last executing test programs: 2m42.527528048s ago: executing program 2 (id=3605): close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x2, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x50}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000d178000000aaff0200000000000000000000000000010420"], 0xfdef) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2m42.10425891s ago: executing program 2 (id=3609): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c01000040000100fcff07000400000001000000040048800c0101800801108004010f80080091002d2e26000800aa000c0000000bdab8e40bb2cc70c3b110471372ae7a003c5cb1ab849fdd0df1b20649d408faa649712237cc8c83a39badfeaa65e92cb0b7d844f5cb0e9b525d84332c5058fc0f216adb72b6d473fd1dde93b2587c9fc4aa3ca4e37ed8c4847643bad824eb0b7d548050d76fefd2fd7e96e3e611a0ffb0ebf0cd108b0d6185235857288810225277077fcd2e4b9ed69c790b1e904d1c4804ae0afbb887e14d2bd623df9f7d7dc61e7911bb204a0c429bb22f715c59884afd7c32541dc3e82691fb99ac7ae6ed1730566a36197dc440f59451553939a2ba9aef55819a9b8a7e0195c3e087693de123597de2c63d45c71ca8c416d0d70800020000", @ANYRES32=r0, @ANYBLOB="97e14bee5c0e2547e2e3111492d565708d0e5da55e274c424503ac7469ff4b6296d61d6be0"], 0x12c}, 0x1, 0x0, 0x0, 0x2000c815}, 0x4008094) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000340)={0x0, 0x30, &(0x7f0000000300)={&(0x7f0000000100)={0x34, r2, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x18, 0x0, @l2={'eth', 0x3a, 'vlan0\x00'}}}}}, 0x34}}, 0x4000040) accept4(r0, 0x0, &(0x7f0000000140), 0x80000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x8000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2m41.737969093s ago: executing program 2 (id=3615): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x1820, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='lp', 0x2) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r2, &(0x7f00000001c0)='l', 0x1, 0x24008015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r2, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000060000000060a010400000000000000000100000008000b400000000038000480340001800a0001006d617463680000002400028008000300e4edf2b708000240000000000e000100636f6e6e6c6162656c00000009000100738c7a3000000000140000001100010000000000000000000000000a"], 0xd4}}, 0x0) 2m41.610518128s ago: executing program 2 (id=3618): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000180)={&(0x7f00000005c0)={0x1d, r4}, 0x10, &(0x7f0000000240)={&(0x7f00000003c0)=@can={{}, 0x41, 0x0, 0x4, 0x0, "5000040000008e56"}, 0x10}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@ipv6_getnexthop={0x1c, 0x6a, 0x113, 0x70bd29, 0x25dfdbfe, {}, [@NHA_GROUPS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}}, 0x0) 2m41.349856618s ago: executing program 2 (id=3621): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c01000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000000400000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x14c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) r2 = socket(0x2a, 0x1, 0x9) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) getpeername$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c004}, 0x40c6) 2m41.21164862s ago: executing program 2 (id=3623): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRESDEC=r0, @ANYBLOB="010000000000000000000200000040000180060001000a000033247b8ecff3610008000500000000000c00070071000000070006007272000008000824d5b8a7045d00"/78], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4078, 0xfee}, {&(0x7f00000003c0)=""/207, 0xcf}, {&(0x7f0000000100)=""/120, 0x78}, {&(0x7f0000000180)=""/226, 0xe2}], 0x4}, 0x5}], 0x1, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000001100)={0x11, 0x3, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x3, [@const={0x6, 0x0, 0x0, 0xa, 0x5}, @enum64={0x10, 0x1, 0x0, 0x13, 0x0, 0x9, [{0xe, 0x4c82a872, 0xae57}]}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x1, 0x8}]}, {0x0, [0x5f]}}, &(0x7f0000000480)=""/11, 0x4f, 0xb, 0x0, 0x8}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1a, 0x3, 0x75a, 0x1, 0x10, 0xffffffffffffffff, 0x9, '\x00', r4, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x50) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x1102a1, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r6, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xa, 0x53}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x40}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x33bd1af0}]]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) 2m26.161906025s ago: executing program 32 (id=3623): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRESDEC=r0, @ANYBLOB="010000000000000000000200000040000180060001000a000033247b8ecff3610008000500000000000c00070071000000070006007272000008000824d5b8a7045d00"/78], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4078, 0xfee}, {&(0x7f00000003c0)=""/207, 0xcf}, {&(0x7f0000000100)=""/120, 0x78}, {&(0x7f0000000180)=""/226, 0xe2}], 0x4}, 0x5}], 0x1, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000001100)={0x11, 0x3, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x3, [@const={0x6, 0x0, 0x0, 0xa, 0x5}, @enum64={0x10, 0x1, 0x0, 0x13, 0x0, 0x9, [{0xe, 0x4c82a872, 0xae57}]}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x1, 0x8}]}, {0x0, [0x5f]}}, &(0x7f0000000480)=""/11, 0x4f, 0xb, 0x0, 0x8}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1a, 0x3, 0x75a, 0x1, 0x10, 0xffffffffffffffff, 0x9, '\x00', r4, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x50) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x1102a1, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r6, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xa, 0x53}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x40}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x33bd1af0}]]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) 2m25.691332659s ago: executing program 1 (id=3846): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x20000000) close(0x3) close(r2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000fe9078001809c40005020000fffd000000000002d58838068b91000000"], 0x4e) 2m24.884740122s ago: executing program 1 (id=3852): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x0, 0xc}, {0x8}}}, 0x24}}, 0x40004) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x15, &(0x7f0000000400)={0x11, 0x88a8, r7, 0x1, 0x0, 0x6, @multicast}, 0x6e) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0x6, 0x7f, 0x31, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x20, 0x80, 0x855}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x0, 0xfff, {{0x6, 0x4, 0x0, 0x2f, 0x18, 0x65, 0x0, 0xfa, 0x4, 0x0, @local, @empty, {[@noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x7f4f, 0x80, 0x3, 0x7, {{0x8, 0x4, 0x3, 0x5, 0x20, 0x64, 0x0, 0x7f, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x26}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x86, 0xa, "6fdb18247cb8e19f"}]}}}}}) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x8}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r11, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r11, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r11, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r11, &(0x7f0000000100)={0x2c, 0x1a, r13, 0x1}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000500)={@loopback, @empty, 0x0}, &(0x7f0000000540)=0xc) r15 = socket(0x2a, 0x2, 0x0) getsockname$packet(r15, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r15, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r16, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth0_to_batadv\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000b00)={0x26c, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xa8, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x1}, 0x1) 2m24.097919696s ago: executing program 1 (id=3855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'veth1_to_bond\x00'}}, 0x1e) 2m23.888306135s ago: executing program 1 (id=3857): r0 = socket(0x2, 0x80805, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r2, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRES64=r2], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000001640)=[{{&(0x7f0000000640)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000001140)="c59a9693bd", 0x5}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000800)="931748ff", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x48000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) 2m23.624024244s ago: executing program 1 (id=3861): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="ef7f00000000009f6c1c9be6be3100140012800b0001006970766c616e000004440280080005471cc50739c1a3f76e95d9cfef345214e04c610e8d188acdb0f99c648e6959e28a382b5a0db06c1c152585d1a4ecd19372d87c90f9be9199b3d5", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 2m23.435051872s ago: executing program 1 (id=3865): r0 = socket(0x15, 0x1, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x84}}, 0x40800) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf25310000000c0099000200000006000000"], 0x20}}, 0x11) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m7.709099754s ago: executing program 33 (id=3865): r0 = socket(0x15, 0x1, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x84}}, 0x40800) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf25310000000c0099000200000006000000"], 0x20}}, 0x11) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.010314418s ago: executing program 5 (id=5414): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[], 0x0, 0x4a, 0x0, 0x0, 0xf}, 0x28) 4.839221189s ago: executing program 5 (id=5416): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x44}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x19}, @empty, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af29708e2355d0e7ea0c543011a00", 0xfffffffc, 0x4, 0x81, 0x2}, 0x3c) r2 = socket(0x1e, 0x4, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x401, {[@fastopen={0x22, 0x11, "79c4fd826e79ceae3697e1c46f1327"}]}}}}}}}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r2, 0x0, 0x0) (async) recvmmsg$unix(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x40000100, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async, rerun: 32) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (rerun: 32) 1.909091213s ago: executing program 5 (id=5421): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FAMILY={0x5, 0xd, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r2 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @dev, @dev, 0x0, 0x0, 0x0, 0x200}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'syztnl2\x00', r3, 0x29, 0x0, 0x7, 0x3, 0x13, @dev={0xfe, 0x80, '\x00', 0x30}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x80, 0x6, 0x3}}) (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x7, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e000000dc400000080000000800000020000000", @ANYRES32=r4, @ANYBLOB="00000000000000000000000000000000000000006d2259b2a59eef64a70bb4f3929a0c35b280", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000005000000040000000800"/28], 0x50) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4044059}, 0x40000) (async) r5 = socket(0x10, 0x80002, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r7, 0xf8c86569d7adcbc0, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x80000000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x84) (async) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) getsockopt$inet_opts(r6, 0x0, 0x4, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000420040008002900787d040008001b00"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x884) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000440)={&(0x7f0000000340), 0x10, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0xd48, 0x7, {0x0, 0xea60}, {0x77359400}, {0x4, 0x1}, 0x1, @can={{0x3, 0x1}, 0x7, 0x3, 0x0, 0x0, "6567205043a6e4a4"}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x2404001c) 1.547268442s ago: executing program 5 (id=5427): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/210, 0xd2}, {&(0x7f0000000240)=""/188, 0xbc}, {&(0x7f0000000300)=""/72, 0x48}], 0x3, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 1.458712775s ago: executing program 0 (id=5429): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x26e1, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x4, &(0x7f0000000080)=""/124, &(0x7f0000000040)=0x7c) r2 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r2, &(0x7f00000005c0)={&(0x7f0000000280)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000440)="55116878cec666ce40016ac603fad0edf22b05cc9ab62e6a8c2e482e4f6e5e2d2b00"/49, 0x31}], 0x1, &(0x7f0000000580)=[@ip_tos_int={{0x2b, 0x0, 0x1, 0x101}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}], 0x30}, 0x8000) close(r0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r5, 0xf21, 0x0, 0x25dfdbf8, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x15, 0x1, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFCONF(r9, 0x8912, &(0x7f0000000080)) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000ac0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a80)={&(0x7f0000000440)={0x608, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x92, 0xfc, "ea0eed3d09839a2eab0c8cc193c3f9496a863d5d83e033849f291259e9bbafb939cd7af0185d98c57250ce70366632c51c7ae3e2b9fdc0a233df436b303d18768e3375821b5aaaf7324f1c72affb8e2542a71769304473489639c81a81f3f9c967cb26195324491cc29195c00f7278782a3f5e65256e48f684517be0b3941298ace3f7dac8915cbb9d5c2f4e4b18"}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x28, 