last executing test programs: 1m19.31149541s ago: executing program 1 (id=2): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="200000006a000107000000001e000000000000000000000008000a00f0ffffffd1ca6755fb3c3591966f3ae2a4bbe8ecc2953f6532b8384bb17d652b0bdef78684c5cbc1c5b2d60d44c1138398b72bb3ba28e1def2f996ab7d0c0c"], 0x20}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r3, &(0x7f00000002c0)={&(0x7f0000000080), 0x10, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="000000b61c2160525e5c2d0000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0101000000000000000000600100000097df0b2fd29245c8"], 0x48}, 0x1, 0x0, 0x0, 0x4004090}, 0x10000811) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x3, r2, 0x6}, 0xc) r5 = socket(0x2, 0x2, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=r6, 0x16, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r7, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000300)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000680), &(0x7f0000000280)=r8}, 0x20) bind$alg(r5, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240200000840800034000000007080004400000000f08000140000000001c0005800c000100707b796c6f6164000c00028008000240000000050900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x5}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000004c0)={r11, @in6={{0xa, 0x4e22, 0xd, @mcast2, 0x3}}, 0x4}, &(0x7f0000000380)=0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r4}, &(0x7f00000003c0), &(0x7f0000000600)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000001f000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r12, 0x0, 0x0, &(0x7f0000000240)=0x1, 0x4) getgid() 1m18.889892124s ago: executing program 1 (id=24): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1}}, 0xee) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x2, {0x2, 0xf, 0x1}, {0x1, 0xff, 0x3}, 0x0, 0xfe}, {0x0, 0x0, {0x0, 0x1}, {0x1, 0xf0, 0x4}, 0xff, 0xfd}, {0x0, 0x2, {0x0, 0xf0}, {0x0, 0x1, 0x2}}, {0x1, 0x3, {0x2, 0x0, 0x7}, {0x2, 0x1, 0x3}, 0xfe, 0xff}], 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1}}, 0xee) (async) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x2, {0x2, 0xf, 0x1}, {0x1, 0xff, 0x3}, 0x0, 0xfe}, {0x0, 0x0, {0x0, 0x1}, {0x1, 0xf0, 0x4}, 0xff, 0xfd}, {0x0, 0x2, {0x0, 0xf0}, {0x0, 0x1, 0x2}}, {0x1, 0x3, {0x2, 0x0, 0x7}, {0x2, 0x1, 0x3}, 0xfe, 0xff}], 0x80) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) (async) 1m3.816194982s ago: executing program 32 (id=24): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1}}, 0xee) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x2, {0x2, 0xf, 0x1}, {0x1, 0xff, 0x3}, 0x0, 0xfe}, {0x0, 0x0, {0x0, 0x1}, {0x1, 0xf0, 0x4}, 0xff, 0xfd}, {0x0, 0x2, {0x0, 0xf0}, {0x0, 0x1, 0x2}}, {0x1, 0x3, {0x2, 0x0, 0x7}, {0x2, 0x1, 0x3}, 0xfe, 0xff}], 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1}}, 0xee) (async) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x2, {0x2, 0xf, 0x1}, {0x1, 0xff, 0x3}, 0x0, 0xfe}, {0x0, 0x0, {0x0, 0x1}, {0x1, 0xf0, 0x4}, 0xff, 0xfd}, {0x0, 0x2, {0x0, 0xf0}, {0x0, 0x1, 0x2}}, {0x1, 0x3, {0x2, 0x0, 0x7}, {0x2, 0x1, 0x3}, 0xfe, 0xff}], 0x80) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) (async) 4.378327908s ago: executing program 4 (id=930): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000011000500000000000003000007000000", @ANYRES32=r3, @ANYBLOB="01000000000000000c001a800800058004000580"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4c840) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3.374762983s ago: executing program 4 (id=940): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000780)=[{0x3, 0x4, 0x1, 0x7}, {0x1, 0x2, 0xc, 0x3}], 0x10, 0x80000000}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r0, 0x0) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c}}], 0x20}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r4, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) (async) bind$alg(r5, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="af3cb5a6", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8840) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r7, 0x8914, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xcc) (async) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r8, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) (async) setsockopt$ax25_SO_BINDTODEVICE(r8, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) socket$kcm(0xa, 0x3, 0x3a) (async) r9 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0x7f000011}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) 3.210124618s ago: executing program 4 (id=943): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000fc0), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0103701b122a34bf6a0e04"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40440d0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000fc0), r0) (async) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0103701b122a34bf6a0e04"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40440d0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 2.960380881s ago: executing program 4 (id=947): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000008800000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'ip6gre0\x00', r3, 0x29, 0x8, 0x9, 0x5, 0x1, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x10, 0xffffff70, 0x9}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x1, @empty, @local, {[], @mld={0x83, 0x0, 0x0, 0x9, 0x0, @mcast1}}}}}}, 0x0) getsockname$unix(r1, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtaction={0x4708, 0x30, 0x800, 0x70bd25, 0x25dfdbfc, {}, [{0x470, 0x1, [@m_tunnel_key={0x9c, 0x9, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}]}, {0x47, 0x6, "589129a30f9b6bd796a214db051ad8967faf5248c0afb73e2c53b41642214f6d207b6b08700468670afb15ec7aed7c733853e73f1313ce64e6d252c5dbd5c3368461ea"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0x94, 0x1e, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_LABEL={0x8, 0x5, 0x5262d}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xfff, 0xffffffa1, 0x2, 0xe2d, 0x8}, 0x1}}]}, {0x3b, 0x6, "acca4526d300781545bda1e0fb664dffe15ced223a897e99ca1c629a4d07e0a72fcca67f97fea2cc43fc353296ff34cdd37af82e5d77fc"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0x124, 0x8, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xbbb, 0x35, 0x5, 0x3ff, 0x6}, 0x4}}]}, {0xcc, 0x6, "c01f9a44dc88c0928c54b11ba68fffd7b5ae4e515bdbba45a7a7163f4bae47eb8a6e43e814ab6926466dd7d69a05b723ed1d3566481f7f9d5ce8c5e0c658eebd9ce1ad5675c38f07a4a1a42ceb39c39068f985539249ac3b310df049cc8b6aa57cd5c68ae9f5aad53bc03efa046478bead298b072c44e661a1381d58a2d24e0a92649ab4885f53f99c90543cfb3c37751a145a8ad9eb1c6460d0e5bd4fbf28deaba7a06081a7722e37a25a9e27b1fbf04426654732d165eea0d1f7bfcc134c0a11e1990729384e69"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x8c, 0xc, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @remote}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x1d}}, @TCA_CT_ACTION={0x6, 0x3, 0x42}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x10}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private1}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mirred={0x18c, 0x19, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xdd15, 0x4, 0x10000000, 0x6, 0x3}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x9, 0x2, 0x7, 0x40}, 0x5, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xebf, 0x7f, 0x6, 0x7, 0xfffe0000}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x96, 0x10000000, 0x4}, 0x1, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x5e5ece9f, 0x8, 0x9, 0x59}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x2, 0x5, 0x8, 0x8d2}, 0x3, r4}}]}, {0xa0, 0x6, "10db06d864c98291d72a3e4880f0d7c5dedaa6abe149e202dfccd46802f02221b9f07ab8ff237e5174b8b847c5abf5c3b0a34c504dcbbf7452157f075fc2c9ef3393d3df4ee892263e36790bb74e3d9c0b5c0ac9813465b17168ef96a202b01c1fecae7d1fa6ecb103a56086dfd4670a3238aa9f8a2419d693f15dfbf7f30ea875acd598bbbe3510d404eba183932aee58b24b5d0164014dcb7724e0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0x1ae4, 0x1, [@m_simple={0x114, 0x12, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '[\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0xd7, 0x6, "0ad35926ebaa16ab85e53a7a4cc0aeb8835d4f6398eca3749fa9c75dac2be43e6463c4c3e065b55464bd53eff9f522935d178a421d4015f02fd6453f79430a648ad3e7712ac4585fbe7603446e25cfd358cc647044be0f30861d0d1508145ea1279e50b818c2e28b7ea8b99caf4a31ebc162d7d80179e921122d591724c11161e707c6466aaa0d7106182ac75d2df67d491a17148c1d7cf87cf1991c0f17ba4634cb8d03d0fa8a7f3fa2e7296de3c7a9a6d79770096c7d5dd6d14713c1be24d6ef779bfd5a6e57b840124aa2e3a4f4093f038c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_simple={0x174, 0x6, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x0, 0x3, 0x1, 0x3}}, @TCA_DEF_DATA={0x6, 0x3, '.\x00'}, @TCA_DEF_DATA={0x7, 0x3, ']!\x00'}, @TCA_DEF_DATA={0x6, 0x3, '\\\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xfff, 0x9, 0x0, 0x41b6, 0x9}}]}, {0xf5, 0x6, "ddcc0a44dab7cd4e5223024f7ad0153bca600a8517bb22635536b20dee77017a46ca14da8b66a19c83573fbb8850a2ea9a951d5db341067395368edf8435c9ed912bda3c49e2725b1300d9816433ad6da2f596644d0100cede98147955d51c4f9493631c633f317df32d4545571aeda6b4124c5f17fd565f85f4ffdf1728a1f8673d4f94597cfb6b9a7deab588c2a2c30c68462926bbce466f8edf22956c007aca87a059904a9724d42f7fd796af6f7780b48c02f05e28e6a3151f525ce641403bfee69019e048d88b374dec17a62b9d8ee9b0f4c52d53f6d24064cd2da5092edf7319d584e4fbc82af915d8f6b9af8d28"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_police={0x1580, 0x1d, 0x0, 0x0, {{0xb}, {0x14f4, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0xb}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x0, 0x5, 0x9, 0x1000, {0x6, 0x2, 0x81, 0x8000, 0x401, 0x400}, {0x1f, 0x0, 0xffc0, 0x1, 0x7ff}, 0x0, 0x4, 0xffffff01}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1ef}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xe89}, @TCA_POLICE_RESULT={0x8, 0x5, 0xeb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x3, 0x8, 0x5, 0x7, 0xfffffc01, 0x7, 0x7, 0x9, 0x6455, 0x8001, 0x95, 0x7, 0x6, 0x8, 0x7, 0x800, 0x80000000, 0x6, 0x7, 0x7ff, 0x926f, 0x40, 0x4, 0x7f, 0x1ff, 0x8000, 0x1, 0x20, 0x5, 0xe, 0xffff, 0x100, 0x20000000, 0x2, 0x100, 0xe0, 0x1, 0x7419b3c0, 0xc5, 0x892, 0x0, 0x200, 0x7, 0x3, 0xf2, 0xe10, 0x8, 0x0, 0x0, 0x9, 0x3, 0x2, 0x4, 0x8, 0x4, 0x1, 0x9, 0xfa, 0xf4c, 0xb57000, 0x7, 0x4f, 0x9, 0x29cd, 0x0, 0x6, 0x8, 0x1, 0x3, 0xa, 0xe2, 0x6, 0x3, 0x3, 0x79, 0x9, 0xfffffe01, 0x5e8696a0, 0x1, 0x56, 0x9, 0x8a8, 0x2, 0x5, 0x8, 0x9d8, 0xffff, 0x9, 0x0, 0x3, 0x2, 0xffff, 0x4, 0x101, 0xb49, 0x7, 0x9, 0x9, 0x8000, 0x7, 0x2, 0x6, 0x5, 0x793, 0x10000, 0x3, 0x2, 0xa, 0x3, 0xd, 0x7, 0x0, 0x2, 0x8000, 0x5, 0x7ff, 0xc, 0xde5, 0x9, 0x995, 0x5, 0x1, 0x16, 0x3ff, 0x1, 0x7fff, 0x7, 0x3, 0x40, 0x3, 0x6, 0x0, 0x86f5, 0xd99, 0x5, 0x2, 0x200, 0x1, 0x3dcd, 0x9813, 0x6, 0x2, 0x1000, 0xfffffff8, 0x6, 0x0, 0x7, 0x10000, 0xe8, 0x40, 0x6, 0x7f, 0x6, 0x80000001, 0x0, 0xcb, 0x9, 0x5, 0xf5, 0x0, 0x4, 0xf, 0x9, 0x0, 0x0, 0x5, 0x3, 0x3, 0x6c409506, 0x8, 0x6, 0x2, 0x1, 0x0, 0x3ff, 0x9, 0x101, 0x3, 0x1, 0x8, 0x1, 0x2, 0x7, 0x451, 0x10001, 0x8001, 0x7fff, 0x8001, 0x5, 0x8, 0x590d, 0x19b2cda5, 0x4, 0x4, 0xdcd, 0x1, 0x3, 0x2, 0x5, 0x5, 0x2, 0xaac, 0xa0, 0xc, 0xe0b6, 0xe, 0x1000000, 0x4, 0x4, 0x80, 0x101, 0x0, 0xffffff80, 0x3, 0x6, 0x4, 0x7, 0x80000000, 0x3, 0x0, 0x808, 0x4, 0x1, 0x1ff, 0x90000, 0x5, 0x8, 0x2000000, 0xf2, 0x6, 0x4554ca51, 0xf0, 0x2536, 0x3, 0x3, 0xffffffff, 0x9, 0x400, 0x101, 0x6, 0xffffff7f, 0x8000, 0x9, 0x0, 0x6, 0x1, 0x3, 0x6, 0x101, 0x5, 0x6, 0x4, 0x8, 0x7, 0xff]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1b6, 0x3, 0x7ff, 0x1, 0xd, 0x0, 0x27f, 0x0, 0xff, 0x9, 0x3, 0xa0, 0x1, 0x80000000, 0x3f7, 0x0, 0xe, 0x5, 0x3, 0x3, 0x0, 0x6, 0x7f, 0xb5d, 0x5, 0xfffffffc, 0xe, 0x4, 0x1d1, 0xe644, 0x40, 0xfffffff8, 0x0, 0x561, 0x3, 0x6, 0x922e, 0xf, 0x2, 0x4, 0x74c, 0xf, 0x8b, 0x1, 0x401, 0x0, 0x6, 0x5, 0xfd7, 0x0, 0x0, 0x7, 0x5, 0x584, 0x2, 0x4, 0x8000, 0x6, 0x9, 0xd67, 0xc, 0xbb10, 0x0, 0xfffffff7, 0x5, 0x40, 0x9, 0x7aab, 0x8, 0x2, 0x6, 0xfffffffc, 0x3, 0x0, 0x74eaf96b, 0x8, 0x81, 0xfffffffa, 0xe79, 0x4, 0xaed, 0xfffffffc, 0x9, 0x8001, 0x7, 0x3, 0x6, 0x100, 0x8, 0x1, 0x800, 0x9, 0xd, 0x200, 0x6, 0x4, 0xb89, 0x5, 0x3, 0x3, 0x5, 0xf, 0x8, 0x7ff, 0xfffffff8, 0x3, 0x1, 0x3, 0x4, 0x0, 0x1, 0x9, 0x48a, 0x7b5000, 0x6, 0x9, 0x4f, 0x8, 0xd170, 0x10001, 0x8000, 0xfffff986, 0xffff, 0x8000, 0x4, 0xcc, 0x9, 0x5, 0x1, 0x80, 0x9, 0x5f, 0x3ff, 0x2, 0x2, 0xe, 0x7fff, 0x1ff, 0x3, 0x3, 0x80000001, 0x80000001, 0x3, 0x7, 0x1, 0x5, 0x81, 0x6, 0x6a5142f2, 0x0, 0x8000, 0x1, 0x8, 0x0, 0x2, 0x9, 0xfffff844, 0x9, 0x8, 0x2, 0x4d, 0x2, 0x0, 0x3, 0x0, 0x8, 0x8, 0x8, 0x3, 0x0, 0x5, 0x1, 0x400, 0x66a6, 0x4, 0x3, 0x4ed7, 0x2, 0x5b2d, 0xa, 0x4b2450eb, 0xa, 0x7, 0x1000, 0x417e, 0xffffffff, 0x2, 0xc5, 0xbd, 0x0, 0x2, 0x7, 0x8, 0x9, 0x800, 0x85b, 0x454, 0x6d15838, 0x6, 0xac9, 0x8001, 0xb625, 0x4, 0x2, 0x1, 0xdb8, 0x1, 0xff, 0xaf, 0x8, 0x7, 0x7fff, 0x7ff, 0xb291, 0x8000, 0x81, 0x80000000, 0x10, 0xa, 0x9, 0x0, 0x10, 0xa5, 0x8, 0x3, 0xa, 0x80000001, 0x4, 0x2, 0xb, 0x2, 0xa2, 0x10, 0x1, 0x3119, 0x9, 0xffffffff, 0x4, 0xfffffffe, 0x5490, 0x0, 0x3, 0xe, 0x5, 0x5, 0x7, 0x401, 0xb, 0x8, 0x4, 0x7, 0x0, 0xff, 0x10, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffc0, 0x7e, 0x1698, 0x1, 0x0, 0x5, 0xd04, 0xd, 0x401, 0x200, 0xdb1d, 0x9bc, 0x2, 0x800, 0xfffffa28, 0x5, 0x793b, 0x8, 0xfffffffe, 0xffffffff, 0x8, 0xc83b, 0x20, 0x4, 0x7, 0x1, 0x5, 0x433, 0x6, 0x1, 0x9, 0x1, 0x0, 0x3, 0x46, 0x3, 0x8, 0x1ff, 0x200, 0x9ff0, 0x0, 0x9, 0x4, 0x7b, 0x401, 0x9, 0x7fff, 0xd, 0x7, 0x2, 0x400, 0x4, 0xcd69, 0x3, 0x0, 0x2, 0x7f, 0xc, 0x1, 0x8637, 0xffffffff, 0x0, 0x10, 0x8, 0x0, 0x9, 0x5, 0x2, 0xe, 0x1552cc2f, 0x3, 0x9, 0x1, 0x4, 0x4, 0x4, 0xc9f3, 0x5, 0xfffffffd, 0x5c7, 0x3ff, 0x9, 0x10, 0x6, 0x8, 0x8e01, 0x4, 0x5, 0x8, 0x9c0, 0x592b, 0x43, 0x982, 0x0, 0x8, 0x4, 0x9, 0x2, 0x7, 0x1ff, 0x3, 0x6, 0x5, 0x80000001, 0x7, 0x7, 0x9cd3, 0x9, 0x0, 0xbae33b44, 0x5, 0x7, 0x101, 0x1, 0x5, 0x8, 0x5, 0x400, 0xcd35, 0x2, 0x9, 0x0, 0x7, 0x6, 0x6, 0x1, 0xcde, 0x5, 0x3, 0x1, 0x3, 0x0, 0xdf, 0xa, 0xde0, 0x5, 0x4, 0xd, 0x33c, 0x0, 0x3, 0x6, 0xe2, 0x800, 0x4, 0x200000, 0xebd, 0x5, 0x2, 0x1b, 0xfffffe01, 0xe, 0x0, 0x4, 0x2, 0xd, 0x6, 0x800, 0x1ff, 0x5, 0x1, 0xe, 0xff, 0x9, 0x7, 0xd3d, 0xffff, 0xf, 0x7, 0x401, 0xa, 0xf5, 0x3, 0x8, 0xfffff800, 0x4, 0x481, 0x2, 0xe859, 0xffffffff, 0x6, 0x1, 0x1, 0x1, 0x6, 0x9, 0x10001, 0x5, 0x5, 0x5354, 0x7fffffff, 0x200, 0x7, 0x1d70, 0x81, 0x376752ad, 0x2, 0x9, 0x101, 0x8, 0x829a, 0x3, 0x2, 0x9, 0xed, 0x6, 0x3100000, 0x800, 0xfffffff8, 0x5, 0x0, 0x2, 0x400, 0x400, 0x2, 0xfffffffb, 0x7, 0x2, 0x100, 0x1, 0x3, 0x1, 0xffffffff, 0x4, 0x0, 0x400, 0x5, 0x4, 0x2340, 0x4, 0xffff, 0x5567, 0xb6ff, 0x0, 0x9, 0x2, 0x10001, 0x10001, 0xfffffffc, 0x54e, 0x0, 0x0, 0x8, 0x8001, 0x8, 0x80, 0x954, 0x1940, 0x1, 0x0, 0x4, 0x6, 0x100, 0x7fff, 0xffffffff, 0xf]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x101, 0xd, 0x3, 0x0, 0x7ff, 0xd84d, 0x0, 0x9, 0x81, 0x8, 0x8, 0x7, 0x2, 0x6, 0x80000000, 0xfffffffe, 0x0, 0xffff198e, 0x3, 0xc71, 0x1, 0xcad6, 0x0, 0x80000000, 0xf5b, 0xaa, 0x8001, 0x9, 0x80000000, 0xa2, 0x0, 0x9, 0x9, 0x4, 0x5, 0x2, 0xfffff7ec, 0x7fff, 0x400, 0x80000001, 0x7, 0xe1, 0x8, 0x9, 0x84, 0xb, 0xb76, 0x1, 0xffff, 0x10000, 0x9, 0x4, 0xb, 0x6, 0x6, 0x0, 0x0, 0xffff, 0x7, 0x1523e000, 0x1df9768e, 0x8, 0xb075, 0x1, 0x8, 0x4, 0x1, 0x9, 0x10001, 0x3, 0x4, 0x4, 0x5, 0x16, 0x5, 0x2, 0x10001, 0xa000000, 0x8, 0x0, 0x8000, 0x4, 0x3, 0xfffffffa, 0x3ff, 0x7, 0x4, 0x6, 0x80000001, 0x10, 0xd, 0x1, 0x3, 0xfffffeff, 0x9, 0x7, 0x54f, 0x10, 0x4, 0x3, 0x2, 0x0, 0x2c, 0x100, 0x401, 0x9, 0x99c4, 0x5, 0x7, 0x7f, 0xe, 0x100, 0x2, 0x8001, 0x81, 0x200, 0xc3a, 0x10000, 0x14000, 0xfffffff0, 0x1, 0x1, 0xa, 0xd1b, 0x8, 0x401, 0xb7, 0x6, 0x9, 0x3, 0x1, 0x4, 0x25, 0x2, 0x1000, 0x100, 0x46fd, 0x64, 0x6071, 0x1, 0x200000, 0x2, 0x9, 0x3ff, 0x1, 0x1000, 0x3, 0x2, 0x3, 0x9, 0x100, 0x5, 0xb, 0x7, 0x6, 0x6, 0x8000, 0x5, 0x1, 0xffffff4f, 0x6, 0xb, 0x7f, 0x1, 0x1, 0x8000, 0x0, 0x7, 0x6004, 0x325, 0x8, 0xcd75, 0xb0, 0xaf, 0xfffffffd, 0x0, 0x9, 0x1000, 0x1000, 0x8, 0x5, 0x7fff, 0xc, 0x5, 0x92, 0x1, 0xa0000000, 0x0, 0x9, 0x7, 0x200, 0x81, 0x5, 0x5f, 0x9, 0x1, 0x1, 0x6, 0xf326, 0x1ee, 0x7, 0x9, 0x1ff, 0xb785d000, 0x2d3a28, 0xfff, 0x8, 0xc9d, 0x4, 0x83b8, 0x11d, 0x80000001, 0x4, 0x4, 0x4, 0x2, 0xffffffff, 0x7e6, 0x0, 0x6, 0x8, 0x2, 0x100, 0x2, 0x4, 0x3, 0x1, 0x7000000, 0x800, 0x955, 0xa4b, 0x0, 0x4, 0x5, 0xff, 0x8, 0x6, 0x0, 0x8, 0x3, 0x3, 0x1, 0x5, 0x3, 0x6, 0x5, 0x2, 0x7, 0x9, 0x7, 0x0, 0x152f, 0x6, 0x1, 0x5, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x610, 0x8, 0xb3, 0x3, 0x7, 0xf, 0x9a7, 0x4, 0xc7, 0x2, 0xb29, 0xe, 0x97eb, 0x5a27, 0x2, 0xfffffff8, 0xfffffffd, 0x14d4, 0x0, 0x0, 0x0, 0x10, 0xde04, 0x3, 0x1bce307d, 0x7fffffff, 0x200, 0xfc8, 0x3, 0x1, 0x3f6, 0x6, 0x4, 0x10, 0x2, 0x50, 0xffff, 0x3, 0x44c7, 0x40000000, 0x2693, 0x28, 0x8, 0x62a, 0x2, 0x3b, 0x9, 0x6, 0x7, 0xf, 0xfffffff9, 0xe7, 0x7, 0x1d, 0x8, 0x5, 0x7, 0x5c24ea6e, 0x2, 0x9, 0x1, 0x0, 0x7, 0xfd, 0x9, 0x47e, 0xfffff801, 0x8, 0x769, 0x3, 0x4, 0x7fffffff, 0x7ff, 0xe428, 0x6, 0x6, 0x2, 0x4, 0xeed, 0x3, 0x8000, 0x4, 0x80000000, 0x9, 0x200, 0xc2, 0xac26, 0x6, 0x7, 0x96af, 0xb, 0x3, 0x6, 0x3, 0x4, 0xad, 0xffffffff, 0x9, 0x4, 0x7, 0x58ad, 0x6, 0x4, 0xfffff801, 0xfffffff8, 0x7fff, 0x7fff, 0x6, 0xfffffff7, 0x101, 0x4c85, 0x5, 0x9, 0x81, 0xa1, 0x773, 0x7, 0x3, 0x0, 0x9, 0x9, 0x101, 0x5, 0x1, 0xe, 0x1, 0xfffffff8, 0x1, 0x4, 0x7, 0x5, 0x2, 0x400, 0x5, 0x0, 0x0, 0x7ff, 0x2, 0x9, 0x1b3, 0xf7, 0x9, 0x5, 0x3, 0xff, 0x5, 0x4, 0xe, 0x7fffffff, 0x37f, 0x5, 0x9, 0x33ba, 0x100, 0xff, 0xa124, 0x4, 0x1, 0x0, 0x5, 0x0, 0x3b0dda, 0x8, 0xb8, 0x9, 0x8, 0xa5, 0xdc2, 0x7, 0x4, 0x7ff, 0x6, 0x80, 0x1, 0x1, 0x9, 0xa0, 0x800, 0x8000, 0x75b4, 0xfffffffc, 0xb1bb, 0x4a9a, 0x3, 0x711, 0x0, 0x400, 0x8, 0x5, 0x7, 0x8, 0x9, 0x0, 0x5, 0x4, 0x1, 0x4, 0x7ff800, 0x7, 0x9, 0x1, 0xfa, 0x6, 0x7, 0xe, 0x1, 0x8, 0x4, 0x5, 0x4, 0x1, 0x81, 0x8, 0xe, 0x5, 0x80000000, 0x9, 0x7, 0x2, 0x4, 0xc5, 0x1, 0x1, 0x9, 0xb8, 0x1, 0x4, 0x0, 0x6, 0x7f, 0x1, 0x2740, 0x470, 0x1, 0x8, 0xd97, 0x3779, 0x2, 0x4, 0x401, 0x6, 0x7, 0xfee9, 0x7, 0x5, 0xe5, 0x8, 0x5, 0x800, 0xd, 0x80, 0x2, 0x9, 0x5741, 0x6, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x7, 0x3, 0x7, 0x2, {0xec, 0x1, 0x0, 0x93, 0x9, 0x1}, {0xa9, 0x2, 0x7, 0x9, 0x400, 0xc}, 0xa6b5, 0x5, 0x1000000}}]]}, {0x61, 0x6, "0b2b92422cc7edc6c9e6c4fc3fd0d62e1f76c545550cd8e440eb180e85ec20a22e9407eaeb14d43d6a775868e17e9a0fe2ec721e765832d9096aff52e436a785baa1e30b9192ae0c4730ef0dc59b8efce5e3b11d5c4a68a74fe5040b54"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x140, 