syz.0.3449': attribute type 3 has an invalid length. [ 366.702671][T17808] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3449'. [ 366.797236][T17816] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3451'. [ 366.803792][T17818] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 366.981074][T17831] Bluetooth: MGMT ver 1.23 [ 367.047915][T17845] IPVS: length: 239 != 24 [ 367.184694][T17851] pimreg: entered allmulticast mode [ 367.194941][T17850] pimreg: left allmulticast mode [ 367.365646][T17862] netlink: 'syz.4.3464': attribute type 10 has an invalid length. [ 367.398538][T17862] team0: Port device dummy0 added [ 367.685509][T17884] wg1 speed is unknown, defaulting to 1000 [ 367.691441][T17884] wg1 speed is unknown, defaulting to 1000 [ 367.715269][T17884] wg1 speed is unknown, defaulting to 1000 [ 367.738537][T17884] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 367.786354][T17884] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 367.841690][T17884] wg1 speed is unknown, defaulting to 1000 [ 367.854742][T17884] wg1 speed is unknown, defaulting to 1000 [ 367.868870][T17884] wg1 speed is unknown, defaulting to 1000 [ 367.895093][T17884] wg1 speed is unknown, defaulting to 1000 [ 367.931416][T17884] wg1 speed is unknown, defaulting to 1000 [ 367.959080][T17884] wg1 speed is unknown, defaulting to 1000 [ 367.968786][T17897] netlink: 'syz.4.3475': attribute type 2 has an invalid length. [ 367.971333][T17884] wg1 speed is unknown, defaulting to 1000 [ 368.127500][T17908] netlink: 'syz.3.3478': attribute type 1 has an invalid length. [ 368.276176][ T9798] nci: nci_rsp_packet: unsupported rsp opcode 0xf02 [ 368.948689][T17968] syzkaller1: entered promiscuous mode [ 368.954836][T17968] syzkaller1: entered allmulticast mode [ 369.517626][T18004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.539917][T18004] ip6gre0: Master is either lo or non-ether device [ 369.612848][T18009] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.627558][T18009] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.929293][T18030] veth0: entered promiscuous mode [ 370.132859][T18039] syzkaller0: entered promiscuous mode [ 370.148149][T18039] syzkaller0: entered allmulticast mode [ 370.481575][T18053] netlink: 'syz.2.3526': attribute type 2 has an invalid length. [ 370.491508][T18053] netlink: 'syz.2.3526': attribute type 29 has an invalid length. [ 370.512637][T18053] netlink: 'syz.2.3526': attribute type 29 has an invalid length. [ 370.659846][T18064] __nla_validate_parse: 13 callbacks suppressed [ 370.659862][T18064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3531'. [ 370.760141][T18029] veth0: left promiscuous mode [ 371.017441][T18083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3536'. [ 371.316072][T18097] xt_hashlimit: size too large, truncated to 1048576 [ 371.788656][T18112] netlink: 'syz.2.3547': attribute type 10 has an invalid length. [ 371.798919][T18113] netlink: 'syz.0.3546': attribute type 10 has an invalid length. [ 371.815132][T18112] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3547'. [ 371.819347][T18113] team0: Device veth1_macvtap failed to register rx_handler [ 371.913220][T18122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3548'. [ 371.931670][T18119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3547'. [ 372.065265][ T9781] syzkaller0: tun_net_xmit 76 [ 372.072849][ T9781] syzkaller0: tun_net_xmit 48 [ 372.085152][T18135] netlink: 'syz.1.3552': attribute type 32 has an invalid length. [ 372.095458][ T24] syzkaller0: tun_net_xmit 76 [ 372.105015][T18124] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 372.133554][ T5847] syzkaller0: tun_net_xmit 76 [ 372.138509][T18124] syzkaller0: Linktype set failed because interface is up [ 372.282199][T18141] tipc: Enabled bearer , priority 0 [ 372.290283][T18141] syzkaller0: entered promiscuous mode [ 372.296033][T18141] syzkaller0: entered allmulticast mode [ 