last executing test programs: 2.378985077s ago: executing program 2 (id=1729): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r2, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x890) 2.241989378s ago: executing program 2 (id=1733): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="180000006800000200000000000000000200000000200000"], 0x18}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}]}}}]}, 0x40}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x513202, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x6bf1c2d5adba8c32}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x2c020400) openat$cgroup_ro(r5, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="180000006800000200000000000000000200000000200000"], 0x18}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}]}}}]}, 0x40}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x513202, 0x0) (async) ioctl$TUNSETTXFILTER(r2, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x6bf1c2d5adba8c32}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) unshare(0x2c020400) (async) openat$cgroup_ro(r5, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (async) 1.986545698s ago: executing program 2 (id=1737): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1c, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x422c, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x4055, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r2 = socket$unix(0x1, 0x5, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bind$unix(r2, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) accept4(r3, 0x0, &(0x7f00000001c0), 0x80000) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 32) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r5 = socket$kcm(0x23, 0x5, 0x0) (rerun: 32) sendmsg$sock(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000300)="66d8", 0x2}], 0x1}, 0x20000014) (async) r7 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) (async) sendmsg$kcm(r6, &(0x7f0000002100)={0x0, 0x0, 0x0}, 0x20004000) (async, rerun: 64) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) (rerun: 64) r8 = socket$kcm(0x2, 0xa, 0x2) (async) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r9, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRES8=0x0], 0x78) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@allocspi={0x1f0, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20}, {@in6=@remote, 0x0, 0x33}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef, 0x3}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x4}, 0x4, 0x3505}, 0x2, 0x1a0b1}, [@etimer_thresh={0x8, 0xc, 0x3}, @offload={0xc}, @sa={0xe4, 0x6, {{@in6=@remote, @in6=@mcast2, 0x4e21, 0x1, 0x4e23, 0x0, 0x2, 0x0, 0x80, 0x3c}, {@in=@private=0xa010100, 0x4d3, 0x6c}, @in=@broadcast, {0x7ff, 0x2, 0xfffffffffffffffb, 0x5ca42eb8, 0x8, 0xd, 0x101, 0x2}, {0x2, 0xdf, 0x6, 0x2}, {0x40000401, 0x2, 0x3}, 0x70bd28, 0x3506, 0x2, 0x1, 0xd1, 0x55}}]}, 0x1f0}}, 0x0) 1.825431171s ago: executing program 4 (id=1740): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, 0x0) (async) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113400000000008510000002000000b70089bd000000009500c2000000000095000012697e0800"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) 1.610859891s ago: executing program 4 (id=1744): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x14, 0xb, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r3, 0x32b, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r4, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "afddcb1e232cc242e0b1e0fba79beef5"}, @NL80211_ATTR_PMK={0x14, 0xfe, "2c4dce532bfecb4197f2f2a665a3ae27"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x10) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108bfaffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x2, 0x1}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="08020000", @ANYRES16=r7, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x45}, 0x4000800) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/176}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r5, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r5, &(0x7f00000003c0)="16", &(0x7f0000000600)=""/212}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_SYNPROXY={0x54, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x39800000}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}]}, @CTA_MARK_MASK={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xd2}, @CTA_NAT_SRC={0x14, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x44) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x8, 0x3a, 0x0, @private1, @local, {[], @echo_request}}}}}, 0x0) 1.524935079s ago: executing program 1 (id=1746): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x4, @none, 0x0, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}, 0x7f, 0x1}, &(0x7f0000000280)=0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380)={r2, @in6={{0xa, 0x4e24, 0xa, @local, 0xfffffffe}}, 0x8, 0xff, 0x3, 0xc, 0x40, 0x3ff, 0x1}, &(0x7f0000000440)=0x9c) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000120065f2000000005c8602fb93ba9c00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.'], 0x28}}, 0x0) 1.462515012s ago: executing program 4 (id=1747): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="3500000002"], 0x8) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9c0000001000030526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000500bb9162ce0dc28cebd4c9d951250334e7fac988c269fc5d878875782048ce5b7a87cc16c2b590c601e8f9a5456b2eb501f5566dfaf976fab9bace4775c6b2655f33142f2972b4e82755161eeab98b783089d6974afc560e4cdbeed62f1ae6a4b22ca71097555ad0d55cb77c7b40d8fd6480afa42f47b8a51a237fb12cff2cca41802774330c1b82ee2de411c554c4304fd0c13431bef70edec0dc17de91a748cf7b280db6c8216be5b3a7a1ddb862c7647b14290d80b418216fc6c4af5f49bda1fe808242dac22d33", @ANYRES32=r1, @ANYBLOB="6800128009000100766c616e000000005800028006000100020000000600050081000000100004800c0001000900000181000000340003800c00010008000000030000000c00010003000000080000000c00010009000000040000000c00010000000000010000800a000200aaaaaaaaaaaa0000"], 0x9c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="3500000002"], 0x8) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9c0000001000030526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000500bb9162ce0dc28cebd4c9d951250334e7fac988c269fc5d878875782048ce5b7a87cc16c2b590c601e8f9a5456b2eb501f5566dfaf976fab9bace4775c6b2655f33142f2972b4e82755161eeab98b783089d6974afc560e4cdbeed62f1ae6a4b22ca71097555ad0d55cb77c7b40d8fd6480afa42f47b8a51a237fb12cff2cca41802774330c1b82ee2de411c554c4304fd0c13431bef70edec0dc17de91a748cf7b280db6c8216be5b3a7a1ddb862c7647b14290d80b418216fc6c4af5f49bda1fe808242dac22d33", @ANYRES32=r1, @ANYBLOB="6800128009000100766c616e000000005800028006000100020000000600050081000000100004800c0001000900000181000000340003800c00010008000000030000000c00010003000000080000000c00010009000000040000000c00010000000000010000800a000200aaaaaaaaaaaa0000"], 0x9c}}, 0x0) (async) 1.425243709s ago: executing program 3 (id=1749): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.424947395s ago: executing program 2 (id=1750): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) write$nci(r0, &(0x7f0000000300)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x1, 0x2, 0x0, 0x1}, 0x5) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r5) sendmsg$DEVLINK_CMD_TRAP_SET(r5, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xdc, r6, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000500)={0x0, 0xc, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="ff002ade7000fddbdfed662567000000080001003c00000008006c36f24b0e832700c5e3fccbb50bf9211be1ef0b", @ANYRES32=r8, @ANYBLOB="0800c4007f0000000800c30007000000"], 0x34}, 0x1, 0x0, 0x0, 0x20044001}, 0x80) 1.354600603s ago: executing program 4 (id=1751): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="200000002e00090027bd7000000000000400000004001d000800098004"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd5d315ced3a446307000008000300", @ANYRES32=r3, @ANYBLOB="050053"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8050) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x200440b0}, 0x5) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74}, 0x48) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000240)="06000000914fc94c0c79aaf5598e4fbcafb2126be3608491297e00c7b4023418", 0x20) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)={0x258, 0x17, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xdc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x27200000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'syz_tun\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x148, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x97a}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'geneve0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x800}, 0x20000004) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) ioctl$BTRFS_IOC_SPACE_INFO(r7, 0xc0109414, &(0x7f0000003000)={0xc2e, 0x8001, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$sock_inet6_tcp_SIOCATMARK(r7, 0x8010743f, 0x0) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r6, 0x2) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000000)={r9, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x2, &(0x7f00000003c0)={r9, 0x1, 0x4, @remote}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000ff000000080087e046e8a4c0c8de3100000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$XFS_IOC_FSGROWFSLOG(r5, 0x4008586f, &(0x7f0000000340)={0x0, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000000000003000000850000006c0000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x90) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6080fcff001c0601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='p\x00'], 0x0) 1.352377679s ago: executing program 1 (id=1752): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000300)=r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x6) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) recvmsg(r7, &(0x7f0000003540)={0x0, 0x0, 0x0}, 0x40000123) 1.223143499s ago: executing program 0 (id=1753): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$inet6(0xa, 0x3, 0x3) close(0x3) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000001380)={0x0, @in6={{0xa, 0x4e21, 0x2, @remote, 0x3}}}, &(0x7f0000001440)=0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000001480)={r4, 0x0, 0x7, 0x400}, 0x10) recvmmsg(r3, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1, &(0x7f0000001680)=""/70, 0x46}, 0x4dcf}, {{0x0, 0x0, 0x0}}], 0x2, 0x40010102, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r5, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0xc, 0xa, 0x101, 0x70bd2b, 0x25dfdbff, {0x7, 0x0, 0x7}, [@typed={0x8, 0xfc, 0x0, 0x0, @u32=0xec5}, @nested={0xc, 0x148, 0x0, 0x1, [@typed={0x6, 0x27, 0x0, 0x0, @str='!\x00'}]}, @typed={0xc, 0x84, 0x0, 0x0, @u64=0x8}]}, 0x34}}, 0x800) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0xd}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xfffffff8}]}}]}, 0x44}}, 0x20008000) 1.190408649s ago: executing program 3 (id=1754): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000240)="a92e81d0991808e3199f42e64cf023df", 0x10}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmmsg(r2, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1}, 0x10000}], 0x1, 0x102, 0x0) ioctl$SIOCSIFMTU(r0, 0x8947, &(0x7f00000000c0)={'bond0\x00', 0x10001}) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x3}]}, &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r3, r3], 0x0, 0x10, 0xc}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) accept4$alg(r1, 0x0, 0x0, 0x0) (async) sendmmsg$alg(r2, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000240)="a92e81d0991808e3199f42e64cf023df", 0x10}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) (async) recvmmsg(r2, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1}, 0x10000}], 0x1, 0x102, 0x0) (async) ioctl$SIOCSIFMTU(r0, 0x8947, &(0x7f00000000c0)={'bond0\x00', 0x10001}) (async) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x3}]}, &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r3, r3], 0x0, 0x10, 0xc}, 0x94) (async) 1.067095653s ago: executing program 0 (id=1755): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000004e0000000000000040001e00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 978.608882ms ago: executing program 1 (id=1756): syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x9) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(streebog256)\x00'}, 0x58) ioctl$sock_netdev_private(r5, 0x89f0, &(0x7f0000000000)) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448d3, 0x0) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.numa_stat\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xb, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000611177000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 977.858699ms ago: executing program 3 (id=1757): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000300000000000004000000080002000500000006000b000a"], 0x24}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0x9, 0x0, 0x50}}, 0x18}}, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000008800000088000000030000001000000000000000ffe0000064000d040b0000000000000c030000000f0007000084050000000500000005000000010000000f0000f7c8000000000000800f000000020000003b0000000700000001000000fd0300000300000001000000050000000300000002000000010000000f0000000100000002000000003000"/163], &(0x7f00000005c0)=""/77, 0xa3, 0x4d, 0x1, 0x4}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x87, &(0x7f00000007c0)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0xeb, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) r12 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x418, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0x270, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0xa0, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x5112], 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r14) splice(r13, 0x0, r14, 0x0, 0x10500, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x15, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xc0}], &(0x7f0000000140)='syzkaller\x00', 0x7, 0xbc, &(0x7f0000000400)=""/188, 0x41000, 0x69, '\x00', r3, @fallback=0x34, r10, 0x8, &(0x7f0000000680)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0x0, 0x4, 0x80000000}, 0x10, r11, r14, 0x5, 0x0, &(0x7f0000000a00)=[{0x2, 0x5, 0xa, 0xc}, {0x1, 0x5, 0x0, 0xa}, {0x3, 0x2, 0xa}, {0x4, 0x3, 0xe, 0x1}, {0x2, 0x2, 0x4, 0x3}], 0x10, 0x2}, 0x94) r15 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r15, &(0x7f0000000080)={0x1f, 0x4, 0x1}, 0x6) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r16, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x40, r8, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x2000000}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r17}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x40}, 0x4, 0x700000000000000, 0x0, 0x4000080}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x10403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x7, 0x1}, 0x0, 0x200}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x4d6, 0x33}, 0xa, @in6=@private0, 0x3502, 0x3, 0x0, 0x5, 0x400, 0x1, 0x70}, {{@in=@loopback, 0x4d5, 0x32}, 0xf, @in=@multicast2, 0x3504, 0x4, 0x3, 0x0, 0x6, 0x2, 0x8}]}]}, 0x13c}}, 0x0) socket$packet(0x11, 0x2, 0x300) 956.503962ms ago: executing program 4 (id=1758): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) getpeername(r1, &(0x7f00000001c0)=@l2tp, &(0x7f0000000240)=0x80) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@deltfilter={0x3e50, 0x2d, 0x0, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x5, 0xfff2}, {0x4, 0x10}, {0x1, 0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38c8, 0x2, [@TCA_CGROUP_ACT={0x38c4, 0x1, [@m_police={0x944, 0x16, 0x0, 0x0, {{0xb}, {0x85c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffbff}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xffffff56, 0x80, 0xb, 0x9, 0x4, 0x3ff, 0x8001, 0x80, 0x1, 0x2, 0x5, 0x5, 0x5, 0x6, 0xa, 0xf, 0x3385, 0x4, 0x5, 0x1, 0x1, 0x8, 0x8, 0x100, 0xc, 0x859b, 0xfff, 0x6, 0x0, 0x4, 0x5a, 0x7, 0x16746966, 0x1, 0x8, 0x2, 0x3, 0x0, 0x3a, 0x0, 0x8, 0xf49, 0x8, 0x101, 0x8, 0x2, 0x0, 0xff, 0x9, 0x6, 0x1, 0x9, 0x4f, 0x2, 0x444, 0x3, 0x4, 0x200, 0x7, 0x3, 0x0, 0x4, 0x200000, 0x2, 0x7ff, 0x5, 0x5, 0x6669532d, 0x2, 0x9, 0xf18, 0x3, 0x9, 0x3, 0x5, 0xfffffffb, 0x8, 0x19, 0x7, 0x0, 0xffff, 0x3, 0x2, 0x7, 0x845, 0xcca5, 0x1, 0x7, 0x3, 0x4, 0x5, 0x8, 0x4, 0x0, 0x9, 0x200, 0xa, 0x2, 0x8, 0x7fffffff, 0x0, 0x5, 0x1, 0x3, 0x3ff, 0x8, 0x7fff, 0x8, 0x6, 0x6, 0x9, 0x9, 0x3, 0x9, 0x6, 0x0, 0x9, 0x5, 0x1000, 0x23, 0x299780, 0x73, 0xf, 0x6, 0xfff, 0x8001, 0xe1a1, 0xb, 0x101, 0x6, 0x3, 0x5, 0x7, 0xfffffff8, 0x7, 0x0, 0x6, 0x5, 0x5, 0x101, 0x1, 0x7, 0x5, 0x7fffffff, 0x100, 0x59f, 0xfffffffd, 0x2, 0xa, 0xe, 0x9, 0xc, 0x4, 0x9, 0x8, 0x6, 0x44, 0x9, 0x1, 0x7fffffff, 0xffff7fff, 0x5, 0xffffffff, 0xfffffffe, 0x1000, 0x5, 0x1, 0xffff6b54, 0x6, 0x3, 0x2, 0xac, 0x1, 0x1, 0x46d2, 0xffffff64, 0x4, 0x2, 0x39a7, 0x78, 0x4, 0x3, 0xe, 0x440, 0x6, 0x4, 0x9, 0x80000001, 0x7, 0x3, 0x1, 0x8, 0x6, 0x1, 0x6, 0x6, 0x7ff, 0x4e0f, 0x9c53, 0x401, 0x3, 0x7, 0x9ba, 0x2, 0x5ac3b516, 0x9, 0xdd, 0x1, 0x9, 0x7, 0x0, 0x4, 0x1, 0xfffffffd, 0x103, 0x1d5, 0x1, 0x1, 0x9, 0x78, 0xf8000000, 0x9, 0x4, 0x3ff, 0x9, 0x6, 0x80, 0x2e60, 0xfffffffc, 0x13f, 0x0, 0x913, 0x8000, 0x6, 0x3, 0xde, 0x8, 0xffff, 0x0, 0x2, 0xb28, 0x3, 0x0, 0x2, 0xfff, 0x3, 0x2, 0x8001, 0x80000001, 0x8, 0x2, 0x7fffffff, 0x3, 0x9, 0x7fffffff]}, @TCA_POLICE_RATE={0x404, 0x2, [0xa6, 0x100, 0x6, 0x0, 0x5, 0x7b8f, 0x5, 0xc03e, 0x0, 0x2, 0x4, 0x80, 0x1, 0x1, 0x8, 0xee5, 0xbc, 0xfff, 0x2, 0x4, 0x5, 0x3, 0x101, 0x9, 0x81, 0x8, 0x5c, 0xe5, 0x5, 0x4a16, 0x5, 0x2, 0x70dd, 0x85, 0x0, 0x2, 0xef2b, 0x5, 0x4, 0x8, 0x5, 0x9f1e, 0xe, 0x7, 0x1, 0x0, 0x5, 0xb0d, 0x0, 0x400, 0xd, 0x100, 0x80000000, 0x4, 0x1, 0x2, 0xfff, 0x4, 0x40, 0x4, 0x9, 0x6d, 0x2, 0xfa, 0x7, 0x3, 0x2, 0xffffffff, 0x0, 0x6, 0x9, 0x7, 0x7dfe, 0xebe, 0x8, 0x1, 0x6, 0x5, 0x9, 0x8e, 0x9, 0x6575, 0x7, 0xfffffff7, 0x7, 0xf, 0xff, 0x1, 0x9, 0x5, 0x9, 0x15f7, 0x81, 0x1000, 0x8091, 0x9, 0xfe, 0x9, 0x3, 0x10954c81, 0x8, 0x3, 0x80, 0x4, 0x5, 0x1, 0x1, 0xb1f7, 0x2, 0x3ff, 0x1, 0xa, 0x5, 0x3, 0xb, 0x40, 0x7, 0x2, 0x6, 0x8, 0x7, 0x7ff, 0x80, 0x7, 0xb, 0x40, 0x0, 0x1, 0x3, 0x8, 0x3, 0xb2, 0xe, 0x7ff, 0x57, 0x1, 0x3, 0x6, 0xc789, 0x9, 0x3bad, 0x4, 0x7, 0x9bb, 0xec7b, 0x7, 0x0, 0x7fff, 0x9, 0x3, 0x100, 0x6, 0x8, 0x8e, 0x674, 0x8, 0xb34, 0x5, 0x401, 0x40, 0x4, 0x8f, 0x2, 0x3, 0x9, 0x3e, 0xffffffff, 0x7f, 0x8, 0x1, 0xffff, 0x5, 0x6, 0x7, 0xf5d9, 0x2, 0x8, 0x8, 0x7, 0x3, 0x6, 0x5, 0x9, 0x7, 0x1, 0x7512, 0x8, 0x5, 0x0, 0x353c, 0x7, 0x9, 0x2, 0x5, 0x6, 0xdf02, 0x8000, 0x6, 0xe, 0x0, 0x1, 0x9, 0x1, 0x8, 0x7fffffff, 0x5a70, 0x0, 0xffffffc0, 0x1, 0x6, 0xa21, 0x0, 0x9ba, 0x8, 0x7, 0x1000003, 0x4, 0x5, 0x5, 0x7, 0x3ff, 0x5, 0xa, 0xfffffffd, 0x4, 0x0, 0x8, 0x9, 0x2, 0x435, 0x6, 0x7fff, 0xf, 0xb2, 0x5, 0x0, 0x3, 0xe, 0x7, 0x0, 0x79, 0x1, 0x5, 0x80000001, 0xfffffffb, 0x4, 0x9, 0x2, 0x6c0b, 0x9, 0x12, 0xfffffffa, 0x8, 0x4, 0x6, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7ff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0xbe, 0x6, "d9f1c7aac2a5b9960905e6b8604f1d5c71a5fa08ddb11e741bbc4eaa76a7093d8ae8de4ab12b83d3476e427cdbfeca53bdf71d52446ae822b750fdcab5f65e3a82a1951dd033087c219d83a4775d68559487eb348f74f1e26f322f7c032c6434ebd3395097c1c22bf0e5adf1a28367f2b3476d543f84c6354b68d658c805b27e37475ad438b2e4a2c1018b6e4a03f2acc1d7756c87c1e114cab5b35b62ab471719dd5f8d172207f990bdc9f75c13d6e70880a69f02f289164ce6"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x50, 0xc, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x20, 0x6, "21dfc97b50147d90ddbbacd71891108935ca5722a16be1d63be1f27f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_police={0x2f2c, 0x16, 0x0, 0x0, {{0xb}, {0x2e68, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0x6, 0x9, 0x6, 0x1400, {0x6, 0x0, 0x7, 0x1, 0x3128, 0x8}, {0x9, 0x0, 0x1, 0x9, 0x3, 0x2}, 0x3, 0x7, 0x8}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffa, 0x0, 0xee, 0x1, 0x6, 0x8000, 0x4, 0x0, 0x6, 0xa84b, 0x0, 0xffa, 0x4, 0x5, 0x6, 0x2, 0x5, 0x2, 0x4, 0x2, 0x6, 0x9, 0xff, 0x2, 0x6908883f, 0x7ff, 0x4, 0x40, 0x7, 0xff0, 0x75, 0x1, 0x28, 0x7ff, 0x4, 0x4, 0x200, 0x10, 0x80000001, 0x5, 0x39, 0x8, 0x0, 0x1, 0x0, 0x8, 0x6e, 0x62, 0x401, 0x5, 0x4, 0xfffffffc, 0x1, 0x6, 0x4, 0x791, 0x9, 0x10, 0x3, 0x4, 0x2, 0x4, 0xa, 0x3ff, 0x3, 0x2, 0x8, 0x3, 0x1, 0x5, 0x4588, 0xeea7, 0xe0, 0x9, 0xfffffff7, 0x7fffffff, 0x101, 0x7, 0x0, 0x8000, 0x4, 0x101, 0x1, 0x8, 0x2fec, 0x10, 0x7, 0x2, 0x3, 0x3, 0x7, 0x2000, 0x5, 0xffffffff, 0x3, 0x8, 0x2, 0x8000, 0x400, 0x8, 0x7, 0x3, 0x8, 0xf, 0x8001, 0x5, 0x3, 0xa37e, 0xd6db, 0x1, 0x5, 0x2, 0x400, 0xc, 0x4000, 0x8001, 0x8, 0x6, 0x7, 0xfffffddc, 0x200, 0x80000000, 0x0, 0xfffffff8, 0x7, 0x4, 0x2f65, 0x8000, 0x9, 0xb6, 0x80000000, 0x6fa, 0x1000, 0x80000000, 0x5, 0x4, 0x6, 0x3f8f, 0x3ff, 0x8, 0x0, 0xa, 0x8, 0xb412, 0x7fffffff, 0x8e, 0x2, 0x80, 0x2, 0x9, 0x6, 0x84e5, 0x400, 0x0, 0x400, 0x7, 0x0, 0x5, 0x0, 0x4, 0xcd, 0x7ff, 0x0, 0x404a, 0x5, 0xf, 0xbc59, 0x0, 0x9, 0x0, 0x8, 0xfffffffc, 0x4, 0x2, 0x5, 0x8, 0x6, 0x7a0, 0x312, 0x0, 0x800, 0x10c9, 0x3, 0x3, 0x70000000, 0x5, 0x9, 0x6, 0x7, 0x80, 0x2, 0xffffff2c, 0x0, 0x6, 0x10001, 0x7fffffff, 0x6, 0x2, 0x2, 0xfffffff8, 0x0, 0x4, 0x7, 0x1, 0x4, 0x200, 0xd9e, 0x3, 0x7, 0x2, 0x55, 0x80000000, 0x1a, 0x301c, 0x32e, 0xffffffff, 0x5, 0x6, 0x1, 0x3, 0x3, 0x1b, 0xffff0001, 0x7, 0x17a0, 0xfff, 0x8, 0x7, 0x2, 0x80000001, 0xfffffe01, 0x9, 0x4, 0x7, 0x7, 0x3, 0x0, 0x8, 0x1, 0x6, 0x4, 0x9, 0x7, 0x4, 0x5, 0x5, 0x1, 0x3, 0x2, 0x80, 0x9, 0xeed8, 0x0, 0x5, 0x0, 0x6]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x7aba, 0x0, 0x5, 0x3d39a661, 0x3, 0x6, 0x3, 0x80000000, 0x5227, 0xffffffff, 0x8, 0x10000, 0xb300, 0x9, 0x9, 0x100, 0x3f8, 0x6ac, 0x9, 0x7, 0x3774, 0xff, 0x4, 0x8001, 0x100, 0x5d, 0x5, 0xd, 0x3, 0x7fff, 0x4, 0xfffffffa, 0x1180, 0xe8a, 0xfff, 0x5, 0x64e0, 0x40, 0x3, 0x7fff, 0x5, 0xb8, 0x7, 0x101, 0x0, 0x0, 0xfffffe01, 0xfffffffc, 0x8, 0x5, 0x2, 0xffffffd1, 0x0, 0xfffffff9, 0x6, 0x10000000, 0xffffc193, 0x400, 0xffff700b, 0xc49e, 0x1, 0x3d6ac00, 0x2d, 0x3, 0x5, 0xe1, 0x101, 0x800, 0x4, 0xfffff8f5, 