0x15, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5dac, 0x1000, 0x1, 0x9, 0xfffffffe}, 0x7}}]}, {0xf2, 0x6, "3364eaba78bc3d06465876ab428c1d96d4cf3d21be4c19b3852b0c49d2b9ea2a26260a8ef87db8244c64a7d3c4129fb92942960bb443c39e036d5a7dcc219e261a5617380931520497aef6f0af2f26b6459f0afedcd5e53b3b1675ebf85efc0c8cd7f136da63d9d6497fe719fdd760b97db2f8725c8eb2d64711c9b3ef411c724bc60d0e03da9d23980b3a04eccfb6ac09d251567b2716e719095edc244b925d8bf9d6086949693068b40a06ebbfaf06777a150d0892319440cda4b21fb0ca2c48e76512555eb70c2bdec2bdcaaf6ec821cb668e9e36e5b2f21fc01c2e6713252992e289c76fc1448ac7fc646e3c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xa8, 0x9, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xace}]}, {0x64, 0x6, "26ec56cb8791a9b5271f2ccb7e7ccff1e9c273d2d29b56fb5f6d55ad29edadbfa844941c1e10b0f73174b28228ead26c0cc7c10e1220a72140eb37de3aa7cbfb1b37f8f345744edd7e0254dd99aa99721db6b637096efebd7d6b34761b74f345"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0xf0, 0x9, 0x0, 0x0, {{0xd}, {0x4}, {0xbd, 0x6, "73d4de6b6c9303ccaec1161f6c5a82ef4f63fdbd2a6e781ac0b9a4efcce40010e19509b3cbd5ec15e054586d1ccdd47290bbc140990dfd9940b4cd203c0b4947954a16e7480c707f1b813b173232aa4d790fd1925fb8792069e8051a2961da82c5f2066840285b7a8caec91ecc351fdfb9b3628e768538d483b1babaf5936f9fdb69d2c4d5469c2b4f9169a76b941c1eb96e61af18ba097bfe7e474436ba8529f16aa7754f793fd0d960c73b623d2df42ffa7d3e152678e759"}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}]}, {0x23d4, 0x1, [@m_police={0x1e08, 0x8, 0x0, 0x0, {{0xb}, {0x1db4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x40, 0x10000000, 0x80000001, 0x100, 0x0, {0x5, 0x1, 0x800, 0x6, 0x51c, 0x8}, {0xff, 0x0, 0x57e, 0x3, 0x9, 0x4}, 0x4, 0x7, 0x9}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7f}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}], [@TCA_POLICE_RATE={0x404, 0x2, [0xfffffeff, 0xf, 0x1c6, 0xfffffff1, 0x9, 0x7, 0x100, 0x30d8, 0x2229, 0xc60b, 0x2, 0x3ff, 0xffff, 0x5, 0x0, 0x7fffffff, 0x2, 0xffffff09, 0x6, 0x7f, 0x6327a86d, 0x9, 0x9, 0x0, 0x89a6, 0xc, 0x5, 0x10000, 0x3, 0x5, 0x9, 0x7, 0xfffffffe, 0x2, 0xef9, 0xb, 0x5c0, 0x7e0920d8, 0xfff, 0xfffffff9, 0xffffffff, 0x0, 0x8, 0x4dc, 0xffff, 0x101, 0x8, 0xd908, 0x4b, 0xca, 0x5, 0x2000000, 0x8, 0xfffffff9, 0x4000000, 0x4, 0xa, 0x0, 0xf, 0x5, 0x7668, 0x1, 0x6, 0x80000001, 0x1, 0x7ff, 0x6, 0xe, 0x3ff, 0xfffffffe, 0x5, 0x3, 0x6, 0x0, 0x7fff, 0x4f, 0x9, 0x4, 0xe, 0x23, 0x9, 0x8000, 0xe, 0x2, 0x6, 0x6, 0xfffffff8, 0x0, 0xfff, 0x1000, 0x1, 0x6, 0x6, 0x8, 0x4, 0x1000, 0xfff, 0x9, 0x101, 0x5, 0xfffffff8, 0xfffffff9, 0x3, 0x3, 0xd0b0, 0x200, 0x607e, 0x8, 0x0, 0x8, 0x8, 0xc2000000, 0x9, 0x9, 0x80000000, 0x7, 0x9, 0x0, 0x3, 0x2, 0x9, 0x4, 0x4fb5155a, 0x101, 0x7fffffff, 0x3ff, 0x4, 0xffff, 0xffff, 0x1, 0x40, 0x8000, 0xa, 0x5, 0x2, 0x7, 0xfffffffd, 0x9, 0x80000001, 0x5, 0xa3, 0xfffffffe, 0xfffffffd, 0x7f, 0x0, 0x48bb, 0x6068, 0x9, 0x5, 0x1, 0xc538, 0x7, 0x2, 0xffffffff, 0x578, 0x10000, 0xf, 0xc4f4, 0x8, 0x8000, 0x200, 0xdb, 0x7, 0x6, 0x800, 0xffffffff, 0xc9f5, 0x4d7aba16, 0x2473bcb0, 0x6, 0x4288, 0x1acd3dc4, 0x9, 0x9, 0x1000, 0x2, 0x4c, 0x1, 0x0, 0x1, 0xc32f, 0x6, 0x80000000, 0x2, 0x1, 0x2, 0xfffff878, 0x4, 0x0, 0x784f, 0x7ff, 0x1, 0xffffffff, 0x61fe, 0x1, 0x6, 0x5, 0x2, 0x8, 0xd, 0x100, 0x8, 0x10, 0xfa, 0x7, 0x2, 0x64ff7e10, 0xd, 0x80000000, 0x60df, 0x2, 0xb3, 0xa9ff, 0x0, 0x1, 0x1, 0x2, 0x4, 0x0, 0x8, 0x3, 0x5, 0x100, 0x1, 0x8, 0xfffffff9, 0x400, 0x6, 0x9, 0x4, 0x4cf, 0x3, 0x5, 0xfffffffc, 0x6, 0xa2, 0x8000, 0x3, 0x8, 0x4, 0x6, 0x7fff, 0xffffff8a, 0xd, 0x9, 0x9d3, 0xd1, 0xeff, 0xa6, 0x3, 0x5, 0x7, 0xff, 0x7, 0xe3, 0x81]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x9, 0xd, 0x7ff, 0x2, 0x8, 0x0, 0xee17, 0x91, 0x5, 0x7, 0xfffff1e5, 0xb, 0x0, 0x8, 0x6, 0x5, 0x92, 0x58, 0x401, 0xf, 0x88b, 0x8, 0x5f94, 0x2, 0xfffffeff, 0xf, 0x14, 0x18a6, 0x4, 0x401, 0x5, 0x1c000000, 0x4, 0x8, 0xe43, 0x0, 0x80000000, 0x7, 0x6, 0x5, 0x7, 0xf3, 0x401, 0x9, 0xd, 0x4, 0x1, 0x3ff, 0xfff, 0x9, 0x6, 0x6, 0xfffffffa, 0x2, 0x3ff, 0x8, 0x40, 0x8000, 0x1a4e4dc9, 0x7, 0xffffffff, 0xe, 0x80, 0x9126, 0xff, 0x10000, 0x5, 0x5, 0x5, 0x8380, 0x1, 0xf, 0x4, 0x5ecc, 0x0, 0x1, 0x80000001, 0x6da2, 0x24f2b0bc, 0x6, 0x4, 0x10001, 0x1, 0xfffffff9, 0x7, 0x0, 0x40, 0xf62a, 0x8, 0x400, 0x3, 0x739a, 0x8000, 0xffff, 0xac5, 0x2893, 0x10, 0x10000, 0xa5, 0x7a25, 0x16d, 0xdd, 0x8, 0x3, 0xf, 0xff, 0x2, 0x100, 0x1, 0x2, 0x58, 0x2, 0x5, 0xe012, 0xb, 0x2, 0xfffffff9, 0x4, 0x0, 0x3, 0x1, 0x8, 0x7b7, 0x7f, 0x4, 0xfffffff9, 0x2, 0x8001, 0x1, 0xda, 0x3, 0x5, 0x6, 0x8, 0x3, 0x7, 0x1, 0x7, 0x6, 0x1, 0x7, 0x0, 0x6, 0xc000, 0x3, 0x7, 0x1, 0x2000, 0x6, 0x1, 0x1, 0x8, 0x8001, 0x9b2b, 0x3ff, 0x10000, 0xe2, 0x8, 0x7, 0x401, 0x4, 0x3ff, 0x1, 0x1000, 0xe61, 0x1, 0x5, 0x3, 0x4, 0x70, 0xb, 0x7, 0xffffffff, 0xfffffffc, 0x7f, 0x101, 0x7, 0x40, 0x4, 0x6, 0x6, 0x80, 0x4, 0x401, 0x1c0, 0x477, 0x10, 0x3, 0x7, 0x1a3, 0xcc, 0x4, 0x6, 0x6, 0x4, 0x200, 0x100, 0x100, 0x40, 0x3, 0x6, 0x1, 0x62f9, 0x8, 0xffff, 0x1, 0x3, 0xd9b, 0x8001, 0x1, 0x86d8, 0xc, 0x6, 0xfffff800, 0x3, 0x4, 0x9, 0xfffffffa, 0x0, 0x7, 0x2, 0x7, 0x6, 0x6, 0x5, 0x2, 0x1000, 0x8, 0x3, 0x7, 0x1, 0xc90, 0x1, 0x2, 0xaf, 0x2, 0x1ff, 0x4, 0xf, 0x10, 0x0, 0x7, 0x7fffffff, 0x4aa, 0x37, 0x4, 0x6, 0x0, 0x5, 0x0, 0x8, 0x19, 0x7fffffff, 0x4, 0x6]}], [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}], [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x9, 0xffffffff, 0x8, 0x1, 0x4, 0xb6a1, 0x0, 0x7, 0xc, 0x0, 0x4, 0x61, 0x4, 0x1d77131b, 0x16b, 0x7ede, 0xde2c42b, 0xac7, 0x3, 0xfffffff9, 0x3, 0x8, 0x4, 0x3, 0xcb6, 0xb, 0xedb, 0x7, 0xb3c, 0x0, 0x8, 0xf8000000, 0x3, 0x6, 0x0, 0x8, 0x7, 0x1, 0x7ff, 0x1, 0xb, 0x6, 0x1, 0x3, 0x1000, 0x1, 0x100, 0x1, 0x6, 0x6, 0xffff, 0x0, 0x7add, 0xffffffff, 0x9, 0x5, 0x5, 0x9, 0x4, 0xc2, 0xfff, 0x47, 0x8, 0x6, 0x7, 0x7fffffff, 0x8, 0x4, 0x4, 0x4, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x3ff, 0x2, 0x5, 0xc, 0x979, 0x7802, 0x41083960, 0x9, 0x0, 0x1fc, 0x18000, 0x2, 0x8, 0x101, 0x10000, 0x4, 0xffffffff, 0x1, 0x2, 0xf32, 0xa, 0x10, 0x8001, 0x0, 0x1423, 0x1, 0x1, 0x3, 0x401a, 0x8, 0x1, 0xdf84, 0x9, 0xffff, 0x0, 0x60000000, 0x5, 0x400, 0x8, 0x2, 0x5, 0x3, 0x1, 0x8, 0x14d, 0x9, 0xffff8881, 0x1, 0x7f, 0x6, 0x9, 0x6, 0x1ff, 0x1, 0xdfd5, 0x3, 0x6, 0x30, 0x6, 0x1, 0x1, 0x1, 0x0, 0x5, 0x4c, 0xbe, 0x1, 0x8, 0x8, 0x3, 0x800, 0x92d, 0xb, 0x2, 0x7fffffff, 0x0, 0x2, 0x7, 0xf5, 0x2, 0x7, 0x9, 0x8, 0x9, 0x10001, 0xc97, 0x6fb910d7, 0x1, 0x7, 0x221, 0x5, 0x4, 0x5, 0xf, 0x8, 0xa, 0x2, 0x9, 0x5, 0x5, 0xd9, 0x9, 0x9, 0x3, 0x1, 0xfffffffc, 0xe01, 0x8, 0x2, 0x0, 0x5, 0xd, 0x7034, 0x0, 0x0, 0x856c, 0x3, 0xe6b, 0x0, 0x80000000, 0xffff, 0x7, 0x5, 0x5, 0x7, 0x8, 0xfffffffa, 0xc33, 0x8c, 0x9c7, 0xa, 0x10, 0x4, 0x3ff, 0x2, 0x7, 0x7ff, 0x9, 0x1633, 0x9, 0x30b9512a, 0x400, 0xfffffffa, 0x0, 0x8000, 0x5, 0x5, 0x3, 0x6, 0x8, 0x0, 0x3, 0x62d, 0x8, 0x3, 0x4, 0x8, 0x525, 0x28000000, 0x3ff, 0x80000001, 0x6, 0x348, 0x1, 0x9, 0x8, 0x9, 0x251, 0x1, 0xad9, 0x8, 0x0, 0x9, 0x1ff, 0x1, 0xfffff623, 0x4, 0x5, 0x0, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x78c}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x3, 0x6, 0x4, 0xd, {0x7, 0x1, 0x6, 0xe, 0x0, 0x8}, {0x6, 0x0, 0x6, 0x80, 0x101, 0xcf}, 0x9, 0x0, 0x1}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x80000001, 0x710, 0x5, 0xc04ad05, 0x1, 0x9, 0x8001, 0x1, 0x6, 0x4, 0x1, 0xc1d, 0x200, 0x10000, 0x6, 0x2, 0xfffffff7, 0xfffffff7, 0x10001, 0x1, 0x1, 0x17, 0x6, 0xac, 0xb, 0x40, 0x168, 0x40, 0x8, 0x1, 0x8001, 0x8, 0xfffffe00, 0x4, 0x9, 0x1000, 0x100, 0x8, 0x1ff, 0x1, 0x8, 0x8, 0xfffff6d8, 0x6, 0x0, 0xffffffff, 0xbdb, 0x1, 0x7, 0x5, 0x354d33da, 0x1, 0xfffffffa, 0x101, 0x8, 0x6, 0xdd1f, 0x7, 0x40, 0x4, 0x4, 0x80200000, 0x6, 0xfffffffb, 0x100, 0xffff, 0x10001, 0x5, 0x400, 0x5, 0x2, 0x6, 0x0, 0x7fffffff, 0x5, 0x0, 0x0, 0x1, 0x40, 0x7, 0x2, 0x40, 0x6, 0x6, 0x6db9, 0x9, 0x6, 0x3ce3, 0xffffffff, 0x4, 0x6, 0x1, 0x81, 0xf, 0x80000000, 0x9, 0xffffffff, 0x0, 0x7f, 0x6, 0xeb, 0x4, 0x401, 0x1, 0xffffffff, 0x4, 0x21, 0x1, 0x10000, 0x5, 0xfffff838, 0x3, 0x2, 0x10000, 0x7, 0x1, 0x4, 0x0, 0x2, 0x8, 0x3, 0x2, 0xfffffffb, 0x10001, 0x1, 0x7, 0x99e, 0x3, 0x6, 0x4, 0x6, 0x9, 0x8, 0x0, 0x3, 0x100, 0x1, 0xd9c, 0xb, 0x0, 0x9, 0x8, 0xf6, 0x2, 0x8, 0xffffffa5, 0x8, 0xfffffbff, 0x5, 0x5, 0x6, 0x3, 0x0, 0x1, 0x3213, 0x40, 0x6a7, 0x7, 0x100, 0x3, 0x7f33, 0x1, 0xf22, 0x6, 0xd01, 0x3, 0xfffffffb, 0x3ff, 0x9, 0xd, 0x17, 0x5, 0x20000000, 0x2, 0x5, 0x3, 0x3ff, 0x8, 0xb, 0xfffff801, 0x8001, 0x7, 0x0, 0x6, 0x5, 0x80000001, 0x0, 0x80000000, 0x0, 0x0, 0xc8, 0x10f, 0x7, 0x116f481e, 0x254c, 0x7, 0xe, 0xffffb039, 0x80000001, 0x5, 0xbf, 0xfffffffd, 0x3, 0x9, 0x76, 0x2, 0x1, 0x5, 0x7, 0x1, 0x7fff, 0x7, 0x2, 0xe3c6, 0x10, 0x101, 0x0, 0xc0, 0x7, 0x0, 0xffffff59, 0x10001, 0x2, 0x5, 0x4, 0xb2, 0x8, 0x8, 0x7, 0x1, 0xfffffffe, 0x7fffffff, 0x2, 0x1, 0x1, 0x4, 0x3, 0x3ff, 0x3, 0x10001, 0xbb9, 0x6, 0x100, 0x7, 0x9, 0x6, 0x26, 0x9, 0x49ec, 0x4, 0x0, 0xfffffff8, 0xb28, 0xe8, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x43b}, @TCA_POLICE_TBF={0x3c, 0x1, {0x20e5, 0x6, 0x6, 0x167, 0x1e, {0x5, 0x2, 0x4, 0x3, 0x6, 0x62d9}, {0x81, 0x0, 0x2, 0x3777, 0x4, 0x2}, 0x4, 0x1, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x101}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x7, 0x800, 0x1, 0x3, 0x21, 0x1, 0x2, 0x2, 0x9, 0x2, 0xfff, 0x0, 0x2, 0x6, 0xa22, 0x4, 0x6, 0x7, 0x7, 0x6de, 0x2, 0x4, 0x2, 0x0, 0x2, 0x6, 0x2, 0x80000000, 0x101, 0x5, 0x7, 0x4, 0x5, 0xff, 0x8000, 0x800, 0x9, 0xfffffc01, 0x6, 0x3, 0x5, 0xbe4, 0x7fffffff, 0x111, 0x6, 0x25, 0x5, 0x4, 0xd, 0x7, 0x9, 0x7, 0x7f, 0x4, 0xa, 0x40, 0x3, 0x1ff, 0x80, 0x1, 0x3, 0x6, 0x7f, 0xa, 0x2, 0x1, 0xe64, 0xdb, 0x0, 0x3, 0x2, 0x6, 0xf, 0x0, 0x9, 0x6, 0x81, 0x37, 0x7, 0x2, 0x3, 0x80000001, 0x3, 0x8000, 0x0, 0x6, 0xfffffffa, 0x3, 0x5, 0x0, 0xfffffffa, 0xd, 0x3, 0xec6, 0x7a, 0x5823, 0x0, 0x0, 0x4, 0x1, 0x101, 0x5f, 0x604, 0x7e7, 0x2, 0x3, 0x3, 0x3, 0x6, 0x4, 0x4, 0x8, 0xfff, 0xfffff001, 0x82a0, 0xff, 0x9, 0x7fffffff, 0x2, 0x89, 0x2, 0xff, 0xa31b, 0x30fa, 0xffffffff, 0x6d, 0xc00, 0xfff, 0x10000, 0x40, 0xffff1015, 0x5, 0xd, 0x7ff, 0xf, 0xfffffff9, 0x7, 0x1, 0x80000000, 0x3, 0x0, 0x40, 0x4, 0x80000001, 0x1, 0x5, 0xa3, 0x8, 0xe92, 0x3, 0xfffffff1, 0x6, 0xce, 0x7, 0xa9, 0x28560af3, 0x9, 0x62, 0x9, 0x7fffffff, 0x3, 0x5b1, 0xa, 0x7, 0x6, 0x1, 0xfffffff4, 0x46, 0xff, 0xfffffff7, 0x9, 0xfffffffc, 0xffffffff, 0xe2a, 0x80000000, 0x9, 0x0, 0x8, 0x4, 0x8, 0x3, 0xb, 0x100, 0x8, 0x0, 0x5, 0x9, 0x5, 0xfffffd11, 0x0, 0x9c0, 0x6, 0x2, 0x6, 0x0, 0x80, 0x0, 0x7fffffff, 0x5cd3, 0x3bc7, 0x9, 0x1, 0x3, 0xb, 0x4, 0x6, 0x8b8, 0x68ac, 0x0, 0x4, 0x6, 0x401, 0xb, 0x3, 0x1, 0x10, 0x1, 0x101, 0x80000001, 0x6, 0xba, 0x648e, 0x9858, 0x5, 0x3, 0x10, 0x2, 0xc99, 0x101, 0x3, 0xf0, 0x65, 0x7ff, 0x7, 0x7, 0x3, 0x6, 0x2, 0x5, 0x7cd, 0x10, 0x0, 0x2, 0x5, 0x3, 0x80000000, 0x7fff, 0x8, 0xb, 0x2, 0x8, 0x3, 0x40, 0x1, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x401, 0x1, 0x1, 0x9, 0x0, {0x7, 0x1, 0xa5, 0xffff, 0x0, 0x5}, {0x7, 0x0, 0x8, 0x5, 0x1}, 0x6, 0x3, 0xfffffff0}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x451b41cf, 0xd52e, 0x5, 0x2, 0x6, 0x3, 0x239, 0x5, 0xa, 0x5, 0x6, 0xe7f, 0x431, 0x9, 0x3, 0xa, 0x7, 0x2, 0x0, 0xa, 0x4, 0x1000, 0x7fffffff, 0x9, 0x3e, 0x8, 0x40, 0x8, 0x9, 0x9, 0xfff, 0x9, 0x7, 0x5, 0x1, 0x1, 0xe, 0xcb39, 0xfffffffa, 0x3, 0x8001, 0x6, 0x40, 0xe471, 0x2, 0x3, 0x1, 0x40, 0x8001, 0x6, 0x7, 0x7, 0x344, 0x549, 0x5, 0x2, 0x7, 0xe, 0x8, 0x3, 0x8, 0x0, 0x3, 0x8, 0x9, 0x7, 0x8, 0xdde1b4f, 0x9, 0x401, 0x4, 0x1, 0xffff, 0x4, 0x3, 0x6, 0xbdd, 0x7fff, 0x10000, 0x1, 0x6, 0x1, 0x1, 0x1dd, 0x2, 0x1, 0x6, 0x3, 0xd, 0xc6, 0x2, 0xccc, 0xe5f, 0x31, 0x5, 0x9, 0x80, 0x1, 0x0, 0x800, 0x7fff, 0xb25f8a1, 0x7, 0xb, 0x7, 0x6, 0x6, 0x80000001, 0x80000000, 0x1, 0x5, 0x8, 0x9, 0x400, 0x4, 0xb7c, 0xc13, 0x4, 0x7, 0x5, 0x90f2, 0x8, 0x1c00000, 0x2, 0x3, 0x8, 0xfffffffb, 0xcb, 0x6, 0x2, 0xfff, 0x2, 0x0, 0x6, 0x77, 0x7f, 0x4d9f, 0x80000000, 0x8000, 0x2, 0x100, 0x9, 0x6, 0x3, 0x2, 0x6, 0x5, 0x7, 0x4, 0x80, 0x7, 0x9fe1, 0x3, 0x1, 0x4, 0x400, 0x1, 0xfffffffd, 0x100, 0x101, 0x80000001, 0x3, 0x5, 0x27d, 0x2, 0x0, 0xfffffffb, 0xf, 0x9, 0x3e, 0x4, 0x200, 0xcc01, 0xfffffff9, 0xb17, 0x2, 0x3ff, 0x200, 0x0, 0x9, 0xabb, 0xea1c, 0xb, 0x10001, 0x7, 0x2fd0, 0x2, 0x8001, 0x620, 0xfff, 0x80000001, 0x7, 0x4, 0x4, 0xe, 0x7, 0x0, 0xf, 0x0, 0x1, 0xdc86, 0x8001, 0xe13c, 0xfff, 0xe, 0x7, 0x8, 0x2, 0xb, 0x3ffc00, 0x4, 0x200, 0x7, 0x22, 0x2, 0xab, 0x5, 0x8001, 0x7, 0x5a22, 0x4, 0xffffffff, 0x80000001, 0x8, 0xfffffff5, 0x8, 0x5, 0xdc3, 0x8, 0x4, 0x4, 0x2, 0xfffffff8, 0x7, 0xfffffffa, 0x1, 0x9, 0x34, 0x40004, 0x0, 0x100, 0xffffffff, 0xe, 0xfffffffa, 0x7, 0xd, 0xff, 0x4, 0x5, 0x9, 0x2, 0x7, 0x43c7, 0x2, 0x800, 0x3]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x3e64}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x7, 0x9, 0x72, 0x4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x313, 0x5, 0x2, 0x80000001, 0x1000000, 0xfffff062, 0x7, 0x800, 0xde, 0x4, 0x7, 0x2, 0xa8, 0x0, 0x7, 0x4, 0xadea, 0x5, 0x2, 0x400040, 0x5, 0x7, 0xfffffff7, 0x3, 0xffffffff, 0x81, 0x9, 0x1, 0x8, 0x1, 0x9, 0x6, 0x5, 0x5, 0x5aef7165, 0x3, 0x1, 0x6, 0x2, 0x2, 0x5c3, 0x7ff, 0x8, 0x6, 0x7, 0x8, 0x7, 0x7, 0x100, 0x9, 0x4, 0xdb, 0x3, 0x5, 0x9, 0x7, 0xd, 0xc0000, 0x80, 0x0, 0x2, 0x91, 0xe615, 0x5, 0x3, 0x7, 0x9, 0x2, 0x80000000, 0x4, 0xfff, 0x36c, 0x6, 0x7, 0x23, 0x40, 0x90, 0x2, 0x4c97, 0x80000000, 0x10, 0xf, 0x3, 0x2, 0xfffffff8, 0x0, 0xffff9a42, 0xc500, 0xf4, 0x74829fe0, 0x8, 0x2, 0x101, 0x7, 0x3, 0x0, 0x7, 0x7, 0x6, 0x5, 0xc777, 0xe, 0x80000001, 0xa, 0x2, 0x2, 0x7, 0x8, 0x3, 0x10001, 0x0, 0x3, 0x5, 0x1fb, 0x1, 0xb, 0x7, 0x7f, 0x3, 0x2, 0x0, 0xff, 0x7, 0xb4, 0xfffffe01, 0x5, 0x200, 0x4475, 0x9, 0x5, 0x77, 0x7fffffff, 0x1, 0xf, 0x5, 0x7, 0x6, 0x9, 0x4, 0xf, 0x4, 0x200, 0x1, 0x1, 0x9, 0xbf2, 0x7d8, 0x400, 0x7, 0x1, 0x8a9, 0x2, 0x200, 0xb, 0x6, 0xffffff74, 0xffff, 0x7, 0x8, 0x80000000, 0x1, 0x5, 0x4, 0x40, 0x3, 0x80, 0x7, 0xcf, 0x5, 0x2, 0x6, 0x2, 0x4f20, 0x5, 0x8, 0x10, 0x6, 0x0, 0x1, 0x9, 0xe, 0x6, 0x3, 0x3, 0x0, 0x7, 0x9, 0x4, 0x30, 0x7fffffff, 0x1, 0x0, 0x0, 0x3, 0x5, 0x4, 0x10001, 0x73, 0x897, 0x7, 0x10000, 0x7, 0x160, 0xe, 0x6, 0x6, 0xf, 0x4, 0x2331, 0x6, 0x7f5, 0x100, 0x6, 0x7, 0x5, 0x1, 0xffff, 0x0, 0x7fff8000, 0x7049c507, 0x800, 0x3, 0x101, 0xffff0001, 0x8, 0x4, 0xdd, 0x2, 0xfff, 0x4, 0xebc94d4, 0x8, 0x7fff, 0x0, 0x8, 0x9, 0x74, 0x8, 0x4, 0x9, 0x1, 0x1a0000, 0x2, 0x1, 0x6, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}]]}, {0x2c, 0x6, "2a9f41d4b9463dcfe4dff928969d662cb1f34396fc2e3f399a6333944878ef04c7b376ea8bfc69c4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x80, 0x5, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x0, 0x8, 0x3}}}]}, {0x2d, 0x6, "4264874b5d4d6fed728d690b19065bf9c6f835cd6c7ecbc071dd5d2908e41f1779850ff6dcb5a91c61"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_mirred={0xc4, 0x12, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff7, 0x8, 0x20000000, 0x7ff, 0x8001}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x40421011, 0x9, 0x7, 0xfffffff7, 0x76d7}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0xed9, 0x6, 0x4, 0x7}, 0x0, r4}}]}, {0x38, 0x6, "a44d25923a1a318e2898f0e0498922e7ea173f65512aa2b8f4e8e6c3aa81d96a0c9e85ff4b9dd11fb8d67fbd6a5240b39002de39"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_vlan={0x14c, 0x1f, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x2c2}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x80000001, 0xfffffffd, 0x0, 0x6, 0x10001}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x7ad, 0x0, 0x9, 0xfff}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xcd, 0x6, "edfb7197ea5dc4e767d3ddda48ecaadf25f466ac8ac14fa1098c36673b055a6f075f2c867e09e10616aa0af68488d07d01e19684df3ef4b810431131b55de9870016c5cd9419ae3bdeeda65ca251c290211d436924bafb1e5f7ac13f1f2099da07417e07aa4539e832e0e64a0ebc9e323454de3d1d558a467cbe45655fb830a10dbdb1ed8a723cc2b6d53d316efb88fa8f187b01e9341859b797bf222fe7b1d5db62bc5d1e63c3e2d86ddd6bf87bfd321f5c3c6aae48a1156ea641b6a2c556694b70f886752a593ff0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_vlan={0xf4, 0x11, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x3cd}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xe9b, 0x3, 0xffffffffffffffff, 0x7e, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x4, 0x0, 0x10000, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4f, 0x6, "0025e8d54a62abc8b7c2673df1563ab00477dce76466c95fdbd184b100651829996a835950b30a15aa5b57b4cdc8fca4630f80a98c954277396785600fcd6c8c82afc2443f974635c0a18c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_nat={0x144, 0x1a, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x8, 0x2, 0xe0ba, 0x7}, @local, @multicast2, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x1, 0x0, 0x2, 0xffff4a14}, @dev={0xac, 0x14, 0x14, 0x18}, @multicast2, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10001, 0x7584, 0x0, 0x80000000, 0x7}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x6ca0, 0x6, 0x9, 0x9}, @multicast1, @dev={0xac, 0x14, 0x14, 0x27}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x1, 0x20000000, 0x6, 0x858}, @local, @loopback, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x3, 0x6, 0x1ff, 0x9}, @private=0xa010100, @remote, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1000, 0x9, 0x10000000, 0xfff, 0xfff}, @empty, @loopback, 0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ctinfo={0x38, 0x14, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x7}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0xc8, 0x15, 0x0, 0x0, {{0x7}, {0x58, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x69, 0x0, 0x8, 0x7, 0x9}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private0}, @TCA_CT_ACTION={0x6, 0x3, 0x2}, @TCA_CT_ZONE={0x6, 0x4, 0x9}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x16}}, @TCA_CT_ACTION={0x6, 0x3, 0x4}, @TCA_CT_ZONE={0x6, 0x4, 0x1ff}]}, {0x4b, 0x6, "57cae91202cfec7d138c9992f71193fec64f2a2850afb3714899295f448cf4d1fc534dd32989bf813ecdadb53710f1a43dc7d2378c478ae8f0b95558bb7febf03e102052701fb8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0xab4dba36ae446add, 0x1}}}}]}, {0x3cc, 0x1, [@m_csum={0xd4, 0x1e, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x80000000, 0x0, 0x6, 0x101}, 0xa}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x6, 0x5, 0x2, 0x7}, 0x7}}]}, {0x6f, 0x6, "16d705d04c96d0a27b0c68437f731547a8a69f41363aaa5040b0801ae99532ecfc45f218a279302d04cface184124847141823cdc1f46321faeab375a7d5b04bf40879df545272376a4327ed8dd291ab128cf686b09f9facdc2cd1621ed08d10b76cd47f1a90308341a139"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x94, 0x1a, 0x0, 0x0, {{0x9}, {0x4}, {0x68, 0x6, "57d2f23eac7997f86fee9494ce236368db88189b95eda7b7c46578a8e7b4fa45424f637c69dc959ebd27fbb46d573feeffdd75483c6d351fe9b90f0183eff6c520acb20b0c510e05c07dbb7ea904cb6ae77ec9b0e0c55008a6c1d83f2f759349baf2c829"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x14c, 0x3, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x0, 0x5, 0x8001}}}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x5}]}]}, {0xe2, 0x6, "427cde5ef7c6d626e38c2f0baae89eb8a15b0a56e68b07450ae17bf31dad84315f199171c4e109b71c58cfcf7ad15b9b32c39b5fe610a8cde4cc997753160df1101e13990a3fd2b479ef50ac0390d86e4f9dfdce4f6ca7ecb5f02d46b3ae6446f52af73501537132fd6c1f39c96972b4db2216aef4c29525aec22777025b889fc188de8a1829a39ad28069b0553e32392458f039d447657eb83bc719fe4ed55fa13a8d496461e61815842e52797433d6c2c1f782bd39a944fc2b7cdb1b162f095371b9b7ea358ed066518a8644c0822b281fe9c54bf5ce8227c10e7a6f33"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0x6c, 0x13, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '#.