372.306419][T18140] wg1 speed is unknown, defaulting to 1000 [ 372.313462][T18124] veth1_to_team: entered allmulticast mode [ 372.334483][T18145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3554'. [ 372.451225][T18154] netlink: 'syz.2.3556': attribute type 1 has an invalid length. [ 372.526084][T18156] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.533834][T18156] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.542537][T18145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3554'. [ 372.571572][T18158] bond1: (slave ip6gretap1): making interface the new active one [ 372.584927][T18158] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 372.593991][T18158] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 372.601921][T18158] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 372.616132][T18160] netlink: 'syz.0.3555': attribute type 4 has an invalid length. [ 372.635736][T18160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3555'. [ 372.645151][T18134] tipc: Resetting bearer [ 372.668675][T18134] tipc: Disabling bearer [ 372.710115][T18165] netlink: 'syz.4.3557': attribute type 1 has an invalid length. [ 372.795569][T18165] 8021q: adding VLAN 0 to HW filter on device bond1 [ 372.838945][T18169] bond1: (slave geneve2): making interface the new active one [ 372.847871][T18169] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 372.940018][T18174] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 373.074634][T18190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3562'. [ 374.361202][T18232] netlink: 'syz.1.3575': attribute type 10 has an invalid length. [ 374.469588][T18236] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 374.479559][T18236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.739395][T18232] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 374.930008][T18241] netlink: 'syz.1.3577': attribute type 1 has an invalid length. [ 374.958793][T18248] ksmbd: Unknown IPC event: 8, ignore. [ 375.039989][T18241] bond3 (unregistering): Released all slaves [ 375.162360][T18259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3582'. [ 375.212687][T18259] dummy0: entered promiscuous mode [ 375.227941][T18259] macvtap1: entered promiscuous mode [ 375.233762][T18259] macvtap1: entered allmulticast mode [ 375.239238][T18259] dummy0: entered allmulticast mode [ 375.262317][T18263] dummy0: left allmulticast mode [ 375.285396][T18263] dummy0: left promiscuous mode [ 375.325290][T18270] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:0 [ 375.469099][T18285] sctp: [Deprecated]: syz.0.3588 (pid 18285) Use of struct sctp_assoc_value in delayed_ack socket option. [ 375.469099][T18285] Use struct sctp_sack_info instead [ 375.506416][T18285] sctp: [Deprecated]: syz.0.3588 (pid 18285) Use of struct sctp_assoc_value in delayed_ack socket option. [ 375.506416][T18285] Use struct sctp_sack_info instead [ 375.536225][T18288] sctp: [Deprecated]: syz.3.3590 (pid 18288) Use of struct sctp_assoc_value in delayed_ack socket option. [ 375.536225][T18288] Use struct sctp_sack_info instead [ 375.668928][T18297] sctp: [Deprecated]: syz.3.3590 (pid 18297) Use of struct sctp_assoc_value in delayed_ack socket option. [ 375.668928][T18297] Use struct sctp_sack_info instead [ 375.689194][T18299] __nla_validate_parse: 4 callbacks suppressed [ 375.689210][T18299] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3594'. [ 375.712052][T18299] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3594'. [ 375.757930][T18299] tipc: Enabling of bearer rejected, failed to enable media [ 375.804494][T18306] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3596'. [ 375.826942][T18310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3597'. [ 375.934008][T18310] bond3: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 375.968584][T18310] bond3 (unregistering): Released all slaves [ 375.999932][T18321] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3600'. [ 