0xfa, "650bb15add85cd9022ced00f12b3d80aea573efd333deb6f53cfe24403a041f73aa12908"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "c365ab91cc9807de05479d64a2bb1829"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}], @NL80211_ATTR_IE={0x187, 0x2a, [@rann={0x7e, 0x15, {{}, 0x5, 0x7f, @broadcast, 0x8001, 0x101, 0x800}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x33, 0xad, 0x5}}, @chsw_timing={0x68, 0x4, {0x4, 0x7}}, @rann={0x7e, 0x15, {{}, 0x1, 0x4, @broadcast, 0x64b, 0x4, 0x7}}, @prep={0x83, 0x1f, {{}, 0x0, 0x7, @device_b, 0xee, @void, 0xfff, 0xa, @device_b, 0x80}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @cf={0x4, 0x6, {0x2, 0x9, 0x2, 0x104}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x20, 0x3, @device_b, 0x9, @value=@device_b, 0x5, 0x400, @device_a, 0x5}}, @fast_bss_trans={0x37, 0xdd, {0x7, 0x6, "c443ddcdfb56ae29c2dfc5de55be581a", "c31a5cab3d33dbe1dbab9d5e832a30f930b2b602e2004b09e9904357ee4ef739", "e5050a7c80077701c68804314988313ec70bf50b2818336da18a5b5758994398", [{0x4, 0x1, "b0"}, {0x2, 0x24, "838ed0820ac5ee41652cf6b9ca18e470fc7e1e94fe1bfc822dd0fc22d60baa19c4e6484e"}, {0x1, 0x7, "92c7ea3859e76b"}, {0x4, 0x16, "d324631ce9c148f71a3e562a01b072aefa61819057ae"}, {0x4, 0x19, "0379cea032573aa5ca9518762f75aeb17d2f74004a6244d5f7"}, {0x3, 0x24, "92f57162ff989b51ffb62bc6e802bc8f1b72bc0e01f35a5b749dc934d088005b60815856"}]}}, @rann={0x7e, 0x15, {{0x1, 0x4}, 0xf2, 0x2, @broadcast, 0x5, 0x2, 0x1d}}]}, @NL80211_ATTR_IE={0x267, 0x2a, [@supported_rates={0x1, 0x3, [{0x36}, {0x26, 0x1}, {0x75, 0x1}]}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x1, 0x9, 0x3, 0x2}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0x1, 0x4}}, @measure_req={0x26, 0xc5, {0x5, 0xb1, 0x0, "5b4ae555a53d5271b0c7d6966634dba0ff1e547c106271cba7efa54433bcc2095b0b2bb28cc9c259be7fb9cb0aae7cf8e7b8e7da5675ebaeaa326615eb19f7aae834db4c4432c4497a1afa4a1def5706ea6f509f456fec960f3b2353a8d369947d023d7a85c22faa119a12e4f319e87d047af84d86ec23f3e624cf328649615b82f0c12a6286650500fa607020066501b04d32e665d096e199f733092140138d8c11eb8197eb0bbd23861236b31e7703f1b707b93bf115a160c5aa4b27977f7fabe2"}}, @rann={0x7e, 0x15, {{0x1, 0x22}, 0x26, 0x7f, @device_b, 0xffff, 0x3, 0x7ff800}}, @fast_bss_trans={0x37, 0xb2, {0x0, 0x8, "b5b9f302301e903132e5229b207533b8", "cd6f5ac505cd3219e1f0480151276a226dd39ee24180f8c2e94ee3f3f50f7c99", "370b1ef51cf0c72ceaea63b2a9ab048906caddd3e014d17a2fd270b342d8abe2", [{0x1, 0x6, "f474e39395e1"}, {0x2, 0x18, "15b62c27b153c95685e6c4f10288dcc99827f811553c27e2"}, {0x3, 0x4, "e6dbfaf8"}, {0x4, 0x3, "79bf60"}, {0x2, 0x1b, "3cdb4a753022e98845a3bbc57b33771b600c661beb38d36a779fab"}, {0x1, 0xa, "6a1680b58289be0cf640"}, {0x4, 0x5, "5ec6d6d274"}, {0x1, 0x1, '8'}]}}, @random_vendor={0xdd, 0xbb, "1ac33e1467d95519e21c30478e63cfb1eabbfa4feaa77dfa139c9e034fcd7f6d86dafa92e517a4a562575760a3f542e5e319bc4c82a1f0f36e411ce0e56b7b3fa6b917f6aeb483ad3fcc183ee40c25ad3affaadd257a99faf788217e5af4685ea8714b829a00bdab4768d284cc3f0f5ea9d6c2209587cb024c74bc4a7afacabde04879d33620e5684bbda5d16ce50f8b5fe0f1efa48f519e2356a6b2dd5feba4da5981bf70c5df9b332ff1abfcc714f0183451c6eaa7b0fdaef4d9"}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xd9, 0xfc, "adb014fa297159b05376925bae3739c7b9aefdde90b677b5fd1cc7835f1daff777238eaf30f6d9fb3a4906fee3e441fdb86b1e6a9f0da22a5375d0652cd883c182675d7dcd4865e5854260915197a7d52a96fec461d605a2437d418246b5dc7201092598939b7461484f7764ffed31bd2081e3c85293e1c0b370589837c6c18964e95d8211d47c230c5f205048aa6f04c85b671e57fe2c8938423063aeca00a891f8353053eefab9400e8b274e814492c0b653c7b1b115d82c4ad10c42778ac70b22e7ae3525b9485a2dbc7ac37fca965cc62b3061"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "05a850a81ed98ef20448ce"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "ee2afb"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xd, 0xf9, "c0ad8f68547433549a"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xffc0}]]}, 0x608}, 0x1, 0x0, 0x0, 0x4000841}, 0x4000000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000000c0)={0x2, 0x3, 0x3, 0x3}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000400)=ANY=[@ANYRES64=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 1.381383548s ago: executing program 0 (id=5430): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x70, r1, 0xa17, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xcc}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}]}, 0x70}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00'}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000180)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x0, 0x0, 0x0, 0x4}, 0x48) read$alg(r3, &(0x7f00000012c0)=""/4109, 0x100d) sendmsg$alg(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000e00)="7911bf87e318844b7b7ece8fe95693844ba2b4c29049c749521cf970374e19e3e0eb47e456c6b48e9e6cbd7bf0c99099ca842917790c07a3922b2732c0b26c06681e5f6eeb013cae354f9e4cbdb1e2740ed027e6cea3bf48243cf3a4dfea964f056d9750a3845e1afa1cd4746ed1de3dcd86984fcb49e380144defb2648b5d28438225bdb08ba43fde421a07274d5d77389ddda7dbfec5ce2019fb2b85555c3adbf6812125af1e846cf1c0e4b88a751c58dfad1d210fbec40a1b21115f69230ca80b3ed558b27f6c46fe25c01fe4c18c0ba7d1e6861f6eb75b6f4903971921f799a56c12097998d9cfdce430335046f02dd1fef77b36c617b8b67621", 0xfc}, {&(0x7f0000002300)="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", 0xf11}], 0x2, 0x0, 0x0, 0x8801}, 0x4000001) 1.233554264s ago: executing program 3 (id=5433): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x74}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=0xffffffffffffffff, 0x34, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) getsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000480)=0xa6, &(0x7f00000004c0)=0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r0, r1, 0x1d, 0x0, @val=@netkit={@void, @value=r0, @void, @void, r3}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x700, 0x7, 0x8000, 0x8000, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x66, 0x0, 0x9, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0xf, 0x17, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2]}]}}}}}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, 0x0, &(0x7f0000000100)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x140b, 0x20, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 1.204453428s ago: executing program 4 (id=5434): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9a, 0x9a, 0x4, [@enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0xa, 0x3}]}, @volatile={0xd, 0x0, 0x0, 0x9, 0x5}, @datasec={0x3, 0x9, 0x0, 0xf, 0x2, [{0x5, 0xfffffff9, 0x5}, {0x4, 0x0, 0x4}, {0x1, 0x8, 0xffff0001}, {0x1, 0x7, 0x6}, {0x3, 0x3, 0x5}, {0x1, 0x17f, 0x9}, {0x2, 0xfffffffc, 0x2}, {0x5, 0x5f448cf5, 0x2}, {0x1, 0x9, 0xa2e}], "38af"}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f00000000c0)=""/251, 0xb8, 0xfb, 0x0, 0x22f}, 0x28) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010800000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000000000000000000000a00000000000000000000008040000000000000000008000000400000000000000000000000004400050000000000000000000000000000000000000004d53c"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x44}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) sendto$inet6(r4, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x2f, &(0x7f0000000300)=""/54, &(0x7f00000003c0)=0x36) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10}, @TCA_CT_LABELS={0x14, 0x7, "296524f13eb7394549979c0db12f7a74"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000280)={0xf48, 0x40, 0x5b01, 0x301ffdf1, 0x8}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x7, 0xb, &(0x7f0000000200)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) 1.112135326s ago: executing program 0 (id=5436): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000b00000000000000000c85000000a800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ac}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x298, 0x168, 0x0, 0x0, 0x298, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x211}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) sendmsg$key(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000b80)={0x2, 0xa, 0x6, 0x3, 0x2, 0x0, 0x70bd28, 0x25dfdbfc}, 0x10}}, 0x2008840) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040810}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000009c0)=@assoc_value={0x0, 0x800}, 0x8) sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x124, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB='c ', @ANYRESHEX=r8], 0x10) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x35, 0x301, 0x70bd26, 0xfffffffc, {0x3}}, 0x14}}, 0x0) 1.075655209s ago: executing program 3 (id=5437): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000080)=0x1, 0x4) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/13, 0xd}, {&(0x7f0000000100)=""/86, 0x56}, {&(0x7f0000000180)=""/245, 0xf5}], 0x3, 0xff, 0x2) socketpair(0x11, 0x800, 0x800, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000300)=0x2, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000480)={'ip_vti0\x00', 0x0, 0x20, 0x7800, 0x3ff, 0x5, {{0x38, 0x4, 0x3, 0x32, 0xe0, 0x65, 0x0, 0x3, 0x29, 0x0, @empty, @loopback, {[@generic={0x7, 0xb, "7ca76b2b9035bdd7ab"}, @timestamp_prespec={0x44, 0xc, 0xc, 0x3, 0xc, [{@broadcast, 0xfffffff9}]}, @cipso={0x86, 0x16, 0x1, [{0x5, 0x10, "42f863bdf4cb2e0e389470a9ad8b"}]}, @lsrr={0x83, 0x1b, 0x58, [@empty, @dev={0xac, 0x14, 0x14, 0xf}, @private=0x1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @noop, @timestamp_prespec={0x44, 0x1c, 0x1b, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0xf}, 0xa2b1}, {@broadcast}, {@remote, 0x8001}]}, @timestamp_addr={0x44, 0x4c, 0x22, 0x1, 0xd, [{@broadcast, 0x1}, {@empty, 0x3}, {@rand_addr=0x64010102, 0x47}, {@multicast2, 0x4b}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@remote, 0xfffffffc}, {@private=0xa010100, 0x4}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x5ce7}]}, @lsrr={0x83, 0x1b, 0x9e, [@local, @local, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast2]}]}}}}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18c, 0x18c, 0x5, [@volatile, @float={0x6, 0x0, 0x0, 0x10, 0xc}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0xe}}, @const={0xc, 0x0, 0x0, 0xa, 0x3}, @union={0x3, 0x4, 0x0, 0x5, 0x0, 0x2, [{0x9, 0x3, 0x2}, {0x5, 0x2, 0x60000000}, {0x6, 0x3, 0xa7b}, {0x7, 0x3}]}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x10, 0x2}, {0xa}, {0x1, 0x1}, {0x6, 0x5}, {0xf, 0x4}, {0x1, 0x2}, {0xa, 0x1}, {0x2, 0x3}]}, @enum64={0xa, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x9, 0x5a60, 0x7558}]}, @restrict={0xc, 0x0, 0x0, 0xb, 0x2}, @union={0x9, 0x5, 0x0, 0x5, 0x1, 0x5, [{0xa, 0x0, 0x101}, {0x3, 0x0, 0xd329}, {0xe, 0x4, 0x2}, {0x8, 0x0, 0x5}, {0xd, 0x0, 0x5}]}, @union={0x5, 0x6, 0x0, 0x5, 0x0, 0x1, [{0xc, 0x5}, {0xc, 0x0, 0x7}, {0xc, 0x1, 0x401}, {0xa, 0x0, 0x1}, {0xe, 0x2, 0x9}, {0x8, 0x3, 0x1}]}]}, {0x0, [0x0, 0x61, 0x30]}}, &(0x7f0000000780)=""/46, 0x1a9, 0x2e, 0x0, 0x5, 0x10000}, 0x28) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0xfffffffb, 0x0, 0xffffffffffffffff, 0x24fe, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)='%+9llu \x00'}, 0x20) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfe, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10d2c2cc, 0x0, 0x0, 0x0, 0x8}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0x4}]}, &(0x7f0000000380)='GPL\x00', 0xf, 0x86, &(0x7f00000003c0)=""/134, 0x40f00, 0x1, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000800)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x7, 0xfffffcb1, 0x200}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000b80)=[r5, 0x1, 0xffffffffffffffff, 0x1, r6, 0xffffffffffffffff, r7, r8, r9], &(0x7f0000000bc0)=[{0x5, 0x2, 0xb, 0xc}, {0x2, 0x2, 0x9, 0x9}, {0x1, 0x2, 0xd, 0x4}, {0x2, 0x4, 0x10, 0xa}, {0x4, 0x3, 0x6, 0x5}, {0x2, 0x3, 0xc, 0x6}], 0x10, 0x8}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000003cc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003c80)={&(0x7f0000000d40)=@newchain={0x2f30, 0x64, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {0x8, 0x9}, {0x0, 0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0x2f00, 0x2, [@TCA_BASIC_POLICE={0x424, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xda0}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6d, 0x1, 0x4, 0x6, 0x100, 0x6, 0x52d, 0x80000001, 0x1, 0x4, 0x5, 0x3330, 0x5, 0x5, 0x4, 0x9, 0x8, 0x40000000, 0x7, 0x5, 0xa, 0x9, 0x3, 0x40000000, 0x1000, 0x5, 0xbc, 0x264, 0x6, 0x1, 0x0, 0x8000, 0x8, 0x0, 0xffff4749, 0x6, 0x0, 0x8, 0x4, 0x5, 0x17b, 0x0, 0x7fffffff, 0xfffffff0, 0x4000, 0x8594, 0x0, 0xe79, 0x0, 0x3, 0x0, 0xba, 0x98, 0x6, 0x80000000, 0x2, 0xa, 0x1, 0xa, 0x6, 0x5, 0x8, 0x844, 0x172, 0x2, 0x8, 0x76, 0x42, 0x9f, 0xa60, 0x4, 0x16a4713, 0x1000, 0x4, 0xfffffffe, 0x0, 0x1, 0x5, 0x8, 0x6, 0x0, 0x2, 0x8000, 0x3, 0x30a3, 0x12000000, 0x8, 0xdc8, 0x7, 0x3, 0x8, 0x3, 0x3, 0x80, 0x6, 0x4, 0x7fff, 0x5, 0x8, 0x7, 0xa, 0x40, 0x6, 0x4, 0x1000, 0x4baaa5ad, 0x0, 0xfffffff0, 0x6, 0xb, 0x4, 0x1, 0x101, 0xc000, 0x1, 0x81, 0x2, 0x2, 0x9, 0x3, 0xb, 0xff, 0x1, 0x1, 0x158, 0x2, 0x9, 0x6, 0x1, 0x9, 0x4, 0x9, 0x0, 0x8, 0x8, 0x9, 0x9, 0x5, 0x9, 0x0, 0x3, 0x10000, 0x5, 0x5, 0x3, 0x80000000, 0x9, 0xc, 0x2, 0x2, 0x9, 0x2, 0x0, 0x8, 0xfffffff9, 0x4, 0x7, 0x0, 0x3, 0x2, 0x8, 0x1, 0x7, 0x3, 0x100, 0x3, 0x6c46, 0xf2, 0x8, 0x7, 0x42, 0x2, 0x5, 0x6, 0x6, 0x38c, 0x8, 0x5, 0x8, 0x4, 0x2, 0x3ff, 0x5, 0x5, 0xa, 0x5, 0xce, 0x6, 0x8, 0x7, 0x3, 0x5c0, 0x4, 0x7, 0x20000000, 0x5, 0x3, 0x400, 0x2, 0x5c, 0x1, 0xd1, 0x4, 0x8, 0x40, 0x3, 0x7, 0x7c2, 0x80000000, 0x36d4c6a4, 0x53, 0x8de, 0x1000, 0x1a02, 0x0, 0x3, 0xffff, 0x7, 0xfff, 0x7fff, 0x5, 0x8, 0x400, 0x9, 0x11a, 