\x00'}]}, {0x36, 0x6, "7f0fbeea36ce655418c7584da7640370f496ada3086e6f27ae886c95e26cedf7c715a164e729a8d757af2ae33162852f4d71"}, {0xc}, {0xc, 0x8, {0x3, 0x7}}}}, @m_tunnel_key={0xa8, 0xc, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}]}, {0x70, 0x6, "a2b1dc033cdf367c87558dc45f7eb0d685d1970601ce932fd5686bf8f76e74028f0f48ae057ae6fb841fe29af1d23b6997b08596772829cab5b953cbe61be8123eabdb56847bc9fd048df7c8ea877f9aaa2590f4ac076713e5f9f5cc9748ae93b1c485cb292f8f3883f87243"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}]}, 0x4708}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={'nr', 0x0}, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default]}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c0001800600060008060000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a2}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x48, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xaae}, {0x6, 0x11, 0xfffa}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8c00}, 0x4000000) 2.561802608s ago: executing program 4 (id=951): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r0 = socket$caif_seqpacket(0x25, 0x5, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0xf}, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x83, &(0x7f0000000000)={r3, 0x2}, 0x8) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5}]}, 0x1c}}, 0x0) read(r4, &(0x7f0000000080)=""/141, 0x8d) 2.218642059s ago: executing program 2 (id=955): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10, 0x80800) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000040), 0x8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) shutdown(r1, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}}, [0x10000, 0x38d, 0x1, 0xcf2, 0xd63, 0x8, 0x9e, 0x401, 0x3, 0x0, 0x8000, 0x8000000000000001, 0x9, 0x101, 0x4c]}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000001c0)={0x3be2, 0x207, 0x7, 0x3, r3}, 0x10) r4 = getpid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={r4, 0x0, r5}, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r6, 0x10f, 0x83, &(0x7f0000000300), &(0x7f0000000340)=0x4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000000380)={r3, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}}, [0xfffffffffffffff8, 0xb, 0x1, 0x7, 0xb, 0x2, 0x6, 0x0, 0xfffffffffffffbff, 0xd, 0x1, 0x3, 0x413, 0x5, 0x100]}, &(0x7f0000000480)=0x100) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r9, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000500)={0x3a8, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x1}, @device_b, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xce, 0x33, @mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xb0}, @device_b, @device_a, @initial, {0x0, 0x7f}}, 0x6451, 0x9, {0x0, 0x6, @default_ibss_ssid}, @void, @val={0x2d, 0x1a, {0x2, 0x3, 0x6, 0x0, {0x0, 0x7, 0x0, 0x4, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x8, 0x4, 0x9}}, [{0xdd, 0x88, "7ad8cfcb78d33dab10f1f005cf28fe8ccc27099ab93bcc985e8db99f67b84b0f480d52873f84fcda93c502de95ab03249b7fe309c5cd0b27674abc595e255e86be9a44a11f1bd7d3847d57d3fff6996592ac31663c141a13ec24eb603aa8ce90ca7c76f23f57e1ff3beb1be31d6b6be3598953135c259b575dd9b85476517017ec47f95462697a81"}]}}, @NL80211_ATTR_FRAME={0x28d, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x7a98}, @device_a, @broadcast, @from_mac=@broadcast, {0x1, 0x87e}, "", @void, @value=@ver_80211n={0x0, 0x0, 0x3, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, @random="dc88b74096f61fdba949c4c73e2b3470c3692f71b1017ec906c76eccdebf66d64c3bfd04143e5d80ffb8fd6061b2f5e1917e321669c154da3931ab7c2849ed1c0b64b4ea94122ab26390bf41afd2647188b69d362d2691e2d803efdf07f218226fc34f3b2dbd2fb05a8fb507fe6e2ecc499cced2c23722fa4ca379648ae22151f622245d19867a471e13e3138ac43d2078eee8b72f73e771d0e7e4fc84703b8cfcfc6427e97fabc6abb526e837044feca7ca765afad180ece6ed22b85c19dd4f65f9dc6bc3576d147bb60549db3a089de9152dc252b560913681aa79bce50bccca6d317fd390d4c427e8f4ded8a1b4da835e0053ccbf05bf41a260f3d158042c1b073f7872a5cbd7122a156a7d2d934ee987edfec1595a5955dfde01e2c4a5b46510097f27a576e0f93846a1487581a6147784126f14f9335d5dd1d331ab7011b9fe74125ce3fd299b207dda8fffdb5f72c5f83f999eaaec62126f248f941c006d9fadeae8af787f871a414d88da2980fee47bd1ac6117077017335c757fe50603825bb05e17ef6b390f5cc4eab45cfa21c29bf89ac5976c3723e20b121690652912a82384c7d1752a704e9c4793b948de843ce924c41270c98a4bd2ec5c9fcfd0b08f44662138cba93f4b4816e3d877930719f74396dceb6c4fb6fce241ccb5ce4f5141dd65a1847d96bc53484daf8743bcac8860d2cbbfdf0a065f4abbfb3e2e97ba26ee231cde789519b263e9444b257069a9f2f4f09d00fe08a6cf77bfdbeea9f00263f49656065ed55fd23f3edf1587a0c9d6fa295f1613a5edf58b2a724c08fed3b1f78e73b89cc038ee267b7d75bd0c25e976ff3c081fd8a6becb67b7e82a068f36b979533527daae4f"}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x4000000}, 0x10801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) recvmmsg$unix(r10, &(0x7f0000001d80)=[{{&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/110, 0x6e}, {&(0x7f0000001a80)=""/214, 0xd6}, {&(0x7f0000001b80)=""/53, 0x35}, {&(0x7f0000001bc0)=""/184, 0xb8}], 0x5, &(0x7f0000001d00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x1, 0x40000000, &(0x7f0000001dc0)={0x77359400}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r14, 0x84, 0x1, &(0x7f0000001e00)={r8, 0x5, 0x0, 0xffff, 0x3, 0x9}, &(0x7f0000001e40)=0x14) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001e80)={r16, 0x3ff, 0x7, 0x6}, &(0x7f0000001ec0)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001f00)={r16, @in6={{0xa, 0x4e20, 0x3, @local, 0x7}}, 0x0, 0x5, 0x10, 0x6, 0x1, 0x2, 0xc}, &(0x7f0000001fc0)=0x9c) ioctl$sock_ifreq(r12, 0x8948, &(0x7f0000002000)={'ip_vti0\x00', @ifru_flags=0x4000}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r13, 0x84, 0x76, &(0x7f0000002040)={r3, 0x101}, &(0x7f0000002080)=0x8) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f00000020c0), &(0x7f0000002100)=0x4) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), r2) sendmsg$NL80211_CMD_AUTHENTICATE(r11, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x5c, r17, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_SSID={0x1a, 0x34, @random="a759490263940420dff46450c6f9cf6746246a9e5b4e"}, @NL80211_ATTR_SSID={0x17, 0x34, @random="744aeeaf942e642fcbf37bd43e7708ee5e2873"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2004c801}, 0x4000c00) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r12, 0x84, 0xc, &(0x7f00000022c0)=0x401, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TUNSETNOCSUM(r15, 0x400454c8, 0x1) getsockopt$bt_l2cap_L2CAP_OPTIONS(r12, 0x6, 0x1, &(0x7f0000002300), &(0x7f0000002340)=0xc) 1.5285807s ago: executing program 4 (id=967): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080), 0x4) (async) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r3, 0x0, 0x48004) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r3, 0x0, 0x48004) socket$netlink(0x10, 0x3, 0x10) (async) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r6, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}], 0x20}}], 0x400000000000041, 0x4880) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f000012a000/0x1000)=nil, 0x1000, 0x80000c, 0x28012, r9, 0x80089000) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710425000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0xa0}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) 1.438749157s ago: executing program 3 (id=968): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x48010) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0xb, 0x0}}, 0x10) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vlan1\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 1.435478588s ago: executing program 5 (id=969): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x1, 0x0, 0x0, "d0092d156793d10b"}, 0x10}, 0x1, 0x0, 0x0, 0x4000011}, 0x20004000) read(r1, &(0x7f0000002340)=""/232, 0xe8) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, 0x0) 1.377220225s ago: executing program 0 (id=970): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000140)=0xc) socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xff, 0x2, 0x0, 0x2}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000200)=0x80000001, &(0x7f00000002c0)=0x4) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x0, 0x91, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xaf, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@getqdisc={0x2c, 0x26, 0x4, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x9, 0x8}, {0x0, 0xfff2}, {0x9, 0x6}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008064}, 0x20000080) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000400)={0x2, &(0x7f00000003c0)=[{0x5, 0x9, 0xf2}, {0x6, 0x5, 0x80, 0x7f}]}, 0x10) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@mcast1}, 0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000400), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) r10 = socket$alg(0x26, 0x5, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r12, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x4000054) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x10800) socket(0x2d, 0x2, 0x0) sendfile(r10, r7, 0x0, 0x9) 1.255658307s ago: executing program 2 (id=971): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@ipv4_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_macvtap\x00'}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000002a80)=[{&(0x7f0000000a00)}], 0x1) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000007540), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000007580)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40080) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x75}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, r7, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) accept4$rose(r0, 0x0, 0x0, 0x80000) 1.094593853s ago: executing program 3 (id=972): r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r1, @ANYRES8=r0], 0x38}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) socket(0x2, 0x2, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x14) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$kcm(0x10, 0x400000002, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x7}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000020c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x259fdbfd, {0x0, 0x0, 0x0, r11, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r13, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) (async) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 1.033471427s ago: executing program 0 (id=973): r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="040000000000000008003f006563060008001b", @ANYRES32=r0, @ANYRES64=r1, @ANYBLOB="a7480f127b5f22a633ad399360829a6732d08dd8510e206203da99fdfd585f362e567ad39e7b9c330557f55efd86ecf2cc23e6b8c61c2417111885f4818ad9ca333606a1e48354db611e912b3cd87ddb536b39d9d3c4b474a1905f84f0a9add0cac896af4aa69224b549f45eeac23d212ed246791453387b17b384027ef9b820710b95e5a3131d7c26889d043b94ff", @ANYRES16=r0, @ANYBLOB="1599596f61fdd6d0d3af371018514e39b464b608fd91e9e79d545ebbb057640b29e8e42f043748835d2fc45025fb888976bcae1d713697b40157f1af55440beb54", @ANYRESOCT=r0, @ANYBLOB="1e5f70f8829606ba8a38b0f7417448ba6d554f153855d5077043b5e7e26702b6640de35158a59912cab602475c98a9aa256e16fd83"], 0x30}}, 0x0) (async) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) (async) syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES8], 0x0) (async) recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0xfffffcec, 0x0}, 0x400}], 0x0, 0x40010040, 0x0) 995.87079ms ago: executing program 5 (id=974): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) (async, rerun: 64) r1 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@null, @remote, @netrom, @rose, @bcast, @bcast, @bcast, @rose]}, &(0x7f0000000100)=0x48) (rerun: 64) accept$netrom(r1, &(0x7f0000000140)={{}, [@netrom, @rose, @netrom, @bcast, @netrom, @default, @rose, @netrom]}, &(0x7f00000001c0)=0x48) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000680)="48ca8b98825ad05ecffa939c1c3f3abe962e289527340a9df3ca6a2d07954526dbc1734e9a6e1e26e4fa634d92009ed008cc3a7e5f36b40685bae810134441fdc3d3a30034038c5a", 0x48}, {&(0x7f0000000740)="97d17744aa9566d244b4a6a7bac3043aad7ead0625c7a01517485ca1171e2d8b21659736b5247ad8288fdd48f9bc2cdf7ab29c70255fbab7766e6e0d0d3fa89bad35b4aed5a0965fe952f739534fd4b4af3050df9aa7d23396b9d8f3b227083db9ab8c639c9ee9792923dcfe9d05a323c7984d2e7a6fa33748b6729b3ff9b59edf8f98e8ae7521b231410b752a4b3bdc57b6dc866405f0ca", 0x98}, {&(0x7f0000000280)="d0dc81873ef03a796b2a22ba029070ad1380604c9fc692ef42cff0e4d191", 0x1e}, {&(0x7f0000000540)="6d2657493131db30447fce55af67ac7d10106db6d5cacd06cd9a77b801ded29e208feef1fc", 0x25}], 0x4}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)="722abe089bad444a712571d5db482a97046f64a6e9f378fbfeeec001e410", 0x1e}, {&(0x7f00000008c0)="3c79412e1982c663c230408536db37b8bc008e6bbfec6aa93cba6c477c38e440c1dbcb4e80155f3f9388ec70f454827e62a7a249feff2092ade32b7f3da4bfd132b4ef59b4d4157c24b464dfbd6383b01950d650241163d5fc6b6e90b1d440a017dc84cfec4161d7c33c21eae64d70", 0x6f}, {&(0x7f0000001a40)="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", 0xd3a}], 0x3}}], 0x2, 0x0) 917.65819ms ago: executing program 2 (id=975): r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x66}}, &(0x7f0000000480)='GPL\x00'}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x20000000, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfffffffc}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff81ff0d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) (async) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff81ff0d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) 838.763229ms ago: executing program 5 (id=976): syz_emit_ethernet(0x36, &(0x7f0000000a40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, '\x00\a\x00', 0x0, 0x2b, 0x0, @private1, @mcast2}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r2, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f400088050000080040009801400040002004e206401010100000000000000000600050001000000080003000200000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57ccbf691c9c000080200004000a004e2200000003fe8000000000000000000000000000390600000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c200004000a004e21000000040000000000000000000000000000000106000000080003000100000024000200c0eb6492e880fa711c6278d153fd9392cb2e000000000000000000000000000008000a"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, r2, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x80, 0x8, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x23}, 0x47}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) 836.516148ms ago: executing program 3 (id=977): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1d}, @in=@loopback, 0x4e23, 0x4000, 0x0, 0xc, 0xa, 0x0, 0x10, 0x0, 0x0, 0xee01}, {0x2, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x4, 0x0, 0x1bd}, {0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x4}, 0xffffffc0, 0x0, 0x1, 0x0, 0x2}, {{@in=@multicast2, 0x0, 0x6c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}}, 0xe8) (async, rerun: 64) socket$inet_icmp(0x2, 0x2, 0x1) (rerun: 64) sendmmsg$inet6(r0, &(0x7f00000090c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0xf7ffff7f00000000) 822.583823ms ago: executing program 0 (id=978): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r2, 0x1, {0x1, 0x1, 0x1}, 0x9796ef04c0904618}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', r2, 0x7800, 0x1, 0xfd2, 0xfffffffd, {{0x55, 0x4, 0x0, 0x8, 0x154, 0x64, 0x0, 0x5, 0x2f, 0x0, @multicast1, @multicast1, {[@noop, @cipso={0x86, 0x40, 0x3, [{0x0, 0x4, "c726"}, {0x0, 0xa, "63ec5adcca7aeb94"}, {0x0, 0x7, "15aed26094"}, {0x2, 0xa, "f9774ef368e558c0"}, {0x2, 0x9, "cec2ac6a3f6940"}, {0x2, 0x6, "529c5045"}, {0x2, 0xc, "9875e761cf92a595b290"}]}, @timestamp={0x44, 0x24, 0x20, 0x0, 0x5, [0xf1, 0x1, 0xfffffffb, 0x7, 0x9, 0x9, 0x6, 0xfffffff8]}, @cipso={0x86, 0x3c, 0xffffffffffffffff, [{0x1, 0xb, "4f473e01b06e33ebae"}, {0x6, 0x8, "79de2f708aa1"}, {0x2, 0xd, "ce8ae623db4b0bb0421556"}, {0x5, 0x8, "eb2729be7190"}, {0x1, 0xe, "2f872031ce9a8d2496d3d7be"}]}, @lsrr={0x83, 0x1b, 0x6a, [@loopback, @local, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @timestamp_prespec={0x44, 0x34, 0x58, 0x3, 0x5, [{@local, 0x3}, {@broadcast, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1000}, {@broadcast, 0x4}, {@multicast1, 0x4}, {@empty, 0x8}]}, @timestamp_prespec={0x44, 0x1c, 0xc9, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x32}, 0xfffffffd}]}, @timestamp_addr={0x44, 0x34, 0xc9, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x3a}}, {@rand_addr=0x64010100, 0x4}, {@private=0xa010102, 0x8001}, {@broadcast, 0xd}, {@loopback, 0xfffffe01}, {@multicast1, 0xa}]}]}}}}}) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f00000002c0)) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=ANY=[@ANYBLOB="040100001a000100000000000000000000000000000000000000ffff00000000ac141400"/64, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0200001000004d33c000000fe8000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000088"], 0x104}}, 0x0) r7 = socket(0x23, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x23}, 0x10, &(0x7f0000000100)={0x0, 0x64}, 0x2}, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x28}}], 0x1, 0x4000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)=ANY=[@ANYBLOB='B\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000080000000003e0000100e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200536f757263655f6d61635f69735f2d756c746963617374000500820000000000"], 