376.099420][T18325] netlink: 'syz.0.3601': attribute type 11 has an invalid length. [ 376.126243][T18325] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3601'. [ 376.207147][T18330] netlink: 'syz.1.3603': attribute type 1 has an invalid length. [ 376.215373][T18330] netlink: 'syz.1.3603': attribute type 1 has an invalid length. [ 376.274565][T18337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3606'. [ 376.442695][T18349] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3608'. [ 376.457423][T18351] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3610'. [ 376.458431][T18346] 8021q: adding VLAN 0 to HW filter on device bond3 [ 376.488352][T18352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3608'. [ 376.842925][T18375] xt_hashlimit: size too large, truncated to 1048576 [ 377.309870][T18423] validate_nla: 3 callbacks suppressed [ 377.309888][T18423] netlink: 'syz.1.3625': attribute type 4 has an invalid length. [ 377.432363][T18423] bridge0: port 3(team0) entered disabled state [ 377.438982][T18423] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.446693][T18423] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.550512][T18423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.576266][T18423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.737498][ T5847] wg1 speed is unknown, defaulting to 1000 [ 377.737786][T18436] syzkaller0: entered promiscuous mode [ 377.745781][ T5847] syz2: Port: 1 Link DOWN [ 377.749348][T18436] syzkaller0: entered allmulticast mode [ 377.762272][ T9797] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.772445][ T9797] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.785238][ T9797] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.798008][ T9797] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.899561][T18446] tipc: Started in network mode [ 377.907521][T18446] tipc: Node identity e0000001, cluster identity 4711 [ 377.918427][T18446] tipc: Enabling of bearer rejected, failed to enable media [ 378.240007][T18470] Cannot find add_set index 0 as target [ 378.369371][T18481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.571830][T18494] netlink: 'syz.3.3643': attribute type 7 has an invalid length. [ 378.614957][T18494] netlink: 'syz.3.3643': attribute type 8 has an invalid length. [ 378.681361][ T5891] IPVS: starting estimator thread 0... [ 378.687792][T18501] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 378.775125][T18505] IPVS: using max 30 ests per chain, 72000 per kthread [ 378.909459][T18518] syzkaller0: entered promiscuous mode [ 378.917182][T18518] syzkaller0: entered allmulticast mode [ 379.040547][T18531] openvswitch: netlink: Message has -2 unknown bytes. [ 379.055264][T18531] openvswitch: netlink: Message has -2 unknown bytes. [ 379.063910][T18531] openvswitch: netlink: Message has -2 unknown bytes. [ 379.071150][T18531] openvswitch: netlink: Message has -2 unknown bytes. [ 379.083720][T18531] openvswitch: netlink: Message has -2 unknown bytes. [ 379.090911][T18531] openvswitch: netlink: Message has -2 unknown bytes. [ 379.098443][T18531] openvswitch: netlink: Message has -2 unknown bytes. [ 379.106810][T18531] openvswitch: netlink: Message has -2 unknown bytes. [ 380.384716][T18534] veth0_macvtap: left promiscuous mode [ 380.710219][T18568] __nla_validate_parse: 11 callbacks suppressed [ 380.710238][T18568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3664'. [ 381.199406][T18603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3672'. [ 381.205946][T18605] netlink: 'syz.1.3670': attribute type 1 has an invalid length. [ 381.252193][T18611] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3673'. [ 381.265950][T18603] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.301977][T18603] bridge_slave_1 (unregistering): left allmulticast mode [ 381.310664][T18603] bridge_slave_1 (unregistering): left promiscuous mode [ 