0x5e, 0x1, 0x9, 0x9, 0x4, 0x6, 0x8, 0x7fff, 0x7ff, 0x784, 0x0, 0xb, 0x0, 0x5, 0x7, 0xfffffff9, 0x80, 0x7, 0x5, 0x7, 0xffff9b05, 0x6, 0x400, 0x1ff, 0x8, 0x910, 0x1, 0x5, 0xfffffff7, 0x6, 0xe8d]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffd675}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]}, @TCA_BASIC_POLICE={0x434, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x52c2}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x28cd04d1, 0xffff, 0x4, 0x8, 0x9, 0x5, 0x0, 0x8, 0x5, 0x1, 0x0, 0x5, 0x3, 0x7, 0x6, 0x6, 0x1, 0x10001, 0x1, 0x7, 0x8, 0x4, 0x4, 0x80000001, 0xfa, 0x1, 0x7, 0xd13, 0x8, 0x7bf, 0x5, 0x9, 0xffff8000, 0xd, 0x1, 0x2, 0x8, 0x7, 0x1, 0x5, 0xfffff800, 0x2, 0x50e, 0x9, 0x7, 0x40, 0x1, 0x7, 0x8, 0x81, 0xff, 0x10001, 0xe152, 0x6, 0xff000000, 0x8, 0x4, 0x1eb, 0x8, 0x78, 0x4f680000, 0x101, 0x5, 0x10001, 0x2, 0x80, 0x7fffffff, 0x101, 0x6, 0x1, 0x9, 0xfffffff8, 0x1, 0x3, 0x46b, 0x1, 0x99, 0xdac, 0x5, 0x7, 0x40, 0x10, 0x386, 0x2a, 0x5, 0x8, 0x1, 0x400, 0x9, 0x0, 0x5, 0xcc, 0x6, 0x0, 0x4, 0x8, 0x6, 0x1, 0x2, 0x2, 0x3, 0x2a, 0x46, 0x6, 0x3, 0x10000, 0x4, 0x0, 0x1, 0x8, 0x7, 0x3, 0x7f, 0x5, 0x0, 0x2e, 0x1, 0x4, 0x4, 0xd, 0x6, 0x2, 0xffff, 0xffffffff, 0x8, 0xffffffff, 0x7, 0x2, 0x28, 0x50c, 0x4a8685bd, 0x3, 0x6, 0x2, 0x2, 0xbf5, 0x6417, 0xc, 0xf74, 0x7fff, 0x2, 0x9, 0x2, 0x4, 0x7, 0x1, 0x1, 0x4, 0x2, 0x7f, 0x3, 0x9, 0x4, 0x90e7, 0x6d, 0x0, 0x2, 0x27, 0x4, 0x3, 0x5, 0x7, 0x401, 0x7000000, 0xf8, 0x4, 0x1000, 0x9, 0x3, 0x200, 0x6, 0x101, 0x100, 0x2, 0x4, 0x1, 0x8, 0x7, 0x23, 0x3, 0xe4f, 0x6, 0x8, 0x7, 0xd9, 0x1f7e, 0xff6d, 0x7, 0x6, 0x4, 0x0, 0xf488, 0x69, 0x6, 0x7, 0x4, 0x2, 0x2, 0x2, 0x7, 0x5, 0x1, 0x3ffc000, 0x8001, 0x5, 0xc6c, 0x7, 0x12a6071e, 0x1d4, 0xbde, 0x3, 0x1, 0x1c, 0x80000001, 0x7, 0x2, 0xfffff9ad, 0xfffff395, 0x401, 0x80000001, 0x8, 0x7, 0x10, 0x3, 0x7fffffff, 0xfffffb9c, 0x2a, 0xfffffffe, 0x3, 0x9, 0xff, 0x6, 0xd, 0x5, 0xffff, 0xbf, 0x4, 0x4, 0xa3db, 0x6, 0x4, 0xd6, 0xe, 0x40, 0x3, 0xffffffff, 0x5, 0xfffffff8, 0x1000, 0x8, 0xc80c, 0x9, 0x7fff, 0x9, 0x1]}]}, @TCA_BASIC_EMATCHES={0x478, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x6b, 0x3, 0x2}, {0x5, 0x6, 0x49b, 0xf64c}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x2, 0x7, 0x7}, {{0x1, 0x1, 0x1, 0x1}, {0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x200, 0x8, 0x7f}, {0x4, 0x0, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x2}, {{0x4, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0xcc, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2, 0x7, 0xd}, {{0x4, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x7}, {{0x1, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8000, 0x7, 0x2}, {{0x3, 0x1, 0x1}, {0x0, 0x1, 0x1}}}}, @TCF_EM_META={0x34, 0x2, 0x0, 0x0, {{0x18, 0x4, 0x7d1d}, [@TCA_EM_META_LVALUE={0x28, 0x2, [@TCF_META_TYPE_VAR="35a1058e80da8eeaa6", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="508912437a072f"]}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x1, 0x3, 0x3}, {0x9, 0x7ff, 0x9, 0x3}}}, @TCF_EM_META={0x3c, 0x3, 0x0, 0x0, {{0x7, 0x4, 0x7}, [@TCA_EM_META_RVALUE={0x17, 0x3, [@TCF_META_TYPE_VAR="ba7ef9", @TCF_META_TYPE_VAR="37ebb4d9d1", @TCF_META_TYPE_VAR="6a9be05226e857", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="c4"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x128, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xd, 0x3, 0x8000}, {0x4, 0x0, 0x2, 0xffffffff}}}, @TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x6, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0xb, 0x3, [@TCF_META_TYPE_VAR="1d923c436482b9"]}, @TCA_EM_META_RVALUE={0x7, 0x3, [@TCF_META_TYPE_VAR="dc", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="e8ae"]}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xb, 0x8, 0x1}, {0x0, 0x2}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x34a, 0x2, 0x2}, {0x6, 0x2, 0x1, "8147"}}}, @TCF_EM_META={0xc4, 0x3, 0x0, 0x0, {{0x0, 0x4, 0x80}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_VAR="1bd4b10dbd1a8f7e"]}, @TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x4}, {0x8, 0xa}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x101, 0x8, 0x1}, {0x81}}}, @TCA_EM_META_RVALUE={0x1b, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="54ab3139ba8dc5f457b6", @TCF_META_TYPE_VAR='I']}, @TCA_EM_META_LVALUE={0x13, 0x2, [@TCF_META_TYPE_VAR="2f94feef71", @TCF_META_TYPE_VAR="23df59bb01105f27f1f9"]}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_VAR="1c1d820a001180c0", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0x30, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="e37402dcd26ac1afe7df", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="249b20a3c96075b1b6", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="d4", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="5480ec98bcab", @TCF_META_TYPE_VAR="9be5660cdbe68619593a", @TCF_META_TYPE_VAR="bd"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x20c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1c8, 0x1, 0x0, 0x0, {{0x6, 0x9, 0x2}, [@TCA_EM_IPT_MATCH_DATA={0xb3, 0x5, "825a224d9574fe5c004fe75297ea509aaabea0c23c8be1bcc5cf2d4b6e8c5064d6cdf2a59e7c7d414fb0d4ba69dfa86d1b8a3e5608876fda843d2ad5476c7c92d1e22331cd01b26036bbf22f8f9c3e51769aa98db01f9414c5abdb54736cdf3ef66369dcb331b38c2ba8af84cce1270e94a15c42d99e13f931ae8b5ffd13a6be8f1117d6e216b7d490bcf1f67a06b9f5f06631d8250cf8767bd819a4dd0b2b43202be177e13638f0b9e97169207f59"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xd0}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_MATCH_DATA={0xbf, 0x5, "5746ee004fa5cdb1623873de1dee9c53686ae1066ed41b92f7c22e3d2db314789519c6cbb16f389818a96c295b426caba40cd5e171bddd6d16db847b4074c9b8b42e2b71a54aee45e3616c65b23f87cbad940956f2e2c45259c95c81fe6f9131d1e8ec4b589463d0ff76334d91f243dee96c206aaefde4286c60c1be3f043636d59a129544865fbe65623c4ac138dd3c26fd9e8cf5b1482e884263ec0c423bbc7f83d832b584dab3e978f206d92eaaef42b647cd0e6d5c6141f537"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7ff, 0x8, 0x200}, {0x2, 0x2, 0x4}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x3344, 0x3, 0x2}, {0x73, 0x0, 0x4, 0x1}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2, 0x7, 0x2aa}, {{0x4, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x8, 0x1, 0xe90}, {0x9, 0x5e32, 0x9, 0x2, 0x8}}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0xfff2}}, @TCA_BASIC_POLICE={0x488, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x200}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x3, 0x1, 0x8, 0x3, {0x7, 0x3, 0xd, 0x5, 0x7, 0x62}, {0x0, 0x2, 0x7, 0xffff, 0x30, 0x7}, 0x10001, 0xbe, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x6, 0x5, 0x7fff, 0x9, 0x10040, 0x4, 0xd, 0xc2, 0x3, 0x2, 0x8, 0x9, 0x3, 0x7, 0x1, 0x7ff, 0xef, 0x4, 0x81, 0x7, 0x8, 0x8, 0xffff26df, 0x81, 0x7, 0x3, 0x8, 0x7, 0xfffff653, 0xcf46, 0x1, 0x3, 0xbdb, 0x6, 0x3b1, 0xf3, 0x7, 0x7, 0x5, 0x0, 0x2, 0x1, 0x9, 0x812, 0x5, 0x8, 0x7f, 0x10001, 0x9, 0x4, 0x80000001, 0x6, 0x7bd2, 0xfffffff7, 0x1, 0x9, 0xc, 0xfffffff8, 0x8, 0x1, 0x7, 0x80000001, 0x11, 0xc, 0x1, 0xfffffffb, 0xb07, 0x1ff, 0x600f, 0x101, 0x200, 0x7cd, 0x10, 0xff, 0x6, 0x68, 0x5, 0x71, 0xfffe, 0x10, 0x6, 0x2, 0x100, 0x4, 0x0, 0x75c5, 0x7, 0x8, 0x2, 0x80, 0xfffffffc, 0xfffeffff, 0x80000000, 0x75, 0x6, 0x6, 0x6, 0x49a9, 0xe, 0x8, 0x4, 0x7, 0x2, 0xac94, 0x1, 0x5, 0x8, 0x307, 0x10000, 0x0, 0x9, 0x3ff, 0x5, 0x8, 0x0, 0xa, 0x5, 0x2e, 0x3, 0x5, 0x2, 0x28d, 0x0, 0x9, 0xfcf6, 0x10, 0xf, 0x1, 0x90000, 0x5, 0x17f6, 0x7, 0x6429, 0x9a91, 0x1897, 0x8, 0x3, 0x0, 0x3, 0x2, 0xfffffffb, 0x8, 0x7, 0x1, 0x8000, 0x3, 0x5, 0x1, 0x39e, 0x41681021, 0xdf, 0x6, 0x7, 0xffffffc0, 0x1ff, 0x2, 0x8, 0x0, 0x9, 0x3, 0x0, 0xffffffff, 0x8, 0x3, 0x21f, 0x2, 0x3, 0x0, 0x1, 0x3, 0x6, 0x80000001, 0x0, 0x3, 0x0, 0xa, 0x41, 0x0, 0x3746, 0x0, 0x8000, 0x7, 0x7, 0xdb0, 0x76, 0x52, 0xf, 0x100, 0x7b, 0xff, 0x8, 0xdd6, 0x8, 0x9, 0x4, 0x3, 0x1, 0x81, 0x1, 0x0, 0x2842, 0x5, 0xfff, 0x1, 0x3, 0x80, 0x3, 0xccdb, 0xa3, 0x80000000, 0x6, 0x2ef, 0xfffffff0, 0x9, 0x2, 0x1, 0x6, 0x1, 0x80000000, 0x2, 0xb, 0x571d, 0x8, 0x7, 0x441b, 0x0, 0x9, 0x2, 0x5, 0xe, 0x9, 0x81, 0x800, 0x9, 0x1, 0x6, 0x6, 0x7, 0x9, 0x4, 0x7fffffff, 0x6, 0xda, 0x9, 0x9, 0x87cb, 0x3ff, 0x5f5, 0x0, 0x3ff, 0x3, 0x2, 0xfff, 0x9, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x98b, 0x5, 0x4, 0x7, 0x0, {0xc, 0x2, 0x5, 0xbf25, 0x1000, 0x81}, {0x8, 0x1, 0xe6, 0x7, 0xea, 0x80}, 0x8, 0x3, 0xff}}]}, @TCA_BASIC_ACT={0x1d9c, 0x3, [@m_police={0x1d98, 0x1f, 0x0, 0x0, {{0xb}, {0x1ccc, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x7, 0x8, 0x0, 0x6, 0xfffff801, 0x7, 0x10001, 0x4, 0x6a9, 0x7ad, 0xfc7, 0x4, 0xc, 0x0, 0x2, 0x7, 0x0, 0x2db85924, 0x9, 0x4, 0xe, 0x2, 0x100, 0x6, 0x7, 0x401, 0xc99, 0x4, 0x22170c1a, 0x6, 0x1, 0x0, 0x9, 0x5d4, 0x60, 0xc, 0xfffffffd, 0x5, 0x6, 0x4b5, 0x8, 0x7, 0x5, 0xfffffffc, 0xffff, 0x2, 0x1000, 0x4071, 0x7f, 0x9, 0x38, 0x40, 0x3, 0x10000, 0x7, 0x3, 0x7ff, 0x58c, 0x5, 0x4, 0xf09d, 0x0, 0x7fff, 0xfffff563, 0x7, 0xdd9, 0x91, 0xf9, 0x6, 0x81cf, 0x6, 0xe5fd, 0x0, 0x4, 0xb, 0xfffffff9, 0x8, 0xffff5ba0, 0x8001, 0x0, 0x9, 0x8, 0x4, 0xfffffff8, 0x5, 0x9, 0xbef, 0x80, 0x8, 0x1, 0x10001, 0x5, 0x40, 0x6, 0x6d8, 0xb, 0x101, 0x8, 0x80000000, 0x7, 0x7, 0x200, 0xa, 0x5b9, 0x5, 0x8, 0x9, 0x3b8, 0x316, 0x7, 0x8, 0x8, 0xffffffff, 0x81, 0x6, 0x6, 0xfffffffe, 0x7, 0x7f, 0x1, 0xfffff001, 0xfffffffb, 0xffff, 0x1, 0x1, 0x7, 0x10001, 0x0, 0x5, 0x81, 0xf, 0x4000000, 0x9, 0x9, 0x0, 0x2, 0x7, 0x1, 0x8, 0x8000, 0x7, 0x8, 0x58, 0x0, 0x6, 0x3, 0x7, 0x7, 0x1, 0x5, 0x8, 0x2, 0x7d, 0x0, 0x0, 0x81, 0x1, 0x6c80, 0x4, 0x20000, 0x8, 0x2, 0x9, 0x400, 0x9, 0x3, 0x9, 0xffffffc2, 0x5, 0x4, 0x7f, 0xd, 0x7, 0x4, 0x4, 0x6, 0x8, 0x8, 0x101, 0xffffff74, 0x2, 0x7, 0x2, 0x5, 0x4, 0x3, 0xff, 0xfffffff9, 0x4, 0x7fff, 0x7, 0x5, 0xa48, 0x200, 0x1, 0x4, 0x1, 0xfffff000, 0xe48, 0x7, 0x8, 0xb2, 0x40, 0x5, 0x4, 0x5, 0x7ff, 0xffff, 0xfee, 0x0, 0xc991, 0xffffffff, 0x6, 0x4, 0x2, 0x7, 0x1, 0x8, 0xffffffff, 0x9, 0x4, 0xfffffff8, 0x2, 0x380000, 0xb77, 0x4, 0x6, 0x88, 0x350b, 0x80000000, 0x2, 0xbb3, 0x0, 0x9, 0x4, 0x2, 0x9, 0xfffffffd, 0x7, 0x4, 0x4, 0x1, 0x1, 0x30, 0xeb7, 0x7ff, 0xf, 0x6, 0x7, 0x9, 0x14b5, 0x0, 0x7a12b672, 0x7fffffff, 0x100]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x67334c0b, 0x6, 0x0, 0x2, 0x7, 0x6725, 0x635051c, 0x1, 0x4, 0x1, 0x5bc, 0x1ff, 0x10, 0x3, 0x7, 0xb63, 0x0, 0x7, 0x737, 0x7, 0x10000, 0xabba, 0x3, 0xd5, 0x7, 0x5, 0x2, 0x81, 0x1000, 0x9, 0x5, 0x9, 0x6, 0x6, 0x7, 0xcf1, 0xd7, 0x1ff, 0x1ff, 0x3, 0x3, 0x0, 0x375, 0x401, 0x4, 0xfffffffd, 0x7, 0x9, 0x6, 0x800, 0x4, 0x9, 0x1, 0x7e, 0xeb, 0x9, 0x7fff, 0xe0e, 0x73d, 0x100, 0x4, 0x8, 0x3, 0x81, 0x5, 0x906, 0x3, 0x23eb, 0x80000001, 0x1, 0x7f, 0x4, 0x9, 0x2, 0x5, 0x4, 0x6, 0x1, 0x17, 0x7, 0x4, 0x0, 0xdc, 0x7, 0x6, 0x8e, 0x7, 0x200, 0x1, 0x2, 0x3, 0x8, 0x0, 0x8, 0x5, 0x6, 0x2, 0x0, 0x1, 0xd4, 0xffff0000, 0x40, 0x6, 0x5, 0x401, 0x0, 0x5, 0x7f, 0x6, 0x4, 0xfffffffd, 0x64f, 0x7ff, 0x3, 0x1, 0x800, 0x2, 0x9, 0x80000001, 0x6, 0xffff, 0x10001, 0xe8, 0xf5ff, 0xffff, 0x9, 0x8000, 0x6, 0x2, 0x6, 0x9, 0xf6b, 0x0, 0xfc, 0x7, 0x3, 0x9, 0xfffffffd, 0x7, 0xfffff800, 0x6, 0x9, 0xa257, 0x6, 0x4, 0x6, 0x100, 0x7fff, 0x4, 0x10000, 0x10000, 0xfffffff9, 0x4, 0x0, 0x7ff, 0x4, 0x1000, 0x4, 0x6b79, 0x7, 0x9, 0x3, 0x8c, 0x1, 0x4, 0x697c, 0x6aeb, 0xb1d8, 0xa8c00000, 0x0, 0x7, 0x3, 0x8001, 0xab6, 0xfffffffd, 0x0, 0x3, 0x70e, 0x2, 0x30100, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x7fff, 0xffffff00, 0x45, 0x9, 0x8, 0x0, 0x4, 0xffff8000, 0x7ff, 0x3, 0x4, 0xfffffffe, 0x9, 0x3, 0x7, 0x4, 0x4, 0x80000000, 0x9, 0x2, 0x8001, 0x0, 0x38, 0x9, 0x1, 0x8, 0x12e4, 0x10001, 0x7, 0x4, 0x1, 0xc73, 0x22e5a6e7, 0x0, 0x10001, 0x2, 0x2, 0x7, 0xabd, 0x1, 0x7f, 0x5, 0x8, 0x8, 0xe, 0xfffffffa, 0x5, 0x5, 0x1000, 0x409, 0x8000, 0x1, 0x5, 0x5, 0xa393, 0x0, 0x2, 0x8, 0x1, 0x5, 0x0, 0x5, 0x8, 0x4, 0x9, 0x8, 0x662d6dfc, 0xfff, 0x6]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x7, 0x80000000, 0x844, 0xfffffff8, {0x7, 0x2, 0x2, 0x10, 0x6, 0x4}, {0x7f, 0x1, 0x3, 0x6, 0x1, 0x7}, 0x8, 0x9, 0x401}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0xffff0000, 0x7, 0x1, 0x2, 0xfffffff7, 0xfffffff2, 0x8, 0x7147, 0x10000, 0x8, 0x1, 0x40, 0x400, 0x10000, 0x3, 0x10000000, 0x4, 0x0, 0xe, 0x6, 0x6, 0x2, 0x9, 0x6, 0x80, 0x100, 0x3, 0x2, 0x4, 0x8, 0x7, 0x1ff, 0x8, 0x5, 0x4, 0x8ea, 0xb42, 0x1ff, 0x2, 0x0, 0xd54, 0xfffffffa, 0x965, 0xfffffff2, 0x8, 0x39, 0x8, 0x9, 0x6, 0x121dced9, 0x6, 0x99d4, 0x5, 0x3, 0x4, 0x0, 0x4, 0x5, 0x101, 0x8, 0x1, 0xf2, 0xd, 0xd0a, 0xa, 0x9, 0x0, 0xe, 0x5f9, 0x200, 0x2, 0x7fffffff, 0x3, 0x8, 0x64, 0x9, 0x80000000, 0x10000, 0xb, 0x8, 0x100, 0x1, 0x80000000, 0xd8a9, 0x4, 0xc9a, 0xff, 0x3ff, 0xfffffff9, 0x3, 0x4, 0xfffffff7, 0x2, 0x3, 0x81, 0x7fffffff, 0x3, 0x7, 0x1a60000, 0x0, 0x7, 0xfffffffc, 0x3, 0xb, 0x100, 0x7cf1ee4, 0x3, 0x3, 0x8, 0x8, 0x4, 0x9, 0x2, 0xd, 0x604, 0x8a, 0x5f, 0x0, 0x7ff, 0x819e, 0x5, 0x7, 0x8410, 0xfffffff9, 0x8, 0xfffffff2, 0x8, 0x673b, 0x18df5153, 0x8, 0x7, 0x10001, 0x409e, 0x800, 0x8001, 0x6, 0x4c71, 0x9, 0x4, 0xfffffffa, 0x8, 0xae, 0x10001, 0x5, 0x8b, 0x4, 0x80000000, 0x10000, 0x80000001, 0x9, 0x2, 0xd1, 0x10, 0x6, 0x1ff, 0x0, 0x101, 0x3677, 0x2800, 0xc28a, 0x3, 0x9, 0x5, 0xfffffffd, 0x3, 0x3, 0x81, 0x7, 0x5, 0x1, 0x81, 0x7fffffff, 0xfae, 0x54fa17, 0x1, 0xffffff80, 0x3, 0x8, 0x100, 0xe, 0xbb5, 0x8, 0x9, 0x3f, 0x5, 0x2, 0x0, 0x5, 0xe965, 0x2, 0x6, 0x77, 0x3, 0x7, 0x2, 0x40, 0x7f, 0xd6, 0x3, 0x5, 0x2, 0x1, 0x5, 0x3, 0xbcc, 0xfffffffa, 0x3a6, 0x5, 0x2, 0x80000000, 0x2, 0xffff8188, 0x6, 0xffffffff, 0x71c0, 0xfffffe01, 0xdf, 0x2, 0x5, 0x400, 0x3, 0x1, 0xba, 0x2, 0xb205, 0x8, 0xd600, 0x400, 0x7, 0x80, 0x1, 0xad5, 0x3, 0x4, 0x4, 0x2, 0x6, 0x4, 0x0, 0x5d, 0x7f, 0x77, 0x5, 0x0, 0x0, 0xfd8, 0x3, 0x31, 0x8, 0x8, 0x8, 