0x58}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="03009000"}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x39}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x80}}, 0x0) r12 = syz_init_net_socket$ax25(0x3, 0x5, 0xcd) setsockopt$ax25_SO_BINDTODEVICE(r12, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xffffffffffffff67) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000207000000000000001bbf92ed7f8e1ff6559a000000957fda84601cff6718f2be62de29d6cafb6ed4a3f7ee08592800c653f8e831862f889595d2b90c3fa51a77"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 606.83537ms ago: executing program 3 (id=979): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000014c0)={0x40, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3ff, 0x45}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6d2}]]}, 0x40}}, 0x884) 552.593445ms ago: executing program 2 (id=980): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="798609", 0x3}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x18}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) close(0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x48) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000040), &(0x7f00000001c0)='%-5lx \x00'}, 0x20) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x2, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}]}}]}, 0x94}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newroute={0xfffffffffffffff6, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}, [@RTA_OIF={0x8, 0x4, r5}, @RTA_SPORT={0x6}, @RTA_MARK={0x8, 0x10, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x8015}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000400)=""/195, 0x0, 0x51, '\x00', 0x0, @sk_msg}, 0x94) 541.106402ms ago: executing program 5 (id=981): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'veth0_virt_wifi\x00'}}) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x94) 466.515885ms ago: executing program 3 (id=982): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000000000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe88000000000000000000000000000100000000000000000100180004000083"], 0x88}}, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r6, 0x1, {0x1, 0xff, 0x3}, 0xfe}, 0x18) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x2) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r11, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, 0x107}) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001d00)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) 447.696157ms ago: executing program 0 (id=983): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c, 0x800) getsockopt$MRT6(r0, 0x29, 0xd0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) 401.801206ms ago: executing program 5 (id=984): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffffbb, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="00010000", @ANYRES16, @ANYBLOB="c88845e7e05ae52d00009300000008003117"], 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) close(0x3) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xa, &(0x7f0000000380)=@raw=[@alu={0x4, 0x1, 0xc, 0x2, 0xb, 0x2, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x2}, @alu={0x7, 0x0, 0x7, 0xb, 0x9, 0x50}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x8}, @map_fd={0x18, 0x2, 0x1, 0x0, r3}], &(0x7f00000002c0)='GPL\x00', 0x200, 0xb, &(0x7f0000000400)=""/11, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x10, 0x8, 0x7bd4}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[r4, r3, r3, r3, r3, r3], &(0x7f0000000500)=[{0x4, 0x3, 0xf, 0x9021a7135ba71e5f}, {0x2, 0x3, 0x1, 0xc}, {0x2, 0x2, 0xd, 0x8}], 0x10, 0x8}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x1}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000500)={0x3c, r8, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0x20000000) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x17, 0x301, 0x1, 0x4, {0xb}}, 0x14}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 278.644122ms ago: executing program 0 (id=985): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002500)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="c000b2000a0002000000000000000000060005002e5f"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40800) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000180)}, 0x20) (async) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x5, [@volatile={0x8}, @struct={0x5, 0x8, 0x0, 0x4, 0x0, 0x4, [{0x7, 0x2, 0x5}, {0x10, 0x1, 0x10001}, {0xf, 0x5, 0x2}, {0xb, 0x5, 0xffffc5e2}, {0x7, 0x4, 0xa4}, {0xd, 0x1, 0x8000}, {0x6, 0x5, 0xa1f9}, {0xa, 0x0, 0x6}]}, @const={0xd, 0x0, 0x0, 0xa, 0x3}, @func={0x91fa0000, 0x0, 0x0, 0xc, 0x3}, @func={0xf, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x5f, 0x5f, 0x2e]}}, &(0x7f0000000400)=""/4096, 0xb9, 0x1000, 0x1, 0x400, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x21, 0x401, 0x80000001, 0x5, 0x8080, r5, 0x6, '\x00', 0x0, r6, 0x1, 0x3, 0x1, 0x0, @value=r7}, 0x50) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="180000001500010029bd7000fedbdf252d"], 0x18}}, 0x20000000) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000202010800000000000000000a0000004400028006000340000000000c0002d905000100000000002c00018014000300fe88000000000000000000001a000001090004"], 0x58}}, 0x0) 278.216041ms ago: executing program 2 (id=986): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000300850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0xf, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000500000000000000050008000d000000", 0x24) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'tunl0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x7, 0x0, 0x6, 0x8000, {{0x15, 0x4, 0x2, 0x3b, 0x54, 0x64, 0x0, 0xdf, 0x29, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x18, 0x15, 0x0, 0x1, [0x1ff, 0x0, 0x79, 0xfffffffb, 0x2]}, @rr={0x7, 0x13, 0xba, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x38}, @dev={0xac, 0x14, 0x14, 0xd}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0x6d, [@local, @multicast2]}, @generic={0x94, 0x3, "84"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6_vti0\x00', r4, 0x2f, 0xf, 0x8, 0x9, 0x14, @ipv4={'\x00', '\xff\xff', @loopback}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x8000, 0x3, 0x3}}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000001000000000000090000000800010001000000050008000b000000050008000900000005000700"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0xc004) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r7, 0x704, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xfffffffa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x4000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4008080}, 0xc000) 272.238571ms ago: executing program 5 (id=987): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000c001000000000000000000000a2000080610000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x5d, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$alg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xe}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x4000041}, 0x44000) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c0000000000950000002a09ae2c732cc94a1ba1bf9265f78c4ebad61a1e8aeb6f89735ebef84ef8f90930cf9a45e778985a3e452524e7c054908ae045bbc8ff578221e8434828a0eab5f8ca2ebfa4c16f2bf636a9d3d70884892efe8ea3b112dac047d64107c56bdd1e29440252ffd0b1fdccf809c34139da02737a6865d3b220"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc0, &(0x7f00000003c0)=""/207, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) 174.602841ms ago: executing program 3 (id=988): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="9c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000004c0003800c15010000000000010000000c00010065000000000000000c00010003000000000000000c00010005000000000000000c00010000000000000000000c000100000000000000000004000480080005"], 0x9c}, 0x1, 0xba01}, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x10}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8}]]}}}]}, 0x38}, 0x1, 0x7500}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x18, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x50}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x20, 0x3fa, 0x8, 0x70bd2b, 0x25dfdbfc, {0x1, 0x20b5e4b7f32d35e6, 0x0, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x4015}, 0x20000080) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000) 62.551887ms ago: executing program 0 (id=989): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000000)={r7}, &(0x7f0000000040)=0x8) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x28, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xfffffff7, 0x54}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40400c0}, 0x840) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8044}, 0x80) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f00000001c0)=[{0x20, 0x0, 0x3f, 0xfffff004}, {0x16, 0x0, 0x6, 0xfffffffe}]}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES64=0x0, @ANYRES8=r2, @ANYRES8=r2], 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x0) 0s ago: executing program 2 (id=990): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xf100}, @jmp={0x5, 0x0, 0x9, 0x0, 0x4}], &(0x7f0000000000)='syzkaller\x00'}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.209' (ED25519) to the list of known hosts. [ 67.215087][ T5827] cgroup: Unknown subsys name 'net' [ 67.386859][ T5827] cgroup: Unknown subsys name 'cpuset' [ 67.395638][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.793076][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.302784][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.311801][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.320841][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.320841][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.321632][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.342489][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.343134][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.354649][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.362204][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.372135][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.372161][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.379972][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.393540][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.404513][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.407052][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.411820][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.420030][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.426572][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.433852][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.441082][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.447811][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.456842][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.462111][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.469597][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.485497][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.503207][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.516685][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.068693][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 72.233253][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 72.314750][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 72.346198][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 72.389907][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.397615][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.405734][ T5838] bridge_slave_0: entered allmulticast mode [ 72.413467][ T5838] bridge_slave_0: entered promiscuous mode [ 72.471606][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.478845][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.486862][ T5838] bridge_slave_1: entered allmulticast mode [ 72.493966][ T5838] bridge_slave_1: entered promiscuous mode [ 72.564969][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 72.598896][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.683080][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.698592][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.706106][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.713214][ T5849] bridge_slave_0: entered allmulticast mode [ 72.720599][ T5849] bridge_slave_0: entered promiscuous mode [ 72.741090][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.748254][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.755690][ T5840] bridge_slave_0: entered allmulticast mode [ 72.762627][ T5840] bridge_slave_0: entered promiscuous mode [ 72.804883][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.812055][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.819329][ T5849] bridge_slave_1: entered allmulticast mode [ 72.827182][ T5849] bridge_slave_1: entered promiscuous mode [ 72.833931][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.841085][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.848303][ T5853] bridge_slave_0: entered allmulticast mode [ 72.856111][ T5853] bridge_slave_0: entered promiscuous mode [ 72.863055][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.870359][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.877721][ T5840] bridge_slave_1: entered allmulticast mode [ 72.886358][ T5840] bridge_slave_1: entered promiscuous mode [ 72.894539][ T5838] team0: Port device team_slave_0 added [ 72.921356][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.928832][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.936278][ T5853] bridge_slave_1: entered allmulticast mode [ 72.943185][ T5853] bridge_slave_1: entered promiscuous mode [ 72.968565][ T5838] team0: Port device team_slave_1 added [ 73.056863][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.069518][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.081021][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.093337][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.140323][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.152162][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.178399][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.185694][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.212403][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.225957][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.232909][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.259187][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.270343][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.280475][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.287863][ T5837] bridge_slave_0: entered allmulticast mode [ 73.294966][ T5837] bridge_slave_0: entered promiscuous mode [ 73.356312][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.363490][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.371849][ T5837] bridge_slave_1: entered allmulticast mode [ 73.379276][ T5837] bridge_slave_1: entered promiscuous mode [ 73.401665][ T5849] team0: Port device team_slave_0 added [ 73.409317][ T5853] team0: Port device team_slave_0 added [ 73.417114][ T5840] team0: Port device team_slave_0 added [ 73.425467][ T5853] team0: Port device team_slave_1 added [ 73.444915][ T5849] team0: Port device team_slave_1 added [ 73.453354][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.464917][ T5840] team0: Port device team_slave_1 added [ 73.510293][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.520079][ T5855] Bluetooth: hci2: command tx timeout [ 73.524054][ T5855] Bluetooth: hci0: command tx timeout [ 73.526214][ T5844] Bluetooth: hci3: command tx timeout [ 73.531423][ T5158] Bluetooth: hci1: command tx timeout [ 73.578049][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.585095][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.612040][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.622822][ T5158] Bluetooth: hci4: command tx timeout [ 73.628671][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.635631][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.661554][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.730280][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.737390][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.763607][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.776875][ T5837] team0: Port device team_slave_0 added [ 73.783304][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.790325][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.816362][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.833282][ T5838] hsr_slave_0: entered promiscuous mode [ 73.839936][ T5838] hsr_slave_1: entered promiscuous mode [ 73.862295][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.869318][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.895776][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.915713][ T5837] team0: Port device team_slave_1 added [ 73.922200][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.929444][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.955357][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.006934][ T5853] hsr_slave_0: entered promiscuous mode [ 74.013273][ T5853] hsr_slave_1: entered promiscuous mode [ 74.020396][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 74.026245][ T5853] Cannot create hsr debugfs directory [ 74.106677][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.113841][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.139761][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.152985][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.160676][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.186876][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.239995][ T5849] hsr_slave_0: entered promiscuous mode [ 74.247069][ T5849] hsr_slave_1: entered promiscuous mode [ 74.253033][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 74.258849][ T5849] Cannot create hsr debugfs directory [ 74.302170][ T5840] hsr_slave_0: entered promiscuous mode [ 74.308811][ T5840] hsr_slave_1: entered promiscuous mode [ 74.318709][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 74.325035][ T5840] Cannot create hsr debugfs directory [ 74.464150][ T5837] hsr_slave_0: entered promiscuous mode [ 74.470675][ T5837] hsr_slave_1: entered promiscuous mode [ 74.477647][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 74.483363][ T5837] Cannot create hsr debugfs directory [ 