381.321921][T18603] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.386557][T18602] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 381.406206][T18613] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 381.650683][T18631] netlink: 'syz.2.3679': attribute type 9 has an invalid length. [ 381.658968][T18631] netlink: 'syz.2.3679': attribute type 11 has an invalid length. [ 381.667326][T18631] netlink: 'syz.2.3679': attribute type 12 has an invalid length. [ 381.687418][T18631] netlink: 210060 bytes leftover after parsing attributes in process `syz.2.3679'. [ 381.727143][T18631] openvswitch: netlink: Message has 4 unknown bytes. [ 381.840419][T18652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3684'. [ 381.878039][T18652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3684'. [ 381.885002][T18653] netlink: 'syz.3.3683': attribute type 39 has an invalid length. [ 381.951541][T18635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.029421][T18659] warn_alloc: 3 callbacks suppressed [ 382.029447][T18659] syz.4.3686: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 382.055828][T18659] CPU: 1 UID: 0 PID: 18659 Comm: syz.4.3686 Not tainted syzkaller #0 PREEMPT(full) [ 382.055854][T18659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 382.055870][T18659] Call Trace: [ 382.055877][T18659] [ 382.055887][T18659] dump_stack_lvl+0x189/0x250 [ 382.055921][T18659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.055945][T18659] ? __pfx__printk+0x10/0x10 [ 382.055965][T18659] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 382.055989][T18659] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 382.056015][T18659] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 382.056041][T18659] warn_alloc+0x214/0x310 [ 382.056066][T18659] ? stack_depot_save_flags+0x40/0x860 [ 382.056096][T18659] ? __pfx_warn_alloc+0x10/0x10 [ 382.056122][T18659] ? kasan_save_track+0x3e/0x80 [ 382.056142][T18659] ? __kasan_kmalloc+0x93/0xb0 [ 382.056165][T18659] ? xsk_setsockopt+0x4dc/0x8d0 [ 382.056182][T18659] ? do_sock_setsockopt+0x17c/0x1b0 [ 382.056198][T18659] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 382.056214][T18659] ? do_syscall_64+0xfa/0xfa0 [ 382.056244][T18659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.056269][T18659] __vmalloc_node_range_noprof+0x125/0x12d0 [ 382.056319][T18659] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 382.056342][T18659] ? __kasan_kmalloc+0x93/0xb0 [ 382.056372][T18659] vmalloc_user_noprof+0xad/0xf0 [ 382.056395][T18659] ? xskq_create+0xbf/0x170 [ 382.056417][T18659] xskq_create+0xbf/0x170 [ 382.056442][T18659] xsk_init_queue+0xb0/0x110 [ 382.056468][T18659] xsk_setsockopt+0x4dc/0x8d0 [ 382.056490][T18659] ? __pfx_xsk_setsockopt+0x10/0x10 [ 382.056512][T18659] ? __pfx_aa_sk_perm+0x10/0x10 [ 382.056538][T18659] ? aa_sock_opt_perm+0xff/0x1b0 [ 382.056565][T18659] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 382.056581][T18659] ? __pfx_xsk_setsockopt+0x10/0x10 [ 382.056602][T18659] do_sock_setsockopt+0x17c/0x1b0 [ 382.056625][T18659] __x64_sys_setsockopt+0x13f/0x1b0 [ 382.056646][T18659] do_syscall_64+0xfa/0xfa0 [ 382.056667][T18659] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.056690][T18659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.056707][T18659] ? clear_bhb_loop+0x60/0xb0 [ 382.056728][T18659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.056752][T18659] RIP: 0033:0x7fb5bbf8f6c9 [ 382.056769][T18659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.056789][T18659] RSP: 002b:00007fb5bceb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 382.056809][T18659] RAX: ffffffffffffffda RBX: 00007fb5bc1e5fa0 RCX: 00007fb5bbf8f6c9 [ 382.056823][T18659] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 382.056834][T18659] RBP: 00007fb5bc011f91 R08: 0000000000000004 R09: 0000000000000000 [ 382.056846][T18659] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.056857][T18659] R13: 00007fb5bc1e6038 R14: 