0x4827, 0x1, 0x8, 0x800, 0x4, 0x5, 0x2, 0x7fff, 0x4, 0x1, 0x2, 0x1, 0x100, 0x8, 0x7, 0x6, 0x8e2b, 0x2, 0xffff, 0x1, 0x4000000, 0x3, 0x2, 0x400, 0x3a1502ee, 0x5, 0x6, 0x80000000, 0x5, 0x9, 0x5, 0x8000, 0xffff8001, 0x6, 0x9, 0x7, 0x6, 0xffffffff, 0x7fffffff, 0x47, 0x81, 0x1000, 0xff, 0x10000, 0x3, 0x181e, 0xd1, 0xfffffff3, 0x100, 0x5, 0x4, 0x0, 0xa, 0x3, 0x9, 0x3ff, 0x1, 0xb, 0x7, 0x7, 0x0, 0x3, 0x9, 0x9, 0x4, 0x6, 0x7, 0x5, 0x7fff, 0xc, 0x1, 0x4, 0x6c, 0x800, 0x0, 0xffff8425, 0x1, 0x98, 0x32009142, 0x9, 0xfffffff7, 0x1, 0x5, 0xc2, 0x4, 0x5, 0x1, 0x200, 0x6, 0x8, 0x800, 0xa5, 0x8, 0xe, 0x8, 0x2, 0x5, 0xd1, 0x6, 0x3, 0xd, 0x6, 0x200, 0x1000, 0x6, 0x1, 0x7, 0x9, 0x7f, 0xb0, 0x8000, 0x6, 0x100, 0x6, 0x5, 0x7, 0x9, 0x9, 0xf36d, 0x3, 0x6, 0x1, 0x6, 0x8, 0xc672, 0x7, 0x6, 0x7fff, 0x7f, 0xf54, 0x9, 0x6, 0x9, 0x541, 0x0, 0x400, 0x333, 0x9, 0xffff, 0x9, 0x29300000, 0x100, 0x3, 0x50000, 0x43, 0xe, 0x5, 0x5, 0x5, 0xffff8000, 0x4, 0x401, 0x1c0000, 0x9, 0xc, 0x8, 0x6, 0x30d, 0x9, 0x800, 0x99b, 0xfffffff7, 0xfffffffc, 0x4, 0x300, 0x4, 0x0, 0x9, 0x91, 0x3, 0x8, 0x6, 0x3, 0x7ff, 0x81, 0x7, 0x98, 0x1ff, 0x8, 0x401, 0x2, 0x4, 0x272e, 0x3, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x5b5661d8, 0x2, 0x0, 0x7fff, 0x6, 0x4, 0x8, 0x6, 0x10, 0x8b6eabd, 0x4, 0x5, 0x3, 0x4, 0x2, 0xa, 0x2, 0x2, 0x80000001, 0x5, 0x0, 0x4, 0x2, 0x678, 0x4, 0x1, 0x100, 0xffff1919, 0x9, 0x4, 0xffffffff, 0x7fffffff, 0x8, 0x4, 0x69, 0x1f, 0x5, 0x101, 0x401, 0xffffffff, 0x1b5, 0x1, 0x2, 0x0, 0x8001, 0xffffffff, 0x0, 0x2, 0xd81, 0xf, 0xff, 0x3, 0x4, 0x5e1, 0x7, 0x1, 0x7fffffff, 0x6, 0x1ff, 0x5, 0x9, 0x6, 0x5, 0x7, 0x4, 0x272, 0x4, 0x1, 0xfffeffff, 0x9, 0x197, 0x7f, 0x9, 0x92, 0x8, 0x9, 0x5, 0x3, 0x5265, 0x4, 0x4, 0xfffffffc, 0xa, 0x8, 0xe7, 0x80000001, 0x8, 0xda4, 0x8, 0xa, 0x5, 0x4, 0x5a, 0x4, 0xffff, 0x59b, 0x0, 0x5, 0x7, 0x5, 0xef, 0x1000, 0x0, 0x7, 0x10001, 0x7, 0x1, 0x6c9, 0x0, 0x8000, 0x7, 0x400, 0x4, 0x7, 0x101, 0x7ff, 0x4, 0x6ee0, 0x4, 0x7, 0xa, 0xd6, 0x5, 0x0, 0x401, 0x8, 0x1, 0x9, 0x6, 0x7, 0x14, 0x7, 0xff, 0x8, 0x4, 0x3, 0x9, 0x80000000, 0xe0000000, 0xfffffff9, 0x8, 0x5, 0xe88, 0x8, 0x5a6, 0x8, 0xb666, 0x3, 0x4, 0xfffffffd, 0x96d0, 0x8000, 0xf, 0x9, 0x7, 0xde, 0x3, 0x7889, 0x34, 0x5, 0x6, 0x81, 0x10000, 0x66c, 0x81, 0x800, 0x0, 0x8, 0x101, 0x7fff, 0x9, 0x4, 0x1, 0x3d67, 0xfffffffe, 0x0, 0x6, 0x0, 0x81, 0x3, 0xaf, 0x3, 0x0, 0x8, 0x0, 0xdd77, 0x0, 0x4c1d, 0x1, 0x1, 0x9, 0x8, 0x7fffffff, 0x0, 0xffff, 0x1, 0x8, 0xca5c, 0x0, 0x9, 0x9, 0x401, 0x7, 0xfffffffe, 0xd, 0x2, 0x46, 0x3, 0x2, 0x1000, 0x2, 0xfff, 0x8, 0xffffffff, 0x80000000, 0x6d, 0xf, 0x3ff, 0x0, 0xa, 0xd4a, 0x2, 0x7, 0x46f, 0x7fffffff, 0x1, 0x9, 0x28, 0x7f, 0x1, 0x1, 0x2, 0x9, 0x8262, 0xf2eb, 0x4, 0xc4fb, 0x7fff, 0x0, 0x1, 0x9e, 0xfffffbff, 0x8, 0x8000, 0x1, 0x4, 0x3, 0x6, 0xff, 0x2, 0x0, 0xffff22af, 0x8000, 0x400, 0x0, 0x6]}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x4, 0x0, 0x1, 0x9, 0x8, 0x3ff, 0xffff, 0x2, 0x7, 0x7, 0x6, 0x2, 0xfffffff8, 0xc7ec, 0x2, 0x2834, 0x2, 0x7, 0x200, 0x100, 0x8000, 0x9, 0x9, 0x0, 0x9, 0xffffffff, 0x0, 0x5, 0x9fa, 0x401, 0x1015, 0x8, 0x807, 0xc30, 0x12cd, 0x9, 0x5, 0xf, 0x80000001, 0x2a9, 0x26a7, 0x3, 0x1, 0x0, 0x1, 0xe00000, 0x2, 0xdfa6, 0x5, 0x7, 0x4, 0x6, 0x82, 0x5, 0x7, 0x5, 0xb, 0x8, 0x0, 0xfff, 0x0, 0x9, 0x7, 0xb4, 0x8737, 0x0, 0x81, 0x5, 0x7ff, 0x6, 0x4, 0x5f4, 0xb, 0x4, 0x6, 0x0, 0x5, 0x2, 0x9, 0xbf, 0x10, 0x7, 0x2, 0x5, 0xef5, 0x3, 0x44, 0x7fffffff, 0x3ff, 0x5, 0x4, 0x7fff, 0xb901, 0x2, 0x8, 0x200, 0x4, 0x5, 0x8, 0x5, 0x7fff, 0xffffffa5, 0x5, 0x0, 0x6, 0xd2, 0xb, 0xb412, 0x5, 0x9, 0x5c8f, 0x6, 0x3, 0x9, 0x0, 0x6, 0x4, 0x0, 0x2, 0x4, 0x0, 0x6, 0x8, 0x9, 0x9, 0x400, 0x7fffffff, 0x7, 0x1, 0x4, 0x47dc, 0x6, 0x200, 0x8d84, 0x7, 0x9, 0x2, 0x7, 0x7, 0xd, 0x7fd4, 0x1, 0xf, 0x8, 0x1586, 0x6, 0x200, 0xcca4, 0x5, 0x7f, 0xfa, 0x2, 0x8, 0x7, 0x6, 0x80000000, 0x7, 0x37, 0x4, 0x1, 0x9, 0x2, 0x1, 0x9767, 0x0, 0x1, 0x0, 0xc, 0x6f9f, 0x5, 0xd, 0x5, 0x9, 0x6, 0x9, 0x10001, 0x5, 0x8, 0x2, 0x10, 0x800, 0x3, 0x3, 0x8e, 0x30000000, 0x5, 0x6, 0x80000000, 0x99, 0x10001, 0x7ff, 0xa, 0xeab, 0x2, 0x72a2, 0x200, 0x5, 0x80, 0x6d50, 0x800, 0x0, 0x8001, 0x9, 0x4, 0x5, 0x7, 0x31, 0x2, 0x976, 0x1000, 0x3, 0x8001, 0x7ff, 0x4, 0x4, 0xc7, 0x10, 0x1, 0x1f2f, 0x6, 0xfffffff3, 0x0, 0x0, 0x1, 0x4, 0x3, 0xf, 0x7c3d, 0xfffffeff, 0xfffffe00, 0x1ff, 0x8001, 0x2, 0xc, 0x10, 0x1, 0x7ff, 0x9, 0x8, 0x100, 0x4, 0x7, 0x1ff, 0x9, 0x2, 0x8, 0x3, 0x400, 0x7, 0x5, 0x80, 0x7ff, 0x3245, 0xffffffff, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x834}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80000000}, @TCA_POLICE_RATE={0x404, 0x2, [0x4c21, 0x10000, 0x66, 0x9, 0x9, 0x7, 0x80000001, 0x10, 0x6, 0xe, 0x200, 0xe, 0x2, 0x8000, 0x0, 0xfffffff7, 0x9, 0x7, 0x1, 0x7, 0x8, 0x4, 0x1, 0x1000, 0x3, 0x3, 0x10001, 0x1, 0x5, 0x3585, 0x10000, 0xffffffff, 0x0, 0xbc, 0x0, 0xfffffff7, 0x6, 0xd, 0x40, 0x5, 0x9, 0x0, 0x80, 0xfffffff8, 0xfffffffb, 0x9, 0x1000, 0x80000000, 0x1200000, 0x3, 0x3, 0x6, 0x1, 0x4, 0x7ff, 0x4, 0xa570, 0x0, 0x8, 0x9, 0x322fe5b3, 0x8001, 0x7, 0x9, 0x7, 0x3dfbd0bd, 0xd3, 0x6c0, 0xc, 0xfffffff7, 0x11f, 0xce, 0xc, 0x0, 0x7f, 0x10001, 0x720, 0x0, 0x2, 0xfffffff8, 0x4, 0x4, 0x8000, 0x6, 0x9, 0x9cc, 0x1, 0x5, 0x9, 0x1000, 0x13b, 0x4, 0xbd, 0x4, 0xd, 0xb, 0x3bfa, 0x40, 0x0, 0x7, 0xfffff000, 0x5, 0x5, 0x6, 0x2, 0x8, 0xd7, 0x301, 0xd, 0x2, 0xfffffff7, 0x8, 0x7, 0x4, 0x1, 0x7, 0x7ff, 0x9, 0x7, 0xff, 0x7, 0x1, 0xb, 0x5e, 0x1ff, 0x1000000, 0x9, 0x6, 0xfff, 0xb, 0x1, 0x5, 0x9, 0x0, 0x3ff, 0x2, 0x6, 0x7fffffff, 0x6, 0x5, 0x200, 0x8, 0xa031, 0x101, 0x116d, 0xc, 0x14de5e84, 0x3, 0x7fffffff, 0x2, 0x6, 0x9, 0x5, 0x7fff, 0x42, 0x2, 0x80, 0x9, 0x8, 0x80000000, 0x101, 0xf, 0x4, 0x2, 0x5, 0x9, 0x1ff, 0x200, 0x6, 0x0, 0x1ff, 0x10001, 0x5, 0x8, 0x81, 0x7, 0x7fff, 0xffff, 0x6, 0xe6f7d6a, 0x71b, 0x81, 0x0, 0x5, 0x4, 0x10, 0x7, 0x0, 0x200, 0x8, 0x6, 0x2, 0x1, 0x9, 0x3, 0x11f5, 0x9, 0x5, 0x5, 0x4cb, 0x1, 0x6b, 0xfb5, 0x2, 0x6, 0xffff1365, 0x4, 0x2, 0x7, 0x0, 0x6, 0x8, 0x1, 0xffffffff, 0xfffffffa, 0x49, 0x9, 0x3ff, 0x4935b863, 0x6, 0x7, 0x5, 0x5, 0x9, 0x1, 0x9, 0x3, 0xf29, 0xeef, 0x5, 0xd, 0x4, 0xf312, 0x8, 0x4, 0x0, 0x101, 0x2, 0xffffffff, 0xffff, 0x81, 0x8, 0x9b44, 0x7, 0x401, 0xffffffff, 0x100, 0x0, 0x6, 0xa, 0x3, 0x100, 0x80000001, 0xfff, 0x401, 0x5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x45c1}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x9, 0x2, 0x10, {0x8, 0x1, 0x5, 0x7, 0x7ff, 0x8}, {0x8, 0x2, 0x7, 0x2, 0xf, 0x200}, 0xc19b, 0x4, 0x1}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x0, 0x80000000, 0x0, 0x6, 0x43f, 0x9, 0x0, 0x909be315, 0x6, 0x4, 0x897c, 0x6, 0x7, 0x100, 0x7ff, 0x9ed, 0x2, 0x8, 0x2, 0x8, 0x7, 0xff, 0xa8c, 0xffff, 0x5704, 0x4, 0x7, 0x4, 0x8000, 0x5, 0x10, 0xffffe5e5, 0x8, 0x7ff, 0x40, 0x8, 0x401, 0x0, 0xb7f, 0x8ce, 0x25c, 0x5b, 0xc, 0x4, 0x7, 0x1000, 0x4, 0x4, 0x2, 0x80, 0xf, 0xff, 0x218, 0x6, 0x9, 0x7, 0x10001, 0xb12, 0x2, 0x0, 0x10000001, 0x9, 0x7da2, 0x1, 0x3ae8, 0x9, 0xc306, 0x0, 0x7, 0x2, 0xfffff800, 0x99a, 0x401, 0x6, 0x4fc, 0x0, 0x8, 0x88d, 0x8, 0x400, 0x6c42, 0x8, 0xfff, 0x1, 0x8, 0x1, 0x4b, 0x1c8, 0x9, 0x6, 0x1, 0xce9a, 0xff, 0x6, 0x3, 0xc865, 0x9, 0x6d5, 0x3a, 0x1, 0x3, 0x4, 0x0, 0x7961, 0x10, 0x1, 0x9, 0x7, 0x3, 0x3f400, 0x80, 0x0, 0x8, 0x1ff, 0x9, 0x752, 0x6a9eeac4, 0x1, 0x7, 0x6, 0x4, 0x7, 0x3, 0xd, 0x9, 0x3ff, 0xffffffff, 0x4, 0xd5d, 0x7, 0x11, 0x4, 0x9, 0x7, 0x8, 0x2, 0x8, 0x6, 0x6f, 0x8, 0x3, 0x3, 0x4, 0x3ff, 0x2, 0x7, 0x3, 0x800, 0x3, 0x8, 0x1, 0x4, 0x9, 0x7f89, 0x40, 0x2, 0x1, 0x5, 0x4, 0x1, 0xffff, 0x6, 0x5cd, 0x3, 0x2fd, 0x5, 0x9, 0x80000000, 0x1, 0x5, 0x3, 0x3, 0x1ff, 0x8, 0x0, 0x0, 0x2, 0xfffffff9, 0x6, 0xfffffff7, 0x3, 0x53, 0x4, 0x9, 0xfffffffe, 0x7, 0x4d, 0x2, 0x3, 0x7, 0x6, 0x9, 0x5, 0x1ff, 0x9, 0x336, 0x0, 0xffffffff, 0x7f, 0x0, 0x3, 0x4, 0xab34, 0xfffffff9, 0x7, 0xffffffc0, 0xe475, 0x80000000, 0x8a0, 0x2, 0x81, 0x7ff, 0x8, 0x6, 0x1ff, 0x1, 0x7d, 0x7, 0x2, 0x1, 0x0, 0x2, 0x0, 0xd, 0x5, 0xff, 0x8, 0x9b57, 0x9, 0x3ff, 0xffffffff, 0x7, 0x7, 0x9, 0x5, 0x1, 0x3, 0x10000, 0xb, 0x800, 0x7, 0x1, 0x7f, 0x6, 0xfff, 0x200, 0x4, 0x2, 0x0, 0x72, 0xffff, 0x87a, 0x8001, 0x8, 0x7ab]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x309e7e15}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0xa02, 0xde, 0x2, {0x7, 0x2, 0x4ffe, 0xffff, 0xff4d, 0x401}, {0x8, 0x1, 0x9, 0x80, 0x7f, 0xe4cf}, 0x0, 0xfff, 0x400}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x4e, 0x9, 0x7, 0x9, 0x7ff, 0x1, 0x0, 0x0, 0x81, 0x0, 0xe6f, 0x10, 0x7, 0x2, 0x1000, 0x1f, 0x8, 0x8, 0xfffffffa, 0xfffffffd, 0x7, 0x2, 0x6, 0x9, 0x2, 0xf2, 0x2, 0x8, 0x8, 0x80000001, 0x4, 0x1, 0x6, 0xa99a, 0x10000, 0x7, 0xb, 0x1, 0x80, 0x80000001, 0x9, 0x3, 0x3, 0x5, 0x29e7e2ca, 0x3, 0x5, 0x7f, 0x8, 0x10, 0x0, 0xff, 0x7, 0x8, 0xd, 0x100, 0x6, 0x3, 0x800, 0x8, 0x10001, 0xc6ba, 0x783, 0x8, 0x6, 0x3, 0x3, 0x10001, 0x2, 0xc, 0x5, 0xfffffbff, 0xffffffff, 0xd, 0x2, 0x4, 0xfffffff9, 0x4, 0x7, 0xcf6, 0xadae, 0xb, 0x0, 0x1, 0xd1, 0x5fc, 0x3, 0x1, 0x83, 0x800, 0x6, 0xffffffff, 0x800, 0x6, 0x5, 0x54000000, 0xfffffffd, 0x9, 0x1, 0x6, 0x8, 0x81, 0xfff, 0x5, 0x80, 0x10000, 0x2, 0x400, 0xff, 0x7fffffff, 0x2, 0x10001, 0x7f, 0x10001, 0xffffc4de, 0x1, 0x7, 0xbb, 0xd, 0x7, 0x7, 0x2, 0x4, 0x5, 0xf1fe, 0x5, 0x9, 0x4, 0x7, 0x36aa0000, 0x1, 0x8, 0x2, 0x6, 0x8, 0x8, 0xd, 0x3, 0x400, 0x1, 0x2, 0xd, 0x253, 0x8001, 0x8, 0x4, 0x0, 0xffffffff, 0x6, 0x7, 0x101, 0xffffffff, 0x8, 0x0, 0xa, 0x0, 0xfffffff8, 0x0, 0x800, 0x7, 0x5, 0x10, 0x4c2, 0x8556, 0x8, 0x2, 0x1, 0x2, 0x2, 0xffffffff, 0x4, 0x3, 0x2, 0x2, 0x4, 0x1ff, 0xfffffffe, 0x8001, 0x2, 0x5, 0x51, 0x7611ddaf, 0x8, 0x3, 0x5, 0x3, 0xba7, 0xfffffff7, 0x10, 0x10001, 0x9f, 0x2, 0x7f6, 0x4, 0x679584eb, 0x6, 0x4, 0x3, 0x5, 0x401, 0x7fffffff, 0x4, 0x10001, 0x2, 0x5a, 0x8df8, 0x1, 0xfffffc01, 0xd5, 0x1, 0x5, 0x8, 0x1fca, 0x5, 0xd5, 0x7, 0xd24, 0x3, 0x4, 0x3, 0x6, 0xf417, 0xc, 0x1, 0x1000, 0x6, 0x9, 0xcd62, 0x777, 0x7, 0x5, 0x68e, 0xfffffff8, 0x8, 0x2, 0x2, 0xfffe0, 0x7fff, 0x8, 0x1, 0x0, 0xc, 0x1, 0x2, 0x7, 0x6, 0x400, 0x7, 0xfff, 0x8001, 0x80000000, 0x80000001, 0x8, 0x7]}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0xe, 0x5, 0x9, 0x4, 0x4, 0xfffffffc, 0xfffffffd, 0x5ab, 0xfd61, 0x2, 0x6, 0x80, 0x4, 0x8, 0xfff, 0xfff, 0x8001, 0xfff, 0xa36a, 0x0, 0xc, 0x5, 0x1, 0xb, 0xfffffffe, 0x3, 0x8, 0xfffffff7, 0xffff2dc3, 0xa776, 0x7, 0xdcc, 0x7, 0x3ff, 0x9, 0x3, 0x7, 0x0, 0xc93, 0x3bdb7704, 0x7, 0x40ff, 0x5bc3, 0x7, 0x8, 0x7f, 0x3, 0x4, 0x80000001, 0x401, 0x40, 0x2800000, 0x6, 0x4355, 0x800, 0x3, 0x5, 0x9, 0x8, 0x3ff, 0x8f, 0x3, 0x6, 0x80000000, 0x2, 0x1, 0x81, 0x6, 0x5, 0xa4, 0x3, 0x8, 0x8, 0xfffffff1, 0x400, 0x9, 0x6, 0x7f, 0x1, 0x1, 0xff, 0x9, 0xa8a7, 0x6, 0xf2, 0xab, 0x9, 0x7, 0xca, 0x80000000, 0x3, 0x101, 0x0, 0x0, 0xee2, 0x4, 0x5, 0x8, 0x2, 0x7, 0x7, 0x943, 0x1, 0x6, 0x0, 0xfffffffb, 0x4b3, 0x3, 0x7, 0x0, 0x1, 0x4, 0x5, 0x0, 0x62e, 0xfffffff9, 0x7, 0x2, 0x5, 0x9, 0x5, 0x8, 0xe9fc, 0x800, 0x7, 0xb, 0x0, 0x6, 0x1, 0xfffffffa, 0x100, 0xfffffe00, 0x3, 0x26ea, 0x7, 0x0, 0x7, 0x1, 0x7, 0x5, 0x0, 0x7, 0x0, 0x3d, 0x0, 0x5, 0xc, 0x5, 0x21b, 0x10001, 0x0, 0xfffffffa, 0x0, 0x5, 0x6, 0x7fffffff, 0x5, 0x7ff, 0x9, 0xc0f, 0x9, 0x1, 0x9, 0x5, 0x2, 0x4, 0x8, 0x1, 0x0, 0x400, 0x2, 0x3, 0x0, 0x81, 0xe7, 0x6, 0x7, 0x7, 0x2, 0x1ff, 0x4, 0x3, 0xe, 0xe4, 0x9, 0xff, 0x4, 0x3, 0x46, 0x6, 0x7be, 0x0, 0x4, 0x6, 0x3, 0x7, 0x1000, 0x1, 0x1, 0x400, 0x9, 0x7, 0x10000, 0x1, 0x5, 0x1, 0x10000, 0x9, 0x7, 0x0, 0x2, 0x4, 0x770, 0x9, 0x8, 0x0, 0x806a, 0x2, 0x7c, 0x9, 0x6, 0x3, 0xffffffff, 0xdb, 0x4, 0x7, 0x8, 0xfffffffe, 0x3, 0x2d60, 0x8, 0xffffffff, 0x4, 0x0, 0x0, 0x5, 0xd75, 0x4, 0x4bf422a3, 0x7fffffff, 0x800, 0x6, 0x6, 0x3e, 0xb9, 0x80000001, 0x2, 0x2000000, 0x5, 0x9, 0x0, 0x5, 0x8, 0x1, 0xb7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100000001}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x4ddc, 0x400, 0x4, 0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x2, 0x1, 0x9, 0x8, 0xffff, 0x9, 0x37b, 0x5, 0x80, 0x1, 0x2, 0x10001, 0x9, 0x10001, 0x98, 0x4, 0x4, 0x2, 0x6bc10e18, 0xd840, 0x9, 0x6, 0xffff, 0x10, 0x4, 0x1, 0x1, 0xfffffff7, 0x8001, 0x0, 0x400, 0x0, 0xa77, 0xd, 0xd, 0x1, 0x4, 0x9, 0xc, 0x9, 0x100, 0x7ff, 0x0, 0x5297, 0x1b, 0x6, 0x9, 0x3, 0x8, 0x3546, 0x0, 0x673e45b4, 0x1, 0x4, 0x5, 0x4, 0x100, 0x0, 0x7, 0x7, 0xb, 0x200, 0x455f, 0xa3d5, 0xbc90, 0x7ff, 0x86, 0x8, 0x1000, 0x1339, 0x5, 0xfffffffc, 0x50000, 0x2a, 0x9, 0xb, 0x7, 0x7, 0x2, 0x5, 0xb, 0xe6e2, 0xfffffffb, 0xe8, 0x1f9, 0xffff, 0x7dd, 0xb74, 0xc, 0x7, 0x2, 0xf, 0x8000, 0x8, 0x8, 0x9, 0x8, 0x0, 0x5e9, 0x4, 0xffff, 0x1000, 0x5, 0x10, 0x5, 0x7, 0x3ff, 0x76790d24, 0xb7, 0xff, 0x0, 0x4, 0x5, 0x1f1, 0x0, 0x0, 0x753e, 0xa8, 0x7, 0x3, 0x401, 0x1000, 0xf, 0xff, 0x803, 0x27e9, 0x80000001, 0xffffffff, 0x2, 0x4, 0x3, 0x6, 0x100, 0x7, 0x2, 0xf23, 0x9, 0x1, 0x10001, 0x724f1ffe, 0x0, 0x800, 0x10000, 0xc, 0x56ab, 0x0, 0xc, 0xa, 0xe2aa, 0xb63, 0xfffffe01, 0x2, 0x3a, 0x2, 0x9, 0x3, 0x78, 0xffffffff, 0x2411, 0x97d, 0x7, 0x1, 0x1, 0x444b187b, 0x3, 0x7, 0x0, 0x4, 0x1, 0x0, 0x8001, 0x4, 0x9, 0x5, 0x3, 0x1, 0x9, 0x0, 0xd, 0x800, 0x1df, 0x4, 0x7f, 0x3, 0x80000001, 0xa92, 0x7, 0x0, 0x80, 0xfffffff8, 0x9, 0x5c1a, 0x10, 0x5, 0xe, 0xd, 0x800, 0x9, 0x3, 0x79d, 0x8c1f, 0x2, 0x5, 0x800, 0x72, 0xa1, 0x8, 0x5, 0x7, 0x4b, 0x10001, 0x1, 0xfffffffe, 0x200, 0x7dc7, 0x8, 0xfffffffd, 0x2, 0x6, 0x7, 0xea7, 0x400, 0x8, 0x5, 0x1, 0xb3, 0xc9, 0x87, 0x1, 0xec83, 0x7, 0xda92, 0x3, 0xa9, 0x5, 0x4a, 0xff, 0x7, 0x654, 0x0, 0x0, 0x7fffffff, 0x1000, 0x8, 0xfffffff7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x200, 0xffffffffffffffff, 0x6, 0x5, 0x8, {0x5, 0x2, 0x4, 0x6, 0x5, 0x4}, {0x5, 0x1, 0x5, 0x7, 0xd3bf, 0x80}, 0xce1, 0x400, 0x5}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x2, 0x10001, 0x4, 0xb, {0x3a, 0x2, 0x5, 0x5, 0x5, 0x2619}, {0xf8, 0x2, 0x6, 0x346, 0x0, 0xfc4}, 0x1a0, 0x200, 0x9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x101, 0x9, 0xfff, 0x7fff, 0x1a1, 0x1, 0x1ff, 0x8001, 0xfff, 0xa3, 0xfffffffd, 0x10000, 0x80, 0x800, 0x1000000, 0xd, 0x7, 0x6, 0xf6, 0x6, 0x5, 0x2, 0x7, 0x5, 0x7, 0xfffffff9, 0x8, 0x10001, 0x1, 0xeb2, 0x9, 0x1ff, 0xda47, 0x2b, 0x8967, 0x5, 0x0, 0x2, 0x4, 0x2, 0x25b, 0xf, 0xcdd, 0x9, 0x2, 0x1000, 0x81, 0x0, 0x0, 0x9, 0x2f3, 0x9, 0x1, 0x7, 0x8, 0x5, 0x0, 0x5, 0x3, 0xfffffffc, 0x7, 0xf, 0x9, 0xffff1eb6, 0xa21, 0xffff, 0x543, 0x2, 0xfffffffa, 0x3ff, 0x6, 0x1, 0x10, 0x2, 0x4, 0x8001, 0x400, 0x7fffffff, 0x0, 0x6c01, 0x400, 0xc39, 0x8, 0x2, 0x2, 0x5c62b98f, 0xe, 0x8, 0x9, 0x5, 0x7ff, 0xaf40, 0xf4, 0x78, 0x7, 0x4, 0x1, 0x9, 0x7fffffff, 0x800, 0xfffffff8, 0x4, 0x200000, 0x877, 0x7ff, 0x3, 0x6, 0x5, 0x10, 0x6, 0x2, 0x4, 0x9, 0x9, 0x1, 0xffff, 0x8, 0x8, 0x2, 0xf, 0xfffffffe, 0x8, 0xffffffff, 0x1, 0x1, 0x9, 0x9, 0x4, 0xc, 0x6, 0x7, 0xffff25ec, 0x3829, 0x6, 0x1000, 0x1000, 0x80000001, 0xb4dd, 0x1, 0x2, 0x2, 0x101, 0x4, 0x1a4, 0x8, 0x3, 0x6, 0x4, 0xb3c, 0xd, 0x1000, 0x0, 0x0, 0x7, 0xe, 0x18a, 0x1000, 0x3fc8, 0x14, 0xb, 0x2, 0x70, 0x2, 0x1, 0xfb, 0x9, 0x8, 0x6, 0xa, 0x8001, 0x6, 0x101, 0x2, 0x0, 0x99a4, 0xc, 0x4, 0x4, 0x4, 0x10000000, 0x0, 0x2, 0x8, 0xf9f, 0xfffffff8, 0x0, 0x412d, 0x8, 0x180800, 0x965, 0xffff, 0x2, 0x5, 0x1, 0x7, 0xd, 0x9, 0x0, 0x800, 0x2, 0x101, 0x6, 0x1c49, 0x8000, 0x3, 0x401, 0x6, 0xc, 0x5, 0x1, 0x1c, 0x7, 0x4, 0x40, 0x7, 0x7, 0x2, 0x4, 0x7, 0x200, 0x9, 0x9, 0x4, 0xdd59b72, 0xa, 0x859, 0x6, 0x6, 0x8e, 0x93, 0x5, 0x52, 0x0, 0x8, 0xf4, 0x4, 0x401, 0x75a6, 0x7, 0x3, 0xd66, 0xf11, 0x1, 0x6, 0xf, 0x2d38, 0x97e4, 0x5d, 0x0, 0x9, 0x4, 0x5, 0x4b1, 0x3, 0x1a4d]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x401, 0x0, 0x4, 0xa31, 0x89e, {0x0, 0x0, 0x1, 0xa, 0x8, 0x5e}, {0x5, 0x0, 0x8, 0xfff9, 0x8a63, 0x3}, 0x6, 0x4, 0x7}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x7fffffff, 0x4, 0x0, 0x1000, 0x8001, 0x23b8, 0x1, 0x101, 0x2, 0xcf21, 0x4c8c, 0x3, 0x9, 0xe, 0x3, 0x7, 0x2, 0x5f, 0xffff, 0x101, 0x4, 0xffff, 0x8001, 0x2, 0x9, 0xa7ccec4a, 0xb45c, 0xffff0000, 0x3, 0xc, 0x5, 0x101, 0x81, 0x1, 0x31, 0x10, 0x604, 0x0, 0x4, 0x40, 0xfffeffff, 0x3, 0x0, 0x86, 0x6, 0x5, 0xa1, 0xed80, 0x2, 0x5, 0x80000001, 0x3, 0x7, 0xf6, 0x9, 0x800, 0x3ff, 0x8, 0x8, 0x200, 0x69d45168, 0x400, 0x9, 0x40, 0x4, 0xa9, 0x8, 0xc1a, 0x7, 0x7, 0x3db, 0x9, 0x4, 0x81, 0x2, 0x5, 0x4, 0x1ff800, 0x9, 0x7fffffff, 0xc, 0x8001, 0x7, 0xffff, 0x10000, 0xffffffff, 0x35, 0x7, 0x40, 0x14f0dc17, 0x1, 0x5, 0x200, 0x8000, 0x5, 0x0, 0x5, 0x1, 0x903d, 0x2, 0x6d, 0xf, 0xffffffff, 0x9, 0x0, 0x7, 0x0, 0xfffffff8, 0xffff, 0x3, 0x6, 0xec6, 0xc, 0x7, 0x1, 0xce, 0x80000000, 0x2, 0x0, 0x7, 0x2, 0xfffff784, 0xfffffff8, 0x3ff, 0xc2, 0x9c, 0x0, 0x10001, 0x2, 0x4, 0x680000, 0x6, 0xb3, 0x3ff, 0x2, 0x5adf, 0x7fff, 0x4e0, 0x6, 0x1, 0x5, 0x0, 0x0, 0x8, 0x3, 0x8c, 0x2, 0x9b39, 0xffff, 0x5, 0x8, 0x0, 0x401, 0x3cb9, 0x2, 0x5, 0x2, 0x101, 0x80000000, 0x3, 0x7, 0x2d4, 0x0, 0xd7a, 0x4, 0x300, 0x7, 0x22, 0xfffff800, 0x6, 0x400, 0xffffffff, 0x0, 0x4, 0x0, 0x3, 0x3, 0x5, 0x1ff, 0x9, 0x2, 0x3, 0x4, 0x1, 0x6, 0x0, 0x3, 0x80000001, 0x0, 0x80000, 0xa, 0x1, 0xfffffffc, 0x6, 0x5, 0xe, 0x7, 0x5, 0x8001, 0x2, 0x4, 0x8001, 0xffffffc0, 0x1, 0x4, 0x4, 0x6, 0x5, 0x9, 0x5, 0x0, 0x4, 0x7ff, 0x7, 0x9d6, 0x7e, 0x9, 0xa, 0x861, 0x1, 0x4, 0x4be6, 0x3, 0x7, 0x3ff, 0xe828, 0x23340000, 0xc, 0x7, 0x40, 0x9, 0xb, 0x9, 0x3, 0x8001, 0x7, 0x5, 0x9, 0x1, 0xfffffffd, 0x6b54, 0x1e1, 0x3, 0xfffffff4, 0x401, 0x0, 0x3, 0x3, 0xc, 0x9, 0x5, 0x3, 0xbeb2, 0x2e, 0x2c3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x40}]]}, {0x9b, 0x6, "4532222195da59349f3670494aac4e1a8806bd5b557b1a3c21da0a785cb95b5a5cdc0c90c60d82b0d2b9ff345988be6918277a81694dc82232184da3de63a2518ac6baadf9cf17c8fe3bc659931c4df4affcd8161ffca3fed0cc3217346092fbf426195b54af1cd579fcb6974a0e5e4f68ca10a8345a1c723ae49446b1666fe0eb609d40079a31e6efa9fa860d29c2fefc66658807a5e0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x4}}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ICMPV4_CODE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e22}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x32}}, @TCA_CHAIN={0x8, 0xb, 0xe}, @TCA_CHAIN={0x8, 0xb, 0x10f}, @TCA_CHAIN={0x8, 0xb, 0xffffffff}, @filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x3ead}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff2, 0x1}}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x42abd27}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0x4cc, 0x2, [@TCA_ROUTE4_POLICE={0x68, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x2, 0x8001, 0x800, 0x1, {0x0, 0x2, 0x4, 0xff, 0x59e0, 0x8}, {0x5, 0x1, 0x1, 0x4, 0x3}, 0x9, 0x1, 0x3}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9c8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xe, 0xd}}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xf7}, @TCA_ROUTE4_POLICE={0x440, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0xfff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x81}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xffff, 0x7fff, 0x8b55, 0x35, 0x1, 0x73a, 0xf5, 0x8, 0x1, 0x9, 0x3, 0x4, 0x400, 0xa, 0x6, 0x6c4, 0x9, 0x21000000, 0xcd, 0x7fffffff, 0x5, 0x7, 0x4, 0x6, 0x8, 0x7, 0x0, 0xfffffff8, 0x5, 0x401, 0x80000000, 0x200, 0x10001, 0x2, 0x0, 0x10, 0x2, 0x5108, 0x9, 0x2, 0x9, 0x3, 0x100, 0x6, 0x200000, 0x2, 0x9, 0x2, 0xd, 0x80000000, 0x5, 0x6, 0x8, 0xffffffff, 0x1, 0x28, 0x4, 0x1c0000, 0x6567, 0xffff, 0x5, 0x5, 0x4, 0x80000000, 0x400, 0x2, 0x10000, 0x101, 0xd7c0, 0xc961, 0x9, 0x5, 0x0, 0x6, 0x7, 0xff, 0x208d, 0x1000, 0x9, 0xd, 0x7, 0x7, 0x8, 0x6, 0x2, 0x2, 0x80000000, 0x5, 0x7fff, 0x96f, 0x0, 0xfffffff8, 0xe8e, 0x3, 0x0, 0xa, 0x400, 0x8, 0x9, 0x3, 0x5, 0xdf46, 0x7, 0xa5ff, 0x9636, 0x79, 0x9, 0x3c7c, 0x3924c41c, 0xafe, 0x8ef4, 0x9, 0x4, 0x4, 0x8, 0x5, 0xd9, 0x7b7a, 0x6, 0x81, 0x0, 0x1ff, 0x4, 0x9, 0x2, 0xda0, 0xffff, 0x10001, 0x65, 0x8c, 0x5, 0xffff, 0x3, 0x7, 0x400, 0x0, 0x84e, 0x200, 0x3ff, 0x6, 0xb94, 0x8, 0x400, 0x1c, 0x6, 0x7, 0x10, 0x694, 0x7, 0x3, 0x2, 0x4, 0x9, 0xe9, 0x9, 0x9, 0x7, 0x7fff, 0x100, 0x216, 0x3, 0x5, 0x8, 0x9, 0x2, 0x2, 0x9, 0x101, 0x0, 0x4, 0x7, 0x8f, 0x4, 0x0, 0x2, 0x7fffffff, 0xd, 0x8, 0x8, 0xc54e, 0x7, 0x1, 0x7, 0x8, 0x6, 0x1, 0x5, 0x7fffffff, 0xffffffc0, 0x401, 0xb51, 0x4c, 0x4, 0x10000, 0x7, 0x7f, 0xdf5, 0x1b0a, 0x1ff, 0x1, 0x3b, 0x0, 0x4, 0x1, 0xf19, 0x5, 0x30, 0xfffffff7, 0x2, 0xa7, 0x4, 0x2, 0x4, 0x6, 0xfffffffe, 0xffffffff, 0x4, 0x9, 0x17, 0x5, 0xb4940, 0x3ff, 0x9, 0x2, 0x8, 0x29, 0x8, 0x4, 0x3, 0x7b2, 0xb, 0xef5c, 0x5000, 0x9, 0x0, 0x0, 0x4, 0x6, 0x9, 0xfffffffd, 0x8, 0x9, 0x6, 0x2, 0x976, 0x8, 0x3, 0x7, 0x1000, 0x0, 0xad, 0x1, 0x5, 0x22, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x39}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xd1}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x6a}]}}]}, 0x3e50}, 0x1, 0x0, 0x0, 0x4}, 0x20004804) 919.358983ms ago: executing program 0 (id=1759): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r0, @ANYBLOB="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"], 0x48}}, 0x40000) 778.466899ms ago: executing program 0 (id=1760): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000002142000050000081400000008ff0200ffa9418cfe0df1c15400000008000200e00000020c000c400000000000000006002000"/64], 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x7800, 0x0, 0x9, 0x2f, {{0x27, 0x4, 0x0, 0x14, 0x9c, 0x66, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x2b, 0x0, 0xe, [0x5, 0xfffffffa]}, @cipso={0x86, 0x17, 0x0, [{0x5, 0x11, "0651b4f734240f089f4aaf19d4b06a"}]}, @rr={0x7, 0x17, 0xfc, [@remote, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback]}, @generic={0x7, 0x2}, @noop, @ssrr={0x89, 0x23, 0x88, [@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @local, @rand_addr=0x64010102, @remote, @loopback]}, @lsrr={0x83, 0x13, 0xb6, [@loopback, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x3f}]}, @generic={0x86, 0x11, "02776919b37b17ea6436d195945ce4"}]}}}}}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000300)={r6, 0x1, 0x6}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 777.77286ms ago: executing program 4 (id=1761): r0 = socket$unix(0x1, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) vmsplice(r3, &(0x7f0000000280)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x2, [{0x0, 0x2}]}, @fwd={0x3}]}}, 0x0, 0x3a, 0x0, 0xffffffff}, 0x28) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a40)={'vlan0\x00', &(0x7f0000000a80)=@ethtool_cmd={0x17}}) 705.471661ms ago: executing program 1 (id=1762): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x70080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000000)=0x2b, 0x4) 637.338167ms ago: executing program 0 (id=1763): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) r2 = socket$inet(0x2, 0x80000, 0x67b) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000040)={@broadcast, @empty}, &(0x7f0000000080)=0xc) socket$nl_route(0x10, 0x3, 0x0) 514.465085ms ago: executing program 1 (id=1764): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x9000, @loopback}], 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)=""/47, &(0x7f0000000040)=0x2f) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000140)={r2, @in6={{0xa, 0x0, 0x4, @empty}}, 0x7}, &(0x7f0000000200)=0x90) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000006740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2404c845) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x2, 0x6, 0x660, 0x378, 0x378, 0xe0, 0x378, 0x468, 0x590, 0x590, 0x590, 0x590, 0x590, 0x6, 0x0, {[{{@ipv6={@private0, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffffff, 0xffffff00, 0xff], [0xff, 0xff, 0xff000000, 0xffffff00], 'batadv0\x00', 'rose0\x00', {}, {0xff}, 0xff, 0x3, 0x0, 0x26}, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x45, 0x1}, {0xfffd, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0xffffffff, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0x138, 0x170, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@unspec=@rateest={{0x68}, {'pim6reg\x00', 'ip6_vti0\x00', 0x24, 0x0, 0x2, 0x2400000, 0x3, 0x8, {0x10000}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff, 0x0, 0x5}, {}, {0x87, 0x1, 0x7}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback, 0x0, 0x0, 0x7ff}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x62, 0x8, 0x7, 0xb, 0x30ba, 0x222}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c0) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x2, 0x6, 0x660, 0x378, 0x378, 0xe0, 0x378, 0x468, 0x590, 0x590, 0x590, 0x590, 0x590, 0x6, 0x0, {[{{@ipv6={@private0, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffffff, 0xffffff00, 0xff], [0xff, 0xff, 0xff000000, 0xffffff00], 'batadv0\x00', 'rose0\x00', {}, {0xff}, 0xff, 0x3, 0x0, 0x26}, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x45, 0x1}, {0xfffd, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0xffffffff, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0x138, 0x170, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@unspec=@rateest={{0x68}, {'pim6reg\x00', 'ip6_vti0\x00', 0x24, 0x0, 0x2, 0x2400000, 0x3, 0x8, {0x10000}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff, 0x0, 0x5}, {}, {0x87, 0x1, 0x7}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback, 0x0, 0x0, 0x7ff}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x62, 0x8, 0x7, 0xb, 0x30ba, 0x222}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x25dfdbfc, {0xa, 0x80, 0x0, 0x0, 0xff, 0x0, 0xff, 0x0, 0x400}, [@RTA_OIF={0x8, 0x4, r7}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x5c, 0x0, 0x4, 0x0, 0x87, 0x58, 0x7}}}}}]}, 0x44}}, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, 0x0) (async) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, 0x0) 514.031191ms ago: executing program 2 (id=1765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0)='4', 0x1) tee(r2, r1, 0xffffffffffffffff, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802ef9"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x100059, @private0, 0x6}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x7d, &(0x7f00000000c0)=@assoc_value={r9}, 0x8) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x7, @private0, 0x1}, 0x1c) bind$netlink(r7, &(0x7f0000000ac0)={0x10, 0x0, 0x25dfdbfb, 0x8000}, 0xc) sendmsg$nl_xfrm(r7, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000002100000829bd7000fcdbdf25e0000001000000000000000000000000ff0200000000000000000000000000014e2200084e2000dc0200a0800c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="2c3bba2fa9c32660b160aa0474f602183a7790040fbd3c11d4165a43c4a8ed9779e3837f18f7f0ea371d30f4499f2b5532a80f6c062b642312b3c11708f77ba70454d729eeac"], 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x1c8, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x198, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5c4, 0x5, 0x0, 0x0, 0x208], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, [@TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MODE={0x6}, @TCA_MQPRIO_MIN_RATE64={0x70, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x9}, {0xc, 0x3, 0x73}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0x7}, {0xc, 0x3, 0xffffffffffff8001}, {0xc, 0x3, 0xa}, {0xc, 0x3, 0x5}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0x4}]}, @TCA_MQPRIO_MIN_RATE64={0xb8, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x2}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0x1000}, {0xc, 0x3, 0x98}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0x2}, {0xc}, {0xc, 0x3, 0x200}, {0xc, 0x3, 0x81}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x80000001}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0xcc}]}]}}}]}, 0x1c8}}, 0x200000d1) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000040000100fcff0700fedbdf2501f8107d51d7d20438ad104d82098d31c6b050574e6f3938b0062fbda51700078d123718942c0b304010db38ce72c799b143fb200e565c5aa0aa88dc06546fe487c20000"], 0x58}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) bind$vsock_stream(r14, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @host}, 0x10) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6cebff8255eb001000010400000000eeff00", @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fe8000000000000000000000000000aa140003007866726d3000000000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 513.190265ms ago: executing program 0 (id=1766): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x7}, {0x6}]}, 0x10) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x8}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="05"], 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}]}]}, 0x30}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000906000000219dee190000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800050007000000"], 0x3c}}, 0x0) socket$pppoe(0x18, 0x1, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x7}, {0x6}]}, 0x10) (async) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) (async) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x8}, 0x50) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="05"], 0x10) (async) writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}]}]}, 0x30}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000906000000219dee190000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800050007000000"], 0x3c}}, 0x0) (async) 511.975068ms ago: executing program 3 (id=1767): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x44004}, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c2000000c1e2450000b0000000000011907800000000fffffffffffe4e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa82e74e5049d22d1334451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19930b6996c7096f50f14ad07b082fc5b83afeeb03000000000000649a3bfbc1f39cb303b3472eb9cdb042d2643fcbb2c5a5"], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f00000003c0)={0x1bacf914c1bae05, &(0x7f0000000940)}) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet6_tcp_TLS_RX(r4, 0x11a, 0x2, &(0x7f0000000040)=@gcm_256={{0x304}, "2b875c4dba89eaaf", "b144cd6f1e6801ee02d37138c6c49d600da928554995cc24db65a0730183ff63", "736700dc", "fa81907166736e06"}, 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "8b99713c49ae53e4", "b26ac9163f2291edf70bc132ba23165e", "39a8b9d7", "a0391c4630086180"}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x10, &(0x7f0000000440), 0x4) sendto$inet6(r7, 0x0, 0x0, 0xbb8, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @local}, 0x1c) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) read(r1, 0x0, 0x0) 234.520463ms ago: executing program 3 (id=1768): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="3e00330030180400ffffffffffff08021100000108021100000024b190603b0003002d1a000401f7ffffffffffffff7e00e8000100000006000000000005000004008e00"], 0x60}, 0x1, 0x0, 0x0, 0x4855}, 0x48814) 201.714412ms ago: executing program 1 (id=1769): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x38, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0a41, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x8016, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x1}}}}, 0xfdef) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x20, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x800) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x3, r2, 0x1, 0x1, 0x6, @local}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x6001}, 0x40400c0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) 87.982102ms ago: executing program 3 (id=1770): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_opts(r1, 0x29, 0x4d, 0x0, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="04"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="280000001900010000000000000002001c140000fe00000101"], 0x28}}, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="1f2d9100d3bf6b474af7c52356feb602674bd4d37c808c4882c4c6be17cfe71c517ef66c1d0802a6cfa1bb68c0b1fe636b0073b9708d1bc4bda4e1a7e934b00d493df63ef1739666ddb97cd77a1d7f8d02e0996c", 0x54}, {&(0x7f0000000180)="e6354a61e8ff8cc905401fc360858325e0720d1e2c562244ea43e3b88971bec431621783c7c3fd7c3d6463a85083bfe829b6a2381c38da45b50e1f40c818acf3a87f9da484edfccbbce19109", 0x4c}], 0x2, &(0x7f0000000240)=[@ip_retopts={{0x48, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0xe8, [@rand_addr=0x64010101]}, @timestamp={0x44, 0x14, 0x1a, 0x0, 0x7, [0x2, 0x1, 0x30, 0x9]}, @timestamp_prespec={0x44, 0x1c, 0x74, 0x3, 0x9, [{@remote, 0x4}, {@multicast2, 0xb9}, {@local, 0x3}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x34}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x414e}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@ra={0x94, 0x4}, @end, @end, @ra={0x94, 0x4, 0x3}]}}}], 0xb0}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) 0s ago: executing program 2 (id=1771): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000)=0x80000001, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000280)=0xfffffffa, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000440)=0x1848, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x29, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000140)={r1}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8004, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xa}, {0xffe0, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r11}, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r13, 0x40020}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private2}]}}}]}, 0x4c}}, 0x0) kernel console output (not intermixed with test programs): idge_slave_1) entered disabled state [ 74.062363][ T5818] bridge_slave_1: entered allmulticast mode [ 74.069442][ T5818] bridge_slave_1: entered promiscuous mode [ 74.122489][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.129674][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.136811][ T5827] bridge_slave_0: entered allmulticast mode [ 74.143605][ T5827] bridge_slave_0: entered promiscuous mode [ 74.153660][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.188381][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.195564][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.202643][ T5827] bridge_slave_1: entered allmulticast mode [ 74.209626][ T5827] bridge_slave_1: entered promiscuous mode [ 74.217861][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.251521][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.260807][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.268315][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.275651][ T5830] bridge_slave_0: entered allmulticast mode [ 74.282494][ T5830] bridge_slave_0: entered promiscuous mode [ 74.300544][ T5819] team0: Port device team_slave_0 added [ 74.313078][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.322449][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.329611][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.336956][ T5830] bridge_slave_1: entered allmulticast mode [ 74.344137][ T5830] bridge_slave_1: entered promiscuous mode [ 74.361073][ T5819] team0: Port device team_slave_1 added [ 74.390168][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.435947][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.462886][ T5818] team0: Port device team_slave_0 added [ 74.470958][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.490026][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.497121][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.523190][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.535081][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.542697][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.550071][ T5832] bridge_slave_0: entered allmulticast mode [ 74.557120][ T5832] bridge_slave_0: entered promiscuous mode [ 74.565826][ T5818] team0: Port device team_slave_1 added [ 74.571480][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.578941][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.586280][ T5832] bridge_slave_1: entered allmulticast mode [ 74.593063][ T5832] bridge_slave_1: entered promiscuous mode [ 74.601430][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.623587][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.630617][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.656726][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.692584][ T5827] team0: Port device team_slave_0 added [ 74.735555][ T5827] team0: Port device team_slave_1 added [ 74.752630][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.759835][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.786255][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.799419][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.811051][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.821696][ T5830] team0: Port device team_slave_0 added [ 74.845177][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.852126][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.878095][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.899366][ T5830] team0: Port device team_slave_1 added [ 74.933731][ T5819] hsr_slave_0: entered promiscuous mode [ 74.939986][ T5819] hsr_slave_1: entered promiscuous mode [ 74.961156][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.968408][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.994341][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.006035][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.012978][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.039266][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.051426][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.058582][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.084927][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.085172][ T5823] Bluetooth: hci1: command tx timeout [ 75.095532][ T51] Bluetooth: hci0: command tx timeout [ 75.109641][ T5832] team0: Port device team_slave_0 added [ 75.116323][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.123247][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.149273][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.159811][ T51] Bluetooth: hci2: command tx timeout [ 75.204301][ T5832] team0: Port device team_slave_1 added [ 75.224750][ T51] Bluetooth: hci3: command tx timeout [ 75.230396][ T51] Bluetooth: hci4: command tx timeout [ 75.241383][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.248474][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.274763][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.312761][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.319901][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.346124][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.397719][ T5818] hsr_slave_0: entered promiscuous mode [ 75.403823][ T5818] hsr_slave_1: entered promiscuous mode [ 75.410043][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 75.416130][ T5818] Cannot create hsr debugfs directory [ 75.472311][ T5830] hsr_slave_0: entered promiscuous mode [ 75.478759][ T5830] hsr_slave_1: entered promiscuous mode [ 75.484868][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 75.490586][ T5830] Cannot create hsr debugfs directory [ 75.501310][ T5827] hsr_slave_0: entered promiscuous mode [ 75.507502][ T5827] hsr_slave_1: entered promiscuous mode [ 75.513444][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 75.519504][ T5827] Cannot create hsr debugfs directory [ 75.615726][ T5832] hsr_slave_0: entered promiscuous mode [ 75.622171][ T5832] hsr_slave_1: entered promiscuous mode [ 75.628352][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 75.634074][ T5832] Cannot create hsr debugfs directory [ 75.873161][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.885098][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.929471][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.956585][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.059381][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.070278][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.087047][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.109464][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.180720][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.191494][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.204065][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.218414][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.238292][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.273936][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.312972][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.320324][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.352067][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.365127][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.372193][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.404118][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.426038][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.437651][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.499469][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.535059][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.555303][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.573874][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.581754][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.592354][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.648094][ T3026] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.655687][ T3026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.682376][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.711606][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.718721][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.742520][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.779446][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.786608][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.846775][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.853889][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.932289][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.947403][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.987720][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.006098][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.021284][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.028460][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.056214][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.063432][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.098712][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.146217][ T51] Bluetooth: hci0: command tx timeout [ 77.146350][ T5823] Bluetooth: hci1: command tx timeout [ 77.188993][ T5819] veth0_vlan: entered promiscuous mode [ 77.201525][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.208678][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.226532][ T5823] Bluetooth: hci2: command tx timeout [ 77.287416][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.294597][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.305558][ T5823] Bluetooth: hci3: command tx timeout [ 77.307645][ T51] Bluetooth: hci4: command tx timeout [ 77.320624][ T5819] veth1_vlan: entered promiscuous mode [ 77.383009][ T5819] veth0_macvtap: entered promiscuous mode [ 77.403492][ T5819] veth1_macvtap: entered promiscuous mode [ 77.439695][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.471235][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.508767][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.560460][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.636277][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.657479][ T986] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.688933][ T986] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.700074][ T986] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.743487][ T986] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.796466][ T5818] veth0_vlan: entered promiscuous mode [ 77.863397][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.894884][ T5818] veth1_vlan: entered promiscuous mode [ 77.923111][ T5830] veth0_vlan: entered promiscuous mode [ 77.940586][ T1011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.951988][ T1011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.971005][ T5830] veth1_vlan: entered promiscuous mode [ 78.007576][ T986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.018719][ T986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.069074][ T5832] veth0_vlan: entered promiscuous mode [ 78.093688][ T5818] veth0_macvtap: entered promiscuous mode [ 78.103005][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.110135][ T5832] veth1_vlan: entered promiscuous mode [ 78.136516][ T5827] veth0_vlan: entered promiscuous mode [ 78.142714][ T5818] veth1_macvtap: entered promiscuous mode [ 78.171207][ T5830] veth0_macvtap: entered promiscuous mode [ 78.196741][ T5827] veth1_vlan: entered promiscuous mode [ 78.212504][ T5830] veth1_macvtap: entered promiscuous mode [ 78.252046][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.286821][ T5832] veth0_macvtap: entered promiscuous mode [ 78.308301][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.328608][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.351195][ T5936] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2'. [ 78.362549][ T5832] veth1_macvtap: entered promiscuous mode [ 78.376690][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.414695][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.440827][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.450102][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.462750][ T5931] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2'. [ 78.465312][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.481568][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.491206][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.510745][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.518867][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.528450][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.549030][ T5827] veth0_macvtap: entered promiscuous mode [ 78.556111][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.593437][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.603251][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.613866][ T5827] veth1_macvtap: entered promiscuous mode [ 78.631820][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.641568][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.675804][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.683643][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.722938][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.752865][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.763821][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.773718][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.809227][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.818109][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.846675][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.852158][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.856400][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.872648][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.909643][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.919192][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.015305][ T1011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.043607][ T1011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.131230][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.155848][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.225326][ T51] Bluetooth: hci0: command tx timeout [ 79.225683][ T5823] Bluetooth: hci1: command tx timeout [ 79.246446][ T986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.247303][ T1011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.262426][ T1011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.298556][ T986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.315223][ T5823] Bluetooth: hci2: command tx timeout [ 79.342937][ T5948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7'. [ 79.386048][ T5823] Bluetooth: hci4: command tx timeout [ 79.388888][ T51] Bluetooth: hci3: command tx timeout [ 79.674970][ T5958] warning: `syz.0.