74.831857][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.862534][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.875259][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.886864][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.975372][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.986589][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.997629][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.017072][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.116564][ T5849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.129370][ T5849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.147476][ T5849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.159236][ T5849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.249449][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.271322][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.302289][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.313343][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.387897][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.414229][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.446760][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.459072][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.470843][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.494707][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.531569][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.538960][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.549855][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.556960][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.577701][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.594523][ T5158] Bluetooth: hci3: command tx timeout [ 75.599068][ T5855] Bluetooth: hci1: command tx timeout [ 75.600119][ T5850] Bluetooth: hci2: command tx timeout [ 75.610967][ T5844] Bluetooth: hci0: command tx timeout [ 75.654571][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.674656][ T5844] Bluetooth: hci4: command tx timeout [ 75.724727][ T800] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.731881][ T800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.769864][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.815009][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.822193][ T3507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.880639][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.902758][ T3507] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.909979][ T3507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.955529][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.962719][ T3507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.985551][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.029274][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.120168][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.138975][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.172593][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.192228][ T3507] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.199398][ T3507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.226331][ T3507] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.233475][ T3507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.249230][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.256403][ T3507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.291639][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.298840][ T3507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.426344][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.498703][ T5838] veth0_vlan: entered promiscuous mode [ 76.569152][ T5838] veth1_vlan: entered promiscuous mode [ 76.605577][ T5853] veth0_vlan: entered promiscuous mode [ 76.649353][ T5853] veth1_vlan: entered promiscuous mode [ 76.717307][ T5838] veth0_macvtap: entered promiscuous mode [ 76.762548][ T5838] veth1_macvtap: entered promiscuous mode [ 76.808368][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.822113][ T5853] veth0_macvtap: entered promiscuous mode [ 76.843387][ T5853] veth1_macvtap: entered promiscuous mode [ 76.870800][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.928597][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.972429][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.997837][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.032002][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.064528][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.079890][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.110231][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.146517][ T4267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.188170][ T4267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.200776][ T4267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.212931][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.236128][ T4267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.306780][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.330794][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.368260][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.461159][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.473093][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.491919][ T5840] veth0_vlan: entered promiscuous mode [ 77.538969][ T5849] veth0_vlan: entered promiscuous mode [ 77.562365][ T5837] veth0_vlan: entered promiscuous mode [ 77.592030][ T5849] veth1_vlan: entered promiscuous mode [ 77.604525][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.612350][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.615686][ T5840] veth1_vlan: entered promiscuous mode [ 77.631385][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.639354][ T5837] veth1_vlan: entered promiscuous mode [ 77.678259][ T5844] Bluetooth: hci3: command tx timeout [ 77.684614][ T5844] Bluetooth: hci1: command tx timeout [ 77.685757][ T5158] Bluetooth: hci2: command tx timeout [ 77.699931][ T5850] Bluetooth: hci0: command tx timeout [ 77.747418][ T5849] veth0_macvtap: entered promiscuous mode [ 77.755338][ T5850] Bluetooth: hci4: command tx timeout [ 77.803196][ T5840] veth0_macvtap: entered promiscuous mode [ 77.817296][ T5840] veth1_macvtap: entered promiscuous mode [ 77.831976][ T5849] veth1_macvtap: entered promiscuous mode [ 77.840658][ T3507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.864174][ T3507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.939409][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.983512][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.009598][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.062336][ T5837] veth0_macvtap: entered promiscuous mode [ 78.082155][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.131298][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.146470][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.157201][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.181796][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.191674][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.209595][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.220403][ T5837] veth1_macvtap: entered promiscuous mode [ 78.310296][ T5964] bond0: (slave bond_slave_1): Releasing backup interface [ 78.321473][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.332074][ T5962] batman_adv: batadv0: Adding interface: dummy0 [ 78.339316][ T5962] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.365203][ T5962] batman_adv: batadv0: Interface activated: dummy0 [ 78.393346][ T5961] batadv0: mtu less than device minimum [ 78.400626][ T5961] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.412089][ T5961] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.423300][ T5961] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.434679][ T5961] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.446595][ T5961] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.457935][ T5961] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.469101][ T5961] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.480887][ T5961] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.492724][ T5961] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.530271][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.667435][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.686665][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'. [ 78.731768][ T5972] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9'. [ 78.741874][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.746405][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.768320][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.793101][ T4267] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.819764][ T4267] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.861221][ T4267] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.870176][ T4267] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.931052][ T5976] netlink: 'syz.2.8': attribute type 1 has an invalid length. [ 78.932585][ T3507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.948672][ T3507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.973306][ T5976] netlink: 244 bytes leftover after parsing attributes in process `syz.2.8'. [ 79.115292][ T3507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.138134][ T3507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.191920][ T800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.211383][ T800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.328533][ T4267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.343044][ T5989] bridge_slave_0: left allmulticast mode [ 79.374525][ T4267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.387104][ T5989] bridge_slave_0: left promiscuous mode [ 79.406765][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.438070][ T5989] bridge_slave_1: left allmulticast mode [ 79.455182][ T5989] bridge_slave_1: left promiscuous mode [ 79.461303][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.480994][ T5989] bond0: (slave bond_slave_0): Releasing backup interface [ 79.509004][ T5989] team0: Port device team_slave_0 removed [ 79.543366][ T5989] team0: Port device team_slave_1 removed [ 79.561853][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.571726][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.602740][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.611588][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.712825][ T6008] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.755074][ T5850] Bluetooth: hci1: command tx timeout [ 79.760518][ T5850] Bluetooth: hci3: command tx timeout [ 79.766656][ T5158] Bluetooth: hci0: command tx timeout [ 79.772070][ T5158] Bluetooth: hci2: command tx timeout [ 79.833558][ T3507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.844513][ T5844] Bluetooth: hci4: command tx timeout [ 79.930774][ T3507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.031469][ T6015] tipc: Started in network mode [ 80.049947][ T6015] tipc: Node identity 264e5914e3ad, cluster identity 4711 [ 80.089987][ T6015] tipc: Enabled bearer , priority 0 [ 80.231246][ T6025] tipc: Resetting bearer [ 80.281612][ T6015] syzkaller0: entered promiscuous mode [ 80.315092][ T6015] syzkaller0: entered allmulticast mode [ 80.360070][ T6014] tipc: Resetting bearer [ 80.506933][ T6014] tipc: Disabling bearer [ 80.548174][ T6028] netlink: 'syz.0.19': attribute type 4 has an invalid length. [ 80.875506][ T6040] Zero length message leads to an empty skb [ 80.937349][ T6052] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.033504][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'. [ 81.259133][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28'. [ 81.318258][ T6067] netlink: 'syz.2.28': attribute type 1 has an invalid length. [ 81.366834][ T6067] netlink: 'syz.2.28': attribute type 2 has an invalid length. [ 81.453266][ T6076] team0: Device wireguard0 is of different type [ 81.513634][ T6080] team_slave_0: entered promiscuous mode [ 81.519455][ T6080] team_slave_1: entered promiscuous mode [ 81.543980][ T6085] syz.0.30 uses obsolete (PF_INET,SOCK_PACKET) [ 81.560553][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32'. [ 81.599668][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32'. [ 81.645544][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 81.841138][ T6094] ieee802154 phy0 wpan0: encryption failed: -22 [ 81.888321][ T6093] tipc: Started in network mode [ 81.904982][ T6093] tipc: Node identity c261e4244553, cluster identity 4711 [ 81.912681][ T6093] tipc: Enabled bearer , priority 0 [ 81.959060][ T6097] syzkaller0: entered promiscuous mode [ 81.981853][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'. [ 81.987175][ T6097] syzkaller0: entered allmulticast mode [ 82.178685][ T6097] tipc: Resetting bearer [ 82.355375][ T6097] tipc: Disabling bearer [ 82.408850][ T6119] netlink: 96 bytes leftover after parsing attributes in process `syz.0.41'. [ 84.112922][ T6203] __nla_validate_parse: 3 callbacks suppressed [ 84.112939][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.58'. [ 84.265872][ T6205] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.60'. [ 84.569873][ T6229] netlink: 192 bytes leftover after parsing attributes in process `syz.4.65'. [ 84.601752][ T6230] netlink: 20 bytes leftover after parsing attributes in process `syz.2.67'. [ 84.859747][ T6243] netlink: 48 bytes leftover after parsing attributes in process `syz.2.71'. [ 85.102566][ T6250] netlink: 'syz.2.73': attribute type 11 has an invalid length. [ 85.154314][ T6250] netlink: 'syz.2.73': attribute type 11 has an invalid length. [ 85.161974][ T6250] netlink: 224 bytes leftover after parsing attributes in process `syz.2.73'. [ 85.271275][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.74'. [ 85.832702][ T6260] infiniband syz0: set down [ 85.837575][ T6260] infiniband syz0: added ipvlan1 [ 85.891086][ T6260] RDS/IB: syz0: added [ 85.896659][ T6260] smc: adding ib device syz0 with port count 1 [ 85.906373][ T6260] smc: ib device syz0 port 1 has pnetid [ 86.436350][ T6279] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 86.445225][ T6280] netlink: 232 bytes leftover after parsing attributes in process `syz.4.80'. [ 86.713076][ T6293] netlink: 'syz.3.82': attribute type 1 has an invalid length. [ 86.739278][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.83'. [ 86.751409][ T6295] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.791280][ T6293] netlink: 224 bytes leftover after parsing attributes in process `syz.3.82'. [ 86.801481][ T1069] cfg80211: failed to load regulatory.db [ 86.840275][ T6295] bridge_slave_1 (unregistering): left allmulticast mode [ 86.845821][ T6293] nbd: couldn't find device at index 767250433 [ 86.861245][ T6299] netlink: 'syz.4.84': attribute type 1 has an invalid length. [ 86.869687][ T6295] bridge_slave_1 (unregistering): left promiscuous mode [ 86.884151][ T6295] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.707988][ T6332] netlink: 'syz.0.93': attribute type 1 has an invalid length. [ 87.915738][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 87.954568][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 87.962424][ T1069] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 88.229359][ T6357] TCP: TCP_TX_DELAY enabled [ 88.364430][ T5912] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 88.607610][ T6372] syzkaller0: entered promiscuous mode [ 88.613172][ T6372] syzkaller0: entered allmulticast mode [ 88.715391][ T5912] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 89.389156][ T6384] __nla_validate_parse: 6 callbacks suppressed [ 89.389175][ T6384] netlink: 324 bytes leftover after parsing attributes in process `syz.0.108'. [ 89.629205][ T6384] tc_dump_action: action bad kind [ 89.728340][ T6391] netlink: 16 bytes leftover after parsing attributes in process `syz.4.109'. [ 89.760265][ T6391] net_ratelimit: 11 callbacks suppressed [ 89.760282][ T6391] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 90.240009][ T6407] netlink: 'syz.3.115': attribute type 3 has an invalid length. [ 90.253895][ T6407] netlink: 194088 bytes leftover after parsing attributes in process `syz.3.115'. [ 90.533118][ T6427] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.120'. [ 90.673392][ T6436] netlink: 24 bytes leftover after parsing attributes in process `syz.3.123'. [ 90.953937][ T6451] warning: `syz.2.127' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.992037][ T6451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.127'. [ 91.049102][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.129'. [ 91.067937][ T6451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.076556][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.129'. [ 91.127274][ T6446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.134711][ T6446] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 91.152298][ T6446] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 91.242819][ T6462] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.255867][ T6467] netlink: 68 bytes leftover after parsing attributes in process `syz.0.133'. [ 91.505062][ T6465] team0 (unregistering): Port device team_slave_0 removed [ 91.520266][ T6465] team0 (unregistering): Port device team_slave_1 removed [ 91.590974][ T6484] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.138'. [ 91.600628][ T6484] netlink: zone id is out of range [ 91.607893][ T6484] netlink: get zone limit has 8 unknown bytes [ 91.618563][ T6473] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.810045][ T6497] IPVS: set_ctl: invalid protocol: 94 100.1.1.0:20004 [ 91.821449][ T6499] veth0: entered promiscuous mode [ 91.829409][ T6499] IPVS: set_ctl: invalid protocol: 92 10.1.1.1:20004 [ 91.846852][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 91.876792][ T6498] veth0: left promiscuous mode [ 92.043286][ T6512] syzkaller0: entered promiscuous mode [ 92.049745][ T6512] syzkaller0: entered allmulticast mode [ 92.357430][ T6526] geneve2: entered promiscuous mode [ 92.362701][ T6526] geneve2: entered allmulticast mode [ 92.754753][ T6528] netlink: 'syz.2.152': attribute type 1 has an invalid length. [ 93.058590][ T6539] syzkaller0: entered promiscuous mode [ 93.066012][ T6539] syzkaller0: entered allmulticast mode [ 94.513161][ T6572] __nla_validate_parse: 6 callbacks suppressed [ 94.513178][ T6572] netlink: 60 bytes leftover after parsing attributes in process `syz.3.166'. [ 94.869857][ T6594] netlink: 'syz.0.172': attribute type 1 has