00007fb5bc1e5fa0 R15: 00007ffe0ccc62b8 [ 382.056889][T18659] [ 382.056974][T18659] Mem-Info: [ 382.180743][T18665] netlink: 'syz.1.3689': attribute type 4 has an invalid length. [ 382.190016][T18659] active_anon:3940 inactive_anon:0 isolated_anon:0 [ 382.190016][T18659] active_file:3144 inactive_file:39981 isolated_file:0 [ 382.190016][T18659] unevictable:768 dirty:58 writeback:0 [ 382.190016][T18659] slab_reclaimable:12246 slab_unreclaimable:131053 [ 382.190016][T18659] mapped:28985 shmem:1357 pagetables:1027 [ 382.190016][T18659] sec_pagetables:0 bounce:0 [ 382.190016][T18659] kernel_misc_reclaimable:0 [ 382.190016][T18659] free:1300582 free_pcp:13083 free_cma:0 [ 382.193693][T18666] IPv6: NLM_F_CREATE should be specified when creating new route [ 382.196458][T18659] Node 0 active_anon:15760kB inactive_anon:0kB active_file:12576kB inactive_file:159720kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115940kB dirty:232kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13508kB pagetables:3968kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 382.370332][T18674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3691'. [ 382.411047][T18659] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 382.411103][T18659] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 382.411184][T18659] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 382.411228][T18659] Node 0 DMA32 free:1282180kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15860kB inactive_anon:0kB active_file:12576kB inactive_file:159720kB unevictable:1536kB writepending:232kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:35516kB local_pcp:18052kB free_cma:0kB [ 382.411280][T18659] lowmem_reserve[]: 0 0 0 0 0 [ 382.411319][T18659] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 382.411369][T18659] lowmem_reserve[]: 0 0 0 0 0 [ 382.411408][T18659] Node 1 Normal free:3899432kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14692kB local_pcp:5476kB free_cma:0kB [ 382.411460][T18659] lowmem_reserve[]: 0 0 0 0 0 [ 382.411495][T18659] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 382.411616][T18659] Node 0 [ 382.523691][T18671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3691'. [ 382.530162][T18659] DMA32: [ 382.666639][T18671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3691'. [ 382.679968][T18659] 1854*4kB (UME) 805*8kB (UME) 447*16kB (UME) 160*32kB (UME) 49*64kB (UME) 47*128kB (UME) 39*256kB (UME) 28*512kB (UM) 20*1024kB (UME) 1*2048kB (M) 293*4096kB (UM) = 1282256kB [ 382.700195][T18659] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 382.741809][T18659] Node 1 Normal: 186*4kB (U) 52*8kB (UME) 36*16kB (UME) 95*32kB (UME) 28*64kB (UME) 9*128kB (UME) 6*256kB (UME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 948*4096kB (M) = 3899432kB [ 382.803394][T18659] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 382.834015][T18659] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 382.874191][T18659] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 382.890443][T18690] º: renamed from veth1_vlan (while UP) [ 382.904685][T18659] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 382.919820][T18659] 44479 total pagecache pages [ 382.925235][T18659] 0 pages in swap cache [ 382.929510][T18659] Free swap = 124996kB [ 382.937419][T18659] Total swap = 124996kB [ 382.941596][T18659] 2097051 pages RAM [ 382.946728][T18659] 0 pages HighMem/MovableOnly [ 382.949791][T18692] bond5: option lp_interval: invalid value (0) [ 382.951428][T18659] 424119 pages reserved [ 382.951438][T18659] 0 pages cma reserved [ 383.006337][T18692] bond5: option lp_interval: allowed values 1 - 2147483647 [ 383.026377][T18692] bond5 (unregistering): Released all slaves [ 383.185576][T18693] bond5: option lp_interval: invalid value (0) [ 383.201333][T18693] bond5: option lp_interval: allowed values 1 - 2147483647 [ 383.216169][T18693] bond5 (unregistering): Released all slaves [ 