0x1, 0x7f, 0x0, 0xfffffff7]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xfff, 0x43, 0x5, 0xffff, 0xfffffffb, 0x4, 0x6, 0xe3f, 0xffffa329, 0x4, 0x7, 0x2, 0x4, 0x1, 0x7, 0x9, 0x67a, 0x8, 0xfff, 0x0, 0x0, 0x5, 0xfc5, 0x8, 0xb, 0x5, 0x1, 0x3, 0xfffffffe, 0x80000001, 0x7, 0x5, 0x6, 0x1, 0x9c1, 0x0, 0xc0, 0x0, 0x4, 0x4, 0x5, 0xffff8000, 0x7, 0x4, 0x9bbe, 0x8001, 0x1, 0xa, 0x3, 0x9, 0x1000, 0x571, 0x1, 0x4, 0x3, 0x5, 0x9, 0x0, 0x2, 0x0, 0x80, 0x9, 0xf, 0xbd, 0xffffffff, 0x9, 0x0, 0x1, 0x800, 0x1ff, 0x2, 0x2252, 0x65000000, 0x3f6, 0x4, 0xfffffe00, 0xe, 0x8, 0xd, 0x8, 0xd, 0xf0a, 0x10, 0x0, 0x7ff, 0x5, 0x41, 0x8b, 0x101, 0x36c5, 0x3, 0xff, 0x8, 0x0, 0x8, 0x10001, 0x1, 0x8b, 0x9, 0x10, 0x5, 0x1d, 0x1, 0x73, 0x4, 0x7, 0x4, 0x7, 0xd906, 0x2ffd, 0x6, 0xe, 0x8, 0x1000, 0x781f3e41, 0x6, 0xa, 0x5, 0x7d, 0x100, 0x100, 0x8, 0x3c, 0xcd, 0x95c, 0x3, 0x3, 0x62, 0x7fff, 0x7, 0x1, 0x3, 0xff, 0x3, 0xff, 0x80000001, 0xd3, 0x7, 0x0, 0x8, 0x7ff, 0x8, 0x1, 0x7fff, 0x10000, 0x8ab7, 0x8001, 0x3ff, 0x2, 0x0, 0x9, 0x8, 0x6, 0x401, 0x4, 0x2, 0x1, 0x80000000, 0x4, 0xf, 0x3, 0x84, 0x9, 0x7, 0x1, 0x7, 0x8, 0x2d, 0x648, 0x8, 0x8, 0x1, 0x3, 0x1, 0x0, 0x5, 0x4, 0x307a, 0xfff, 0x5, 0x1, 0x3ff, 0x1, 0x7fffffff, 0x101, 0x5, 0x3, 0x4, 0xffffffc0, 0xdf, 0x34, 0xffffe20e, 0x7fffffff, 0x50, 0x2, 0x2, 0x3, 0x5, 0x546, 0x9, 0x10, 0x2, 0x2477, 0x0, 0x2, 0x3656, 0x5, 0x0, 0x8, 0x3, 0x8, 0x7f, 0x10000, 0xfffffffb, 0x690, 0x9, 0x7d, 0x0, 0xff, 0x10001, 0xfff, 0x80, 0x0, 0x2, 0xe, 0x7f, 0xffffffff, 0xfffeffff, 0x565, 0x7, 0xed, 0x0, 0x9, 0x3, 0xffffffff, 0x6, 0x1, 0x800, 0x0, 0x4, 0x2, 0x8, 0x6, 0x8, 0x4, 0x3, 0xc, 0x7, 0x9, 0x0, 0x6, 0x7, 0xdde6, 0x7fff, 0xfff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xe}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7ff}, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0x7, 0x6, 0x7, 0x3, 0x5, 0x7, 0x1, 0x7ff, 0x1, 0x6, 0x8, 0x40, 0x6, 0x7, 0x3, 0x0, 0x80, 0x9, 0x4, 0x8001, 0x9, 0x6, 0x3, 0x3aed, 0x9, 0x8, 0xffffff72, 0x7, 0x9, 0x3, 0xfffffff8, 0x45d, 0xeed, 0x3, 0x8, 0x2, 0x1ff, 0x3, 0xc, 0x8000, 0x200, 0x8, 0x40, 0x10, 0x80000000, 0xffff, 0x2, 0x8000, 0x5, 0x6, 0x5, 0x0, 0x7, 0x5, 0xf21, 0x5, 0x9, 0x8, 0xa1, 0x2, 0xfff, 0x55c0, 0xffffffff, 0x7, 0x5, 0x10001, 0xca0, 0x80, 0x2, 0x101, 0x9763, 0x7, 0x4, 0x1, 0x2, 0xffffffc0, 0x0, 0x750e, 0xfffffaca, 0x5, 0x55aa, 0x1, 0x3, 0x0, 0xc, 0x81, 0x7, 0x5, 0x3, 0xd3, 0x7fffffff, 0x3, 0x9, 0x0, 0x6, 0x400, 0x9, 0x2, 0x4, 0x1, 0x1, 0x401, 0x56e, 0x7, 0xff, 0xfffffffd, 0x4, 0x7fffffff, 0x6, 0x0, 0x2, 0x4, 0x1, 0xe0000000, 0x6, 0x1000, 0x40000000, 0x9, 0x81, 0x4, 0x4, 0x2, 0x5, 0x6, 0x0, 0x808000, 0xf1eb, 0x5, 0x9, 0x3, 0x0, 0x6, 0x101, 0x9, 0xfb, 0x2, 0x4, 0x400, 0x800, 0x8, 0x3, 0x100, 0x9, 0x4, 0x1, 0x7, 0x81, 0x3ff, 0x101, 0x4, 0x20, 0x3ff, 0x2, 0x0, 0x3, 0x2, 0xd0, 0xfffffffa, 0x5, 0x2, 0x1, 0x0, 0x8, 0x2, 0x7f, 0xb528, 0x0, 0x3, 0x6, 0x6, 0x100, 0xffffffff, 0x1, 0x8, 0x9, 0x75cf, 0x6, 0x10, 0x4, 0x9, 0x8001, 0x48b, 0x1, 0x1ff, 0x2, 0x1, 0x7, 0x1, 0x6, 0x2, 0xfff, 0x7, 0x4, 0x8, 0x1, 0x4, 0x21a, 0x3, 0x0, 0x7, 0x3ff, 0x56dd3c71, 0x2, 0x6, 0xd, 0x2000, 0x9, 0x3, 0x101, 0x0, 0x7, 0x5, 0x7, 0x10, 0x6, 0xff, 0x1, 0x9, 0x9, 0x79d, 0x8, 0x1, 0xefb, 0x3, 0x0, 0x1, 0x2, 0xff, 0x2, 0x1, 0x5, 0x82, 0x0, 0x2, 0x7ff, 0x1, 0x4, 0x3, 0x9, 0x24, 0x2548, 0xffffffff, 0x9, 0x2351, 0x8001, 0xff, 0x99322f2d, 0x6, 0x5, 0xffffffff, 0x9, 0x5, 0x7, 0x0, 0x1]}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xb672}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x151, 0x9, 0x80000, 0x8, 0x100, 0x0, 0x8, 0x6, 0x9, 0x1, 0x4, 0xf, 0x1, 0x8, 0x3, 0x9, 0x7, 0x80000000, 0x58, 0x3, 0x6, 0x3d, 0x8, 0x4, 0xfffffffd, 0x80000000, 0x2, 0x800, 0x100, 0x4, 0x6, 0xfffffc00, 0x7, 0x5, 0x3, 0x2, 0x7fff, 0xffffffff, 0x4d4e, 0x2, 0xe, 0x0, 0xfdf, 0x8, 0xfff, 0x6, 0x5, 0x5, 0xffffffff, 0x3ff, 0x5, 0x8, 0x5, 0x7f, 0x6, 0x1000, 0x6, 0x2dc, 0x7, 0x4, 0x0, 0xffff0000, 0x7f, 0x8, 0x5, 0x6, 0xfffffbff, 0x7a, 0x1, 0x1, 0x7, 0x7, 0x10, 0x5, 0x3, 0x0, 0x62c, 0x2, 0x76da, 0xfffffffd, 0x4016, 0xfffff599, 0x5, 0x0, 0x6, 0x7fffffff, 0x5, 0xf3, 0x9, 0xa6, 0x8000, 0xb, 0x80000001, 0x5fb, 0x1, 0x1, 0x2, 0x1, 0x3ff, 0x3b2, 0x2, 0x3095, 0x5, 0x4, 0x9, 0x7, 0x7, 0x1, 0x2, 0x800, 0x5, 0x0, 0x0, 0x1, 0xaee, 0x0, 0xbb, 0xa, 0x6, 0xb, 0x8, 0x47, 0x5, 0x800, 0x4, 0x6, 0xffff, 0x5, 0xc, 0x1, 0xfffffff8, 0x2, 0x6, 0x400, 0x22fc, 0x6, 0x8, 0x8, 0x7, 0x8, 0x5, 0xfffffffc, 0x9b, 0x5, 0x4, 0xfffffff9, 0x2, 0x2, 0x400, 0x0, 0x1, 0x2, 0x0, 0x707c, 0x4, 0x5, 0x1, 0x6, 0x0, 0x2, 0xf, 0x2, 0x2, 0x7, 0x4, 0x9, 0x4, 0x5, 0xd, 0x9, 0x2, 0x3, 0x4, 0x2, 0x1, 0x4, 0x1, 0x1de538a, 0x2, 0x57d1, 0x2, 0x9, 0xb5d, 0x3, 0xfffffff8, 0x1, 0x2, 0x4, 0x9, 0x20000000, 0x24, 0x8, 0xc, 0x0, 0x35, 0x4, 0x3, 0x6, 0x1, 0x4fc9, 0x1d, 0x23ac, 0x4, 0x4, 0x3, 0x2f45, 0x9, 0x204de630, 0x80000000, 0x35, 0x2, 0x6, 0xb2, 0x3ff, 0x5, 0x6, 0x28, 0xa, 0x8, 0xf852, 0x90f, 0x1d2, 0x43, 0x1ff, 0xfc40, 0x6, 0x5, 0x3, 0x40, 0xaca, 0x1, 0x7, 0x7fffffff, 0x3, 0x800, 0x4, 0x8, 0x401, 0x3, 0x3, 0xf0, 0x2, 0x5011, 0x400, 0x0, 0x2, 0xfffffffa, 0x80000001, 0x12, 0x53, 0xf98, 0x10001, 0x1ff, 0x4, 0xfffffffe]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x80, 0xfffffffa, 0x1, 0x1, 0xff06, 0x3, 0x6, 0x1, 0x2727bd74, 0x17, 0xf67f, 0x5, 0x2, 0xffffffff, 0xf38, 0x7, 0x7, 0x6, 0x10001, 0x67, 0x5, 0x9, 0xd, 0x8001, 0x2, 0x12, 0x54a, 0x1, 0x1, 0x7, 0x80000000, 0x1, 0x259, 0x0, 0x3, 0x40, 0x8, 0x5, 0x4, 0x8, 0xffffff80, 0xe4b, 0x3, 0x40, 0x10, 0x710, 0x9, 0x8, 0x100, 0x8, 0xfee, 0x2, 0x0, 0x2, 0xfff, 0x2, 0xb12f, 0x9, 0x6, 0x8, 0x9, 0x5, 0x2, 0x2, 0x0, 0x3ff, 0xd, 0x800, 0xffffffff, 0xc, 0x8, 0x67, 0x3, 0xffff8001, 0x81, 0x10000, 0x3, 0x5, 0x8, 0x4, 0x4c, 0x3, 0x1ff, 0x4, 0xf7, 0x10000, 0xdc, 0x0, 0x5, 0x1ff, 0xdcba, 0xffff, 0x1, 0x1, 0x5, 0x9, 0x1, 0x10, 0x6, 0x7, 0x3, 0x6, 0xaf4a, 0x5, 0x2, 0x8, 0x6, 0x3, 0x380, 0x80, 0x7, 0x0, 0x7fffffff, 0x2, 0x3, 0xfff, 0x6, 0x2, 0x9, 0xe83, 0x5, 0xfffffffc, 0x10, 0x7ff, 0x2355, 0x3f, 0xca0, 0x7, 0x80000001, 0x6, 0x7, 0x1, 0x4, 0x7f, 0x2c434801, 0xb, 0xffffe9f8, 0x4, 0x10000, 0x5, 0x100, 0xf6, 0x4, 0x6, 0x3, 0xfffffff9, 0xe, 0x4, 0x401, 0x9, 0x7, 0x3, 0x0, 0x2, 0x3c4, 0x101, 0x1b9a, 0x2, 0x1, 0xffffff33, 0x6, 0x0, 0x4, 0x9, 0x2, 0x5, 0x21c7, 0x8, 0x40, 0x1, 0x2, 0x8f7, 0xd526, 0x5, 0x6, 0x5, 0xfffffff1, 0x8, 0x93, 0xfff, 0x8000, 0x8000, 0xf, 0x7, 0x8, 0x671, 0x4, 0x8, 0xa64, 0x8, 0xfffffeff, 0x100, 0xb4e, 0x9, 0x5, 0xff, 0xfffffff7, 0x1000, 0x0, 0x1e0dba8a, 0x100, 0x0, 0x0, 0x7fffffff, 0xfffffffe, 0x7a, 0x3, 0xb, 0x6, 0xdc, 0x8001, 0xffffe301, 0x6, 0xa0fc, 0xdf, 0x4, 0x9, 0x6, 0x3, 0x100, 0x9, 0x3, 0xffffdc44, 0x10000, 0x7, 0x81, 0x81, 0x7, 0x8, 0x1, 0x1c5c, 0x3, 0x2, 0x40, 0x1, 0x0, 0xf68, 0x4, 0x3, 0x3, 0xffffffff, 0xa, 0xb, 0x10000, 0x4, 0x7fffffff, 0x9, 0x9, 0xb38f, 0x2, 0x5ffa, 0x1000, 0xb59, 0x7ff, 0xc]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe1a4}]]}, {0xa2, 0x6, "362bc2964e0eb6cf8ed6a36936c05a0969f6a5fd21305e205f561c665ad806ee1e54c93041a140e73b048757646c2a301ed913f32a01b5ed3a21793d137e912685a22f20aaee6df97f90736a426690db38c923225b8b5728460c7132e523d360f91ec28aa1a725ac72af166d11856b9422df8054f0f84fb28056afa9d140f496c6a707977c889681c7ae987dbac40d3c8db41eb89dac98f7d31072b8a360"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}}]}, 0x2f30}}, 0x0) sendto$inet(r1, &(0x7f0000003d00)="257b975df6d9e61182c3335419e33a7d38f6d37e601c8e42a4878c33a23830c0aa69d34be13d6da6616e2590207a5a6e07c4cce89a1602aacb2b42d618fef0e4d8b770f147e4f301c43ea73dc54b2a57c61c2d49ddeb842b587b8ff1e924c225c1fa99205672a8011beff4a96230ab91d1abc0d0c67eb0a0b26ed97f09b867a467e693a58b2826d239d708afff901bb9ff38e69fdae9d308f3f4562625", 0x9d, 0x80, &(0x7f0000003dc0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000003f40)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003f00)={&(0x7f0000003e40)=@newtaction={0xc0, 0x30, 0x9, 0x70bd2c, 0x25dfdbfb, {}, [{0xac, 0x1, [@m_bpf={0xa8, 0xe, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8001, 0x6, 0x10000000, 0x0, 0x21e}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x4, 0x80, 0x3, 0x8}, {0xde, 0x5, 0x80, 0x5}, {0xe, 0x2, 0x4, 0x8001}, {0x7, 0xe, 0x2, 0x1}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x149f, 0x800, 0xffffffffffffffff, 0x7f, 0x9}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}]}, {0x1a, 0x6, "fefa492a255a4e2f2d1460fe4fbd2e1df31a1d43b645"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4010}, 0x8004) ioctl$EXT4_IOC_GETSTATE(r10, 0x40046629, &(0x7f0000003f80)) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000004080)={&(0x7f0000003fc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000004040)={&(0x7f0000004000)={0x24, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_FAMILY={0x5, 0xd, 0x28}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000001) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r11, &(0x7f0000004180)={&(0x7f00000040c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000004140)={&(0x7f0000004100)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4008011) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000041c0)={0x0, 0x82bb}, &(0x7f0000004200)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000004240)={r12, @in6={{0xa, 0x4e20, 0x5, @loopback, 0x8}}, [0x9, 0xd, 0x3, 0x400, 0x2d, 0x7fffffffffffffff, 0x7052, 0x5, 0x7fffffff, 0x9, 0xb277, 0x5, 0xfffffffffffff800, 0x200, 0x7fffffff]}, &(0x7f0000004340)=0x100) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000004440)={{{@in6=@private2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000004540)=0xe8) sendmsg$netlink(r2, &(0x7f0000004940)={&(0x7f0000004380)=@kern={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000048c0)=[{&(0x7f00000043c0)={0x6c, 0x14, 0x800, 0x70bd27, 0x25dfdbfc, "", [@generic="1f715feba27112d9ce6b99222714291325ff35a9d2e27058ea39e233eeb8ecefcfa60941a448fb0411702a28dc8608af9b5446092e972260810cc87f858b6479e37a09f86037c57654a5e064362d844110d5d30c6b34bb010e4c"]}, 0x6c}, {&(0x7f0000004580)={0x328, 0x3b, 0x502, 0x70bd2d, 0x25dfdbfe, "", [@nested={0x1d8, 0x13d, 0x0, 0x1, [@generic="76edabb752e425baaf4619f8a8a54529d10e1e920b12b15b99336d4ed8e6657208a8365ddec4a1b48bab0d3d7b3a2d6ce87ef64f664a12e04a45cf851274aa5d7535d8d73220795c3ea3105786c95d7d4347c6c8924fd624326618b3636730b9cf56b69552fa1087e8d9cb2a4fe45e759f17ceffdcfc19fd57628cc141af7bf1896810ca3d61dc1f171701c3e90902fda7ba76ad47489e46a3cd81045fc0d1b3d8d802aa2748e64d3cf29ab6b041b7fcb1bf6791d621e7ecda82d671fa985a3519dfe0a7a397a854bf0b10095bacc489f285177c496a60aa20b134e556647f16be9dc546cfab33d5fb15beb7567e137d7055", @typed={0x8, 0xca, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x144, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="f1e5c3c0567d4ec1e984cfe0abe1840a2190f97ae51a9badad40fd51bec2ff2bd81a8247f57da3409e8f5d071c0cea3ca2b89ef159f2e30193633c4cfb3052d7ff39eb8c3ad23d71a2027a300830f93249a8a2f7eb", @nested={0x4, 0x109}, @generic="48bfcc4f9a55accaf115ab26cd42b7559ad6f18cbdbd63fc91b0e1a1c074305f61cdf67b346410216eb6c471d8caf9167af127d3a4189d925b554ee0b6cfeffe5a1e3545f23588b0a65a2f1c2dcf6e8b34a148d1e63acb48f3ae4c40c6bfbc7ed3310f3f057fa6f94b6f505f7d5919961080daef9709c711c2"]}, @generic="deaab012fe60adaa9fd0d78becea8f47297abf6fe3f0b471e5430b642d883e56f2b3969def2716c95d3e96100a56a3d1c50ae9988e5b0bdb8829f8d7927f2b2fa52657101a137c67102c35b08c257777a65123de9e4a5ec566edf363039d0943fcfee2d21533d578810ef39edf550c874553e335e0186643b1200c3c1ae154cb7d16f1cfd1685ac2078cbfdd920809ecb586863a077c073d2ac1417cf539ae8dfc2520e866361b3299d468e3021a1db2d370b853bfd8b1a757", @typed={0x5, 0x118, 0x0, 0x0, @str='\x00'}, @nested={0x36, 0xe5, 0x0, 0x1, [@typed={0x8, 0xa8, 0x0, 0x0, @u32}, @generic="d117f6e3f74cd7c33359bdebae1de5d6d47f971b194103266170f8b799fec3fce61814e09ac1", @nested={0x4, 0x6}]}, @typed={0x8, 0xea, 0x0, 0x0, @ipv4=@loopback}, @nested={0x18, 0x14f, 0x0, 0x1, [@nested={0x4, 0xe4}, @typed={0xc, 0x15b, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0x14c}]}, @nested={0x24, 0x7d, 0x0, 0x1, [@typed={0xc, 0x7, 0x0, 0x0, @u64=0x2}, @nested={0x4, 0x114}, @nested={0x4, 0x5}, @typed={0x8, 0x65, 0x0, 0x0, @uid=r13}, @nested={0x4, 0x157}]}]}, 0x328}], 0x2, &(0x7f0000004900), 0x0, 0x48044}, 0x20004010) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000004a80)={&(0x7f0000004980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004a40)={&(0x7f00000049c0)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008000}, 0x20008010) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000004b00), r1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r6, &(0x7f0000004d00)={&(0x7f0000004ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004cc0)={&(0x7f0000004b40)={0x148, r14, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x4}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x1}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x55e6}, {0x6}, {0x8, 0x13, 0x9}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffd}, {0x6, 0x11, 0x200}, {0x8, 0x13, 0xa5a}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x3}, {0x5}}]}, 0x148}, 0x1, 0x0, 0x0, 0x8000}, 0x44) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f0000004d80), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000004e40)={&(0x7f0000004d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004e00)={&(0x7f0000004dc0)={0x28, r15, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 917.069727ms ago: executing program 0 (id=5438): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) socket$kcm(0x2, 0xa, 0x73) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 914.341208ms ago: executing program 6 (id=5439): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) connect$phonet_pipe(r0, &(0x7f0000000280)={0x23, 0x0, 0x34, 0x7}, 