an invalid length. [ 94.898045][ T6594] netlink: 'syz.0.172': attribute type 3 has an invalid length. [ 94.911293][ T6594] netlink: 224 bytes leftover after parsing attributes in process `syz.0.172'. [ 94.959027][ T6590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.174'. [ 95.054794][ T6594] tipc: Started in network mode [ 95.062512][ T6594] tipc: Node identity 06e650de5acb, cluster identity 4711 [ 95.080128][ T6594] tipc: Enabled bearer , priority 0 [ 95.094834][ T6594] syzkaller0: entered promiscuous mode [ 95.109509][ T6594] syzkaller0: entered allmulticast mode [ 95.144705][ T6588] tipc: Resetting bearer [ 95.175070][ T6588] tipc: Disabling bearer [ 95.215057][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.179'. [ 96.763235][ T6681] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 96.848139][ T5158] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 96.864756][ T5158] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 96.872470][ T5158] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 96.880744][ T5158] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 96.889023][ T5158] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 97.347521][ T6706] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 97.865287][ T6722] syz.4.216 (6722) used greatest stack depth: 17864 bytes left [ 97.946042][ T6733] netlink: 20 bytes leftover after parsing attributes in process `syz.3.218'. [ 97.966722][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.218'. [ 98.162940][ T6743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.221'. [ 98.185122][ T6733] veth3: entered allmulticast mode [ 98.691592][ T6773] syzkaller0: entered promiscuous mode [ 98.714259][ T6773] syzkaller0: entered allmulticast mode [ 98.792824][ T6685] chnl_net:caif_netlink_parms(): no params data found [ 98.953941][ T5158] Bluetooth: hci5: command tx timeout [ 99.127053][ T6792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.233'. [ 99.182662][ T6795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.244857][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.234'. [ 99.343223][ T6799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.417707][ T6802] netlink: 146840 bytes leftover after parsing attributes in process `syz.4.236'. [ 99.498668][ T6795] hsr_slave_0 (unregistering): left promiscuous mode [ 99.513950][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 99.540280][ T6685] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.552044][ T6685] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.566729][ T6685] bridge_slave_0: entered allmulticast mode [ 99.576651][ T6685] bridge_slave_0: entered promiscuous mode [ 99.603870][ T6805] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.612010][ T6805] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.629393][ T6805] bridge0: entered allmulticast mode [ 99.690248][ T6685] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.722381][ T6685] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.743109][ T6685] bridge_slave_1: entered allmulticast mode [ 99.754559][ T6685] bridge_slave_1: entered promiscuous mode [ 99.992491][ T6685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.030368][ T6685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.368715][ T6685] team0: Port device team_slave_0 added [ 100.403957][ T6685] team0: Port device team_slave_1 added [ 100.502415][ T6685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.516145][ T6685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.619860][ T6685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.662726][ T6685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.673702][ T6685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.742232][ T6685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.903052][ T6685] hsr_slave_0: entered promiscuous mode [ 100.912872][ T6685] hsr_slave_1: entered promiscuous mode [ 100.920011][ T6685] debugfs: 'hsr0' already exists in 'hsr' [ 100.927534][ T6685] Cannot create hsr debugfs directory [ 101.034045][ T5158] Bluetooth: hci5: command tx timeout [ 101.468600][ T6899] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 101.675677][ T6685] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 101.746891][ T6685] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 101.802426][ T6685] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 101.933506][ T6685] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 102.185009][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.260'. [ 102.325581][ T6685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.403699][ T30] audit: type=1800 audit(1753938002.739:2): pid=6944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.258" name="memory.events" dev="tmpfs" ino=341 res=0 errno=0 [ 102.450100][ T6685] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.513037][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.520306][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.599941][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.607149][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.760111][ T6969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.775371][ T6969] batadv_slave_0: entered promiscuous mode [ 103.043313][ T6975] sctp: [Deprecated]: syz.3.266 (pid 6975) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.043313][ T6975] Use struct sctp_sack_info instead [ 103.113958][ T5158] Bluetooth: hci5: command tx timeout [ 103.855590][ T6685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.204342][ T7044] openvswitch: netlink: Multiple metadata blocks provided [ 104.611475][ T7063] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 104.687974][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.285'. [ 104.835573][ T6685] veth0_vlan: entered promiscuous mode [ 104.864888][ T7073] netlink: 'syz.0.288': attribute type 1 has an invalid length. [ 104.892578][ T6685] veth1_vlan: entered promiscuous mode [ 104.938210][ T7079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.288'. [ 104.992238][ T7079] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.075436][ T6685] veth0_macvtap: entered promiscuous mode [ 105.098457][ T6685] veth1_macvtap: entered promiscuous mode [ 105.164647][ T6685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.194776][ T5158] Bluetooth: hci5: command tx timeout [ 105.207678][ T6685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.310438][ T3494] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.353025][ T3494] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.472888][ T3494] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.504446][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.591454][ T7104] dvmrp0: entered allmulticast mode [ 105.619057][ T7101] netlink: 80 bytes leftover after parsing attributes in process `syz.2.293'. [ 105.639860][ T7104] trusted_key: syz.3.295 sent an empty control message without MSG_MORE. [ 105.735149][ T800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.742992][ T800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.888186][ T3494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.918894][ T3494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.283112][ T7132] netlink: 20 bytes leftover after parsing attributes in process `syz.5.190'. [ 106.298088][ T7136] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 106.755712][ T7153] netlink: 'syz.0.305': attribute type 3 has an invalid length. [ 106.772458][ T7161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.306'. [ 106.941329][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'. [ 106.971146][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.306'. [ 107.262247][ T7176] netlink: 64 bytes leftover after parsing attributes in process `syz.5.309'. [ 107.366074][ T7176] netlink: 64 bytes leftover after parsing attributes in process `syz.5.309'. [ 107.397649][ T7170] netlink: 'syz.5.309': attribute type 13 has an invalid length. [ 107.429399][ T7170] lo: entered promiscuous mode [ 107.482282][ T7170] lo: entered allmulticast mode [ 107.564617][ T7185] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 107.609918][ T7170] tunl0: entered promiscuous mode [ 107.643683][ T7170] tunl0: entered allmulticast mode [ 107.673468][ T7170] gre0: entered promiscuous mode [ 107.692402][ T7170] gre0: entered allmulticast mode [ 107.762076][ T7170] gretap0: entered promiscuous mode [ 107.767678][ T7170] gretap0: entered allmulticast mode [ 107.803372][ T7170] gretap0: refused to change device tx_queue_len [ 107.843572][ T7170] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 108.004107][ T7202] netlink: 'syz.4.317': attribute type 1 has an invalid length. [ 108.354984][ T7224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'. [ 108.569432][ T7227] netlink: 92 bytes leftover after parsing attributes in process `syz.3.325'. [ 108.604014][ T7227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.325'. [ 108.690659][ T7234] netlink: 84 bytes leftover after parsing attributes in process `syz.2.327'. [ 108.836137][ T7252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.843745][ T7252] IPv6: NLM_F_CREATE should be set when creating new route [ 108.851007][ T7252] IPv6: NLM_F_CREATE should be set when creating new route [ 108.899387][ T7252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 109.315071][ T7280] tunl0: Master is either lo or non-ether device [ 109.574874][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.344'. [ 109.619794][ T7291] sctp: [Deprecated]: syz.2.344 (pid 7291) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.619794][ T7291] Use struct sctp_sack_info instead [ 110.105474][ T7321] bridge1: entered allmulticast mode [ 110.117164][ T7321] tipc: Enabled bearer , priority 0 [ 110.127589][ T7322] netlink: 28 bytes leftover after parsing attributes in process `syz.5.352'. [ 110.128887][ T7321] syzkaller0: entered promiscuous mode [ 110.146239][ T7321] syzkaller0: entered allmulticast mode [ 110.158774][ T7324] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 110.162079][ T7322] netlink: 28 bytes leftover after parsing attributes in process `syz.5.352'. [ 110.233275][ T7325] tipc: Resetting bearer [ 110.320962][ T7318] tipc: Resetting bearer [ 110.357814][ T7318] tipc: Disabling bearer [ 110.459908][ T30] audit: type=1800 audit(1753938010.809:3): pid=7333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.356" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=470 res=0 errno=0 [ 110.632338][ T7341] netlink: 'syz.3.358': attribute type 1 has an invalid length. [ 110.644333][ T7341] netlink: 'syz.3.358': attribute type 2 has an invalid length. [ 110.671177][ T59] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 110.755151][ T7353] netlink: 'syz.3.358': attribute type 1 has an invalid length. [ 110.794355][ T7353] netlink: 'syz.3.358': attribute type 2 has an invalid length. [ 110.854188][ T7360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.986813][ T7365] Illegal XDP return value 4294967289 on prog (id 95) dev N/A, expect packet loss! [ 111.616335][ T7387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.691078][ T7387] dvmrp1: entered allmulticast mode [ 111.710273][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'. [ 111.979906][ T7409] ip6gre1: entered allmulticast mode [ 112.058626][ T59] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.086198][ T59] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.158935][ T59] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.184708][ T59] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.185632][ T7420] openvswitch: netlink: Missing key (keys=40, expected=100) [ 112.506234][ T7433] __nla_validate_parse: 3 callbacks suppressed [ 112.506252][ T7433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.382'. [ 112.830744][ T7447] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 113.442026][ T7471] netlink: 'syz.4.399': attribute type 1 has an invalid length. [ 113.462906][ T7471] netlink: 'syz.4.399': attribute type 3 has an invalid length. [ 113.491945][ T7471] netlink: 224 bytes leftover after parsing attributes in process `syz.4.399'. [ 113.783402][ T7487] netlink: 'syz.4.402': attribute type 10 has an invalid length. [ 113.906554][ T7487] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 114.215891][ T7515] tipc: Started in network mode [ 114.234112][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 114.261044][ T7515] tipc: Node identity ce3861dda0ed, cluster identity 4711 [ 114.319697][ T7515] tipc: Enabled bearer , priority 0 [ 114.353533][ T7517] syzkaller0: entered promiscuous mode [ 114.355809][ T7520] netlink: 248 bytes leftover after parsing attributes in process `syz.0.412'. [ 114.364401][ T7517] syzkaller0: entered allmulticast mode [ 114.379634][ T7524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.414'. [ 114.417023][ T7509] syzkaller0: entered promiscuous mode [ 114.422530][ T7509] syzkaller0: entered allmulticast mode [ 114.469366][ T7524] chnl_net:caif_netlink_parms(): no params data found [ 114.541854][ T7530] netlink: 12 bytes leftover after parsing attributes in process `syz.5.415'. [ 114.787435][ T7536] netlink: 68 bytes leftover after parsing attributes in process `syz.5.417'. [ 114.967904][ T7540] nbd0: detected capacity change from 0 to 63 [ 115.436893][ T6860] tipc: Node number set to 1859477981 [ 115.748537][ T7553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.421'. [ 115.977857][ T7563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.424'. [ 116.048230][ T7521] tipc: Resetting bearer [ 116.064849][ T7514] tipc: Resetting bearer [ 116.072182][ T5158] block nbd0: Receive control failed (result -104) [ 116.136840][ T7514] tipc: Disabling bearer [ 116.238879][ T7570] bond2: entered promiscuous mode [ 116.244541][ T7570] bond2: entered allmulticast mode [ 116.250592][ T7570] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.320896][ T7574] netlink: 24 bytes leftover after parsing attributes in process `syz.2.428'. [ 116.616145][ T7570] bond2 (unregistering): Released all slaves [ 116.766277][ T7584] tap0: tun_chr_ioctl cmd 1074025677 [ 116.777351][ T7584] tap0: linktype set to 824 [ 116.854329][ T7597] tipc: Enabling of bearer rejected, failed to enable media [ 116.919423][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.434'. [ 117.388854][ T7619] netlink: 'syz.2.442': attribute type 13 has an invalid length. [ 117.648733][ T7640] __nla_validate_parse: 3 callbacks suppressed [ 117.648751][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.450'. [ 117.685483][ T7642] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 117.872927][ T7656] Bluetooth: MGMT ver 1.23 [ 117.895778][ T7648] syzkaller0: entered promiscuous mode [ 117.905799][ T7648] syzkaller0: entered allmulticast mode [ 117.924754][ T7656] netlink: 'syz.0.453': attribute type 7 has an invalid length. [ 117.949998][ T7662] netlink: 'syz.4.455': attribute type 1 has an invalid length. [ 119.252475][ T7669] netlink: 'syz.2.457': attribute type 3 has an invalid length. [ 119.483520][ T7697] block nbd3: not configured, cannot reconfigure [ 119.689442][ T7708] tipc: Enabled bearer , priority 0 [ 119.734292][ T7708] syzkaller0: entered promiscuous mode [ 119.739790][ T7708] syzkaller0: entered allmulticast mode [ 120.054593][ T7706] tipc: Resetting bearer [ 120.149193][ T7706] tipc: Disabling bearer [ 120.263571][ T7741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.295148][ T7741] batadv0: mtu less than device minimum [ 120.302231][ T7741] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.314295][ T7741] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.326086][ T7741] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.337957][ T7741] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.349749][ T7741] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.361603][ T7741] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.373447][ T7741] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.385303][ T7741] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.397176][ T7741] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.471376][ T7751] netlink: 'syz.4.476': attribute type 1 has an invalid length. [ 120.491196][ T7751] netlink: 224 bytes leftover after parsing attributes in process `syz.4.476'. [ 120.501546][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.476'. [ 120.513299][ T7741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.533418][ T7741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.570876][ T7741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.579938][ T7741] batman_adv: batadv0: Interface deactivated: dummy0 [ 120.587000][ T7741] batman_adv: batadv0: Removing interface: dummy0 [ 120.620015][ T7751] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 121.341324][ T7797] syzkaller1: entered promiscuous mode [ 121.375673][ T7797] syzkaller1: entered allmulticast mode [ 121.401504][ T7805] netlink: 'syz.4.489': attribute type 10 has an invalid length. [ 121.443460][ T7805] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 121.444515][ T7807] netlink: 216 bytes leftover after parsing attributes in process `syz.3.490'. [ 122.139094][ T7850] netlink: 'syz.5.502': attribute type 1 has an invalid length. [ 122.224722][ T7843] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 122.330903][ T7868] netlink: 28 bytes leftover after parsing attributes in process `syz.5.502'. [ 122.346420][ T7868] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.376953][ T7850] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 122.442208][ T7860] veth3: entered promiscuous mode [ 122.459662][ T7860] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 123.061405][ T7903] netlink: 'syz.4.511': attribute type 29 has an invalid length. [ 123.206742][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'. [ 123.221654][ T7915] netlink: 12 bytes leftover after parsing attributes in process `syz.5.512'. [ 123.254059][ T7912] netlink: 'syz.0.514': attribute type 30 has an invalid length. [ 123.324989][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'. [ 123.371534][ T7912] netlink: 'syz.0.514': attribute type 30 has an invalid length. [ 123.410394][ T3494] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.435310][ T3494] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.518629][ T3494] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.533578][ T3494] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.588070][ T7922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.515'. [ 123.633080][ T7936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.519'. [ 123.649039][ T7931] syz_tun: entered allmulticast mode [ 123.656834][ T7923] syz_tun: left allmulticast mode [ 123.826428][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.5.521'. [ 123.842134][ T7942] netlink: 12 bytes leftover after parsing attributes in process `syz.5.521'. [ 124.040849][ T7952] netlink: 'syz.4.524': attribute type 2 has an invalid length. [ 124.285974][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'. [ 124.353517][ T7965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.528'. [ 124.409747][ T7969] netlink: 20 bytes leftover after parsing attributes in process `syz.0.530'. [ 124.443277][ T3507] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.455543][ T3507] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.464850][ T7972] netlink: 'syz.3.529': attribute type 8 has an invalid length. [ 124.478011][ T3507] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.552020][ T3507] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.129695][ T8000] tipc: Started in network mode [ 125.148012][ T8000] tipc: Node identity ac14140f, cluster identity 4711 [ 125.165327][ T8000] tipc: New replicast peer: 255.255.255.255 [ 125.177413][ T8000] tipc: Enabled bearer , priority 10 [ 125.908209][ T8039] netlink: 'syz.2.545': attribute type 23 has an invalid length. [ 126.113429][ T8050] netlink: 'syz.3.548': attribute type 10 has an invalid length. [ 126.212360][ T8050] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 126.278137][ T8058] delete_channel: no stack [ 126.284584][ T6879] IPVS: starting estimator thread 0... [ 126.306007][ T6879] tipc: Node number set to 2886997007 [ 126.428791][ T8064] IPVS: using max 31 ests per chain, 74400 per kthread [ 126.638365][ T8082] netlink: 'syz.5.555': attribute type 1 has an invalid length. [ 126.713281][ T8086] netlink: 'syz.3.557': attribute type 32 has an invalid length. [ 126.859784][ T8086] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 127.998682][ T8152] net_ratelimit: 34 callbacks suppressed [ 127.998702][ T8152] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 128.096096][ T8152] sctp: [Deprecated]: syz.4.571 (pid 8152) Use of struct sctp_assoc_value in delayed_ack socket option. [ 128.096096][ T8152] Use struct sctp_sack_info instead [ 128.738008][ T8183] __nla_validate_parse: 8 callbacks suppressed [ 128.738025][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.579'. [ 128.806513][ T8183] netlink: 244 bytes leftover after parsing attributes in process `syz.3.579'. [ 128.992705][ T8194] netlink: 104 bytes leftover after parsing attributes in process `syz.0.582'. [ 129.009143][ T8195] netlink: 4 bytes leftover after parsing attributes in process `syz.5.581'. [ 129.063179][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.585'. [ 129.084377][ T8192] netlink: 40 bytes leftover after parsing attributes in process `syz.5.581'. [ 129.125401][ T8201] netlink: 'syz.2.585': attribute type 1 has an invalid length. [ 129.350261][ T8214] netlink: 76 bytes leftover after parsing attributes in process `syz.3.590'. [ 129.361289][ T8212] netlink: 24 bytes leftover after parsing attributes in process `syz.4.588'. [ 129.370301][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.586'. [ 129.407146][ T8203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.586'. [ 129.514349][ T8225] netlink: 'syz.5.591': attribute type 83 has an invalid length. [ 129.635114][ T8205] 8021q: adding VLAN 0 to HW filter on device bond4 [ 129.690766][ T8205] bond3: (slave bond4): making interface the new active one [ 129.700735][ T8205] bond3: (slave bond4): Enslaving as an active interface with an up link [ 129.807610][ T8233] (unnamed net_device) (uninitialized): peer notification delay (2) is not a multiple of miimon (100), value rounded to 0 ms [ 129.832885][ T8233] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 129.834847][ T8244] unsupported nlmsg_type 40 [ 129.908512][ T8238] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.916280][ T8238] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.016212][ T8236] syzkaller0: entered promiscuous mode [ 130.021784][ T8236] syzkaller0: entered allmulticast mode [ 130.072706][ T8244] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.085467][ T8244] team0: Failed to send port change of device bond3 via netlink (err -105) [ 130.099834][ T8244] team0: Failed to send options change via netlink (err -105) [ 130.108666][ T8244] team0: Port device bond3 added [ 131.871305][ T8294] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 131.926881][ T8294] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 132.362180][ T8326] netlink: 'syz.5.617': attribute type 2 has an invalid length. [ 132.370190][ T8326] netlink: 'syz.5.617': attribute type 1 has an invalid length. [ 132.451341][ T8333] netlink: 'syz.4.620': attribute type 21 has an invalid length. [ 132.551635][ T8337] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 132.735648][ T8349] netlink: 'syz.4.623': attribute type 10 has an invalid length. [ 132.781870][ T8349] bridge0: left allmulticast mode [ 132.820676][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.825602][ T8349] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.834264][ T8349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.842848][ T8349] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.850111][ T8349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.902778][ T8349] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 132.929488][ T8361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.767444][ T8404] netlink: 'syz.0.640': attribute type 3 has an invalid length. [ 133.792856][ T8404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.827329][ T8410] __nla_validate_parse: 9 callbacks suppressed [ 133.827344][ T8410] netlink: 16 bytes leftover after parsing attributes in process `syz.5.643'. [ 134.175323][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.650'. [ 134.222163][ T8435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.653'. [ 134.355541][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'. [ 134.379696][ T8439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.654'. [ 134.916758][ T8467] netlink: 40 bytes leftover after parsing attributes in process `syz.2.665'. [ 134.952184][ T8463] veth5: entered allmulticast mode [ 135.232697][ T8486] netlink: 64 bytes leftover after parsing attributes in process `syz.3.667'. [ 135.253790][ T8486] netlink: 76 bytes leftover after parsing attributes in process `syz.3.667'. [ 135.296801][ T8486] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 135.329699][ T8490] netlink: 72 bytes leftover after parsing attributes in process `syz.4.672'. [ 135.468331][ T8490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.672'. [ 135.865409][ T8506] lo: left promiscuous mode [ 135.886049][ T8506] lo: left allmulticast mode [ 135.947173][ T8506] tunl0: left promiscuous mode [ 136.007570][ T8506] tunl0: left allmulticast mode [ 136.032241][ T8506] gre0: left promiscuous mode [ 136.059591][ T8515] nbd: couldn't find a device at index -373156329 [ 136.088117][ T8515] raw_sendmsg: syz.0.677 forgot to set AF_INET. Fix it! [ 136.097849][ T8506] gre0: left allmulticast mode [ 136.249251][ T8506] gretap0: left promiscuous mode [ 136.256910][ T8506] gretap0: left allmulticast mode [ 136.273134][ T8506] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.280386][ T8506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.287951][ T8506] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.295141][ T8506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.317856][ T8506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.634928][ C0] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 137.957362][ T8597] netlink: 'syz.2.700': attribute type 8 has an invalid length. [ 138.357488][ T6877] IPVS: starting estimator thread 0... [ 138.431734][ T8642] netlink: 'syz.3.706': attribute type 10 has an invalid length. [ 138.468492][ T8636] IPVS: using max 31 ests per chain, 74400 per kthread [ 138.684857][ T8650] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 138.744338][ T8649] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 138.931643][ T8673] 8021q: adding VLAN 0 to HW filter on device bond4 [ 139.078353][ T8677] macvlan2: entered promiscuous mode [ 139.102176][ T8677] macvlan2: entered allmulticast mode [ 139.123159][ T8692] __nla_validate_parse: 62 callbacks suppressed [ 139.123176][ T8692] netlink: 24 bytes leftover after parsing attributes in process `syz.4.714'. [ 139.208598][ T8696] vlan3: entered promiscuous mode [ 139.216631][ T8696] bridge0: entered promiscuous mode [ 139.225664][ T8680] netlink: 'syz.5.712': attribute type 1 has an invalid length. [ 139.414952][ T8706] netlink: 'syz.4.716': attribute type 5 has an invalid length. [ 139.765573][ T8729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.721'. [ 140.010141][ T8732] bond3: (slave bond4): Releasing backup interface [ 140.070748][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.728'. [ 141.166907][ T8787] netlink: 'syz.3.740': attribute type 5 has an invalid length. [ 141.337347][ T8796] nbd: couldn't find a device at index -373156329 [ 141.706815][ T8823] vlan0: entered promiscuous mode [ 141.790756][ T8823] team0: Port device vlan0 added [ 141.902784][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'. [ 142.376045][ T8844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.674628][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.757'. [ 142.716793][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.757'. [ 142.763506][ T8861] netlink: 'syz.0.758': attribute type 27 has an invalid length. [ 142.948396][ T8870] netlink: 'syz.4.760': attribute type 29 has an invalid length. [ 142.957109][ T8870] netlink: 'syz.4.760': attribute type 29 has an invalid length. [ 142.978200][ T8876] netlink: 24 bytes leftover after parsing attributes in process `syz.2.762'. [ 143.156157][ T8881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.765'. [ 143.433413][ T8893] netlink: 16 bytes leftover after parsing attributes in process `syz.5.767'. [ 143.466958][ T8900] netlink: 108 bytes leftover after parsing attributes in process `syz.3.771'. [ 143.600130][ T8905] netlink: 'syz.2.773': attribute type 1 has an invalid length. [ 143.607985][ T8905] netlink: 'syz.2.773': attribute type 1 has an invalid length. [ 143.619839][ T8905] netlink: 'syz.2.773': attribute type 1 has an invalid length. [ 143.654536][ T8905] netlink: 'syz.2.773': attribute type 2 has an invalid length. [ 143.798302][ T8910] pim6reg527: entered allmulticast mode [ 143.874754][ T8913] netlink: 'syz.3.775': attribute type 21 has an invalid length. [ 143.920068][ T8913] netlink: 'syz.3.775': attribute type 6 has an invalid length. [ 143.950902][ T8928] netlink: 'syz.0.777': attribute type 4 has an invalid length. [ 144.024801][ T8928] netlink: 'syz.0.777': attribute type 4 has an invalid length. [ 144.078219][ T8928] netlink: 'syz.0.777': attribute type 4 has an invalid length. [ 144.161982][ T8928] netlink: 'syz.0.777': attribute type 4 has an invalid length. [ 144.313821][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 144.359404][ T8941] __nla_validate_parse: 4 callbacks suppressed [ 144.359421][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.781'. [ 144.499262][ T8947] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 145.303823][ T9003] netlink: 48 bytes leftover after parsing attributes in process `syz.4.799'. [ 145.552331][ T9013] netlink: 64 bytes leftover after parsing attributes in process `syz.2.804'. [ 145.599960][ T55] block nbd0: Possible stuck request ffff888025777000: control (read@0,1024B). Runtime 30 seconds [ 145.614002][ T55] block nbd0: Possible stuck request ffff8880257771c0: control (read@1024,1024B). Runtime 30 seconds [ 145.625234][ T55] block nbd0: Possible stuck request ffff888025777380: control (read@2048,1024B). Runtime 30 seconds [ 145.636753][ T55] block nbd0: Possible stuck request ffff888025777540: control (read@3072,1024B). Runtime 30 seconds [ 145.655575][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.808'. [ 145.701873][ T9022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.809'. [ 145.710927][ T9022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.809'. [ 145.805924][ T9027] tipc: Enabled bearer , priority 0 [ 145.814695][ T9027] syzkaller0: entered promiscuous mode [ 145.820185][ T9027] syzkaller0: entered allmulticast mode [ 145.831091][ T9027] tipc: Enabling not permitted [ 145.837405][ T9027] tipc: Enabling of bearer rejected, failed to enable media [ 145.859316][ T9027] tipc: Resetting bearer [ 145.877791][ T9026] tipc: Resetting bearer [ 145.925036][ T9026] tipc: Disabling bearer [ 146.059797][ T9033] netlink: 48 bytes leftover after parsing attributes in process `syz.0.812'. [ 146.086802][ T9033] netlink: 48 bytes leftover after parsing attributes in process `syz.0.812'. [ 146.292453][ T9041] netlink: 84 bytes leftover after parsing attributes in process `syz.4.814'. [ 146.407522][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.816'. [ 146.479791][ T9053] unknown channel width for channel at 909000KHz? [ 146.498787][ T9053] unknown channel width for channel at 909000KHz? [ 146.509930][ T9053] unknown channel width for channel at 909000KHz? [ 146.938517][ T9079] tipc: Enabled bearer , priority 0 [ 146.958214][ T9079] syzkaller0: entered promiscuous mode [ 146.984303][ T9079] syzkaller0: entered allmulticast mode [ 147.027532][ T9079] tipc: Resetting bearer [ 147.068282][ T9076] tipc: Resetting bearer [ 147.107255][ T9076] tipc: Disabling bearer [ 147.183003][ T9091] vlan2: entered allmulticast mode [ 147.207900][ T9091] veth0_macvtap: entered allmulticast mode [ 147.403824][ T5503] veth1_vlan: left promiscuous mode [ 148.099344][ T9143] netlink: 'syz.0.837': attribute type 11 has an invalid length. [ 148.139149][ T9143] netlink: 'syz.0.837': attribute type 11 has an invalid length. [ 148.249421][ T9146] sctp: [Deprecated]: syz.2.838 (pid 9146) Use of int in max_burst socket option deprecated. [ 148.249421][ T9146] Use struct sctp_assoc_value instead [ 148.878436][ T9160] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.530033][ T9207] sctp: [Deprecated]: syz.4.855 (pid 9207) Use of struct sctp_assoc_value in delayed_ack socket option. [ 149.530033][ T9207] Use struct sctp_sack_info instead [ 149.577189][ T9212] __nla_validate_parse: 13 callbacks suppressed [ 149.577208][ T9212] netlink: 300 bytes leftover after parsing attributes in process `syz.0.856'. [ 149.648542][ T9212] 8021q: VLANs not supported on lo [ 149.701823][ T9220] IPv6: NLM_F_CREATE should be specified when creating new route [ 149.742956][ T9220] netlink: 12 bytes leftover after parsing attributes in process `syz.5.858'. [ 149.901136][ T9239] netlink: 80 bytes leftover after parsing attributes in process `syz.3.863'. [ 150.588835][ T9272] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.871'. [ 150.685429][ T9266] syzkaller0: entered promiscuous mode [ 150.694320][ T9266] syzkaller0: entered allmulticast mode [ 150.729343][ T9281] validate_nla: 61 callbacks suppressed [ 150.729358][ T9281] netlink: 'syz.4.873': attribute type 1 has an invalid length. [ 151.925604][ T9282] bond1: (slave gretap1): making interface the new active one [ 151.950632][ T9282] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 152.066574][ T9298] netlink: 'syz.5.876': attribute type 1 has an invalid length. [ 152.174712][ T9298] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 152.308187][ T9315] netlink: 'syz.2.879': attribute type 1 has an invalid length. [ 152.453360][ T9325] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 152.545585][ T9325] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 152.564295][ T9330] netlink: 76 bytes leftover after parsing attributes in process `syz.4.883'. [ 152.851604][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.888'. [ 152.906605][ T9351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.890'. [ 152.956949][ T9354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.892'. [ 152.968539][ T9354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.892'. [ 152.997857][ T9354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.892'. [ 153.013292][ T9356] openvswitch: netlink: Geneve opt len 63 is not a multiple of 4. [ 153.270838][ T9371] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 154.748054][ T9449] netlink: 'syz.4.915': attribute type 1 has an invalid length. [ 154.825093][ T9467] __nla_validate_parse: 2 callbacks suppressed [ 154.825110][ T9467] netlink: 32 bytes leftover after parsing attributes in process `syz.5.921'. [ 154.925224][ T9449] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.981058][ T9465] bond3: (slave gretap2): making interface the new active one [ 155.012887][ T9465] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 155.391916][ T9504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.930'. [ 155.419274][ T9505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.929'. [ 155.508849][ T9504] bridge3: port 1(veth0_to_bond) entered blocking state [ 155.517468][ T9509] netlink: 'syz.5.931': attribute type 1 has an invalid length. [ 155.552352][ T9509] netlink: 224 bytes leftover after parsing attributes in process `syz.5.931'. [ 155.564159][ T9504] bridge3: port 1(veth0_to_bond) entered disabled state [ 155.577190][ T30] audit: type=1800 audit(1753938055.919:4): pid=9515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.932" name="memory.events" dev="tmpfs" ino=952 res=0 errno=0 [ 155.625357][ T9504] veth0_to_bond: entered allmulticast mode [ 155.660783][ T9504] veth0_to_bond: entered promiscuous mode [ 155.671060][ T30] audit: type=1804 audit(1753938055.929:5): pid=9515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.932" name="/newroot/183/memory.events" dev="tmpfs" ino=952 res=1 errno=0 [ 155.731170][ T9511] bond0: (slave dummy0): Releasing backup interface [ 155.759249][ T9511] bridge_slave_0: left allmulticast mode [ 155.771299][ T9511] bridge_slave_0: left promiscuous mode [ 155.783043][ T9511] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.842155][ T9511] bridge_slave_1: left allmulticast mode [ 155.854026][ T9511] bridge_slave_1: left promiscuous mode [ 155.881650][ T9511] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.919206][ T9511] bond0: (slave