383.289528][T18723] netlink: 'syz.3.3703': attribute type 10 has an invalid length. [ 383.430602][T18733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3706'. [ 383.822597][T18751] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 383.833977][T18753] [ 383.836324][T18753] ====================================================== [ 383.843339][T18753] WARNING: possible circular locking dependency detected [ 383.850370][T18753] syzkaller #0 Not tainted [ 383.854791][T18753] ------------------------------------------------------ [ 383.861809][T18753] syz.1.3714/18753 is trying to acquire lock: [ 383.867871][T18753] ffffffff8f426458 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 383.877199][T18753] [ 383.877199][T18753] but task is already holding lock: [ 383.884560][T18753] ffff88802231db70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 383.893884][T18753] [ 383.893884][T18753] which lock already depends on the new lock. [ 383.893884][T18753] [ 383.899252][T18755] vetè0_virt_wifi: renamed from lo (while UP) [ 383.904279][T18753] [ 383.904279][T18753] the existing dependency chain (in reverse order) is: [ 383.904291][T18753] [ 383.904291][T18753] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 383.904321][T18753] lock_acquire+0x120/0x360 [ 383.904339][T18753] _raw_spin_lock_bh+0x36/0x50 [ 383.904360][T18753] nr_rt_device_down+0x12a/0x720 [ 383.904380][T18753] nr_device_event+0x137/0x150 [ 383.904397][T18753] notifier_call_chain+0x1b6/0x3e0 [ 383.904415][T18753] __dev_notify_flags+0x18d/0x2e0 [ 383.904432][T18753] netif_change_flags+0xe8/0x1a0 [ 383.904448][T18753] dev_change_flags+0x130/0x260 [ 383.904463][T18753] dev_ioctl+0x7b4/0x1150 [ 383.904485][T18753] sock_do_ioctl+0x22c/0x300 [ 383.904505][T18753] sock_ioctl+0x576/0x790 [ 383.904523][T18753] __se_sys_ioctl+0xfc/0x170 [ 383.904543][T18753] do_syscall_64+0xfa/0xfa0 [ 383.904565][T18753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.904582][T18753] [ 383.904582][T18753] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 383.904610][T18753] lock_acquire+0x120/0x360 [ 383.904624][T18753] _raw_spin_lock_bh+0x36/0x50 [ 383.904643][T18753] nr_rt_device_down+0xa9/0x720 [ 383.904661][T18753] nr_device_event+0x137/0x150 [ 383.904677][T18753] notifier_call_chain+0x1b6/0x3e0 [ 383.904695][T18753] __dev_notify_flags+0x18d/0x2e0 [ 383.904711][T18753] netif_change_flags+0xe8/0x1a0 [ 383.904726][T18753] dev_change_flags+0x130/0x260 [ 383.904740][T18753] dev_ioctl+0x7b4/0x1150 [ 383.904762][T18753] sock_do_ioctl+0x22c/0x300 [ 383.904780][T18753] sock_ioctl+0x576/0x790 [ 383.904798][T18753] __se_sys_ioctl+0xfc/0x170 [ 383.904816][T18753] do_syscall_64+0xfa/0xfa0 [ 383.904837][T18753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.904852][T18753] [ 383.904852][T18753] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 383.904878][T18753] validate_chain+0xb9b/0x2140 [ 383.904896][T18753] __lock_acquire+0xab9/0xd20 [ 383.904911][T18753] lock_acquire+0x120/0x360 [ 383.904925][T18753] _raw_spin_lock_bh+0x36/0x50 [ 383.904944][T18753] nr_remove_neigh+0x25/0xe0 [ 383.904964][T18753] nr_add_node+0x1d9f/0x2570 [ 383.904982][T18753] nr_rt_ioctl+0xc12/0xd50 [ 383.905000][T18753] sock_do_ioctl+0xdc/0x300 [ 383.905018][T18753] sock_ioctl+0x576/0x790 [ 383.905036][T18753] __se_sys_ioctl+0xfc/0x170 [ 383.905065][T18753] do_syscall_64+0xfa/0xfa0 [ 383.905087][T18753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.905103][T18753] [ 383.905103][T18753] other info that might help us debug this: [ 383.905103][T18753] [ 383.905109][T18753] Chain exists of: [ 383.905109][T18753] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 383.905109][T18753] [ 384.177575][T18753] Possible unsafe locking scenario: [ 384.177575][T18753] [ 384.185010][T18753] CPU0 CPU1 [ 384.190362][T18753] ---- ---- [ 384.195704][T18753] lock(&nr_node->node_lock); [ 384.200456][T18753] lock(nr_node_list_lock); [ 384.207550][T18753] lock(&nr_node->node_lock); [ 