0x10) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000240), &(0x7f0000000400)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x3}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1824da62058e37326524c03b2200000000006110"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x14}, 0x40000) socket(0x2, 0x80805, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r1, 0x0) (async) close(0x3) (async) connect$phonet_pipe(r0, &(0x7f0000000280)={0x23, 0x0, 0x34, 0x7}, 0x10) (async) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000240), &(0x7f0000000400)=0x8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x3}, 0x14}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1824da62058e37326524c03b2200000000006110"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) (async) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x14}, 0x40000) (async) 913.456919ms ago: executing program 3 (id=5440): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null]}) (async) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.current\x00', 0x0, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001540), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b708000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000580), &(0x7f00000005c0)=r9}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000580), &(0x7f00000005c0)=r9}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0xc, 0x1d, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @ldst={0x0, 0x0, 0x0, 0xa, 0x6, 0xffffffffffffffee, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xa1}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6f2a}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000500)='GPL\x00', 0x4, 0x1000, &(0x7f0000000540)=""/4096, 0x41100, 0x32, '\x00', r2, @fallback=0x35, r7, 0x8, &(0x7f0000001580)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000015c0)={0x4, 0x2, 0x6, 0x83}, 0x10, 0x0, r9, 0x5, &(0x7f0000001600)=[0xffffffffffffffff], &(0x7f0000001640)=[{0x1, 0x5, 0x7, 0x9}, {0x2, 0x5, 0xd, 0x1}, {0x5, 0x4, 0x4, 0x7}, {0x4, 0x5, 0xf, 0x5}, {0x4, 0x2, 0x2, 0x3}], 0x10, 0xbb1c}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0xc, 0x1d, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @ldst={0x0, 0x0, 0x0, 0xa, 0x6, 0xffffffffffffffee, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xa1}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6f2a}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000500)='GPL\x00', 0x4, 0x1000, &(0x7f0000000540)=""/4096, 0x41100, 0x32, '\x00', r2, @fallback=0x35, r7, 0x8, &(0x7f0000001580)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000015c0)={0x4, 0x2, 0x6, 0x83}, 0x10, 0x0, r9, 0x5, &(0x7f0000001600)=[0xffffffffffffffff], &(0x7f0000001640)=[{0x1, 0x5, 0x7, 0x9}, {0x2, 0x5, 0xd, 0x1}, {0x5, 0x4, 0x4, 0x7}, {0x4, 0x5, 0xf, 0x5}, {0x4, 0x2, 0x2, 0x3}], 0x10, 0xbb1c}, 0x94) ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x1, [@default, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) 855.636021ms ago: executing program 4 (id=5441): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)={0x14, 0x1e, 0x301, 0x20000002, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f0000000280), 0x0}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@getchain={0x54, 0x66, 0x109, 0x0, 0x0, {}, [{0x8}, {0x4}, {0x8}, {0x8}, {0x8}, {0x8}]}, 0x54}}, 0x0) 813.366887ms ago: executing program 3 (id=5442): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x350, 0xffffffff, 0xe0, 0x0, 0xe0, 0xfeffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [0xff, 0x0, 0xff000000, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'ip6erspan0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x23, 0x3, 0x2}, 0x2f2, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x4, 0x3}, {0xffffffffffffffff, 0x1, 0x1}, {0x3, 0x1, 0x6}, 0x10000}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x40}, @rand_addr=' \x01\x00', [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'pimreg\x00', {0xff}, {0xff}, 0x2c, 0x79, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r0], 0xe4}, 0x1, 0x0, 0x0, 0xc04c095}, 0x20050840) (async) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000540)=0x3, 0x4) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40844}, 0x810) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$can_bcm(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x6, 0x0, 0xfffffffe, {0x77359400}, {0x0, 0x2710}, {0x4}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "20df31e63824a588"}}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x10000, 0x30, 0x100, 0x2, 0x3, 0x7ff, 0x1, 0x1}}) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, &(0x7f0000000100)) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000180)='`', 0x1, 0x0, &(0x7f0000000240)={0x3a, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000500)={'wpan4\x00'}) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000008"], 0x50) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r10, &(0x7f0000000180)={0x0, 0xffffff1f, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0xd9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1e}]}, 0x28}}, 0x40004) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x15, 0x1, 0x2, 0xda7, 0x40a07, 0xffffffffffffffff, 0x2, '\x00', r6, r8, 0x5, 0x3, 0x5}, 0x50) 760.284824ms ago: executing program 4 (id=5443): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fc0803ff0000000000200000850000004100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="b5e379a5389bcfd05ad9ca72d507", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x9, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) 707.270449ms ago: executing program 6 (id=5444): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r4, &(0x7f0000000840)={&(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0xa, 0x45}, 0x0) (async) close(0x3) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 650.067307ms ago: executing program 6 (id=5445): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [{{0x254, 0x1, {{0x2, 0x8}, 0xc, 0x2, 0xffff, 0x8, 0x22, 'syz0\x00', "227a513b4727cf09017dfb2f86ebd65321aea1b6f5572c2d4a2ade8bf4caae18", "57e98866a64002aaded5d20fee4d4572520b120f8f8e437a2c18eb916ae26acb", [{0x120, 0x4, {0x1, 0x6}}, {0xd, 0x8000, {0x3, 0x4}}, {0x7, 0xfff5, {0x0, 0x6}}, {0x81, 0x8, {0x3, 0xeb2}}, {0x1, 0x7, {0x1, 0x7}}, {0x2546, 0x200, {0x3, 0x5}}, {0x6, 0x0, {0x3, 0x8}}, {0x5, 0x6, {0x0, 0x296d}}, {0x6, 0x9}, {0x5, 0x5, {0x1, 0x94f8}}, {0xfeb, 0xe, {0x3, 0xfffffff9}}, {0x10, 0x1, {0x3, 0x7}}, {0x2, 0x5, {0x0, 0x2}}, {0x7ff, 0x0, {0x1, 0xfffffff9}}, {0xaa, 0x4, {0x1, 0x7fff}}, {0x4, 0x100, {0x2, 0x3e9}}, {0x2, 0x4, {0x3, 0x8}}, {0x2, 0x0, {0x0, 0xd250}}, {0x401, 0x702, {0x1, 0xe}}, {0xfff7, 0x2f, {0x0, 0x2}}, {0x3, 0x8000, {0x3, 0x64fea32e}}, {0x7, 0x7, {0x3, 0x3}}, {0xfff9, 0x3, {0x3, 0x6a7}}, {0x47, 0x4, {0x0, 0x8}}, {0x2, 0x10, {0x0, 0x3}}, {0xb6, 0x1, {0x3, 0x1}}, {0x10, 0x1, {0x1, 0xfd}}, {0x4, 0x39c, {0x0, 0xffffffff}}, {0x5, 0x9, {0x0, 0x400}}, {0xdbd, 0xfffd, {0x2, 0xf}}, {0x3, 0x7ff, {0x1, 0x4}}, {0x6, 0x8, {0x3, 0x5}}, {0x800, 0x0, {0x3, 0x2}}, {0x5, 0x8f5, {0x3, 0x3}}, {0x9, 0xf, {0x2, 0xfffffff4}}, {0x0, 0x7}, {0x33df, 0x5, {0x1, 0x80000001}}, {0x93, 0x5, {0x1, 0x3}}, {0x8, 0x1, {0x2, 0x27da}}, {0x7, 0x48c, {0x2, 0xfff}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x841}, 0x40010) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a30000000000c000780080012000000000015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x5c}}, 0x0) 556.260896ms ago: executing program 5 (id=5446): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x409, 0x0, 0x8001, 0x1c, 0x3, 0x19, 0x4}}]}}]}, 0x148}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x5, 0x0, 0x0, 0xc, 0xfffffffc}, 0x9c) syz_emit_ethernet(0xc3, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa1708004500001400000000fd019078ac1e0001ac1414aa0300000003010000ac1414bbac141436867100000000000ce256b28c04000000fb520009789607675ca638000e7434954373561de584b703c80009e706d30bd224f80607cfa11cab1a0010c600000000000000000000000000000000037fe97612fe86001273bc2300ad9d19a30000000000000000060cc8f46976e79e56c7a95e860c0000000201067f36c5250000009ee54763f300f518c43800000000000000"], 0x0) 483.711658ms ago: executing program 3 (id=5447): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xff, 0x7}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f00000004c0), &(0x7f0000000500)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", '\x00', "4f9e86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r6, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 483.082344ms ago: executing program 6 (id=5448): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f00000023c0)={&(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000002340)=[{&(0x7f0000000140)=""/31, 0x1f}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/170, 0xaa}, {&(0x7f0000002040)=""/202, 0xca}, {&(0x7f0000002140)=""/218, 0xda}, {&(0x7f0000002240)=""/253, 0xfd}], 0x6, 0x0, 0x0, 0xc090}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000640)='dctcp', 0x5) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000100), 0x4) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r4, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[@timestamping={{0x14, 0x1, 0x4f, 0x3ff}}], 0x18}}], 0x1, 0x40440d1) write(r3, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r3) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000400)={{r3, &(0x7f0000000180)='ib\x00', 0x400000, &(0x7f0000000240)={@align=0x1, {0xfffa, 0x1, 0x2, 0x8}}, 0x401, &(0x7f00000002c0), &(0x7f0000000300)=0xfffffffa}, {[0x200, 0x4b, 0x40000, 0x8]}, 0x4, 0xbd, &(0x7f0000000340)=""/189}) ioctl$EXT4_IOC_GETFSUUID(r3, 0x8008662c, &(0x7f0000000080)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000700)={0x1c4, r6, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "158e45c7d0f963c533744203f87f78924b25d13e"}}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}]}, 0x1c4}}, 0x8801) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r5) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r7, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xea}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) 482.623495ms ago: executing program 4 (id=5449): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000100)="520003000100b8", 0x7) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) close(0x3) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x1d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) 453.787633ms ago: executing program 0 (id=5450): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x5}, &(0x7f0000000240)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000180)="392b5766e5", 0x5}], 0x1) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000047c0)=[{{&(0x7f0000000280)=@in6={0xa, 0x4e24, 0xfffffffb, @private0, 0x9}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)="1823f5bca48d08942253506101255512f9c8e3102fb74b677e79c2cdfb3e78c84ed7c82536", 0x25}, {&(0x7f0000000400)="2b645f3735f5abca79d8fe768cfd2107eca0f88d482f297da7af37b233e909b131737840632b34f8ce5c87e7fd0ae370860b39727b6af2e62aaae6df13013eefad28fd82cc22a08886bdd6a0470e7a27d09b7f8906cbd1", 0x57}], 0x2, &(0x7f00000004c0)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff8}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x60}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)="0df2cb6f7e393b9d103643932fa4a2cac4d7c05f1466de4fa3d77554e04f1450f5aa5fca27360c8e4c1aeb3db35a27b4133a7696ca8c6c9e37615b7a97b97d94bb8a125f658d", 0x46}, {&(0x7f00000005c0)="1b39483de7fba8dad32b674147b47ee8b0c2d53bae3858ac922aba4e27cae021d2506fa7b5a1919a12f03d2449a1f59f6c2a3be0dbe170d5065225c744aa76f09a22cd7b003a63e66ab3b1e781474f36c339caca43f709282b3fa2bc7781b326e672df342773f5f24eb7d83a34cb87581edff85e1e00929f1b5b19f2ad070e27bc23ce0c6c1a4b815e3d5ce68354b3e5654627e67474d173d2512dddd770ad03add86746e810d35e4403e3922d8a606f7ed689ddd8c98083a1e9b3dc77e864c17e15b95342c44d0b72b28bc75fd997680f5a273280315aadf499c9b78da147c355c9bd67f2b3daa180f322efe80ac4", 0xef}], 0x2, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18}}], 0x30}}, {{&(0x7f0000000740)=@sco, 0x80, &(0x7f0000000940)=[{&(0x7f00000007c0)="1c87e9e22e5d514c144f49d5f49430fb89e32a1d35d2b4da78593aba39c651b77f953133dcb397b505ee7af06f3e46b1d6b1b597a8097fa2008d520f55e45fd7535718112d97dffc7ce264d19683fd473d8cc9a72a313842b44d5d9b55bf85270902040027e72843ec71c7a1b81cd48f33b81867dbcdf6d8588fec403349bf1f26e8b21523fc02dcbe598f3a9c90d96758c449ad15250bba9c373c90ab871daa697d3d4b2a2b54646dcf0b99785fd33040fcdbecb31b4560746a21af4a021e3bf5b57c6f463ac375f248310421f3c5bd2e3ff19c5d71a773dbd557bd8324b54d54fa367b57a058d5afc2ea25643df0f97eac", 0xf2}, {&(0x7f00000008c0)="ccfae96408a7f921de2bb86c8654151d9bf9c5", 0x13}, {&(0x7f0000000900)="5c74401ab7000e5258606798ee5d4b93dc049837fbc060a389329bb1037e4fce8e9b88daa1ac29f5fc5a13bf26011fdab8", 0x31}], 0x3, &(0x7f0000000980)=[@mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14}}], 0x78}}, {{&(0x7f0000000a00)=@l2={0x1f, 0x2, @none, 0x4, 0x2}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000022c0)="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", 0x1000}, {&(0x7f00000032c0)="48c350bd84b1331d3f95fe1ce2f41f25ffa5c1b94dfa41185c829f3e916b9c716079bdb0b457d5005df81d6bf1204a844d9f009c7504e64daa4a6f2d127ae904c59d2dc94f7534fb878a7f77c46ec96c64bac772273ee5001c48d4bf412eded96da47b50fbc0eee70ca04fc8727926d508013af54132c4d330136789f6f98c4e6b69739570df8f2d9cfd036e5f8b50bef530641af94d165e2129291c0c27c0c5255c5801cd0ba9029f42acdd783a1f3230efb466726ab956f1a85a9240f3366957dcdac9a191aba33966", 