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.722675][ T5966] bridge_slave_0: left allmulticast mode [ 79.729787][ T5966] bridge_slave_0: left promiscuous mode [ 79.743999][ T5958] netlink: 'syz.0.11': attribute type 2 has an invalid length. [ 79.749109][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.792895][ T5966] bridge_slave_1: left allmulticast mode [ 79.802039][ T5966] bridge_slave_1: left promiscuous mode [ 79.811917][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.853816][ T5966] bond0: (slave bond_slave_0): Releasing backup interface [ 79.869521][ T5966] bond0: (slave bond_slave_1): Releasing backup interface [ 79.891887][ T5966] team0: Port device team_slave_0 removed [ 79.907217][ T5966] team0: Port device team_slave_1 removed [ 79.913918][ T5966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.924339][ T5966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.934702][ T5966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.942141][ T5966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.961972][ T5966] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 80.003170][ T5958] 9: entered promiscuous mode [ 80.065316][ T5982] netlink: 124 bytes leftover after parsing attributes in process `syz.2.17'. [ 80.300371][ T5991] syzkaller0: entered promiscuous mode [ 80.309755][ T5991] syzkaller0: entered allmulticast mode [ 80.322967][ T5997] Zero length message leads to an empty skb [ 80.470855][ T6005] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.529645][ T6007] xt_nat: multiple ranges no longer supported [ 80.705993][ T6020] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.868276][ T6026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.000548][ T6031] netlink: 'syz.4.32': attribute type 2 has an invalid length. [ 81.061478][ T6031] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 81.080382][ T6031] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 81.306278][ T51] Bluetooth: hci1: command tx timeout [ 81.306289][ T5823] Bluetooth: hci0: command tx timeout [ 81.384836][ T51] Bluetooth: hci2: command tx timeout [ 81.464888][ T51] Bluetooth: hci3: command tx timeout [ 81.470375][ T5823] Bluetooth: hci4: command tx timeout [ 81.601106][ T6055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.38'. [ 81.612362][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.38'. [ 81.632633][ T6055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.38'. [ 81.639384][ T3026] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.657008][ T3026] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.701041][ T3026] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.717117][ T3026] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.717264][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.38'. [ 81.769745][ T6063] syzkaller0: entered promiscuous mode [ 81.788813][ T6063] syzkaller0: entered allmulticast mode [ 81.807428][ T6063] tc action pedit offset must be on 32 bit boundaries [ 81.814352][ T6063] tc action pedit offset must be on 32 bit boundaries [ 81.821171][ T6063] tc action pedit offset must be on 32 bit boundaries [ 81.827972][ T6063] tc action pedit offset must be on 32 bit boundaries [ 81.834766][ T6063] tc action pedit offset must be on 32 bit boundaries [ 81.841529][ T6063] tc action pedit offset must be on 32 bit boundaries [ 81.848338][ T6063] tc action pedit offset must be on 32 bit boundaries [ 81.855126][ T6063] tc action pedit offset must be on 32 bit boundaries [ 81.861906][ T6063] tc action pedit offset must be on 32 bit boundaries [ 81.868707][ T6063] tc action pedit offset must be on 32 bit boundaries [ 81.875517][ T6063] 0: reclassify loop, rule prio 0, protocol 800 [ 82.216606][ T6092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.50'. [ 82.296966][ T6103] netlink: 156 bytes leftover after parsing attributes in process `syz.1.53'. [ 82.321278][ T6106] tipc: Failed to remove unknown binding: 66,1,1/0:2308228977/2308228979 [ 82.410706][ T6120] syz.2.56 uses obsolete (PF_INET,SOCK_PACKET) [ 82.520284][ T6125] openvswitch: netlink: Invalid VLAN frame [ 82.630648][ T6131] bridge_slave_0: left allmulticast mode [ 82.636436][ T6131] bridge_slave_0: left promiscuous mode [ 82.642201][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.652452][ T6131] bridge_slave_1: left allmulticast mode [ 82.660421][ T6131] bridge_slave_1: left promiscuous mode [ 82.667319][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.678753][ T6131] bond0: (slave bond_slave_0): Releasing backup interface [ 82.691082][ T6131] bond0: (slave bond_slave_1): Releasing backup interface [ 82.702999][ T6131] team0: Port device team_slave_0 removed [ 82.712353][ T6131] team0: Port device team_slave_1 removed [ 82.718968][ T6131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.727332][ T6131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.736105][ T6131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.743583][ T6131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.753795][ T6131] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 82.822688][ T6133] netlink: 'syz.0.60': attribute type 1 has an invalid length. [ 85.103317][ T6087] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 85.307831][ T6146] __nla_validate_parse: 5 callbacks suppressed [ 85.307850][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.63'. [ 85.362425][ T6155] netlink: 'syz.0.67': attribute type 11 has an invalid length. [ 85.839207][ T6183] netem: change failed [ 85.865985][ T6184] syzkaller0: entered promiscuous mode [ 85.871607][ T6184] syzkaller0: entered allmulticast mode [ 85.966020][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'. [ 86.054046][ T6200] syzkaller1: entered promiscuous mode [ 86.069824][ T6200] syzkaller1: entered allmulticast mode [ 86.088234][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'. [ 86.161332][ T6212] netlink: 'syz.0.83': attribute type 1 has an invalid length. [ 86.332424][ T6215] syzkaller0: entered promiscuous mode [ 86.349847][ T6215] syzkaller0: entered allmulticast mode [ 86.488114][ T6235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.559749][ T6235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.605963][ T10] cfg80211: failed to load regulatory.db [ 86.613369][ T6234] syzkaller1: entered promiscuous mode [ 86.620078][ T6234] syzkaller1: entered allmulticast mode [ 86.648223][ T6234] netlink: 4324 bytes leftover after parsing attributes in process `syz.2.89'. [ 86.659143][ T6240] syzkaller1: entered promiscuous mode [ 86.684918][ T6240] syzkaller1: entered allmulticast mode [ 87.431179][ T6278] netlink: 44 bytes leftover after parsing attributes in process `syz.3.104'. [ 87.459359][ T6276] netlink: 'syz.4.103': attribute type 1 has an invalid length. [ 87.470774][ T6276] netlink: 224 bytes leftover after parsing attributes in process `syz.4.103'. [ 87.549105][ T6287] netlink: 16 bytes leftover after parsing attributes in process `syz.2.105'. [ 87.570890][ T6276] netlink: 'syz.4.103': attribute type 21 has an invalid length. [ 87.748042][ T6276] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 87.762082][ T6276] bond1 (unregistering): Released all slaves [ 87.819309][ T6290] vlan2: entered promiscuous mode [ 87.834945][ T6290] bridge0: entered promiscuous mode [ 87.874669][ T6310] netlink: 32 bytes leftover after parsing attributes in process `syz.1.111'. [ 88.107213][ T6327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.116'. [ 88.174549][ T6327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'. [ 88.674188][ T6363] netlink: 'syz.3.125': attribute type 3 has an invalid length. [ 88.688753][ T30] audit: type=1107 audit(1775515054.029:2): pid=6354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Cb[TÇGáîÏXÿ}lh¥_6‡H´(~¶ïÖ`¨  8:‚¬ ø+' [ 88.938640][ T6381] netlink: 'syz.0.133': attribute type 1 has an invalid length. [ 88.980426][ T6386] geneve2: entered promiscuous mode [ 88.986999][ T6386] geneve2: entered allmulticast mode [ 89.079625][ T6384] bond1: (slave bond_slave_1): Device is not our slave [ 89.099993][ T6384] bond1: option active_slave: invalid value (bond_slave_1) [ 89.109174][ T6384] bond1 (unregistering): Released all slaves [ 89.128860][ T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 89.154183][ T6394] netlink: 'syz.1.136': attribute type 29 has an invalid length. [ 89.195709][ T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 89.214077][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 89.228534][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 89.670864][ T6459] netlink: 'syz.2.147': attribute type 25 has an invalid length. [ 89.999284][ T6483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.050495][ T6483] macvlan0: entered promiscuous mode [ 90.138857][ T6483] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.151073][ T6483] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 90.198042][ T6490] xt_ecn: cannot match TCP bits for non-tcp packets [ 90.209180][ T6495] sctp: [Deprecated]: syz.1.158 (pid 6495) Use of struct sctp_assoc_value in delayed_ack socket option. [ 90.209180][ T6495] Use struct sctp_sack_info instead [ 90.233166][ T6496] syzkaller0: entered promiscuous mode [ 90.250375][ T6496] syzkaller0: entered allmulticast mode [ 90.303353][ T6483] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.324824][ T6499] netlink: 'syz.3.159': attribute type 16 has an invalid length. [ 90.332575][ T6499] netlink: 'syz.3.159': attribute type 17 has an invalid length. [ 90.351115][ T6483] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 90.393681][ T6496] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.434311][ T6496] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.542984][ T6499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.588118][ T6483] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.609071][ T6483] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 90.660587][ T6517] __nla_validate_parse: 7 callbacks suppressed [ 90.660604][ T6517] netlink: 144 bytes leftover after parsing attributes in process `syz.1.163'. [ 90.701184][ T6483] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.711817][ T6483] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 90.742585][ T6520] syzkaller0: entered promiscuous mode [ 90.768076][ T6520] syzkaller0: entered allmulticast mode [ 90.791451][ T6522] netlink: 'syz.1.165': attribute type 11 has an invalid length. [ 90.822574][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'. [ 91.016014][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 91.031255][ T36] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 91.069350][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 91.085112][ T36] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 91.124644][ T3026] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 91.133080][ T3026] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 91.149224][ T6542] netlink: 36 bytes leftover after parsing attributes in process `syz.2.171'. [ 91.170370][ T3026] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 91.187804][ T6542] netlink: 'syz.2.171': attribute type 19 has an invalid length. [ 91.198930][ T3026] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 91.285804][ T6544] nbd: must specify at least one socket [ 91.330717][ T6548] netlink: 20 bytes leftover after parsing attributes in process `syz.0.174'. [ 91.362481][ T6550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.175'. [ 91.369011][ T6552] batadv_slave_1: entered promiscuous mode [ 91.379407][ T6548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.174'. [ 91.395906][ T6554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.175'. [ 91.407524][ T6552] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20000 [ 91.414706][ T6548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.174'. [ 91.425985][ T6551] batadv_slave_1: left promiscuous mode [ 91.680346][ T6570] netlink: 'syz.3.181': attribute type 1 has an invalid length. [ 91.697132][ T6570] netlink: 'syz.3.181': attribute type 3 has an invalid length. [ 91.726520][ T6570] netlink: 224 bytes leftover after parsing attributes in process `syz.3.181'. [ 91.886508][ T6581] xt_hashlimit: size too large, truncated to 1048576 [ 91.986622][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.186'. [ 92.037733][ T6445] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.071312][ T6445] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.183496][ T6445] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.199495][ T6445] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.328643][ T6609] 8021q: VLANs not supported on wg2 [ 92.520641][ T3026] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.541092][ T3026] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.582858][ T3026] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.633462][ T3026] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.455693][ T6685] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.463424][ T6685] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.775267][ T6705] netlink: zone id is out of range [ 93.782214][ T6705] netlink: zone id is out of range [ 93.794007][ T6705] netlink: zone id is out of range [ 93.830788][ T6691] syzkaller0: entered promiscuous mode [ 93.836447][ T6691] syzkaller0: entered allmulticast mode [ 93.854300][ T6705] netlink: zone id is out of range [ 93.873699][ T6705] netlink: zone id is out of range [ 93.885703][ T6705] netlink: zone id is out of range [ 93.893008][ T6705] netlink: zone id is out of range [ 93.904611][ T6705] netlink: set zone limit has 4 unknown bytes [ 93.949504][ T6711] syzkaller0: entered promiscuous mode [ 93.956038][ T6711] syzkaller0: entered allmulticast mode [ 94.332402][ T6734] netlink: 'syz.3.227': attribute type 28 has an invalid length. [ 94.351845][ T6734] netlink: 'syz.3.227': attribute type 3 has an invalid length. [ 94.392481][ T6734] syzkaller0: entered promiscuous mode [ 94.398445][ T6734] syzkaller0: entered allmulticast mode [ 94.571006][ T6750] netlink: 'syz.2.234': attribute type 1 has an invalid length. [ 94.651104][ T6750] bond1: entered promiscuous mode [ 94.656918][ T6750] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.691306][ T6756] block nbd0: not configured, cannot reconfigure [ 94.736139][ T6748] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 94.791813][ T6762] netlink: 'syz.4.237': attribute type 10 has an invalid length. [ 94.799152][ T6750] macvtap1: entered allmulticast mode [ 94.825387][ T6762] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 94.846467][ T6760] bond1: (slave bridge1): making interface the new active one [ 94.853955][ T6760] bridge1: entered promiscuous mode [ 94.861933][ T6760] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 95.253814][ T6784] 8021q: VLANs not supported on ip6gre0 [ 95.309460][ T6795] netlink: 'syz.0.249': attribute type 1 has an invalid length. [ 95.391447][ T6795] bond1: entered promiscuous mode [ 95.397205][ T6795] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.665962][ T24] IPVS: starting estimator thread 0... [ 95.750682][ T6827] __nla_validate_parse: 28 callbacks suppressed [ 95.750699][ T6827] netlink: 80 bytes leftover after parsing attributes in process `syz.3.258'. [ 95.784884][ T6824] IPVS: using max 35 ests per chain, 84000 per kthread [ 95.934182][ T6838] netlink: 40 bytes leftover after parsing attributes in process `syz.4.261'. [ 96.076840][ T6855] netlink: 100 bytes leftover after parsing attributes in process `syz.4.268'. [ 96.188462][ T6850] bond1: option lp_interval: invalid value (0) [ 96.198368][ T6850] bond1: option lp_interval: allowed values 1 - 2147483647 [ 96.216227][ T6867] netlink: 5244 bytes leftover after parsing attributes in process `syz.4.268'. [ 96.230711][ T6850] bond1 (unregistering): Released all slaves [ 96.285259][ T6862] netlink: 'syz.4.268': attribute type 4 has an invalid length. [ 96.582902][ T6895] wireguard0: entered promiscuous mode [ 96.589845][ T6895] wireguard0: entered allmulticast mode [ 96.600986][ T6895] team0: Port device wireguard0 added [ 99.234822][ T6869] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.427461][ T6909] Cannot find set identified by id 65534 to match [ 99.495228][ T6917] netlink: 'syz.3.283': attribute type 9 has an invalid length. [ 99.586355][ T6924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.286'. [ 99.638165][ T6929] netlink: 256 bytes leftover after parsing attributes in process `syz.2.286'. [ 99.659163][ T6930] netlink: 'syz.3.287': attribute type 1 has an invalid length. [ 99.669756][ T6930] netlink: 'syz.3.287': attribute type 2 has an invalid length. [ 99.898253][ T6948] netlink: 72 bytes leftover after parsing attributes in process `syz.0.289'. [ 99.910212][ T6948] netlink: 72 bytes leftover after parsing attributes in process `syz.0.289'. [ 99.944596][ T6948] netlink: 3 bytes leftover after parsing attributes in process `syz.0.289'. [ 100.051430][ T6959] trusted_key: syz.2.292 sent an empty control message without MSG_MORE. [ 100.071101][ T6946] bond2 (unregistering): Released all slaves [ 100.377871][ T6980] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 100.390179][ T6980] bond2 (unregistering): Released all slaves [ 100.424133][ T6979] lo: entered allmulticast mode [ 100.433882][ T6979] tunl0: entered allmulticast mode [ 100.445926][ T6979] gre0: entered allmulticast mode [ 100.477823][ T6979] gretap0: entered allmulticast mode [ 100.491167][ T6979] erspan0: entered allmulticast mode [ 100.517065][ T6979] ip_vti0: entered allmulticast mode [ 100.525558][ T6979] ip6_vti0: entered allmulticast mode [ 100.533292][ T6979] sit0: entered allmulticast mode [ 100.542214][ T6979] ip6tnl0: entered allmulticast mode [ 100.549111][ T6979] ip6gre0: entered allmulticast mode [ 100.557276][ T6979] syz_tun: entered allmulticast mode [ 100.565506][ T6979] ip6gretap0: entered allmulticast mode [ 100.572456][ T6979] bridge0: entered allmulticast mode [ 100.578103][ T6979] vcan0: entered allmulticast mode [ 100.592315][ T6979] bond0: entered allmulticast mode [ 100.598494][ T6979] bond_slave_0: entered allmulticast mode [ 100.604367][ T6979] bond_slave_1: entered allmulticast mode [ 100.612145][ T6979] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 100.622933][ T6979] team0: entered allmulticast mode [ 100.628215][ T6979] team_slave_0: entered allmulticast mode [ 100.634108][ T6979] team_slave_1: entered allmulticast mode [ 100.645762][ T6979] dummy0: entered allmulticast mode [ 100.653610][ T6979] nlmon0: entered allmulticast mode [ 100.663888][ T6979] caif0: entered allmulticast mode [ 100.669797][ T6979] batadv0: entered allmulticast mode [ 100.677047][ T6979] vxcan0: entered allmulticast mode [ 100.682788][ T6979] vxcan1: entered allmulticast mode [ 100.688733][ T6979] veth0: entered allmulticast mode [ 100.695680][ T6979] veth1: entered