384.214816][T18753] lock(nr_neigh_list_lock); [ 384.219477][T18753] [ 384.219477][T18753] *** DEADLOCK *** [ 384.219477][T18753] [ 384.227608][T18753] 1 lock held by syz.1.3714/18753: [ 384.232698][T18753] #0: ffff88802231db70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 384.242435][T18753] [ 384.242435][T18753] stack backtrace: [ 384.248310][T18753] CPU: 1 UID: 0 PID: 18753 Comm: syz.1.3714 Not tainted syzkaller #0 PREEMPT(full) [ 384.248329][T18753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 384.248337][T18753] Call Trace: [ 384.248344][T18753] [ 384.248351][T18753] dump_stack_lvl+0x189/0x250 [ 384.248373][T18753] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.248391][T18753] ? __pfx__printk+0x10/0x10 [ 384.248402][T18753] ? stack_trace_save+0x9c/0xe0 [ 384.248424][T18753] print_circular_bug+0x2ee/0x310 [ 384.248441][T18753] check_noncircular+0x134/0x160 [ 384.248459][T18753] validate_chain+0xb9b/0x2140 [ 384.248481][T18753] __lock_acquire+0xab9/0xd20 [ 384.248496][T18753] ? nr_remove_neigh+0x25/0xe0 [ 384.248511][T18753] lock_acquire+0x120/0x360 [ 384.248523][T18753] ? nr_remove_neigh+0x25/0xe0 [ 384.248541][T18753] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 384.248558][T18753] ? nr_remove_neigh+0x25/0xe0 [ 384.248573][T18753] _raw_spin_lock_bh+0x36/0x50 [ 384.248590][T18753] ? nr_remove_neigh+0x25/0xe0 [ 384.248605][T18753] nr_remove_neigh+0x25/0xe0 [ 384.248621][T18753] nr_add_node+0x1d9f/0x2570 [ 384.248637][T18753] ? __asan_memcpy+0x40/0x70 [ 384.248655][T18753] ? nr_call_to_digi+0x126/0x1b0 [ 384.248670][T18753] nr_rt_ioctl+0xc12/0xd50 [ 384.248689][T18753] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 384.248702][T18753] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.248723][T18753] ? apparmor_capable+0x137/0x1b0 [ 384.248740][T18753] ? capable+0x89/0xe0 [ 384.248754][T18753] ? nr_ioctl+0x1b1/0x3b0 [ 384.248767][T18753] sock_do_ioctl+0xdc/0x300 [ 384.248785][T18753] ? __pfx_sock_do_ioctl+0x10/0x10 [ 384.248805][T18753] sock_ioctl+0x576/0x790 [ 384.248820][T18753] ? __pfx_sock_ioctl+0x10/0x10 [ 384.248836][T18753] ? __fget_files+0x3a0/0x420 [ 384.248849][T18753] ? __fget_files+0x2a/0x420 [ 384.248861][T18753] ? bpf_lsm_file_ioctl+0x9/0x20 [ 384.248876][T18753] ? __pfx_sock_ioctl+0x10/0x10 [ 384.248890][T18753] __se_sys_ioctl+0xfc/0x170 [ 384.248907][T18753] do_syscall_64+0xfa/0xfa0 [ 384.248925][T18753] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.248941][T18753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.248954][T18753] ? clear_bhb_loop+0x60/0xb0 [ 384.248968][T18753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.248981][T18753] RIP: 0033:0x7faa0678f6c9 [ 384.248994][T18753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.249006][T18753] RSP: 002b:00007faa0758b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 384.249022][T18753] RAX: ffffffffffffffda RBX: 00007faa069e5fa0 RCX: 00007faa0678f6c9 [ 384.249040][T18753] RDX: 0000200000000440 RSI: 000000000000890b RDI: 0000000000000005 [ 384.249049][T18753] RBP: 00007faa06811f91 R08: 0000000000000000 R09: 0000000000000000 [ 384.249057][T18753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.249065][T18753] R13: 00007faa069e6038 R14: 00007faa069e5fa0 R15: 00007ffecfe34ba8 [ 384.249081][T18753] [ 384.578301][T18755] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.585487][T18755] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.628571][T18755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.641659][T18755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.691371][T18758] team0: No ports can be present during mode change [ 384.699301][ T9798] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.711070][ T9798] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.734817][ T9798] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.744696][ T9798] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0