0xca}, {&(0x7f00000033c0)="4c25727ee5fd3b2f244caf2abcdbfe251092b8fbfa6232a72c66afe204e66cb98bb8af27b8e33c866d11a587ae849ed62d8edefb2763b5e38af9349b5c59cf9f927a11873a91fe40c7447cf3a231ff20034cbdca106871ed011f4781d20ecb81cbb86c7d021b1554cc415094a49f277544bd77bda14771870efb0d86018892129ec79eebf4abf3ef851b9c57", 0x8c}, {&(0x7f0000003480)="0744147a9afac8c48b84ca62a730b380ec987e3ca7286b6278c59d22aff8046ef5e72b196547d1bbec7664567dc9c6bb0d37e07e91315f41448fc6", 0x3b}], 0x4, &(0x7f0000003500)=[@mark={{0x14, 0x1, 0x24, 0xa0}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x48}}, {{&(0x7f0000003580)=@in6={0xa, 0x4e20, 0x7, @private1, 0x800}, 0x80, &(0x7f0000004700)=[{&(0x7f0000003600)="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", 0x1000}, {&(0x7f0000004600)="c25db9c0fca005ece7b115f9ae21c399a83a25ab95c4ecd0bfcdaa6cf3d868f583dcef986913c03858e5c8be53a1b023c0ac53534e49c4f55dd7420d9edf4878", 0x40}, {&(0x7f0000004640)="9a44ef670e940868af67ddfc1666ba5ae2a7265d7068f7ca2bc9d27ef77bde53afc9cb3d463bc62a00fc2f9627cf886631a0107d8fccf82105b02c5a3f4853b5cc0ccf2d9ef6621eed04790c88d362efa8572c3b4eb7eaf6802b81e000039071e4fdf945da4d300e45b35e9a5b5223bc7379ef9eb567edbe838b656e1b256c00f313c92bcdf6ab7aabde5590c702eeaf087683d614c58439", 0x98}], 0x3, &(0x7f0000004740)=[@txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x2c5}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x60}}], 0x5, 0x4000) ioctl$SIOCAX25GETUID(r5, 0x891e, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xe, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x307000, 0x0) close(r11) socket$inet6(0xa, 0x400000000001, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20000004) pipe(&(0x7f0000000140)) 351.049384ms ago: executing program 6 (id=5451): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x44, 0x18, 0x1, 0x70bdac, 0x25dfdbfc, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44010}, 0x20040844) r3 = socket(0x1d, 0x2, 0x6) accept$inet(r3, 0x0, 0x0) 350.522293ms ago: executing program 5 (id=5452): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syzkaller1\x00', &(0x7f0000000140)=@ethtool_cmd={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeea, [0x1]}}) r3 = socket(0x1e, 0x805, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) connect$tipc(r3, &(0x7f0000000000)=@id, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) socket(0x10, 0x80002, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syzkaller1\x00', &(0x7f0000000140)=@ethtool_cmd={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeea, [0x1]}}) (async) socket(0x1e, 0x805, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) (async) connect$tipc(r3, &(0x7f0000000000)=@id, 0x10) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) (async) 291.818222ms ago: executing program 4 (id=5453): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x70}, [@ldst={0x5}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000009c0)={{r1, &(0x7f0000000200)='@\x86\x00', 0x84040, &(0x7f00000003c0)={@align=0x8, {0x8, 0x9, 0x8, 0x400}}, 0xc57, &(0x7f0000000400), &(0x7f0000000480)=0xaae7}, {[0x3, 0xf9a9, 0x7400000, 0x7]}, 0x3, 0xdb, &(0x7f00000004c0)=""/219}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, r5, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x1) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}]}]}, 0x70}}, 0x0) (async) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000640)={0x2e8, 0x15, 0x400, 0x70bd29, 0x25dfdbff, {0x29, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x65, 0x1, "be0fce26bfc2327658686cc88770dc99de88afa94aff55aa1e6753324310d47a89909a1dd17547d3fa735dd19d652452d3dafdff639307c044082155afcee1b9d5ff737812593a042cfe0766de3242f66657f453eb50cbfa25424cbd78059e5a3d"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "a31f76e59cf41eddde4fe0b77a61a3a1cc008960ab571234cd6c8be96dfc14b305ccfcd80b94cbcfca69f897fe092a42fc943a5826561805dcc2135b90a59d1c9fc30bb950b70642d8eafd004b19debe05"}, @INET_DIAG_REQ_BYTECODE={0x85, 0x1, "95b113b3b4a1a030a8164264e63491d6bd7973ef99d0cf17be1f4638536c9f22b7890f24c77e6f79d2c999e241139141a5d7f0515a391c727ca4d7bf54c47dc7ab2deaf9b975a5c337b6d8e3ea1f974a1b8712f61ad7809d34071805cb749e277a0e71efe826aae094e2c61d02a9ea261dd873e7c95dcdabb05143c2ee36c1c066"}, @INET_DIAG_REQ_BYTECODE={0x6f, 0x1, "5f8dc6e0750eba861ab4935d1deadb3c9ae4db6ee952f82ece3e9e63ae8279d3207d476801ba6a7f520c5ecb114bcd21fc6cd18d0b94afcbb1b4129ab9eb25e218cba47328a7671d64c9910defe2a03ee9815d2361c86917bc931eab725b4eabc2887b55e0eae9779f2733"}, @INET_DIAG_REQ_BYTECODE={0x80, 0x1, "7f62199b8fbe55f6d72be536d27d7ff41299e5b8810a8519e77cf0f14df8cdc9be58ee88bc4d957d8b5296a9526f2245fa99e0d2dd54249351030d5bd0e2ce65a0d940e2ce056b7331a7b9f2d38cff7334e654127cc1cae6d8ea9d674c936b6837f2a669b2137fffca8f453c7f842ce14e160015c8e9a7df848d2a72"}, @INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "de85ec2f912d85accd0605bb7163fb572f748c731d297f6c5665f35cf2d194b2735b82ebf2297b73a22b43aa9d6f113d43dab1d9690b671c271357cd7829cb9bafbc33fd7a53cc96ef662e1c4269d06645ebdc3215f00387ed98b84fb8e9d90fac947d5636fe1d9e918167f4fa78eeae5b2bc8a69c59b2f976a0c5469e76bcaebea19d62ef15f9652dcb98ade03f1f9fd8fe3884dd32d4"}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x800}, 0x104) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e401000000440004800500030005000000050003000100000005000300050000002000030001000000050003000500000055fe03000200000005000300000000000500030080ff000008000200020000000800010003"], 0x68}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 194.7144ms ago: executing program 4 (id=5454): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_BLACKHOLE={0x4}, @NHA_OIF={0x8}]}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000440)='vegas', 0x5) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030005000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES8=r2, @ANYBLOB="f7309b0000000000006f6e64000000000400"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x63, 0x63, 0x4, [@datasec={0x9, 0x7, 0x0, 0xf, 0x3, [{0x5, 0x2, 0x7b3f585e}, {0x2, 0x3, 0xd3}, {0x4, 0x2, 0x8}, {0xf, 0xfffffffe, 0x12d332a7}, {0x2, 0x4, 0x7}, {0xfffffffe, 0x40002, 0x7}, {0x2}], "9d01ea"}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x80}, 0x28) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r8}, 0x48) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x700) r9 = socket$packet(0x11, 0x2, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_subtree(r10, &(0x7f0000000200), 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r9, 0xc0385868, &(0x7f00000003c0)={r1, &(0x7f0000000240)='^\x00', 0x40000, &(0x7f0000000280)={@_ha_fsid={[0x3, 0xd]}, {0x52b2, 0x4, 0x800}}, 0x1bb, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000340)=0x81}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38}}) write$cgroup_subtree(r12, &(0x7f0000000480)=ANY=[@ANYRES32=r4, @ANYRESOCT, @ANYRES64=r11, @ANYBLOB="bfb57961f09cdb231ac606746bba77c9a189d6ddfa4f0dc974b46d1cdac6c9d696ecb0cfa65d416b38f6d5fb10", @ANYRES32=r3, @ANYRES64=r4, @ANYRESOCT=r3], 0x5) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32=r14], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) 156.753404ms ago: executing program 6 (id=5455): recvmmsg(0xffffffffffffffff, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10002, 0x0) (async) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e26, 0xfffffffe, @empty}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x49, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 7.165847ms ago: executing program 0 (id=5456): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000980)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000009c0)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@local}}, &(0x7f0000000ac0)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r8 = syz_open_procfs$namespace(r5, &(0x7f0000001780)='ns/ipc\x00') r9 = getpid() sendmmsg$unix(r4, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r9, r6}}}, @rights={{0x18, 0x1, 0x1, [r8, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00)={0x0}, &(0x7f0000000b40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000b80)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f0000000c80)=0xe8) r12 = getgid() r13 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r13, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200048c0) sendmsg$kcm(r13, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0xe3, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r14 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r14, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x20004844) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x6d}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) sendmsg$netlink(r1, &(0x7f0000000d00)={&(0x7f0000000000), 0xc, &(0x7f0000000940)=[{&(0x7f0000000480)={0x2f4, 0x2e, 0x10, 0x70bd2a, 0x25dfdbfb, "", [@typed={0xf0, 0x7d, 0x0, 0x0, @binary="f458f407bd23711fd970c0b662670c664556011b628ec2a97a2c7e69e01a076e287859dddf43fb6be0d8139f26680aa7e1380bdd927293e1c9ede7f5f9d1a3f19ec020025af4b83afb3392aa1f3d6cb23a57be3685c752f6cb941b395c4deab77f2029a95f94df687698c18976fc7174aebcdd986661e7d374f934f65edfbfd8ed528715fe0e4d00c96409efeaa194890ab458c4b65f873bb18e485c5543dd08aee9500f222489f717d7bfe39cf98c510a5676636ea32e2d0cbf18c181a8dede3b01220f5f7a825989ce1ba83de1a8248a3b884b4e55dfa17e1857f882cd75dc5ed2d994e6277f56521d8584"}, @nested={0x1d8, 0x6, 0x0, 0x1, [@typed={0xc, 0x1c, 0x0, 0x0, @u64=0x5}, @nested={0x4, 0xfc}, @typed={0x4, 0x9f}, @typed={0x7, 0x100, 0x0, 0x0, @str='](\x00'}, @generic="a4a1b81adc3dc9ad55cb00de021bf4d5f856904d0555c3df2cfb0913c73097732d88111af2edb48ed2d66e52e0f0841e5642a0c2d9c567044957c5b63c7b35fea0c72bc0609a88808cea7690231068d5628f82ccd5d666cf0dcdfe8711b4714bc569e01203dfa3ea25312bd3d803b22f579505e975cd185eec2552269ccfa3c163f62ed63d66cd5aeda26f1b329dcbe582c4774f18b7cee4ae2ef995598f6f44d9fb2ad8d4babdf38b035ed31b921b74c7aa80253aded789c9f0bb28918b9053df149484dbfdbe5e0188014c58330578873aa53e3bb2287057a35190214730601eae3ce2e49a66", @typed={0x14, 0xe6, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x14}}, @typed={0x4, 0xdd}, @generic="14b6304ddab9d2f5d04852d56776e71be66e7b9b5726f2a55e41b8382102c737395071e4ed3e7381ff54fae4d3f2d1e0a299ff4bd4ab81dce134907da334a4f938e615d7b36752296a4169b898c70903b7f132c249847c9e79c8058f2dd0597ccaee6c7e5813ff507092dd42e367b19a2bfa7dc372ce62375f85977e15cfb1bb7c38195a247fa4d3aedb7c17cb3ad67c19713fdeb7bbd52fd790bc363544f7a4a79039a8e3ea14796944c7a7e4c81532a2cecc031006d56818"]}, @typed={0x14, 0x42, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0x8, 0xfa, 0x0, 0x0, @ipv4=@multicast1}]}, 0x2f4}, {&(0x7f0000000780)={0x1c0, 0x3b, 0x200, 0x70bd27, 0x25dfdbfd, "", [@nested={0x8, 0x142, 0x0, 0x1, [@nested={0x4, 0xd4}, @generic]}, @generic="a4caf86455871b5a76e61321497dbd6f18c225c2b30afb08d6cb4f107509ad7337678e7e43f05bc8910b240a8dd4b689fe1f8bb78fcd448ff2189735b877ca24f78de98852978ad16258f4009941988a133e1cf48f7206ed05fe64b4b13648a11f4950c06435a8289e64ceef44cc0b2cf07bd8e186e4e03f5b2f68668e5c5ee6e5efd3cf608390ac95a69e8a35bd55ab15f255a288f5edf41c5469f8d3b7a019e4d1266208f97ba38076d2acc53f9dadf0dce69e597535974bc23d6a24921e0dbb6ce3d6aff014deb5fe3f926a0f0c407ae77ab558122b3482814af472040c0341a77cf2ee06d8578df2dc", @nested={0xbb, 0x14c, 0x0, 0x1, [@generic="b34e9c1a916b0d0e36a3208de70ce63c981c78105b931c04e8a6a0386cb5c14f8fb94519d1d1386e4ccab99cfc32de3c11e2a9c76294c6503b2c0b6b0d7cd0b2cc29c4e88eca402e6d657062c314d844edffab9f92b093732841af453de8131a9015036079d1da8422093303f30541ffe338a68216eb3b1e94256be612895c2ee27123e8c5441305528c49d80d4b80c5e7012e975f15d717b11c54dd210a749a35cc5a8e3920998170aeb588455e86fa964d608452cb13"]}]}, 0x1c0}], 0x2, &(0x7f0000000cc0)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r7}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}], 0x40, 0x80}, 0x20000000) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0x6) r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x80502, 0x0) ioctl$TUNSETIFF(r16, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 0s ago: executing program 3 (id=5457): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4811}, 0x40884) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff5, 0x4}, {}, {0x8, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) kernel console output (not intermixed with test programs): t 5740 ms [ 511.359354][ C0] lec:lec_tx_timeout: lec0 [ 511.366043][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 511.377297][T18169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3283'. [ 511.421424][T18169] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3283'. [ 511.458078][T18175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3284'. [ 511.738110][T18187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3286'. [ 512.285138][T18217] netlink: 'syz.0.3292': attribute type 4 has an invalid length. [ 512.293105][T18216] netlink: 'syz.0.3292': attribute type 4 has an invalid length. [ 512.772097][T18236] netlink: 'syz.4.3298': attribute type 83 has an invalid length. [ 513.136109][T18253] netlink: 'syz.4.3301': attribute type 1 has an invalid length. [ 513.242252][T18260] Bluetooth: MGMT ver 1.23 [ 513.578673][T18271] netlink: 'syz.1.3306': attribute type 1 has an invalid length. [ 514.225631][T18307] bond1: entered promiscuous mode [ 514.275341][T18307] bond1: entered allmulticast mode [ 514.286799][T18307] 8021q: adding VLAN 0 to HW filter on device bond1 [ 514.340446][T18319] xt_CT: You must specify a L4 protocol and not use inversions on it [ 514.575728][T18336] h: entered promiscuous mode [ 514.919267][T18354] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 515.100003][T18364] __nla_validate_parse: 6 callbacks suppressed [ 