allmulticast mode [ 100.703147][ T6979] wg0: entered allmulticast mode [ 100.711573][ T6979] wg1: entered allmulticast mode [ 100.718241][ T6979] wg2: entered allmulticast mode [ 100.724161][ T6979] veth0_to_bridge: entered allmulticast mode [ 100.733720][ T6979] veth1_to_bridge: entered allmulticast mode [ 100.742750][ T6979] veth0_to_bond: entered allmulticast mode [ 100.753230][ T6979] veth1_to_bond: entered allmulticast mode [ 100.761925][ T6979] veth0_to_team: entered allmulticast mode [ 100.770316][ T6979] veth1_to_team: entered allmulticast mode [ 100.779133][ T6979] veth0_to_batadv: entered allmulticast mode [ 100.787387][ T6979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.796037][ T6979] batadv_slave_0: entered allmulticast mode [ 100.803418][ T6979] veth1_to_batadv: entered allmulticast mode [ 100.811924][ T6979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.819956][ T6979] batadv_slave_1: entered allmulticast mode [ 100.829038][ T6979] xfrm0: entered allmulticast mode [ 100.835872][ T6979] veth0_to_hsr: entered allmulticast mode [ 100.842914][ T6979] hsr_slave_0: entered allmulticast mode [ 100.850273][ T6979] veth1_to_hsr: entered allmulticast mode [ 100.858137][ T6979] hsr_slave_1: entered allmulticast mode [ 100.865877][ T6979] hsr0: entered allmulticast mode [ 100.872269][ T6979] veth1_virt_wifi: entered allmulticast mode [ 100.879870][ T6979] veth0_virt_wifi: entered allmulticast mode [ 100.887459][ T6979] virt_wifi0: entered allmulticast mode [ 100.893165][ T6979] veth1_vlan: entered allmulticast mode [ 100.900404][ T6979] veth0_vlan: entered allmulticast mode [ 100.916373][ T6979] vlan0: entered allmulticast mode [ 100.921586][ T6979] vlan1: entered allmulticast mode [ 100.927159][ T6979] macvlan0: entered allmulticast mode [ 100.934025][ T6979] macvlan1: entered allmulticast mode [ 100.941935][ T6979] ipvlan0: entered allmulticast mode [ 100.947471][ T6979] ipvlan1: entered allmulticast mode [ 100.952918][ T6979] veth1_macvtap: entered allmulticast mode [ 100.961538][ T6979] veth0_macvtap: entered allmulticast mode [ 100.969475][ T6979] macvtap0: entered allmulticast mode [ 100.977243][ T6979] macsec0: entered allmulticast mode [ 100.985169][ T6979] geneve0: entered allmulticast mode [ 100.992292][ T6979] geneve1: entered allmulticast mode [ 100.999701][ T6979] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 101.006842][ T6979] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 101.017979][ T6979] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 101.027122][ T6979] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 101.036502][ T6979] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 101.049744][ T6979] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 101.060638][ T6979] mac80211_hwsim hwsim12 wlan2: entered allmulticast mode [ 101.068107][ T6979] tun0: entered allmulticast mode [ 101.073730][ T6979] : entered allmulticast mode [ 101.080258][ T6979] ip6gre1: entered allmulticast mode [ 101.086146][ T6979] bridge1: entered allmulticast mode [ 101.092433][ T6979] gtp0: entered allmulticast mode [ 101.109788][ T6991] sch_tbf: burst 6 is lower than device syzkaller0 mtu (1514) ! [ 101.155364][ T6447] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.197489][ T6447] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.222269][ T6447] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.240042][ T6447] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.321819][ T6447] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.332209][ T7013] netlink: 'syz.1.306': attribute type 153 has an invalid length. [ 101.341953][ T6447] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.360564][ T6447] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.370661][ T6447] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.462246][ T7021] Illegal XDP return value 4291575808 on prog (id 46) dev N/A, expect packet loss! [ 101.463005][ T7015] syzkaller0: entered promiscuous mode [ 101.478189][ T7015] syzkaller0: entered allmulticast mode [ 101.498371][ T7013] syz.1.306 (7013) used greatest stack depth: 17472 bytes left [ 101.632564][ T7019] netlink: 'syz.3.307': attribute type 1 has an invalid length. [ 101.815686][ T7045] IPVS: set_ctl: invalid protocol: 44 172.30.1.3:20001 [ 103.372938][ T7103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.331'. [ 103.511795][ T7103] bond2: entered promiscuous mode [ 103.523458][ T7103] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.686908][ T7121] IPv6: addrconf: prefix option has invalid lifetime [ 103.829189][ T7127] netlink: 144 bytes leftover after parsing attributes in process `syz.3.339'. [ 103.845964][ T7127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.339'. [ 103.904209][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.341'. [ 103.913457][ T7131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.341'. [ 103.992809][ T24] IPVS: starting estimator thread 0... [ 104.094622][ T7137] IPVS: using max 35 ests per chain, 84000 per kthread [ 104.177778][ T7152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.349'. [ 104.198972][ T7152] vlan2: entered promiscuous mode [ 104.212270][ T7152] gretap0: entered promiscuous mode [ 104.398873][ T7164] netlink: 'syz.4.351': attribute type 3 has an invalid length. [ 104.407120][ T7165] netlink: 28 bytes leftover after parsing attributes in process `syz.4.351'. [ 104.417508][ T7164] netlink: 28 bytes leftover after parsing attributes in process `syz.4.351'. [ 104.430874][ T7165] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.351'. [ 104.440552][ T7165] netlink: Conntrack attr has 3 unknown bytes [ 107.314817][ T7150] netlink: 'syz.0.347': attribute type 3 has an invalid length. [ 107.324249][ T7156] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 107.334673][ T7168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.352'. [ 107.472596][ T7174] block nbd0: not configured, cannot reconfigure [ 107.652556][ T7183] team0 (unregistering): Port device wireguard0 removed [ 107.937069][ T7209] netlink: 'syz.3.367': attribute type 1 has an invalid length. [ 108.009837][ T24] IPVS: starting estimator thread 0... [ 108.104000][ T7216] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 108.117075][ T7213] IPVS: using max 32 ests per chain, 76800 per kthread [ 108.400630][ T7244] __nla_validate_parse: 3 callbacks suppressed [ 108.400647][ T7244] netlink: 44 bytes leftover after parsing attributes in process `syz.4.376'. [ 108.420331][ T7237] netlink: 128 bytes leftover after parsing attributes in process `syz.2.374'. [ 108.487641][ T7251] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.377'. [ 108.506369][ T7251] netlink: 224 bytes leftover after parsing attributes in process `syz.0.377'. [ 108.649140][ T7256] syzkaller0: entered promiscuous mode [ 108.673450][ T7262] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 108.699048][ T7256] syzkaller0: entered allmulticast mode [ 108.760431][ T7275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.382'. [ 108.814934][ T7277] xt_ecn: cannot match TCP bits for non-tcp packets [ 108.925052][ T7273] netlink: 28 bytes leftover after parsing attributes in process `syz.2.381'. [ 108.999882][ T7287] netlink: 'syz.3.384': attribute type 33 has an invalid length. [ 109.044936][ T7287] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 109.058812][ T7290] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 109.071814][ T7287] bond1 (unregistering): Released all slaves [ 109.617264][ T7304] netlink: 'syz.2.390': attribute type 4 has an invalid length. [ 111.379335][ T7244] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 111.627094][ T7323] netlink: 'syz.2.396': attribute type 2 has an invalid length. [ 111.667261][ T7323] netlink: 'syz.2.396': attribute type 2 has an invalid length. [ 112.321668][ T7363] netlink: 44 bytes leftover after parsing attributes in process `syz.1.403'. [ 112.345627][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.403'. [ 112.429142][ T7372] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.404'. [ 112.462453][ T7372] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 112.473259][ T7378] netlink: 132 bytes leftover after parsing attributes in process `syz.2.402'. [ 112.736715][ T7387] vlan2: entered allmulticast mode [ 112.742000][ T7387] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 112.829480][ T7391] netlink: 'syz.4.409': attribute type 25 has an invalid length. [ 113.442256][ T7433] __nla_validate_parse: 2 callbacks suppressed [ 113.442273][ T7433] netlink: 16 bytes leftover after parsing attributes in process `syz.4.422'. [ 113.521102][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.421'. [ 113.600900][ T7439] bond1: Invalid ad_actor_system MAC address. [ 113.709834][ T7439] bond1: option ad_actor_system: invalid value (1) [ 113.719815][ T7439] bond1 (unregistering): Released all slaves [ 113.759674][ T7451] syzkaller1: entered promiscuous mode [ 113.765335][ T7451] syzkaller1: entered allmulticast mode [ 113.892264][ T7463] netlink: 32 bytes leftover after parsing attributes in process `syz.1.428'. [ 114.103694][ T7473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.318502][ T7490] netlink: 68 bytes leftover after parsing attributes in process `syz.3.436'. [ 114.438307][ T7496] netlink: 64 bytes leftover after parsing attributes in process `syz.4.440'. [ 114.925902][ T7527] netlink: 'syz.3.448': attribute type 24 has an invalid length. [ 114.993959][ T7527] netlink: 'syz.3.448': attribute type 1 has an invalid length. [ 115.003672][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.449'. [ 115.038507][ T7527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.053206][ T7533] bond1: (slave geneve2): making interface the new active one [ 115.065561][ T7533] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 115.069943][ T7534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.450'. [ 115.089937][ T7529] ip6erspan0: entered allmulticast mode [ 115.156529][ T7534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.174361][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'. [ 115.505100][ T7556] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.457'. [ 115.636022][ T7561] netlink: 448 bytes leftover after parsing attributes in process `syz.3.458'. [ 115.726838][ T7570] netlink: 'syz.0.462': attribute type 2 has an invalid length. [ 115.768127][ T7571] netlink: 'syz.0.462': attribute type 2 has an invalid length. [ 116.419615][ T7606] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 116.439906][ T7616] wireguard: wg2: Could not create IPv4 socket [ 116.609304][ T7622] netlink: 'syz.3.476': attribute type 2 has an invalid length. [ 116.806457][ T7638] xt_TCPMSS: Only works on TCP SYN packets [ 117.027760][ T7650] gretap0: entered promiscuous mode [ 117.040572][ T7650] gretap0: left promiscuous mode [ 117.315893][ T7673] block nbd0: Unsupported socket: should be TCP or UNIX. [ 118.083795][ T7728] ip6gre0: Master is either lo or non-ether device [ 118.236440][ T7704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.461715][ T7748] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 118.503816][ T7748] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 118.527541][ T7748] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 118.546912][ T7752] syz_tun: entered allmulticast mode [ 118.590406][ T7748] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 118.611048][ T7748] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 118.681024][ T7748] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 118.713768][ T7748] bridge9: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 118.762058][ T7764] netlink: 'syz.3.510': attribute type 11 has an invalid length. [ 118.783584][ T7748] bridge10: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 118.791820][ T7764] __nla_validate_parse: 10 callbacks suppressed [ 118.791834][ T7764] netlink: 64 bytes leftover after parsing attributes in process `syz.3.510'. [ 118.879021][ T7748] bridge11: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 118.925744][ T7775] netlink: 16 bytes leftover after parsing attributes in process `syz.3.514'. [ 118.942911][ T7748] bridge12: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 118.967979][ T7775] veth0_to_team: entered promiscuous mode [ 118.975216][ T7775] veth0_to_team: left promiscuous mode [ 118.981245][ T7778] netlink: 16 bytes leftover after parsing attributes in process `syz.3.514'. [ 119.022801][ T7748] bridge13: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 119.064198][ T7748] bridge14: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 119.082248][ T7778] veth0_to_team: entered promiscuous mode [ 119.098375][ T7778] veth0_to_team: left promiscuous mode [ 119.121359][ T7748] bridge15: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 119.140342][ T7748] bridge16: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 119.202536][ T7748] bridge17: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 119.233341][ T7748] bridge18: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 119.357592][ T7791] bond2 (unregistering): Released all slaves [ 119.551921][ T7803] raw_sendmsg: syz.2.520 forgot to set AF_INET. Fix it! [ 119.699258][ T7812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.522'. [ 120.357833][ T7845] netlink: 'syz.0.536': attribute type 1 has an invalid length. [ 120.367716][ T7845] netlink: 'syz.0.536': attribute type 2 has an invalid length. [ 120.409182][ T7847] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 120.655807][ T7858] syzkaller1: entered promiscuous mode [ 120.661316][ T7858] syzkaller1: entered allmulticast mode [ 120.697410][ T7860] netlink: 'syz.3.542': attribute type 3 has an invalid length. [ 120.709414][ T7860] netlink: 32 bytes leftover after parsing attributes in process `syz.3.542'. [ 120.736233][ T7868] netlink: 'syz.0.547': attribute type 21 has an invalid length. [ 120.787906][ T7872] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.545'. [ 120.812914][ T7864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.545'. [ 121.053054][ T7889] netlink: 'syz.1.553': attribute type 4 has an invalid length. [ 121.065738][ T7887] netlink: 'syz.0.554': attribute type 1 has an invalid length. [ 121.076624][ T7887] netlink: 228 bytes leftover after parsing attributes in process `syz.0.554'. [ 121.107040][ T7896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.556'. [ 121.122306][ T7887] netlink: 'syz.0.554': attribute type 2 has an invalid length. [ 121.215695][ T7901] netlink: 20 bytes leftover after parsing attributes in process `syz.1.557'. [ 121.401839][ T7913] netlink: 'syz.4.562': attribute type 1 has an invalid length. [ 121.421953][ T7912] bond2: Removing last ns target with arp_interval on [ 121.492322][ T7913] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 121.690115][ T7937] netlink: 'syz.4.567': attribute type 1 has an invalid length. [ 121.788613][ T51] Bluetooth: hci4: command tx timeout [ 122.130270][ T7967] Bluetooth: MGMT ver 1.23 [ 122.306210][ T7979] IPv6: sit1: Disabled Multicast RS [ 122.486160][ T7988] x_tables: duplicate underflow at hook 1 [ 123.373796][ T7989] : entered promiscuous mode [ 123.383106][ T7996] syzkaller0: entered promiscuous mode [ 123.389537][ T7996] syzkaller0: entered allmulticast mode [ 125.026751][ T7956] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 125.189007][ T8011] Bluetooth: MGMT ver 1.23 [ 125.198896][ T8011] Bluetooth: hci1: too big key_count value 32778 [ 125.241370][ T8015] validate_nla: 1 callbacks suppressed [ 125.241384][ T8015] netlink: 'syz.1.588': attribute type 75 has an invalid length. [ 125.289864][ T8017] bond0: entered promiscuous mode [ 125.311248][ T8015] netlink: 'syz.1.588': attribute type 1 has an invalid length. [ 125.315693][ T8017] bond_slave_0: entered promiscuous mode [ 125.346023][ T8017] bond_slave_1: entered promiscuous mode [ 125.361926][ T8018] __nla_validate_parse: 4 callbacks suppressed [ 125.361939][ T8018] netlink: 108 bytes leftover after parsing attributes in process `syz.1.588'. [ 125.427025][ T8035] xt_l2tp: v2 doesn't support IP mode [ 125.433420][ T8015] bond3: entered promiscuous mode [ 125.457746][ T8038] netlink: 'syz.2.593': attribute type 4 has an invalid length. [ 125.464058][ T8015] 8021q: adding VLAN 0 to HW filter on device bond3 [ 125.512744][ T8040] netlink: 'syz.0.598': attribute type 1 has an invalid length. [ 125.523321][ T8041] netlink: 'syz.2.593': attribute type 4 has an invalid length. [ 125.551220][ T8044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.596'. [ 125.577470][ T8048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.598'. [ 125.577972][ T8018] bond3: (slave bridge1): making interface the new active one [ 125.596303][ T8018] bridge1: entered promiscuous mode [ 125.603605][ T8018] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 125.658567][ T8040] bond2: entered promiscuous mode [ 125.663946][ T8040] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.790484][ T8038] bond3: entered promiscuous mode [ 125.795869][ T8038] bond3: entered allmulticast mode [ 125.797528][ T51] Bluetooth: hci4: link tx timeout [ 125.802129][ T8038] 8021q: adding VLAN 0 to HW filter on device bond3 [ 125.824825][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 125.834372][ T51] Bluetooth: hci4: link tx timeout [ 125.839599][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 125.964767][ T8063] syzkaller0: entered promiscuous mode [ 125.970280][ T8063] syzkaller0: entered allmulticast mode [ 126.352388][ T8094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.609'. [ 126.406158][ T8093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.610'. [ 126.426615][ T8093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.610'. [ 126.429751][ T5885] hid-generic 0005:04F3:0006.0001: item fetching failed at offset 0/1 [ 126.466144][ T5885] hid-generic 0005:04F3:0006.0001: probe with driver hid-generic failed with error -22 [ 126.506005][ T8099] atomic_op ffff88807912e998 conn xmit_atomic 0000000000000000 [ 127.017993][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.626'. [ 127.254034][ T8150] bond4 (unregistering): Released all slaves [ 127.506027][ T8171] netem: change failed [ 127.665538][ T8179] syzkaller0: entered promiscuous mode [ 127.675672][ T8179] syzkaller0: entered allmulticast mode [ 127.877375][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 127.879874][ T8195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.042826][ T8204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.647'. [ 128.445552][ T8230] netem: change failed [ 128.586383][ T8238] netlink: 'syz.4.653': attribute type 3 has an invalid length. [ 128.601814][ T8238] netlink: 'syz.4.653': attribute type 3 has an invalid length. [ 128.610054][ T8236] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 128.611233][ T8237] netlink: 'syz.4.653': attribute type 3 has an invalid length. [ 128.634806][ T8237] netlink: 'syz.4.653': attribute type 3 has an invalid length. [ 128.861547][ T8254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.660'. [ 128.863848][ T30] audit: type=1800 audit(1775515094.199:3): pid=8250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.658" name="memory.events" dev="tmpfs" ino=755 res=0 errno=0 [ 129.357388][ T8269] syzkaller0: entered promiscuous mode [ 129.363142][ T8269] syzkaller0: entered allmulticast mode [ 129.571951][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.665'. [ 130.413240][ T8303] netlink: 'syz.2.675': attribute type 39 has an invalid length. [ 130.646875][ T8318] netlink: 'syz.0.678': attribute type 2 has an invalid length. [ 130.685084][ T8317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.679'. [ 130.830201][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.681'. [ 130.888887][ T8327] netlink: 'syz.0.682': attribute type 1 has an invalid length. [ 131.016958][ T8327] 8021q: adding VLAN 0 to HW filter on device bond4 [ 131.030588][ T8332] tls_set_device_offload: netdev not found [ 131.112507][ T8330] 8021q: adding VLAN 0 to HW filter on device bond4 [ 131.159704][ T8330] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 131.191047][ T8330] bond4: (slave vcan1): Error -95 calling set_mac_address [ 131.524844][ T8345] netlink: 164 bytes leftover after parsing attributes in process `syz.3.687'. [ 131.569272][ T8345] netlink: 20 bytes leftover after parsing attributes in process `syz.3.687'. [ 131.686657][ T8351] netlink: 28 bytes leftover after parsing attributes in process `syz.2.690'. [ 131.697708][ T8351] tipc: Started in network mode [ 131.702593][ T8351] tipc: Node identity eee7b664f9a4, cluster identity 4711 [ 131.714493][ T8351] tipc: Enabled bearer , priority 0 [ 131.774143][ T8351] syzkaller0: entered promiscuous mode [ 131.779814][ T8351] syzkaller0: entered allmulticast mode [ 131.786999][ T8351] tipc: Resetting bearer [ 131.797633][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 131.808358][ T8355] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 131.821321][ T8358] netlink: 252 bytes leftover after parsing attributes in process `syz.0.692'. [ 131.831787][ T8353] netlink: 24 bytes leftover after parsing attributes in process `syz.0.692'. [ 131.970404][ T8348] tipc: Resetting bearer [ 132.026057][ T8363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.694'. [ 132.122713][ T8361] sctp: [Deprecated]: syz.4.695 (pid 8361) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.122713][ T8361] Use struct sctp_sack_info instead [ 132.670711][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.795123][ T8386] netlink: 60 bytes leftover after parsing attributes in process `syz.0.698'. [ 132.905175][ T8249] Set syz1 is full, maxelem 65536 reached [ 133.620439][ T8348] tipc: Disabling bearer [ 133.640468][ T796] tipc: Node number set to 390313572 [ 133.765343][ T8401] tls_set_device_offload: netdev not found [ 134.001496][ T8416] syzkaller0: entered promiscuous mode [ 134.026887][ T8416] syzkaller0: entered allmulticast mode [ 134.044258][ T8419] bridge0: port 3(syz_tun) entered blocking state [ 134.051129][ T8419] bridge0: port 3(syz_tun) entered disabled state [ 134.059625][ T8419] syz_tun: entered promiscuous mode [ 134.067863][ T8422] tipc: Enabled bearer , priority 10 [ 135.126097][ T8422] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 135.350807][ T8448] syz_tun: entered allmulticast mode [ 135.392850][ T8446] syz_tun: left allmulticast mode [ 135.534894][ T8460] netlink: 'syz.2.720': attribute type 2 has an invalid length. [ 135.812198][ T8476] nbd: must specify an index to disconnect [ 135.821409][ T8476] __nla_validate_parse: 6 callbacks suppressed [ 135.821424][ T8476] netlink: 24 bytes leftover after parsing attributes in process `syz.1.724'. [ 135.979271][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.729'. [ 136.391888][ T8511] netlink: 'syz.0.735': attribute type 1 has an invalid length. [ 136.418356][ T8511] netlink: 96 bytes leftover after parsing attributes in process `syz.0.735'. [ 136.456938][ T8511] netlink: 1 bytes leftover after parsing attributes in process `syz.0.735'. [ 136.478980][ T8511] netlink: 658 bytes leftover after parsing attributes in process `syz.0.735'. [ 136.671589][ T8526] netlink: 16 bytes leftover after parsing attributes in process `syz.0.740'. [ 136.722993][ T8532] netlink: 'syz.0.740': attribute type 3 has an invalid length. [ 136.903974][ T8526] netlink: 16 bytes leftover after parsing attributes in process `syz.0.740'. [ 137.025173][ T8542] netlink: 20 bytes leftover after parsing attributes in process `syz.1.744'. [ 137.136772][ T8526] netlink: 16 bytes leftover after parsing attributes in process `syz.0.740'. [ 137.187501][ T8546] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.222487][ T8546] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.413684][ T8546] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.439805][ T8546] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.499115][ T8572] netlink: 28 bytes leftover after parsing attributes in process `syz.4.752'. [ 137.605167][ T8546] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.627352][ T8546] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.726184][ T8546] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.740455][ T8546] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.766662][ T8590] lo: entered promiscuous mode [ 137.789429][ T8590] tunl0: entered promiscuous mode [ 137.802322][ T8590] gre0: entered promiscuous mode [ 137.826039][ T8590] gretap0: entered promiscuous mode [ 137.844365][ T8590] erspan0: entered promiscuous mode [ 137.852552][ T8590] ip_vti0: entered promiscuous mode [ 137.975757][ T8601] netlink: 'syz.1.759': attribute type 1 has an invalid length. [ 138.003120][ T8601] netlink: 'syz.1.759': attribute type 2 has an invalid length. [ 138.022324][ T8601] netlink: 'syz.1.759': attribute type 2 has an invalid length. [ 138.031573][ T6436] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.051271][ T6436] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.054762][ T8601] netlink: 'syz.1.759': attribute type 1 has an invalid length. [ 138.069553][ T8601] netlink: 'syz.1.759': attribute type 1 has an invalid length. [ 138.090046][ T6436] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.098606][ T6436] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.101700][ T8601] netlink: 'syz.1.759': attribute type 1 has an invalid length. [ 138.117795][ T8601] netlink: 'syz.1.759': attribute type 2 has an invalid length. [ 138.215531][ T6436] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.225343][ T6436] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.243706][ T6436] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.261187][ T6436] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.405743][ T8630] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 138.417402][ T8630] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 138.611078][ T8646] syzkaller0: entered promiscuous mode [ 138.635642][ T8646] syzkaller0: entered allmulticast mode [ 138.763792][ T8654] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 138.780048][ T8654] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 138.850481][ T8654] bond4: (slave ip6gre1): making interface the new active one [ 138.865944][ T8654] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 138.918556][ T8667] syzkaller0: entered promiscuous mode [ 138.931964][ T8667] syzkaller0: entered allmulticast mode [ 139.103031][ T8682] openvswitch: netlink: IPv4 tunnel dst address is zero [ 139.284875][ T8693] sctp: [Deprecated]: syz.3.784 (pid 8693) Use of int in maxseg socket option. [ 139.284875][ T8693] Use struct sctp_assoc_value instead [ 139.529879][ T8711] x_tables: duplicate underflow at hook 2 [ 139.538461][ T8712] x_tables: duplicate underflow at hook 2 [ 139.588094][ T8717] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 139.595689][ T8717] IPv6: NLM_F_CREATE should be set when creating new route [ 139.602985][ T8717] IPv6: NLM_F_CREATE should be set when creating new route [ 139.753002][ T8724] xt_TCPMSS: Only works on TCP SYN packets [ 139.927593][ T8739] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 140.626234][ T8783] macvlan0: left promiscuous mode [ 143.474332][ T8781] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 143.660424][ T8829] __nla_validate_parse: 11 callbacks suppressed [ 143.660466][ T8829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.815'. [ 143.690512][ T8825] syzkaller0: entered promiscuous mode [ 143.704244][ T8825] syzkaller0: entered allmulticast mode [ 143.847661][ T8842] syzkaller1: entered promiscuous mode [ 143.872212][ T8842] syzkaller1: entered allmulticast mode [ 144.362375][ T8865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.826'. [ 144.384782][ T8864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.826'. [ 144.836574][ T8879] netlink: 48 bytes leftover after parsing attributes in process `syz.0.832'. [ 145.070234][ T8892] : renamed from bond0 (while UP) [ 145.178429][ T8894] netlink: 24 bytes leftover after parsing attributes in process `syz.0.836'. [ 145.317511][ T8897] netlink: 56 bytes leftover after parsing attributes in process `syz.2.837'. [ 145.356869][ T8896] netlink: 56 bytes leftover after parsing attributes in process `syz.2.837'. [ 145.377577][ T8897] netlink: 1 bytes leftover after parsing attributes in process `syz.2.837'. [ 145.414624][ T8896] netlink: 1 bytes leftover after parsing attributes in process `syz.2.837'. [ 145.711519][ T8909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.840'. [ 145.762660][ T8910] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 146.154874][ T8932] validate_nla: 8 callbacks suppressed [ 146.154892][ T8932] netlink: 'syz.4.848': attribute type 3 has an invalid length. [ 146.238064][ T8938] block nbd0: not configured, cannot reconfigure [ 146.448021][ T8948] netlink: 'syz.4.853': attribute type 2 has an invalid length. [ 146.474762][ T8948] netlink: 'syz.4.853': attribute type 1 has an invalid length. [ 146.825998][ T8963] syzkaller0: entered promiscuous mode [ 146.831710][ T8963] syzkaller0: entered allmulticast mode [ 147.043055][ T8978] bridge0: entered promiscuous mode [ 147.147300][ T8978] macsec1: entered promiscuous mode [ 147.152715][ T8978] macsec1: entered allmulticast mode [ 147.224605][ T8978] bridge0: entered allmulticast mode [ 147.230631][ T8978] bridge0: port 1(macsec1) entered blocking state [ 147.261234][ T8978] bridge0: port 1(macsec1) entered disabled state [ 147.314485][ T8978] bridge0: left allmulticast mode [ 147.319783][ T8978] bridge0: left promiscuous mode [ 147.373330][ T8993] dvmrp0: entered allmulticast mode [ 147.793738][ T9007] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 147.803754][ T9007] netlink: 'syz.1.867': attribute type 29 has an invalid length. [ 147.813114][ T9007] netlink: 'syz.1.867': attribute type 29 has an invalid length. [ 149.930802][ T8973] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 150.192825][ T9013] __nla_validate_parse: 11 callbacks suppressed [ 150.192842][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.870'. [ 150.263202][ T9022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.870'. [ 150.302752][ T9026] netlink: 'syz.0.873': attribute type 1 has an invalid length. [ 150.322428][ T9026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.873'. [ 150.347023][ T9026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.873'. [ 150.378747][ T9026] netlink: 'syz.0.873': attribute type 2 has an invalid length. [ 150.403149][ T9026] netlink: 'syz.0.873': attribute type 2 has an invalid length. [ 150.431186][ T9026] netlink: 'syz.0.873': attribute type 2 has an invalid length. [ 150.551128][ T9044] netlink: 'syz.4.877': attribute type 1 has an invalid length. [ 150.560850][ T9048] netlink: 48 bytes leftover after parsing attributes in process `syz.3.878'. [ 150.570877][ T9044] netlink: 96 bytes leftover after parsing attributes in process `syz.4.877'. [ 150.582773][ T9044] netlink: 1 bytes leftover after parsing attributes in process `syz.4.877'. [ 150.592125][ T9044] netlink: 658 bytes leftover after parsing attributes in process `syz.4.877'. [ 150.606702][ T9035] netlink: 24 bytes leftover after parsing attributes in process `syz.0.873'. [ 151.197193][ T9054] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 151.207234][ T9080] netlink: 'syz.4.886': attribute type 1 has an invalid length. [ 151.215808][ T9080] netlink: 212 bytes leftover after parsing attributes in process `syz.4.886'. [ 152.553445][ T9159] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.591749][ T9166] veth0_to_bond: left allmulticast mode [ 152.727202][ T9179] xt_l2tp: v2 doesn't support IP mode [ 152.830935][ T9183] lo: entered promiscuous mode [ 152.836115][ T9183] netlink: 'syz.3.910': attribute type 2 has an invalid length. [ 152.857228][ T9183] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.133137][ T9209] vlan2: entered promiscuous mode [ 153.140159][ T9209] gretap0: entered promiscuous mode [ 153.278577][ T9215] netlink: 'syz.2.921': attribute type 1 has an invalid length. [ 153.302537][ T9217] netlink: 'syz.3.923': attribute type 2 has an invalid length. [ 153.365454][ T9215] bond0: entered promiscuous mode [ 153.371748][ T9215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.392766][ T9217] openvswitch: netlink: Tunnel attr 304 out of range max 16 [ 153.621924][ T9238] sctp: [Deprecated]: syz.2.930 (pid 9238) Use of int in max_burst socket option deprecated. [ 153.621924][ T9238] Use struct sctp_assoc_value instead [ 153.805399][ T9249] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20004 [ 153.813126][ T9249] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20004 [ 154.076042][ T9265] netlink: 'syz.0.940': attribute type 32 has an invalid length. [ 154.358195][ T9282] netlink: 'syz.0.945': attribute type 10 has an invalid length. [ 154.379316][ T9282] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 154.391727][ T9287] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.481342][ T9284] syzkaller0: entered promiscuous mode [ 154.487059][ T9284] syzkaller0: entered allmulticast mode [ 155.748569][ T9312] netlink: 'syz.0.955': attribute type 21 has an invalid length. [ 155.774587][ T9312] netlink: 'syz.0.955': attribute type 22 has an invalid length. [ 155.795385][ T9312] netlink: 'syz.0.955': attribute type 23 has an invalid length. [ 155.815174][ T9317] netlink: 'syz.0.955': attribute type 3 has an invalid length. [ 155.831202][ T9312] __nla_validate_parse: 207 callbacks suppressed [ 155.831219][ T9312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.955'. [ 155.860689][ T9317] netlink: 9 bytes leftover after parsing attributes in process `syz.0.955'. [ 155.900285][ T9322] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.009214][ T24] IPVS: starting estimator thread 0... [ 156.026788][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.963'. [ 156.046726][ T9333] netlink: 24 bytes leftover after parsing attributes in process `syz.3.963'. [ 156.107591][ T9332] IPVS: using max 37 ests per chain, 88800 per kthread [ 156.156275][ T9344] syz.3.965 uses old SIOCAX25GETINFO [ 156.164334][ T9344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.965'. [ 156.226913][ T9344] validate_nla: 2 callbacks suppressed [ 156.226929][ T9344] netlink: 'syz.3.965': attribute type 2 has an invalid length. [ 156.250389][ T9344] netlink: 'syz.3.965': attribute type 2 has an invalid length. [ 156.436040][ T9364] xt_bpf: check failed: parse error [ 156.620139][ T9373] netlink: 'syz.2.973': attribute type 51 has an invalid length. [ 156.620917][ T9371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.671662][ T9380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.701172][ T9380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.734092][ T9380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.764173][ T9380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.861827][ T9388] netlink: 'syz.0.978': attribute type 16 has an invalid length. [ 156.933135][ T9388] netlink: 'syz.0.978': attribute type 17 has an invalid length. [ 156.957161][ T9388] lo: left promiscuous mode [ 156.969404][ T9398] netlink: 20 bytes leftover after parsing attributes in process `syz.4.981'. [ 156.983877][ T9388] tunl0: left promiscuous mode [ 156.991191][ T9388] gre0: left promiscuous mode [ 157.044320][ T9388] gretap0: left promiscuous mode [ 157.052447][ T9388] erspan0: left promiscuous mode [ 157.060345][ T9388] ip_vti0: left promiscuous mode [ 157.081874][ T9408] netlink: 20 bytes leftover after parsing attributes in process `syz.3.983'. [ 157.095827][ T9388] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.175089][ T9407] netlink: 20 bytes leftover after parsing attributes in process `syz.4.981'. [ 157.480264][ T5820] udevd[5820]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 157.692642][ T9443] netlink: 'syz.4.994': attribute type 2 has an invalid length. [ 157.737920][ T9443] !: entered promiscuous mode [ 157.769013][ T9443] netlink: 'syz.4.994': attribute type 2 has an invalid length. [ 157.791491][ T9443] !: left promiscuous mode [ 157.901727][ T9451] syzkaller0: entered promiscuous mode [ 157.915120][ T9451] syzkaller0: entered allmulticast mode [ 158.026159][ T9466] netlink: 'syz.4.997': attribute type 1 has an invalid length. [ 158.204895][ T9471] netlink: 28 bytes leftover after parsing attributes in process `syz.4.997'. [ 158.293172][ T9467] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.321486][ T9467] bond1: (slave bond2): making interface the new active one [ 158.348423][ T9467] bond1: (slave bond2): Enslaving as an active interface with an up link [ 158.377091][ T9468] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 158.402012][ T9471] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.413341][ T9475] bridge0: port 1(bridge_slave_0) entered learning state [ 158.471065][ T9491] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1002'. [ 158.481384][ T9491] gre0: entered promiscuous mode [ 158.486744][ T9491] gre0: entered allmulticast mode [ 159.444514][ T9550] netlink: zone id is out of range [ 159.449688][ T9550] netlink: zone id is out of range [ 159.474491][ T9550] netlink: del zone limit has 4 unknown bytes [ 160.099624][ T9590] bridge0: port 4(ipvlan3) entered blocking state [ 160.107336][ T9590] bridge0: port 4(ipvlan3) entered disabled state [ 160.114116][ T9590] ipvlan3: entered allmulticast mode [ 160.122454][ T9590] ipvlan3: left allmulticast mode [ 160.141459][ T9593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.205474][ T9591] "syz.3.1028" (9591) uses obsolete ecb(arc4) skcipher [ 160.302319][ T9598] syzkaller0: entered promiscuous mode [ 160.309962][ T9598] syzkaller0: entered allmulticast mode [ 160.409325][ T9603] bond0: entered promiscuous mode [ 160.419840][ T9603] bond_slave_0: entered promiscuous mode [ 160.439046][ T9603] bond_slave_1: entered promiscuous mode [ 160.453416][ T9603] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 160.493494][ T9603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.794923][ T9619] Bluetooth: MGMT ver 1.23 [ 160.956569][ T9628] netlink: 'syz.2.1040': attribute type 1 has an invalid length. [ 161.047578][ T9624] __nla_validate_parse: 6 callbacks suppressed [ 161.047596][ T9624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1042'. [ 161.127201][ T9641] ieee802154 phy1 wpan1: encryption failed: -22 [ 161.142252][ T9641] ieee802154 phy1 wpan1: encryption failed: -22 [ 161.156331][ T9641] ieee802154 phy1 wpan1: encryption failed: -22 [ 161.171440][ T9641] ieee802154 phy1 wpan1: encryption failed: -22 [ 161.270264][ T9650] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1046'. [ 161.280348][ T9649] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1047'. [ 161.605878][ T9662] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:65530 [ 161.663172][ T9667] netlink: 'syz.1.1052': attribute type 1 has an invalid length. [ 161.701668][ T9666] netlink: 'syz.1.1052': attribute type 1 has an invalid length. [ 161.752055][ T9676] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1053'. [ 161.815034][ T9667] 8021q: adding VLAN 0 to HW filter on device bond5 [ 161.997704][ T9698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1058'. [ 162.008801][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1058'. [ 162.082058][ T9703] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1059'. [ 162.106684][ T9703] syzkaller0: entered promiscuous mode [ 162.112327][ T9703] syzkaller0: entered allmulticast mode [ 162.476658][ T9714] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1061'. [ 162.486150][ T9714] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1061'. [ 164.740465][ T9676] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 164.927520][ T9737] netlink: 'syz.1.1069': attribute type 1 has an invalid length. [ 164.938672][ T9738] batadv_slave_0: entered promiscuous mode [ 164.939327][ T9740] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1067'. [ 165.089642][ T9737] 8021q: adding VLAN 0 to HW filter on device bond6 [ 165.190073][ T9743] bond6: (slave ip6erspan1): making interface the new active one [ 165.218178][ T9743] bond6: (slave ip6erspan1): Enslaving as an active interface with an up link [ 165.305756][ T9732] batadv_slave_0: left promiscuous mode [ 165.365604][ T9770] tipc: Enabling of bearer rejected, failed to enable media [ 165.398579][ T9773] openvswitch: netlink: IP tunnel dst address not specified [ 165.762739][ T5871] IPVS: starting estimator thread 0... [ 165.769024][ T9810] netlink: 'syz.3.1086': attribute type 11 has an invalid length. [ 165.874476][ T9811] IPVS: using max 35 ests per chain, 84000 per kthread [ 166.054839][ T9828] __nla_validate_parse: 5 callbacks suppressed [ 166.054856][ T9828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1091'. [ 166.055403][ T146] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.061055][ T9828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1091'. [ 166.128983][ T146] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.169268][ T146] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.206671][ T146] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.241841][ T9843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1096'. [ 166.379648][ T9863] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1099'. [ 166.490767][ T9868] netlink: 'syz.4.1102': attribute type 2 has an invalid length. [ 166.501954][ T9868] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1102'. [ 166.546010][ T9868] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1102'. [ 166.557543][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1102'. [ 166.732465][ T9881] netlink: 'syz.4.1104': attribute type 2 has an invalid length. [ 166.761570][ T9881] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1104'. [ 166.788132][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1104'. [ 166.898517][ T9892] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1108'. [ 166.926135][ T9894] syzkaller1: entered promiscuous mode [ 166.931649][ T9894] syzkaller1: entered allmulticast mode [ 167.004122][ T9896] GUP no longer grows the stack in syz.1.1110 (9896): 200000003000-20000000a000 (200000001000) [ 167.023808][ T9896] CPU: 1 UID: 0 PID: 9896 Comm: syz.1.1110 Not tainted syzkaller #0 PREEMPT(full) [ 167.023832][ T9896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 167.023848][ T9896] Call Trace: [ 167.023856][ T9896] [ 167.023863][ T9896] dump_stack_lvl+0xe8/0x150 [ 167.023896][ T9896] __get_user_pages+0x2453/0x29d0 [ 167.023923][ T9896] ? __lock_acquire+0x6b5/0x2cf0 [ 167.023962][ T9896] ? __gup_longterm_locked+0xc4e/0x1630 [ 167.023987][ T9896] ? down_read_killable+0x1bb/0x340 [ 167.024022][ T9896] __gup_longterm_locked+0xdcf/0x1630 [ 167.024071][ T9896] gup_fast_fallback+0x1d82/0x22e0 [ 167.024127][ T9896] ? __pfx_gup_fast_fallback+0x10/0x10 [ 167.024149][ T9896] ? futex_unqueue+0x22/0x240 [ 167.024169][ T9896] ? futex_unqueue+0x22/0x240 [ 167.024187][ T9896] ? is_valid_gup_args+0x11f/0x200 [ 167.024214][ T9896] ? get_user_pages_fast+0x4d/0xb0 [ 167.024240][ T9896] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 167.024267][ T9896] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 167.024290][ T9896] iov_iter_get_pages2+0x5e/0xa0 [ 167.024312][ T9896] __se_sys_vmsplice+0x7b3/0x1490 [ 167.024347][ T9896] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 167.024364][ T9896] ? __pfx_futex_wait+0x10/0x10 [ 167.024397][ T9896] ? lockdep_hardirqs_on+0x7a/0x110 [ 167.024463][ T9896] do_syscall_64+0x14d/0xf80 [ 167.024483][ T9896] ? trace_irq_disable+0x3b/0x150 [ 167.024495][ T9896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.024511][ T9896] ? clear_bhb_loop+0x40/0x90 [ 167.024532][ T9896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.024546][ T9896] RIP: 0033:0x7f503e99c819 [ 167.024567][ T9896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.024578][ T9896] RSP: 002b:00007f503cbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 167.024600][ T9896] RAX: ffffffffffffffda RBX: 00007f503ec15fa0 RCX: 00007f503e99c819 [ 167.024610][ T9896] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 167.024618][ T9896] RBP: 00007f503ea32c91 R08: 0000000000000000 R09: 0000000000000000 [ 