bond_slave_0): Releasing backup interface [ 155.983149][ T9511] bond0: (slave bond_slave_1): Releasing backup interface [ 156.002906][ T9511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.022342][ T9511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.032504][ T9511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.041623][ T9511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.067082][ T9514] vlan4: entered allmulticast mode [ 156.072396][ T9514] veth1: entered allmulticast mode [ 156.078817][ T9514] bridge3: port 2(vlan4) entered blocking state [ 156.086379][ T9514] bridge3: port 2(vlan4) entered disabled state [ 156.097870][ T9514] vlan4: entered promiscuous mode [ 156.103090][ T9514] veth1: entered promiscuous mode [ 156.378957][ T9541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.941'. [ 156.797660][ T9570] netlink: 'syz.3.946': attribute type 10 has an invalid length. [ 156.850542][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.946'. [ 156.878682][ T9575] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 156.879577][ T9570] openvswitch: netlink: Tunnel attr 4 has unexpected len 16 expected 1 [ 157.537559][ T9608] tipc: Enabling of bearer rejected, failed to enable media [ 157.622485][ T9614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.957'. [ 158.343995][ T9653] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.362451][ T9653] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.407796][ T9664] RDS: rds_bind could not find a transport for ::ffff:172.30.11.4, load rds_tcp or rds_rdma? [ 158.483244][ T9653] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.495119][ T9653] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.552586][ T9670] netlink: 'syz.2.971': attribute type 10 has an invalid length. [ 158.700870][ T9653] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.748001][ T9679] netlink: 16 bytes leftover after parsing attributes in process `syz.0.973'. [ 158.753482][ T9653] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.796376][ T9673] netlink: 32 bytes leftover after parsing attributes in process `syz.3.972'. [ 158.952674][ T9653] bond0: (slave netdevsim0): Releasing backup interface [ 158.980508][ T9653] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.017657][ T9653] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.094194][ T9700] netlink: 14 bytes leftover after parsing attributes in process `syz.0.978'. [ 159.444371][ T49] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.452664][ T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.497860][ T8620] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.523817][ T8620] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.542611][ T8620] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.569368][ T8620] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.664706][ T8623] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.674546][ T9735] netlink: 'syz.3.988': attribute type 1 has an invalid length. [ 159.682215][ T9735] netlink: 'syz.3.988': attribute type 2 has an invalid length. [ 159.694364][ T8623] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.706064][ T9652] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.717192][ T9652] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.751677][ T8623] ================================================================== [ 159.759775][ T8623] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1340 [ 159.767352][ T8623] Read of size 8 at addr ffff88807ab9bcb0 by task kworker/u8:21/8623 [ 159.775407][ T8623] [ 159.777740][ T8623] CPU: 0 UID: 0 PID: 8623 Comm: kworker/u8:21 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 159.777757][ T8623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 159.777768][ T8623] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 159.777805][ T8623] Call Trace: [ 159.777811][ T8623] [ 159.777831][ T8623] dump_stack_lvl+0x189/0x250 [ 159.777847][ T8623] ? __kasan_check_byte+0x12/0x40 [ 159.777869][ T8623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.777883][ T8623] ? lock_release+0x4b/0x3e0 [ 159.777906][ T8623] ? __virt_addr_valid+0x4a5/0x5c0 [ 159.777923][ T8623] print_report+0xca/0x240 [ 159.777942][ T8623] ? __mutex_lock+0x147/0x1340 [ 159.777962][ T8623] kasan_report+0x118/0x150 [ 159.777981][ T8623] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 159.777999][ T8623] ? __mutex_lock+0x147/0x1340 [ 159.778022][ T8623] __mutex_lock+0x147/0x1340 [ 159.778044][ T8623] ? __mutex_lock+0x5b6/0x1340 [ 159.778064][ T8623] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 159.778085][ T8623] ? __pfx___mutex_lock+0x10/0x10 [ 159.778106][ T8623] ? __lock_acquire+0xab9/0xd20 [ 159.778129][ T8623] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 159.778151][ T8623] ? process_scheduled_works+0x9ef/0x17b0 [ 159.778171][ T8623] ? process_scheduled_works+0x9ef/0x17b0 [ 159.778191][ T8623] process_scheduled_works+0xae1/0x17b0 [ 159.778220][ T8623] ? __pfx_process_scheduled_works+0x10/0x10 [ 159.778245][ T8623] worker_thread+0x8a0/0xda0 [ 159.778274][ T8623] kthread+0x70e/0x8a0 [ 159.778289][ T8623] ? __pfx_worker_thread+0x10/0x10 [ 159.778308][ T8623] ? __pfx_kthread+0x10/0x10 [ 159.778323][ T8623] ? _raw_spin_unlock_irq+0x23/0x50 [ 159.778339][ T8623] ? lockdep_hardirqs_on+0x9c/0x150 [ 159.778356][ T8623] ? __pfx_kthread+0x10/0x10 [ 159.778371][ T8623] ret_from_fork+0x3fc/0x770 [ 159.778392][ T8623] ? __pfx_ret_from_fork+0x10/0x10 [ 159.778413][ T8623] ? __switch_to_asm+0x39/0x70 [ 159.778427][ T8623] ? __switch_to_asm+0x33/0x70 [ 159.778441][ T8623] ? __pfx_kthread+0x10/0x10 [ 159.778456][ T8623] ret_from_fork_asm+0x1a/0x30 [ 159.778476][ T8623] [ 159.778481][ T8623] [ 159.983387][ T8623] Allocated by task 9653: [ 159.987707][ T8623] kasan_save_track+0x3e/0x80 [ 159.992375][ T8623] __kasan_kmalloc+0x93/0xb0 [ 159.996949][ T8623] __kmalloc_noprof+0x27a/0x4f0 [ 160.001787][ T8623] udp_tunnel_nic_netdevice_event+0x854/0x19f0 [ 160.007931][ T8623] notifier_call_chain+0x1b3/0x3e0 [ 160.013023][ T8623] register_netdevice+0x1608/0x1ae0 [ 160.018203][ T8623] nsim_create+0xae8/0xf10 [ 160.022604][ T8623] __nsim_dev_port_add+0x6b6/0xb10 [ 160.027699][ T8623] nsim_dev_port_add_all+0x37/0xf0 [ 160.032796][ T8623] nsim_dev_reload_up+0x451/0x780 [ 160.037819][ T8623] devlink_reload+0x4e9/0x8d0 [ 160.042483][ T8623] devlink_nl_reload_doit+0xb35/0xd50 [ 160.047843][ T8623] genl_family_rcv_msg_doit+0x215/0x300 [ 160.053460][ T8623] genl_rcv_msg+0x60e/0x790 [ 160.057946][ T8623] netlink_rcv_skb+0x205/0x470 [ 160.062697][ T8623] genl_rcv+0x28/0x40 [ 160.066662][ T8623] netlink_unicast+0x82c/0x9e0 [ 160.071409][ T8623] netlink_sendmsg+0x805/0xb30 [ 160.076160][ T8623] __sock_sendmsg+0x219/0x270 [ 160.080823][ T8623] ____sys_sendmsg+0x505/0x830 [ 160.085568][ T8623] ___sys_sendmsg+0x21f/0x2a0 [ 160.090224][ T8623] __x64_sys_sendmsg+0x19b/0x260 [ 160.095139][ T8623] do_syscall_64+0xfa/0x3b0 [ 160.099631][ T8623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.105507][ T8623] [ 160.107817][ T8623] Freed by task 9652: [ 160.111775][ T8623] kasan_save_track+0x3e/0x80 [ 160.116441][ T8623] kasan_save_free_info+0x46/0x50 [ 160.121448][ T8623] __kasan_slab_free+0x62/0x70 [ 160.126195][ T8623] kfree+0x18e/0x440 [ 160.130076][ T8623] udp_tunnel_nic_netdevice_event+0x1332/0x19f0 [ 160.136305][ T8623] notifier_call_chain+0x1b3/0x3e0 [ 160.141401][ T8623] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 160.147810][ T8623] unregister_netdevice_queue+0x33c/0x380 [ 160.153519][ T8623] nsim_destroy+0x1dd/0x670 [ 160.158011][ T8623] __nsim_dev_port_del+0x14d/0x1b0 [ 160.163110][ T8623] nsim_dev_reload_destroy+0x288/0x490 [ 160.168554][ T8623] nsim_dev_reload_down+0x8a/0xc0 [ 160.173563][ T8623] devlink_reload+0x1b6/0x8d0 [ 160.178225][ T8623] devlink_nl_reload_doit+0xb35/0xd50 [ 160.183583][ T8623] genl_family_rcv_msg_doit+0x215/0x300 [ 160.189120][ T8623] genl_rcv_msg+0x60e/0x790 [ 160.193604][ T8623] netlink_rcv_skb+0x205/0x470 [ 160.198361][ T8623] genl_rcv+0x28/0x40 [ 160.202324][ T8623] netlink_unicast+0x82c/0x9e0 [ 160.207072][ T8623] netlink_sendmsg+0x805/0xb30 [ 160.211822][ T8623] __sock_sendmsg+0x219/0x270 [ 160.216481][ T8623] ____sys_sendmsg+0x505/0x830 [ 160.221229][ T8623] ___sys_sendmsg+0x21f/0x2a0 [ 160.225885][ T8623] __x64_sys_sendmsg+0x19b/0x260 [ 160.230804][ T8623] do_syscall_64+0xfa/0x3b0 [ 160.235303][ T8623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.241180][ T8623] [ 160.243485][ T8623] Last potentially related work creation: [ 160.249180][ T8623] kasan_save_stack+0x3e/0x60 [ 160.253845][ T8623] kasan_record_aux_stack+0xbd/0xd0 [ 160.259024][ T8623] insert_work+0x3d/0x330 [ 160.263342][ T8623] __queue_work+0xbd9/0xfe0 [ 160.267826][ T8623] queue_work_on+0x181/0x270 [ 160.272395][ T8623] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 160.278013][ T8623] udp_tunnel_push_rx_port+0x180/0x200 [ 160.283455][ T8623] geneve_offload_rx_ports+0xd7/0x160 [ 160.288812][ T8623] geneve_netdevice_event+0x6a/0x80 [ 160.293995][ T8623] notifier_call_chain+0x1b3/0x3e0 [ 160.299085][ T8623] call_netdevice_notifiers+0x88/0xc0 [ 160.304441][ T8623] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 160.310670][ T8623] notifier_call_chain+0x1b3/0x3e0 [ 160.315763][ T8623] register_netdevice+0x1608/0x1ae0 [ 160.320947][ T8623] nsim_create+0xae8/0xf10 [ 160.325346][ T8623] __nsim_dev_port_add+0x6b6/0xb10 [ 160.330445][ T8623] nsim_dev_port_add_all+0x37/0xf0 [ 160.335542][ T8623] nsim_dev_reload_up+0x451/0x780 [ 160.340556][ T8623] devlink_reload+0x4e9/0x8d0 [ 160.345219][ T8623] devlink_nl_reload_doit+0xb35/0xd50 [ 160.350577][ T8623] genl_family_rcv_msg_doit+0x215/0x300 [ 160.356107][ T8623] genl_rcv_msg+0x60e/0x790 [ 160.360597][ T8623] netlink_rcv_skb+0x205/0x470 [ 160.365345][ T8623] genl_rcv+0x28/0x40 [ 160.369308][ T8623] netlink_unicast+0x82c/0x9e0 [ 160.374056][ T8623] netlink_sendmsg+0x805/0xb30 [ 160.378805][ T8623] __sock_sendmsg+0x219/0x270 [ 160.383468][ T8623] ____sys_sendmsg+0x505/0x830 [ 160.388215][ T8623] ___sys_sendmsg+0x21f/0x2a0 [ 160.392872][ T8623] __x64_sys_sendmsg+0x19b/0x260 [ 160.397792][ T8623] do_syscall_64+0xfa/0x3b0 [ 160.402285][ T8623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.408159][ T8623] [ 160.410466][ T8623] Second to last potentially related work creation: [ 160.417025][ T8623] kasan_save_stack+0x3e/0x60 [ 160.421775][ T8623] kasan_record_aux_stack+0xbd/0xd0 [ 160.426961][ T8623] insert_work+0x3d/0x330 [ 160.431278][ T8623] __queue_work+0xcfc/0xfe0 [ 160.435760][ T8623] queue_work_on+0x181/0x270 [ 160.440328][ T8623] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 160.445949][ T8623] udp_tunnel_push_rx_port+0x180/0x200 [ 160.451392][ T8623] vxlan_offload_rx_ports+0x139/0x200 [ 160.456755][ T8623] vxlan_netdevice_event+0x111/0x470 [ 160.462029][ T8623] notifier_call_chain+0x1b3/0x3e0 [ 160.467121][ T8623] call_netdevice_notifiers+0x88/0xc0 [ 160.472480][ T8623] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 160.478711][ T8623] notifier_call_chain+0x1b3/0x3e0 [ 160.483805][ T8623] register_netdevice+0x1608/0x1ae0 [ 160.488985][ T8623] nsim_create+0xae8/0xf10 [ 160.493383][ T8623] __nsim_dev_port_add+0x6b6/0xb10 [ 160.498476][ T8623] nsim_dev_port_add_all+0x37/0xf0 [ 160.503576][ T8623] nsim_dev_reload_up+0x451/0x780 [ 160.508591][ T8623] devlink_reload+0x4e9/0x8d0 [ 160.513252][ T8623] devlink_nl_reload_doit+0xb35/0xd50 [ 160.518607][ T8623] genl_family_rcv_msg_doit+0x215/0x300 [ 160.524136][ T8623] genl_rcv_msg+0x60e/0x790 [ 160.528622][ T8623] netlink_rcv_skb+0x205/0x470 [ 160.533368][ T8623] genl_rcv+0x28/0x40 [ 160.537329][ T8623] netlink_unicast+0x82c/0x9e0 [ 160.542074][ T8623] netlink_sendmsg+0x805/0xb30 [ 160.546833][ T8623] __sock_sendmsg+0x219/0x270 [ 160.551497][ T8623] ____sys_sendmsg+0x505/0x830 [ 160.556245][ T8623] ___sys_sendmsg+0x21f/0x2a0 [ 160.560909][ T8623] __x64_sys_sendmsg+0x19b/0x260 [ 160.565825][ T8623] do_syscall_64+0xfa/0x3b0 [ 160.570316][ T8623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.576186][ T8623] [ 160.578496][ T8623] The buggy address belongs to the object at ffff88807ab9bc00 [ 160.578496][ T8623] which belongs to the cache kmalloc-256 of size 256 [ 160.592530][ T8623] The buggy address is located 176 bytes inside of [ 160.592530][ T8623] freed 256-byte region [ffff88807ab9bc00, ffff88807ab9bd00) [ 160.606306][ T8623] [ 160.608619][ T8623] The buggy address belongs to the physical page: [ 160.615008][ T8623] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ab9a [ 160.623748][ T8623] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 160.632222][ T8623] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 160.640109][ T8623] page_type: f5(slab) [ 160.644073][ T8623] raw: 00fff00000000040 ffff88801a441b40 ffffea0001eae480 dead000000000003 [ 160.652641][ T8623] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 160.661210][ T8623] head: 00fff00000000040 ffff88801a441b40 ffffea0001eae480 dead000000000003 [ 160.669862][ T8623] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 160.678513][ T8623] head: 00fff00000000001 ffffea0001eae681 00000000ffffffff 00000000ffffffff [ 160.687164][ T8623] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 160.695815][ T8623] page dumped because: kasan: bad access detected [ 160.702221][ T8623] page_owner tracks the page as allocated [ 160.707917][ T8623] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5849, tgid 5849 (syz-executor), ts 74104779263, free_ts 74045483355 [ 160.729261][ T8623] post_alloc_hook+0x240/0x2a0 [ 160.734023][ T8623] get_page_from_freelist+0x21e4/0x22c0 [ 160.739551][ T8623] __alloc_frozen_pages_noprof+0x181/0x370 [ 160.745347][ T8623] alloc_pages_mpol+0x232/0x4a0 [ 160.750250][ T8623] allocate_slab+0x8a/0x3b0 [ 160.754738][ T8623] ___slab_alloc+0xbfc/0x1480 [ 160.759485][ T8623] __kmalloc_noprof+0x305/0x4f0 [ 160.764320][ T8623] __register_sysctl_table+0xba1/0x1340 [ 160.769852][ T8623] mpls_dev_sysctl_register+0x188/0x270 [ 160.775386][ T8623] mpls_dev_notify+0x357/0x7a0 [ 160.780141][ T8623] notifier_call_chain+0x1b3/0x3e0 [ 160.785243][ T8623] register_netdevice+0x1608/0x1ae0 [ 160.790442][ T8623] veth_newlink+0x5cc/0xa50 [ 160.794940][ T8623] rtnl_newlink_create+0x30d/0xb00 [ 160.800050][ T8623] rtnl_newlink+0x16d6/0x1c70 [ 160.804735][ T8623] rtnetlink_rcv_msg+0x7cc/0xb70 [ 160.809674][ T8623] page last free pid 5837 tgid 5837 stack trace: [ 160.815979][ T8623] __free_frozen_pages+0xc71/0xe70 [ 160.821074][ T8623] __slab_free+0x326/0x400 [ 160.825478][ T8623] qlist_free_all+0x97/0x140 [ 160.830053][ T8623] kasan_quarantine_reduce+0x148/0x160 [ 160.835498][ T8623] __kasan_slab_alloc+0x22/0x80 [ 160.840337][ T8623] __kmalloc_cache_noprof+0x1be/0x3d0 [ 160.845700][ T8623] kobject_uevent_env+0x27c/0x8c0 [ 160.850706][ T8623] __kobject_del+0xd2/0x300 [ 160.855187][ T8623] kobject_put+0x243/0x480 [ 160.859593][ T8623] net_rx_queue_update_kobjects+0x695/0x740 [ 160.865468][ T8623] netif_set_real_num_rx_queues+0x217/0x360 [ 160.871347][ T8623] veth_newlink+0x859/0xa50 [ 160.875842][ T8623] rtnl_newlink_create+0x30d/0xb00 [ 160.880941][ T8623] rtnl_newlink+0x16d6/0x1c70 [ 160.885605][ T8623] rtnetlink_rcv_msg+0x7cc/0xb70 [ 160.890532][ T8623] netlink_rcv_skb+0x205/0x470 [ 160.895285][ T8623] [ 160.897589][ T8623] Memory state around the buggy address: [ 160.905301][ T8623] ffff88807ab9bb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 160.913349][ T8623] ffff88807ab9bc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 160.921399][ T8623] >ffff88807ab9bc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 160.929445][ T8623] ^ [ 160.935060][ T8623] ffff88807ab9bd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 160.943102][ T8623] ffff88807ab9bd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 160.951151][ T8623] ================================================================== [ 161.032360][ T8623] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 161.039588][ T8623] CPU: 0 UID: 0 PID: 8623 Comm: kworker/u8:21 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 161.051483][ T8623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 161.061543][ T8623] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 161.068851][ T8623] Call Trace: [ 161.072139][ T8623] [ 161.075075][ T8623] dump_stack_lvl+0x99/0x250 [ 161.079677][ T8623] ? __asan_memcpy+0x40/0x70 [ 161.084282][ T8623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.089493][ T8623] ? __pfx__printk+0x10/0x10 [ 161.094098][ T8623] panic+0x2db/0x790 [ 161.098000][ T8623] ? __pfx_panic+0x10/0x10 [ 161.102436][ T8623] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 161.108336][ T8623] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 161.114668][ T8623] ? print_memory_metadata+0x314/0x400 [ 161.120139][ T8623] ? __mutex_lock+0x147/0x1340 [ 161.124924][ T8623] check_panic_on_warn+0x89/0xb0 [ 161.129875][ T8623] ? __mutex_lock+0x147/0x1340 [ 161.134653][ T8623] end_report+0x78/0x160 [ 161.138917][ T8623] kasan_report+0x129/0x150 [ 161.143429][ T8623] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 161.149335][ T8623] ? __mutex_lock+0x147/0x1340 [ 161.154107][ T8623] __mutex_lock+0x147/0x1340 [ 161.158705][ T8623] ? __mutex_lock+0x5b6/0x1340 [ 161.163465][ T8623] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 161.169705][ T8623] ? __pfx___mutex_lock+0x10/0x10 [ 161.174727][ T8623] ? __lock_acquire+0xab9/0xd20 [ 161.179579][ T8623] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 161.185633][ T8623] ? process_scheduled_works+0x9ef/0x17b0 [ 161.191340][ T8623] ? process_scheduled_works+0x9ef/0x17b0 [ 161.197048][ T8623] process_scheduled_works+0xae1/0x17b0 [ 161.202598][ T8623] ? __pfx_process_scheduled_works+0x10/0x10 [ 161.208569][ T8623] worker_thread+0x8a0/0xda0 [ 161.213150][ T8623] kthread+0x70e/0x8a0 [ 161.217230][ T8623] ? __pfx_worker_thread+0x10/0x10 [ 161.222349][ T8623] ? __pfx_kthread+0x10/0x10 [ 161.226921][ T8623] ? _raw_spin_unlock_irq+0x23/0x50 [ 161.232102][ T8623] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.237285][ T8623] ? __pfx_kthread+0x10/0x10 [ 161.241859][ T8623] ret_from_fork+0x3fc/0x770 [ 161.246434][ T8623] ? __pfx_ret_from_fork+0x10/0x10 [ 161.251537][ T8623] ? __switch_to_asm+0x39/0x70 [ 161.256307][ T8623] ? __switch_to_asm+0x33/0x70 [ 161.261074][ T8623] ? __pfx_kthread+0x10/0x10 [ 161.265669][ T8623] ret_from_fork_asm+0x1a/0x30 [ 161.270440][ T8623] [ 161.273714][ T8623] Kernel Offset: disabled [ 161.278022][ T8623] Rebooting in 86400 seconds..