515.100023][T18364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3332'. [ 515.190438][T18370] openvswitch: netlink: Multiple metadata blocks provided [ 515.191417][T18373] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.3335'. [ 515.335092][T18381] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_vlan, syncid = 2, id = 0 [ 515.346389][T18378] IPVS: stopping master sync thread 18381 ... [ 515.406031][T18383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3339'. [ 515.508831][T18385] x_tables: duplicate underflow at hook 3 [ 515.527730][T18395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3339'. [ 515.652538][T18400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.665897][T18398] 8021q: VLANs not supported on tunl0 [ 515.842564][T18410] netlink: 'syz.1.3349': attribute type 3 has an invalid length. [ 515.856881][T18407] netlink: 'syz.2.3346': attribute type 1 has an invalid length. [ 515.864968][T18407] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3346'. [ 515.907062][T18410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.154744][T18422] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.162551][T18422] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.305987][T18422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.325673][T18422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.531583][T15318] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.571690][T15318] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.580838][T15318] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.631847][T15318] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.870248][T18466] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3364'. [ 517.004539][T18476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3368'. [ 517.024560][T18472] syzkaller0: entered promiscuous mode [ 517.042287][T18472] syzkaller0: entered allmulticast mode [ 517.201228][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 517.209347][ C0] lec:lec_tx_timeout: lec0 [ 517.216511][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 517.302714][T18491] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3371'. [ 517.370079][T18493] netlink: 'syz.4.3371': attribute type 1 has an invalid length. [ 517.449989][T18493] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 517.518712][T18490] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3371'. [ 517.588591][T18490] nbd: device at index 64 is going down [ 517.807310][T17417] udevd[17417]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 517.824393][T18507] netlink: 'syz.1.3375': attribute type 1 has an invalid length. [ 517.843465][T18507] netlink: 'syz.1.3375': attribute type 1 has an invalid length. [ 517.865229][T18507] netlink: 'syz.1.3375': attribute type 9 has an invalid length. [ 517.879078][T17417] udevd[17417]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 517.890490][T18507] netlink: 'syz.1.3375': attribute type 11 has an invalid length. [ 517.918971][T18507] netlink: 'syz.1.3375': attribute type 12 has an invalid length. [ 517.944313][T18507] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.3375'. [ 518.034156][T18520] xt_hashlimit: size too large, truncated to 1048576 [ 518.417043][T18542] syzkaller0: entered promiscuous mode [ 518.422882][T18542] syzkaller0: entered allmulticast mode [ 519.463028][T18617] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 519.638882][T18630] syz_tun: refused to change device tx_queue_len [ 519.970131][T18642] sctp: [Deprecated]: syz.1.3412 (pid 18642) Use of int in max_burst socket option deprecated. [ 519.970131][T18642] Use struct sctp_assoc_value instead [ 520.054966][T18642] lo speed is unknown, defaulting to 1000 [ 520.155862][T18659] __nla_validate_parse: 6 callbacks suppressed [ 520.155884][T18659] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3417'. [ 520.185645][T18659] netlink: 'syz.3.3417': attribute type 10 has an invalid length. [ 520.197911][T18659] team0: Device ipvlan1 failed to register rx_handler [ 520.948162][T18698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3429'. [ 520.993445][T18698] tc_dump_action: action bad kind [ 521.067176][T18710] netlink: 'syz.0.3432': attribute type 62 has an invalid length. [ 521.084592][T18710] netlink: 'syz.0.3432': attribute type 1 has an invalid length. [ 521.343699][T18710] 8021q: adding VLAN 0 to HW filter on device bond2 [ 521.533678][T18735] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3440'. [ 522.059660][T18770] syzkaller1: entered promiscuous mode [ 522.072834][T18770] syzkaller1: entered allmulticast mode [ 522.231911][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 522.239983][ C0] lec:lec_tx_timeout: lec0 [ 522.245039][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 522.248057][T18785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3452'. [ 522.379916][T18792] openvswitch: netlink: IP tunnel TTL not specified. [ 522.401828][T18786] vlan3: entered allmulticast mode [ 522.407105][T18786] bridge1: entered allmulticast mode [ 522.549655][T18798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3456'. [ 522.597666][T18803] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3457'. [ 522.626532][T18803] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3457'. [ 522.872583][T18817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3461'. [ 522.923238][T18818] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3464'. [ 522.963791][T18818] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3464'. [ 523.235392][T18838] raw_sendmsg: syz.4.3467 forgot to set AF_INET. Fix it! [ 523.418653][T18842] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 523.708112][T18819] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 523.806769][T18855] syzkaller0: entered promiscuous mode [ 523.818953][T18855] syzkaller0: entered allmulticast mode [ 524.953445][T10543] Bluetooth: hci0: command 0x080f tx timeout [ 525.548284][T18889] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 527.251305][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 527.267626][ C0] lec:lec_tx_timeout: lec0 [ 527.272678][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 532.281480][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 532.289499][ C0] lec:lec_tx_timeout: lec0 [ 532.294082][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 537.301550][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 537.309601][ C0] lec:lec_tx_timeout: lec0 [ 537.314278][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 542.321329][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 542.329388][ C0] lec:lec_tx_timeout: lec0 [ 542.334260][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 547.351410][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 547.359500][ C0] lec:lec_tx_timeout: lec0 [ 547.364366][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 549.911512][ T5833] Bluetooth: hci5: command 0x0406 tx timeout [ 553.191288][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 553.199372][ C0] lec:lec_tx_timeout: lec0 [ 553.204206][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 558.211578][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 558.219720][ C0] lec:lec_tx_timeout: lec0 [ 558.224537][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 560.161661][T10543] Bluetooth: hci2: command 0x0406 tx timeout [ 563.231315][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 563.239361][ C0] lec:lec_tx_timeout: lec0 [ 563.244229][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 564.152224][ T9974] page_pool_release_retry() stalled pool shutdown: id 85, 1 inflight 60 sec [ 568.251263][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 568.259322][ C0] lec:lec_tx_timeout: lec0 [ 568.263896][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 570.391693][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 573.271379][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 573.279438][ C0] lec:lec_tx_timeout: lec0 [ 573.284308][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 578.291387][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 578.299412][ C0] lec:lec_tx_timeout: lec0 [ 578.303994][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 579.016403][T18914] __nla_validate_parse: 67 callbacks suppressed [ 579.016427][T18914] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3488'. [ 579.041838][T18914] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3488'. [ 579.061004][T18914] netlink: 'syz.1.3488': attribute type 5 has an invalid length. [ 579.088606][T18914] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3488'. [ 579.114452][T18923] syzkaller1: entered promiscuous mode [ 579.119992][T18923] syzkaller1: entered allmulticast mode [ 579.152966][T18927] netlink: 'syz.4.3493': attribute type 21 has an invalid length. [ 579.160961][T18927] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3493'. [ 579.174841][T18927] netlink: 'syz.4.3493': attribute type 5 has an invalid length. [ 579.183875][T18927] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3493'. [ 579.242810][T18929] netlink: 'syz.0.3494': attribute type 2 has an invalid length. [ 579.250901][T18929] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3494'. [ 579.276704][T18932] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 579.298793][T18931] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 579.429353][T18939] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 579.446241][T18939] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 579.514262][T18941] lo speed is unknown, defaulting to 1000 [ 579.564163][T18949] sctp: [Deprecated]: syz.3.3499 (pid 18949) Use of struct sctp_assoc_value in delayed_ack socket option. [ 579.564163][T18949] Use struct sctp_sack_info instead [ 580.243110][T18984] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3512'. [ 580.252846][T18985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3510'. [ 580.278551][T18985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3510'. [ 580.369903][T18988] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 580.376482][T18988] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 580.699509][T18999] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 580.885179][T19011] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3520'. [ 580.922979][T19011] ipt_REJECT: TCP_RESET invalid for non-tcp [ 581.104587][T19026] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 581.111914][T19026] IPv6: NLM_F_CREATE should be set when creating new route [ 581.451672][T19032] syzkaller1: entered promiscuous mode [ 581.462014][T19032] syzkaller1: entered allmulticast mode [ 581.639146][T19056] netlink: set zone limit has 4 unknown bytes [ 581.655712][T19056] netlink: zone id is out of range [ 581.686377][T19056] netlink: zone id is out of range [ 581.817826][T19067] erspan0: entered allmulticast mode [ 581.873124][T19071] tipc: Enabling of bearer rejected, failed to enable media [ 582.181405][T19097] bond0: (slave rose0): refused to change device type [ 582.250175][T19104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 582.265056][T19106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 582.303535][T19109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 582.877325][T19157] netlink: 'syz.4.3561': attribute type 4 has an invalid length. [ 582.888437][T19157] netlink: 'syz.4.3561': attribute type 4 has an invalid length. [ 583.311557][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 583.320023][ C0] lec:lec_tx_timeout: lec0 [ 583.324758][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 585.320283][T19114] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 585.555289][T19177] __nla_validate_parse: 5 callbacks suppressed [ 585.555309][T19177] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3566'. [ 585.598280][T19177] netlink: 'syz.3.3566': attribute type 7 has an invalid length. [ 585.620979][T19177] netlink: 'syz.3.3566': attribute type 8 has an invalid length. [ 585.647159][T19177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3566'. [ 585.716943][T19184] netlink: 'syz.4.3570': attribute type 1 has an invalid length. [ 585.727545][T19184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3570'. [ 585.754986][T19182] nbd2: detected capacity change from 0 to 127 [ 585.766798][T10543] block nbd2: Receive control failed (result -32) [ 585.770666][T18948] block nbd2: Send control failed (result -32) [ 585.823841][T18948] block nbd2: Request send failed, requeueing [ 585.838672][ T25] block nbd2: Dead connection, failed to find a fallback [ 585.847189][ T25] block nbd2: shutting down sockets [ 585.852984][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 585.865289][ T25] Buffer I/O error on dev nbd2, logical block 0, async page read [ 585.874795][T18948] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 585.884758][T18948] Buffer I/O error on dev nbd2, logical block 1, async page read [ 585.898490][T18948] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 585.913809][T18948] Buffer I/O error on dev nbd2, logical block 2, async page read [ 585.921941][T18948] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 585.923134][T19197] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3573'. [ 585.931889][T18948] Buffer I/O error on dev nbd2, logical block 3, async page read [ 585.932119][T18948] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 585.959900][T18948] Buffer I/O error on dev nbd2, logical block 0, async page read [ 585.964260][T19199] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3575'. [ 