167.024625][ T9896] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 167.024633][ T9896] R13: 00007f503ec16038 R14: 00007f503ec15fa0 R15: 00007ffd2c723998 [ 167.024656][ T9896] [ 167.301670][ T9902] netlink: 'syz.1.1112': attribute type 3 has an invalid length. [ 167.615491][ T9919] x_tables: duplicate underflow at hook 3 [ 167.708144][ T9928] netlink: 'syz.2.1119': attribute type 1 has an invalid length. [ 167.800850][ T9933] netlink: 'syz.0.1123': attribute type 10 has an invalid length. [ 167.866030][ T9933] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 167.988114][ T6444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.001488][ T6444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.028175][ T9950] netlink: 'syz.2.1129': attribute type 11 has an invalid length. [ 168.085198][ T9952] netlink: 'syz.2.1129': attribute type 13 has an invalid length. [ 168.120408][ T9960] netlink: 'syz.4.1131': attribute type 3 has an invalid length. [ 168.129696][ T9952] netlink: 'syz.2.1129': attribute type 58 has an invalid length. [ 168.158546][ T9952] netlink: 'syz.2.1129': attribute type 13 has an invalid length. [ 168.172481][ T9952] netlink: 'syz.2.1129': attribute type 58 has an invalid length. [ 168.182593][ T9952] netlink: 'syz.2.1129': attribute type 13 has an invalid length. [ 168.185342][ T9962] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 168.254508][ T9969] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 168.378255][ T9978] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.689719][T10003] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 169.025815][T10026] Bluetooth: MGMT ver 1.23 [ 169.083502][T10028] pimreg3: entered allmulticast mode [ 169.548809][T10041] xt_addrtype: ipv6 does not support BROADCAST matching [ 170.006572][T10047] macvlan2: entered promiscuous mode [ 170.032247][T10047] macvlan2: entered allmulticast mode [ 170.060516][T10047] bond7: (slave macvlan2): Opening slave failed [ 170.100265][T10052] tipc: Started in network mode [ 170.109419][T10052] tipc: Node identity 010000000000000001, cluster identity 4711 [ 170.172670][T10057] tap0: tun_chr_ioctl cmd 1074025676 [ 170.179277][T10057] tap0: owner set to 0 [ 170.232365][T10060] 8021q: adding VLAN 0 to HW filter on device bond8 [ 170.272274][T10060] vlan3: entered allmulticast mode [ 170.285225][T10060] bond8: entered allmulticast mode [ 170.343082][T10060] bond8: (slave geneve2): making interface the new active one [ 170.376878][T10060] geneve2: entered allmulticast mode [ 170.418170][T10060] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 170.734222][T10087] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 171.107465][T10104] __nla_validate_parse: 52 callbacks suppressed [ 171.107481][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1172'. [ 171.286043][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1175'. [ 171.536598][T10134] openvswitch: netlink: Message has 8 unknown bytes. [ 171.570634][T10134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.697335][T10138] bond3: entered promiscuous mode [ 171.771532][T10138] 8021q: adding VLAN 0 to HW filter on device bond3 [ 171.811608][T10150] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1185'. [ 171.818803][T10142] macvtap1: entered allmulticast mode [ 171.840037][T10150] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1185'. [ 171.846934][T10138] bond3: (slave bridge6): making interface the new active one [ 171.859004][T10138] bridge6: entered promiscuous mode [ 171.869418][T10138] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 172.024120][T10162] nbd: socks must be embedded in a SOCK_ITEM attr [ 172.092999][T10160] af_packet: tpacket_rcv: packet too big, clamped from 17804 to 3952. macoff=96 [ 172.103830][T10167] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1190'. [ 172.165692][T10170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.208042][T10177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1193'. [ 172.302478][T10177] bridge0: port 1(batadv1) entered blocking state [ 172.338734][T10181] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1192'. [ 172.364794][T10177] bridge0: port 1(batadv1) entered disabled state [ 172.394591][T10177] batadv1: entered allmulticast mode [ 172.446179][T10177] batadv1: entered promiscuous mode [ 172.595629][T10207] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1199'. [ 172.793660][T10228] validate_nla: 65 callbacks suppressed [ 172.793675][T10228] netlink: 'syz.0.1204': attribute type 1 has an invalid length. [ 172.809471][ T6436] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 172.818994][ T6436] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 172.910482][T10228] 8021q: adding VLAN 0 to HW filter on device bond5 [ 173.000865][T10236] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 173.025705][T10236] bond4: (slave lo): Enslaving as an active interface with an up link [ 173.057681][T10236] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 173.187486][T10249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1211'. [ 173.214495][T10249] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 173.271270][T10255] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1214'. [ 173.811787][T10285] netlink: 'syz.4.1224': attribute type 1 has an invalid length. [ 174.036343][T10289] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 174.436216][T10312] netlink: 'syz.2.1233': attribute type 39 has an invalid length. [ 174.709287][T10323] xt_hashlimit: size too large, truncated to 1048576 [ 174.749575][T10328] netlink: 'syz.4.1236': attribute type 1 has an invalid length. [ 174.777670][T10328] netlink: 'syz.4.1236': attribute type 1 has an invalid length. [ 174.886673][T10342] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 174.967455][T10342] bond0: (slave lo): Error: Device can not be enslaved while up [ 175.621793][T10384] netlink: 'syz.4.1251': attribute type 7 has an invalid length. [ 175.629913][T10384] netlink: 'syz.4.1251': attribute type 8 has an invalid length. [ 175.853651][T10408] netlink: 'syz.2.1256': attribute type 11 has an invalid length. [ 175.895441][T10408] netlink: 'syz.2.1256': attribute type 11 has an invalid length. [ 175.927113][T10405] netlink: 'syz.2.1256': attribute type 11 has an invalid length. [ 175.949881][T10405] netlink: 'syz.2.1256': attribute type 11 has an invalid length. [ 176.047225][T10419] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 176.054515][T10419] IPv6: NLM_F_CREATE should be set when creating new route [ 176.322996][T10447] netlink: 'syz.2.1263': attribute type 10 has an invalid length. [ 176.344096][T10440] sit0: entered promiscuous mode [ 176.365568][T10440] __nla_validate_parse: 11 callbacks suppressed [ 176.365583][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1262'. [ 176.474866][T10447] wlan1: mtu greater than device maximum [ 176.480555][T10447] : (slave wlan1): Error -22 calling dev_set_mtu [ 177.198125][T10497] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1274'. [ 177.363787][T10509] netlink: 'syz.2.1278': attribute type 10 has an invalid length. [ 177.465179][T10509] veth0_macvtap: left promiscuous mode [ 178.087736][T10563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1287'. [ 178.176028][T10576] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1289'. [ 178.462558][T10596] netlink: 'syz.3.1292': attribute type 1 has an invalid length. [ 178.511047][T10596] netlink: 'syz.3.1292': attribute type 1 has an invalid length. [ 178.534001][T10601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1296'. [ 178.630651][T10608] erspan0: left allmulticast mode [ 178.851247][T10616] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1299'. [ 178.865337][T10616] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1299'. [ 178.874303][T10616] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1299'. [ 178.909820][T10622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1301'. [ 179.072469][T10636] IPVS: set_ctl: invalid protocol: 1281 170.170.170.170:43537 [ 179.421435][T10637] syzkaller0: entered promiscuous mode [ 179.427084][T10637] syzkaller0: entered allmulticast mode [ 180.741959][T10660] netlink: 'syz.4.1304': attribute type 12 has an invalid length. [ 180.750140][T10660] netlink: 'syz.4.1304': attribute type 29 has an invalid length. [ 180.758724][T10660] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1304'. [ 180.769502][T10660] netlink: 'syz.4.1304': attribute type 2 has an invalid length. [ 181.354938][T10700] team0: Device gtp0 is up. Set it down before adding it as a team port [ 181.456938][T10718] tipc: Enabling of bearer rejected, failed to enable media [ 181.474015][T10716] __nla_validate_parse: 2 callbacks suppressed [ 181.474092][T10716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1320'. [ 181.494246][T10718] netlink: 'syz.3.1319': attribute type 39 has an invalid length. [ 181.653307][T10725] sctp: [Deprecated]: syz.1.1322 (pid 10725) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.653307][T10725] Use struct sctp_sack_info instead [ 181.670512][T10725] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1322'. [ 181.795927][T10730] bridge0: port 3(gretap0) entered blocking state [ 181.802460][T10730] bridge0: port 3(gretap0) entered disabled state [ 181.821039][T10730] gretap0: entered allmulticast mode [ 181.845859][T10730] bridge0: port 3(gretap0) entered blocking state [ 181.852421][T10730] bridge0: port 3(gretap0) entered forwarding state [ 181.919280][T10742] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1326'. [ 182.019920][T10742] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1326'. [ 182.059662][T10742] netlink: 'syz.3.1326': attribute type 6 has an invalid length. [ 182.089680][T10753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1328'. [ 182.097112][T10742] netlink: 'syz.3.1326': attribute type 5 has an invalid length. [ 182.161767][T10742] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1326'. [ 182.519220][T10775] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 182.573783][T10788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1335'. [ 182.602949][T10788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1335'. [ 183.444039][T10813] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1340'. [ 183.559989][T10813] bond6 (unregistering): Released all slaves [ 183.904852][T10841] netlink: 'syz.4.1346': attribute type 83 has an invalid length. [ 183.930740][T10841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1346'. [ 184.429465][T10870] bridge4: port 1(gretap1) entered blocking state [ 184.446159][T10870] bridge4: port 1(gretap1) entered disabled state [ 184.458739][T10870] gretap1: entered allmulticast mode [ 184.469982][T10870] gretap1: entered promiscuous mode [ 184.761470][T10898] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 184.831342][T10898] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 184.843092][T10898] gretap1: entered promiscuous mode [ 184.848526][T10898] gretap1: entered allmulticast mode [ 184.888822][T10909] netlink: 'syz.1.1368': attribute type 61 has an invalid length. [ 185.268314][T10925] bond4: (slave lo): Releasing backup interface [ 185.314020][T10925] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 185.363666][T10925] gretap0: left allmulticast mode [ 185.369486][T10925] bridge0: port 3(gretap0) entered disabled state [ 185.391595][T10925] bridge_slave_0: left allmulticast mode [ 185.397783][T10925] bridge_slave_0: left promiscuous mode [ 185.403681][T10925] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.418162][T10925] bridge_slave_1: left allmulticast mode [ 185.423984][T10925] bridge_slave_1: left promiscuous mode [ 185.429884][T10925] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.442001][T10925] : (slave bond_slave_0): Releasing backup interface [ 185.460464][T10925] : (slave bond_slave_1): Releasing backup interface [ 185.491844][T10925] team0: Port device team_slave_0 removed [ 185.513767][T10925] team0: Port device team_slave_1 removed [ 185.527522][T10925] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 186.193086][T10960] netlink: 'syz.3.1384': attribute type 1 has an invalid length. [ 186.334169][T10970] netlink: 'syz.2.1387': attribute type 11 has an invalid length. [ 186.354767][T10970] netlink: 'syz.2.1387': attribute type 11 has an invalid length. [ 186.392786][T10976] netlink: 'syz.4.1389': attribute type 2 has an invalid length. [ 186.499963][T10976] syzkaller0: entered promiscuous mode [ 186.518346][T10976] syzkaller0: entered allmulticast mode [ 186.676772][T10990] __nla_validate_parse: 16 callbacks suppressed [ 186.676790][T10990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1392'. [ 186.770393][T10998] syzkaller0: entered allmulticast mode [ 187.029346][T11000] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1396'. [ 187.070389][T11000] 8021q: VLANs not supported on sit0 [ 187.077870][T11000] netlink: 'syz.3.1396': attribute type 10 has an invalid length. [ 187.125348][T11000] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 187.471901][T11035] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.479174][T11035] IPv6: NLM_F_CREATE should be set when creating new route [ 187.486434][T11035] IPv6: NLM_F_CREATE should be set when creating new route [ 187.561007][T11037] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 187.586383][T11037] xt_SECMARK: invalid mode: 9 [ 187.667573][T11044] netlink: 'syz.2.1405': attribute type 8 has an invalid length. [ 187.700360][T11043] netlink: 'syz.2.1405': attribute type 8 has an invalid length. [ 188.013110][T10789] Set syz1 is full, maxelem 65536 reached [ 188.144563][T11072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1415'. [ 188.162266][T11069] netlink: 'syz.2.1417': attribute type 4 has an invalid length. [ 188.168127][T11074] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 188.170519][T11069] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1417'. [ 188.179121][T11074] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 188.196886][T11069] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1417'. [ 188.218479][T11068] delete_channel: no stack [ 188.235202][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1416'. [ 188.321994][T11084] netlink: 'syz.0.1421': attribute type 5 has an invalid length. [ 188.350871][T11090] netlink: 'syz.0.1421': attribute type 5 has an invalid length. [ 188.452394][T11093] bond6: (slave geneve2): making interface the new active one [ 188.477617][T11093] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 188.488302][ T6425] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 188.497916][ T6425] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 188.507196][T11088] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1420'. [ 188.517122][T11097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1424'. [ 188.526383][T11087] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1420'. [ 188.527456][ T6425] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 188.544563][ T6425] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 188.555399][T11088] 8021q: adding VLAN 0 to HW filter on device bond6 [ 188.562796][T11097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1424'. [ 188.600358][T11100] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 188.608071][T11100] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 188.706719][T11102] syzkaller0: entered promiscuous mode [ 188.712231][T11102] syzkaller0: entered allmulticast mode [ 189.084722][T11112] tipc: Enabling of bearer rejected, failed to enable media [ 189.105667][T11130] validate_nla: 4 callbacks suppressed [ 189.105685][T11130] netlink: 'syz.3.1432': attribute type 142 has an invalid length. [ 189.148590][T11111] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 189.171419][T11111] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 189.430765][T11153] xt_TCPMSS: Only works on TCP SYN packets [ 189.586287][T11163] netlink: 'syz.1.1439': attribute type 3 has an invalid length. [ 189.629126][T11164] netlink: 'syz.1.1439': attribute type 3 has an invalid length. [ 189.886699][T11186] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 189.904151][T11186] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 189.924513][T11186] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 189.931841][T11186] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 189.940337][T11186] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 189.947880][T11186] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 189.955365][T11186] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 189.962671][T11186] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 189.970341][T11186] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 189.978012][T11186] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 189.985482][T11186] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 189.992780][T11186] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 190.000366][T11186] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 190.007906][T11186] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 190.015412][T11186] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 190.022714][T11186] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 190.030321][T11186] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 190.037865][T11186] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 190.045363][T11186] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 190.052696][T11186] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 190.060345][T11186] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 190.068777][T11186] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 190.076417][T11186] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 190.083774][T11186] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 190.092186][T11186] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 190.099802][T11186] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 190.108175][T11186] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 190.115766][T11186] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 190.123140][T11186] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 190.144790][T11186] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 190.158449][T11186] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 190.258567][T11198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.658202][T11222] netlink: 'syz.3.1454': attribute type 1 has an invalid length. [ 190.694228][T11222] 8021q: adding VLAN 0 to HW filter on device bond4 [ 190.702436][T11222] bond3: (slave bond4): making interface the new active one [ 190.710249][T11222] bond3: (slave bond4): Enslaving as an active interface with an up link [ 190.728599][T11222] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 190.739861][T11222] 8021q: adding VLAN 0 to HW filter on device bond3 [ 190.788727][T11226] syzkaller0: entered promiscuous mode [ 190.794266][T11226] syzkaller0: entered allmulticast mode [ 191.819377][T11253] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 192.009791][T11262] __nla_validate_parse: 7 callbacks suppressed [ 192.009808][T11262] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1463'. [ 192.089775][T11240] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 192.096175][T11240] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 192.110768][T11240] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 192.118516][T11240] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 192.129032][T11240] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 192.135082][T11240] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 192.146759][T11240] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 192.152667][T11240] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 192.712084][T11169] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 192.961519][T11270] syzkaller0: entered promiscuous mode [ 192.967811][T11270] syzkaller0: entered allmulticast mode [ 192.984304][T11270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1466'. [ 193.109295][T11285] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1468'. [ 193.142118][T11287] netlink: 'syz.1.1470': attribute type 83 has an invalid length. [ 193.189757][T11287] netlink: 'syz.1.1470': attribute type 18 has an invalid length. [ 194.112901][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.376308][T11309] netlink: 'syz.3.1476': attribute type 2 has an invalid length. [ 194.425978][T11310] netlink: 'syz.0.1474': attribute type 1 has an invalid length. [ 194.440678][T11310] netlink: 'syz.0.1474': attribute type 1 has an invalid length. [ 194.464983][T11312] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20001 [ 194.634071][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1482'. [ 194.655839][T11325] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1482'. [ 194.701209][T11325] geneve2: entered promiscuous mode [ 194.712919][T11331] netlink: 308 bytes leftover after parsing attributes in process `syz.3.1485'. [ 194.716961][T11325] geneve2: entered allmulticast mode [ 194.757461][ T6447] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.781993][ T6447] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.857274][T11327] netlink: 212308 bytes leftover after parsing attributes in process `syz.1.1483'. [ 194.868824][T11335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1486'. [ 194.879041][ T6447] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.888161][T11332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1483'. [ 194.910003][ T6447] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.927722][T11335] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1486'. [ 195.227202][ T6444] tipc: Subscription rejected, illegal request [ 195.257558][T11366] atomic_op ffff888059574998 conn xmit_atomic 0000000000000000 [ 195.270566][T11366] atomic_op ffff888059572198 conn xmit_atomic 0000000000000000 [ 195.291746][T11366] atomic_op ffff888059571198 conn xmit_atomic 0000000000000000 [ 195.315730][T11366] atomic_op ffff888059573198 conn xmit_atomic 0000000000000000 [ 195.452740][T11383] netlink: 'syz.0.1498': attribute type 3 has an invalid length. [ 195.915262][T11416] netlink: 'syz.2.1508': attribute type 13 has an invalid length. [ 196.084266][T11427] sctp: [Deprecated]: syz.1.1512 (pid 11427) Use of int in max_burst socket option. [ 196.084266][T11427] Use struct sctp_assoc_value instead [ 196.837860][T11484] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 196.997851][T11499] netlink: 'syz.3.1534': attribute type 21 has an invalid length. [ 197.015604][T11499] netlink: 'syz.3.1534': attribute type 15 has an invalid length. [ 197.133698][T11503] __nla_validate_parse: 9 callbacks suppressed [ 197.133713][T11503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1535'. [ 197.158464][T11509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1536'. [ 197.180712][T11506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1535'. [ 197.191540][T11509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1536'. [ 197.233559][T11509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1536'. [ 197.272241][T11503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1535'. [ 197.351615][T11520] netlink: 'syz.3.1541': attribute type 1 has an invalid length. [ 197.432716][T11520] bond5: entered promiscuous mode [ 197.440273][T11520] 8021q: adding VLAN 0 to HW filter on device bond5 [ 197.470947][T11520] 8021q: adding VLAN 0 to HW filter on device bond5 [ 197.496547][T11520] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 197.531654][T11531] netlink: 'syz.4.1546': attribute type 16 has an invalid length. [ 197.536606][T11520] bond5: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 197.546996][T11531] netlink: 'syz.4.1546': attribute type 17 has an invalid length. [ 197.586291][T11520] bond5: (slave vcan1): making interface the new active one [ 197.591856][T11537] x_tables: duplicate underflow at hook 2 [ 197.593602][T11520] vcan1: entered promiscuous mode [ 197.597092][T11520] bond5: (slave vcan1): Enslaving as an active interface with an up link [ 197.613895][T11528] 8021q: VLANs not supported on lo [ 197.619876][T11531] lo: left allmulticast mode [ 197.630202][T11531] tunl0: left allmulticast mode [ 197.640247][T11531] gre0: left allmulticast mode [ 197.649984][T11531] gretap0: left allmulticast mode [ 197.659651][T11531] ip_vti0: left allmulticast mode [ 197.669498][T11531] ip6_vti0: left allmulticast mode [ 197.690724][T11531] sit0: left allmulticast mode [ 197.713496][T11531] ip6tnl0: left allmulticast mode [ 197.726130][T11531] ip6gre0: left allmulticast mode [ 197.737193][T11531] ip6gretap0: left allmulticast mode [ 197.745318][T11531] bridge0: port 3(syz_tun) entered blocking state [ 197.751908][T11531] bridge0: port 3(syz_tun) entered forwarding state [ 197.773458][T11531] bridge0: left allmulticast mode [ 197.786069][T11531] vcan0: left allmulticast mode [ 197.792700][T11531] bond0: left promiscuous mode [ 197.798146][T11531] bond_slave_0: left promiscuous mode [ 197.808793][T11531] bond_slave_1: left promiscuous mode [ 197.828057][T11531] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 197.828079][T11544] x_tables: unsorted underflow at hook 3 [ 197.835123][T11531] bond0: left allmulticast mode [ 197.835874][T11531] team0: left allmulticast mode [ 197.867732][T11531] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.878806][T11531] dummy0: left allmulticast mode [ 197.887428][T11531] nlmon0: left allmulticast mode [ 197.894800][T11531] caif0: left allmulticast mode [ 197.899748][T11531] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.944346][T11551] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1551'. [ 198.013796][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1551'. [ 198.089099][T11551] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1551'. [ 198.493383][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1560'. [ 198.536554][T11581] bond6: entered promiscuous mode [ 198.554319][T11581] bond6: entered allmulticast mode [ 198.565105][T11581] 8021q: adding VLAN 0 to HW filter on device bond6 [ 199.286592][T11642] xt_ecn: cannot match TCP bits for non-tcp packets [ 199.614532][T11657] syzkaller1: entered promiscuous mode [ 199.620166][T11657] syzkaller1: entered allmulticast mode [ 199.627773][T11655] netlink: zone id is out of range [ 199.632908][T11655] netlink: del zone limit has 4 unknown bytes [ 199.655165][T11662] validate_nla: 3 callbacks suppressed [ 199.655179][T11662] netlink: 'syz.4.1579': attribute type 10 has an invalid length. [ 199.669012][T11662] bridge_slave_1: left allmulticast mode [ 199.683511][T11662] bridge_slave_1: left promiscuous mode [ 199.700109][T11662] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.755237][T11662] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 200.174155][T11695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.405300][T11689] tipc: Enabling of bearer rejected, failed to enable media [ 200.567942][T11710] syzkaller0: entered promiscuous mode [ 200.573563][T11710] syzkaller0: entered allmulticast mode [ 200.604085][T11709] "syz.0.1588" (11709) uses obsolete ecb(arc4) skcipher [ 200.671031][T11713] netlink: 'syz.0.1590': attribute type 5 has an invalid length. [ 202.183999][T11815] __nla_validate_parse: 16 callbacks suppressed [ 202.184018][T11815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1613'. [ 202.290605][T11828] ip6t_srh: unknown srh invflags 4000 [ 202.302806][T11828] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 202.341824][T11834] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 202.374585][T11834] bond0: (slave lo): Error: Device can not be enslaved while up [ 202.617032][T11858] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 202.769546][T11864] syzkaller1: entered promiscuous mode [ 202.792395][T11864] syzkaller1: entered allmulticast mode [ 202.931962][T11876] IPVS: ip_vs_add_dest(): server weight less than zero [ 202.962791][T11876] bond7: Unable to set peer notification delay as MII monitoring is disabled [ 202.979878][T11876] bond7 (unregistering): Released all slaves [ 203.118519][T11888] netlink: 'syz.4.1632': attribute type 3 has an invalid length. [ 203.128605][T11888] netlink: 'syz.4.1632': attribute type 3 has an invalid length. [ 203.298539][T11894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1636'. [ 203.359845][T11894] 8021q: adding VLAN 0 to HW filter on device bond6 [ 203.373319][T11898] netlink: 'syz.1.1639': attribute type 1 has an invalid length. [ 203.378334][T11894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1636'. [ 203.428927][T11906] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1636'. [ 203.436614][T11898] 8021q: adding VLAN 0 to HW filter on device bond9 [ 203.446515][T11906] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1636'. [ 203.466740][T11894] macvlan3: entered promiscuous mode [ 203.472048][T11894] macvlan3: entered allmulticast mode [ 203.512548][T11910] bond9: (slave veth9): Enslaving as an active interface with a down link [ 203.544738][T11915] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1641'. [ 203.554633][T11898] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 203.660896][T11910] bond9: (slave veth11): Enslaving as an active interface with a down link [ 203.672972][T11924] netlink: 'syz.0.1643': attribute type 12 has an invalid length. [ 203.681991][T11910] netlink: 'syz.1.1639': attribute type 1 has an invalid length. [ 203.698103][T11910] netlink: 'syz.1.1639': attribute type 2 has an invalid length. [ 203.843340][T11934] netlink: 'syz.3.1644': attribute type 1 has an invalid length. [ 203.857926][T11934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1644'. [ 203.939424][T11941] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.053899][T11945] openvswitch: netlink: IP tunnel dst address not specified [ 204.068456][T11945] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1650'. [ 204.142718][T11953] netlink: 'syz.3.1653': attribute type 61 has an invalid length. [ 204.191833][T11954] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1651'. [ 204.219166][T11962] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1656'. [ 204.362025][T11971] syzkaller0: entered promiscuous mode [ 204.367865][T11971] syzkaller0: entered allmulticast mode [ 204.648407][T11986] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 204.660111][T11986] team0: Port device batadv2 added [ 204.752316][T11992] bond10: Unable to set up delay as MII monitoring is disabled [ 204.762256][T11992] bond10 (unregistering): Released all slaves [ 205.001853][T12012] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 205.062333][T12019] syzkaller0: entered promiscuous mode [ 205.070335][T12019] syzkaller0: entered allmulticast mode [ 205.123145][T12019] netlink: 'syz.2.1674': attribute type 4 has an invalid length. [ 205.490711][T12044] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 205.695880][T12061] syzkaller0: entered promiscuous mode [ 205.988999][T12086] openvswitch: netlink: Geneve option length err (len 268, max 255). [ 206.262447][T12107] netlink: 'syz.2.1699': attribute type 10 has an invalid length. [ 206.307486][T12110] geneve4: entered promiscuous mode [ 206.312724][T12110] geneve4: entered allmulticast mode [ 206.449657][T12120] syzkaller1: entered promiscuous mode [ 206.458268][T12120] syzkaller1: entered allmulticast mode [ 206.500748][T12122] netlink: 'syz.2.1704': attribute type 142 has an invalid length. [ 206.642709][T12128] unsupported nlmsg_type 40 [ 206.991696][T12142] syzkaller0: entered promiscuous mode [ 206.997235][T12142] syzkaller0: entered allmulticast mode [ 207.090278][T12144] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 207.121673][T12144] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 207.127035][T12145] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 207.216887][T12157] netlink: 'syz.3.1717': attribute type 1 has an invalid length. [ 207.274883][T12165] __nla_validate_parse: 14 callbacks suppressed [ 207.274899][T12165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1717'. [ 207.378385][T12165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1717'. [ 207.412851][T12157] bond7: entered promiscuous mode [ 207.418671][T12157] 8021q: adding VLAN 0 to HW filter on device bond7 [ 207.469318][T12170] bond7: (slave bridge6): making interface the new active one [ 207.492450][T12170] bridge6: entered promiscuous mode [ 207.510628][T12170] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 207.632721][T12188] "syz.4.1728" (12188) uses obsolete ecb(arc4) skcipher [ 207.685679][T12193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1729'. [ 207.707558][T12193] netlink: 'syz.2.1729': attribute type 30 has an invalid length. [ 207.719893][T12193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1729'. [ 207.732170][T12195] delete_channel: no stack [ 207.836711][T12203] netlink: 'syz.3.1731': attribute type 3 has an invalid length. [ 207.846426][T12203] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1731'. [ 208.026853][T12213] set match dimension is over the limit! [ 208.329215][T12234] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1742'. [ 208.362377][T12235] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1741'. [ 208.375039][T12234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1742'. [ 208.394205][T12235] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1741'. [ 208.547847][T12244] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1747'. [ 208.773288][T12266] tipc: Started in network mode [ 208.779128][T12266] tipc: Node identity , cluster identity 4711 [ 208.793401][T12266] tipc: Failed to obtain node identity [ 208.799031][T12266] tipc: Enabling of bearer rejected, failed to enable media [ 208.888137][T12262] veth0_to_bridge: entered promiscuous mode [ 208.896323][T12261] veth0_to_bridge: left promiscuous mode [ 209.617977][T12312] Cannot find map_set index 65533 as target [ 209.639103][T12311] Cannot find map_set index 65533 as target [ 209.682043][T12309] bond7: Unable to set down delay as MII monitoring is disabled [ 209.745252][T12309] bond7 (unregistering): Released all slaves [ 209.767942][T12324] openvswitch: netlink: Flow key attr not present in new flow. [ 209.967555][T12335] syzkaller1: entered promiscuous mode [ 209.996098][T12335] syzkaller1: entered allmulticast mode [ 210.018783][T12335] ------------[ cut here ]------------ [ 210.024297][T12335] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 210.036610][T12335] WARNING: net/sched/cls_u32.c:855 at u32_change+0x1da0/0x2720, CPU#0: syz.1.1769/12335 [ 210.046416][T12335] Modules linked in: [ 210.050592][T12335] CPU: 0 UID: 0 PID: 12335 Comm: syz.1.1769 Not tainted syzkaller #0 PREEMPT(full) [ 210.060187][T12335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 210.071610][T12335] RIP: 0010:u32_change+0x1daf/0x2720 [ 210.077428][T12335] Code: 3d 5e 0e 43 06 01 75 33 e8 7e 12 0d f8 eb 50 e8 77 12 0d f8 48 8d 3d 60 43 68 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 80 a0 e1 8c <67> 48 0f b9 3a e9 af ee ff ff e8 52 12 0d f8 eb 24 e8 4b 12 0d f8 [ 210.097293][T12335] RSP: 0018:ffffc9000536efc0 EFLAGS: 00010287 [ 210.103380][T12335] RAX: ffffffff89b8a259 RBX: ffff88804895c400 RCX: 0000000000000010 [ 210.111700][T12335] RDX: ffffffff8ce1a080 RSI: 0000000000000020 RDI: ffffffff9020e5c0 [ 210.119821][T12335] RBP: ffffc9000536f178 R08: 0000000000000dc0 R09: 00000000ffffffff [ 210.127871][T12335] R10: dffffc0000000000 R11: fffffbfff20239f7 R12: ffff88805b01cce8 [ 210.135892][T12335] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001 [ 210.143880][T12335] FS: 00007f503cbf66c0(0000) GS:ffff888125457000(0000) knlGS:0000000000000000 [ 210.152894][T12335] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 210.159563][T12335] CR2: 00007f4cfeb2ba40 CR3: 000000006d892000 CR4: 00000000003526f0 [ 210.167632][T12335] Call Trace: [ 210.170921][T12335] [ 210.173881][T12335] ? __pfx_u32_change+0x10/0x10 [ 210.178834][T12335] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 210.184546][T12335] tc_new_tfilter+0xff8/0x1780 [ 210.189354][T12335] ? __pfx_tc_new_tfilter+0x10/0x10 [ 210.194663][T12335] ? __pfx_tc_new_tfilter+0x10/0x10 [ 210.199883][T12335] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 210.204918][T12335] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 210.210055][T12335] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 210.215621][T12335] ? ref_tracker_free+0x693/0x840 [ 210.220658][T12335] ? __copy_skb_header+0xa3/0x4a0 [ 210.225773][T12335] ? __pfx_ref_tracker_free+0x10/0x10 [ 210.231167][T12335] netlink_rcv_skb+0x232/0x4b0 [ 210.236072][T12335] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 210.241623][T12335] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 210.247014][T12335] ? netlink_deliver_tap+0x2e/0x1b0 [ 210.252231][T12335] netlink_unicast+0x80f/0x9b0 [ 210.257078][T12335] ? __pfx_netlink_unicast+0x10/0x10 [ 210.262380][T12335] ? netlink_sendmsg+0x650/0xb40 [ 210.267354][T12335] ? skb_put+0x11b/0x210 [ 210.271616][T12335] netlink_sendmsg+0x813/0xb40 [ 210.276466][T12335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.281767][T12335] ? aa_sock_msg_perm+0xf1/0x1b0 [ 210.286807][T12335] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 210.292114][T12335] ____sys_sendmsg+0x972/0x9f0 [ 210.296969][T12335] ? __pfx_____sys_sendmsg+0x10/0x10 [ 210.302280][T12335] ? import_iovec+0x73/0xa0 [ 210.306876][T12335] ___sys_sendmsg+0x2a5/0x360 [ 210.311580][T12335] ? __pfx____sys_sendmsg+0x10/0x10 [ 210.316877][T12335] ? __pfx_futex_wake_mark+0x10/0x10 [ 210.322214][T12335] ? __fget_files+0x2a/0x420 [ 210.326876][T12335] ? __fget_files+0x3a0/0x420 [ 210.331579][T12335] __sys_sendmmsg+0x27c/0x4e0 [ 210.336359][T12335] ? __pfx___sys_sendmmsg+0x10/0x10 [ 210.341576][T12335] ? do_futex+0x333/0x420 [ 210.346139][T12335] ? __pfx___se_sys_futex+0x10/0x10 [ 210.351352][T12335] ? fd_install+0x306/0x3d0 [ 210.355952][T12335] __x64_sys_sendmmsg+0xa0/0xc0 [ 210.360827][T12335] do_syscall_64+0x14d/0xf80 [ 210.365593][T12335] ? trace_irq_disable+0x3b/0x150 [ 210.370630][T12335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.376768][T12335] ? clear_bhb_loop+0x40/0x90 [ 210.381460][T12335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.387406][T12335] RIP: 0033:0x7f503e99c819 [ 210.391826][T12335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.412501][T12335] RSP: 002b:00007f503cbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 210.420993][T12335] RAX: ffffffffffffffda RBX: 00007f503ec15fa0 RCX: 00007f503e99c819 [ 210.429057][T12335] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000009 [ 210.437102][T12335] RBP: 00007f503ea32c91 R08: 0000000000000000 R09: 0000000000000000 [ 210.445115][T12335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.453091][T12335] R13: 00007f503ec16038 R14: 00007f503ec15fa0 R15: 00007ffd2c723998 [ 210.461131][T12335] [ 210.464162][T12335] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 210.471440][T12335] CPU: 0 UID: 0 PID: 12335 Comm: syz.1.1769 Not tainted syzkaller #0 PREEMPT(full) [ 210.480796][T12335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 210.490838][T12335] Call Trace: [ 210.494104][T12335] [ 210.497045][T12335] vpanic+0x56c/0xa60 [ 210.501023][T12335] ? __pfx__printk+0x10/0x10 [ 210.505599][T12335] ? __pfx_vpanic+0x10/0x10 [ 210.510090][T12335] ? is_bpf_text_address+0x292/0x2b0 [ 210.515362][T12335] ? is_bpf_text_address+0x26/0x2b0 [ 210.520556][T12335] panic+0xc5/0xd0 [ 210.524266][T12335] ? __pfx_panic+0x10/0x10 [ 210.528680][T12335] __warn+0x315/0x4f0 [ 210.532652][T12335] ? u32_change+0x1da0/0x2720 [ 210.537316][T12335] ? u32_change+0x1da0/0x2720 [ 210.541982][T12335] __report_bug+0x29a/0x540 [ 210.546470][T12335] ? ___sys_sendmsg+0x2a5/0x360 [ 210.551308][T12335] ? __sys_sendmmsg+0x27c/0x4e0 [ 210.556150][T12335] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 210.561167][T12335] ? u32_change+0x1da0/0x2720 [ 210.565834][T12335] ? __pfx___report_bug+0x10/0x10 [ 210.570861][T12335] report_bug_entry+0x19a/0x290 [ 210.575700][T12335] ? u32_change+0x1daf/0x2720 [ 210.580362][T12335] ? u32_change+0x1db4/0x2720 [ 210.585024][T12335] handle_bug+0xce/0x200 [ 210.589262][T12335] exc_invalid_op+0x1a/0x50 [ 210.593757][T12335] asm_exc_invalid_op+0x1a/0x20 [ 210.598588][T12335] RIP: 0010:u32_change+0x1daf/0x2720 [ 210.603862][T12335] Code: 3d 5e 0e 43 06 01 75 33 e8 7e 12 0d f8 eb 50 e8 77 12 0d f8 48 8d 3d 60 43 68 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 80 a0 e1 8c <67> 48 0f b9 3a e9 af ee ff ff e8 52 12 0d f8 eb 24 e8 4b 12 0d f8 [ 210.623450][T12335] RSP: 0018:ffffc9000536efc0 EFLAGS: 00010287 [ 210.629505][T12335] RAX: ffffffff89b8a259 RBX: ffff88804895c400 RCX: 0000000000000010 [ 210.637458][T12335] RDX: ffffffff8ce1a080 RSI: 0000000000000020 RDI: ffffffff9020e5c0 [ 210.645411][T12335] RBP: ffffc9000536f178 R08: 0000000000000dc0 R09: 00000000ffffffff [ 210.653367][T12335] R10: dffffc0000000000 R11: fffffbfff20239f7 R12: ffff88805b01cce8 [ 210.661320][T12335] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001 [ 210.669285][T12335] ? u32_change+0x1d99/0x2720 [ 210.673969][T12335] ? __pfx_u32_change+0x10/0x10 [ 210.678804][T12335] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 210.684442][T12335] tc_new_tfilter+0xff8/0x1780 [ 210.689210][T12335] ? __pfx_tc_new_tfilter+0x10/0x10 [ 210.694414][T12335] ? __pfx_tc_new_tfilter+0x10/0x10 [ 210.699596][T12335] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 210.704519][T12335] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 210.709610][T12335] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 210.715054][T12335] ? ref_tracker_free+0x693/0x840 [ 210.720064][T12335] ? __copy_skb_header+0xa3/0x4a0 [ 210.725076][T12335] ? __pfx_ref_tracker_free+0x10/0x10 [ 210.730436][T12335] netlink_rcv_skb+0x232/0x4b0 [ 210.735185][T12335] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 210.740628][T12335] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 210.745909][T12335] ? netlink_deliver_tap+0x2e/0x1b0 [ 210.751098][T12335] netlink_unicast+0x80f/0x9b0 [ 210.755861][T12335] ? __pfx_netlink_unicast+0x10/0x10 [ 210.761143][T12335] ? netlink_sendmsg+0x650/0xb40 [ 210.766067][T12335] ? skb_put+0x11b/0x210 [ 210.770301][T12335] netlink_sendmsg+0x813/0xb40 [ 210.775059][T12335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.780327][T12335] ? aa_sock_msg_perm+0xf1/0x1b0 [ 210.785254][T12335] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 210.790525][T12335] ____sys_sendmsg+0x972/0x9f0 [ 210.795281][T12335] ? __pfx_____sys_sendmsg+0x10/0x10 [ 210.800555][T12335] ? import_iovec+0x73/0xa0 [ 210.805045][T12335] ___sys_sendmsg+0x2a5/0x360 [ 210.809711][T12335] ? __pfx____sys_sendmsg+0x10/0x10 [ 210.814905][T12335] ? __pfx_futex_wake_mark+0x10/0x10 [ 210.820196][T12335] ? __fget_files+0x2a/0x420 [ 210.824766][T12335] ? __fget_files+0x3a0/0x420 [ 210.829432][T12335] __sys_sendmmsg+0x27c/0x4e0 [ 210.834099][T12335] ? __pfx___sys_sendmmsg+0x10/0x10 [ 210.839281][T12335] ? do_futex+0x333/0x420 [ 210.843614][T12335] ? __pfx___se_sys_futex+0x10/0x10 [ 210.848804][T12335] ? fd_install+0x306/0x3d0 [ 210.853301][T12335] __x64_sys_sendmmsg+0xa0/0xc0 [ 210.858141][T12335] do_syscall_64+0x14d/0xf80 [ 210.862732][T12335] ? trace_irq_disable+0x3b/0x150 [ 210.867755][T12335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.873813][T12335] ? clear_bhb_loop+0x40/0x90 [ 210.878490][T12335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.884380][T12335] RIP: 0033:0x7f503e99c819 [ 210.888808][T12335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.908403][T12335] RSP: 002b:00007f503cbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 210.916811][T12335] RAX: ffffffffffffffda RBX: 00007f503ec15fa0 RCX: 00007f503e99c819 [ 210.924772][T12335] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000009 [ 210.932731][T12335] RBP: 00007f503ea32c91 R08: 0000000000000000 R09: 0000000000000000 [ 210.940684][T12335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.948640][T12335] R13: 00007f503ec16038 R14: 00007f503ec15fa0 R15: 00007ffd2c723998 [ 210.956609][T12335] [ 210.959921][T12335] Kernel Offset: disabled [ 210.964228][T12335] Rebooting in 86400 seconds..