585.968045][T18948] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 585.986306][T18948] Buffer I/O error on dev nbd2, logical block 1, async page read [ 585.994474][T18948] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 586.004183][T18948] Buffer I/O error on dev nbd2, logical block 2, async page read [ 586.019954][T18948] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 586.030417][T19199] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3575'. [ 586.040069][T18948] Buffer I/O error on dev nbd2, logical block 3, async page read [ 586.040172][T18948] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 586.040198][T18948] Buffer I/O error on dev nbd2, logical block 0, async page read [ 586.040239][T18948] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 586.040262][T18948] Buffer I/O error on dev nbd2, logical block 1, async page read [ 586.040970][T18948] ldm_validate_partition_table(): Disk read failed. [ 586.041668][T18948] Dev nbd2: unable to read RDB block 0 [ 586.155064][T18948] nbd2: unable to read partition table [ 586.172855][T18948] ldm_validate_partition_table(): Disk read failed. [ 586.187537][T18948] Dev nbd2: unable to read RDB block 0 [ 586.204845][T18948] nbd2: unable to read partition table [ 586.324767][T19219] netlink: 'syz.2.3582': attribute type 13 has an invalid length. [ 586.423088][T19224] netlink: 'syz.4.3585': attribute type 1 has an invalid length. [ 586.434151][T19224] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3585'. [ 586.445429][T19224] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3585'. [ 586.474209][T19224] netlink: 'syz.4.3585': attribute type 1 has an invalid length. [ 586.502326][T19224] netlink: 'syz.4.3585': attribute type 8 has an invalid length. [ 586.503787][T19230] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 586.510128][T19224] netlink: 606 bytes leftover after parsing attributes in process `syz.4.3585'. [ 586.542368][T19229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3586'. [ 586.834846][T19257] netlink: 'syz.2.3594': attribute type 10 has an invalid length. [ 586.896952][T19264] SET target dimension over the limit! [ 587.997889][T19314] net_ratelimit: 2 callbacks suppressed [ 587.997912][T19314] openvswitch: netlink: Flow actions attr not present in new flow. [ 588.066807][T19314] tipc: Started in network mode [ 588.101488][T19314] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 588.108903][T19314] tipc: Enabled bearer , priority 24 [ 588.331218][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 588.339322][ C0] lec:lec_tx_timeout: lec0 [ 588.342019][T19328] x_tables: duplicate underflow at hook 1 [ 588.344096][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 588.528665][T19338] bond2: entered allmulticast mode [ 588.580809][T19338] netlink: 'syz.1.3619': attribute type 3 has an invalid length. [ 588.634452][T19338] netlink: 'syz.1.3619': attribute type 3 has an invalid length. [ 588.708319][T19340] bridge3: entered promiscuous mode [ 588.721734][T19340] bridge3: entered allmulticast mode [ 588.730873][T19340] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 589.085523][T19352] tipc: Started in network mode [ 589.090493][T19352] tipc: Node identity feae57128d47, cluster identity 4711 [ 589.098727][T19352] tipc: Enabled bearer , priority 0 [ 589.149147][T19350] tipc: Disabling bearer [ 589.220374][T19367] ip6t_srh: unknown srh match flags 5F28 [ 589.231552][ T9974] tipc: Node number set to 10005162 [ 589.405344][T19378] NCSI netlink: No device for ifindex 813332851 [ 589.465458][T19380] syzkaller1: entered promiscuous mode [ 589.471001][T19380] syzkaller1: entered allmulticast mode [ 589.643717][T19385] macsec2: entered promiscuous mode [ 590.136673][T19404] bond1: Invalid ad_actor_system MAC address. [ 590.145739][T19404] bond1: option ad_actor_system: invalid value (1) [ 590.173109][T19404] bond1 (unregistering): Released all slaves [ 590.504832][T19434] x_tables: duplicate underflow at hook 2 [ 590.649234][T19442] validate_nla: 4 callbacks suppressed [ 590.649249][T19442] netlink: 'syz.4.3649': attribute type 30 has an invalid length. [ 590.663240][T19442] __nla_validate_parse: 20 callbacks suppressed [ 590.663258][T19442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3649'. [ 590.806663][T19446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3650'. [ 590.816259][T19446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3650'. [ 590.870375][T19446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3650'. [ 590.885631][T19453] ip6t_REJECT: ECHOREPLY is not supported [ 591.137843][T19468] Cannot find set identified by id 65534 to match [ 591.220830][T19472] netlink: 'syz.0.3659': attribute type 7 has an invalid length. [ 591.229092][T19472] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3659'. [ 591.283836][T19474] netlink: 212312 bytes leftover after parsing attributes in process `syz.3.3660'. [ 591.356476][T19479] netlink: 'syz.0.3662': attribute type 1 has an invalid length. [ 591.367091][T19479] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3662'. [ 591.380018][T19479] ip6tnl0: Caught tx_queue_len zero misconfig [ 591.481759][T19485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3667'. [ 591.508905][T19489] netlink: 'syz.1.3665': attribute type 1 has an invalid length. [ 591.509924][T19490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3666'. [ 591.537507][T19490] netlink: 'syz.0.3666': attribute type 27 has an invalid length. [ 591.605202][T19499] netlink: 'syz.0.3668': attribute type 1 has an invalid length. [ 591.701551][T19501] tipc: Started in network mode [ 591.706770][T19501] tipc: Node identity a64212bc64bf, cluster identity 4711 [ 591.714818][T19501] tipc: Enabled bearer , priority 11 [ 591.796177][T19506] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.3671'. [ 592.149333][T19529] tipc: Enabled bearer , priority 11 [ 592.307132][T19539] x_tables: duplicate underflow at hook 1 [ 592.564383][T19566] Bluetooth: MGMT ver 1.23 [ 592.831858][T16881] tipc: Node number set to 3271365308 [ 593.361442][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 593.369570][ C0] lec:lec_tx_timeout: lec0 [ 593.374201][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 593.664901][T19622] dvmrp0: entered allmulticast mode [ 594.223681][T19647] mac80211_hwsim hwsim29 : renamed from wlan1 (while UP) [ 594.418556][T19659] netlink: 'syz.4.3715': attribute type 1 has an invalid length. [ 594.987405][T19699] netlink: 'syz.0.3728': attribute type 61 has an invalid length. [ 594.996794][T19700] netlink: 'syz.0.3728': attribute type 61 has an invalid length. [ 595.032490][T19699] netlink: 'syz.0.3728': attribute type 21 has an invalid length. [ 595.056709][T10543] block nbd3: Receive control failed (result -32) [ 595.125744][T19699] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 595.137493][T19699] bond3 (unregistering): Released all slaves [ 595.662445][T19742] netlink: 'syz.4.3739': attribute type 1 has an invalid length. [ 595.699652][T19742] bond3: entered promiscuous mode [ 595.710670][T19742] 8021q: adding VLAN 0 to HW filter on device bond3 [ 595.916305][T19761] netlink: 'syz.1.3745': attribute type 29 has an invalid length. [ 596.134554][T19777] __nla_validate_parse: 15 callbacks suppressed [ 596.134578][T19777] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3751'. [ 596.220480][T19780] netlink: 'syz.0.3752': attribute type 1 has an invalid length. [ 596.233514][T19780] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3752'. [ 596.308323][T19785] delete_channel: no stack [ 596.312516][T19780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3752'. [ 596.355786][T19790] syzkaller0: entered promiscuous mode [ 596.374875][T19790] syzkaller0: entered allmulticast mode [ 596.428303][T19792] netlink: 'syz.3.3757': attribute type 1 has an invalid length. [ 596.429247][T19790] xt_ipcomp: unknown flags 1D [ 596.464968][T19799] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3758'. [ 596.474433][T19792] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 597.371790][T19834] netlink: 'syz.0.3769': attribute type 62 has an invalid length. [ 597.514234][T19838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3770'. [ 597.595022][T19840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3770'. [ 597.621691][T19840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3770'. [ 597.714452][T19845] tipc: Enabled bearer , priority 0 [ 597.880426][T19845] syzkaller0: entered promiscuous mode [ 597.886464][T19845] syzkaller0: entered allmulticast mode [ 597.893927][T19845] tipc: Resetting bearer [ 597.929583][T19852] erspan0: entered promiscuous mode [ 597.946616][T19846] tipc: Resetting bearer [ 598.012158][T19855] openvswitch: netlink: Message has 592 unknown bytes. [ 598.032206][T19855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 598.220285][T19861] netlink: 'syz.3.3778': attribute type 2 has an invalid length. [ 599.673924][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6300 ms [ 599.682000][ C0] lec:lec_tx_timeout: lec0 [ 599.686709][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 599.837554][T19846] tipc: Disabling bearer [ 599.857809][T19861] 9: entered promiscuous mode [ 599.865192][T19862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3778'. [ 599.878488][ T9974] tipc: Node number set to 1944672018 [ 599.986811][T19876] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3781'. [ 600.187699][T19895] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3781'. [ 600.307988][T19902] netlink: 'syz.0.3787': attribute type 142 has an invalid length. [ 600.584170][T19917] lo speed is unknown, defaulting to 1000 [ 601.030984][T19920] lo speed is unknown, defaulting to 1000 [ 601.267682][T19956] openvswitch: netlink: IPv4 tun info is not correct [ 601.875554][T19976] lo: entered promiscuous mode [ 601.886757][T19976] tunl0: entered promiscuous mode [ 601.895867][T19976] gre0: entered promiscuous mode [ 601.927341][T19976] gretap0: entered promiscuous mode [ 601.931531][T19979] __nla_validate_parse: 2 callbacks suppressed [ 601.931547][T19979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3810'. [ 601.955346][T19976] ip_vti0: entered promiscuous mode [ 602.170306][T19989] sctp: [Deprecated]: syz.0.3814 (pid 19989) Use of struct sctp_assoc_value in delayed_ack socket option. [ 602.170306][T19989] Use struct sctp_sack_info instead [ 602.584481][T20002] netlink: 'syz.3.3819': attribute type 1 has an invalid length. [ 602.602115][T20002] netlink: 'syz.3.3819': attribute type 1 has an invalid length. [ 602.617935][T20002] netlink: 'syz.3.3819': attribute type 2 has an invalid length. [ 602.628491][T20002] netlink: 'syz.3.3819': attribute type 2 has an invalid length. [ 602.638198][T20002] netlink: 'syz.3.3819': attribute type 1 has an invalid length. [ 602.646111][T20002] netlink: 'syz.3.3819': attribute type 2 has an invalid length. [ 602.670217][T20002] netlink: 'syz.3.3819': attribute type 1 has an invalid length. [ 602.679600][T20002] netlink: 'syz.3.3819': attribute type 1 has an invalid length. [ 602.794670][T20009] xt_CT: You must specify a L4 protocol and not use inversions on it [ 602.825431][T20013] syzkaller0: entered promiscuous mode [ 602.832127][T20013] syzkaller0: entered allmulticast mode [ 602.888716][T20009] tc action pedit offset must be on 32 bit boundaries [ 603.124736][T20037] syzkaller1: entered promiscuous mode [ 603.130286][T20037] syzkaller1: entered allmulticast mode [ 603.137409][ T5833] block nbd5: Receive control failed (result -32) [ 603.172545][T20039] openvswitch: netlink: Missing valid actions attribute. [ 603.180406][T20039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 603.500903][T20047] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3833'. [ 603.535344][T20047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3833'. [ 603.638248][T20056] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3836'. [ 603.779970][T10543] block nbd4: Receive control failed (result -32) [ 604.114427][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 604.125221][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 604.133897][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 604.143747][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 604.159745][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 604.225734][T20093] geneve2: entered promiscuous mode [ 604.343534][T20087] lo speed is unknown, defaulting to 1000 [ 604.736047][T20113] syzkaller0: entered promiscuous mode [ 604.761780][T20113] syzkaller0: entered allmulticast mode [ 605.108936][T20119] netlink: 'syz.4.3850': attribute type 10 has an invalid length. [ 605.118011][T20120] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3851'. [ 605.120827][T20119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3850'. [ 605.431191][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 605.439266][ C0] lec:lec_tx_timeout: lec0 [ 605.444586][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 605.601122][T20087] chnl_net:caif_netlink_parms(): no params data found [ 605.740152][T20087] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.748152][T20087] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.758213][T20087] bridge_slave_0: entered allmulticast mode [ 605.767333][T20087] bridge_slave_0: entered promiscuous mode [ 605.778463][T20087] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.786283][T20087] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.794948][T20087] bridge_slave_1: entered allmulticast mode [ 605.804537][T20087] bridge_slave_1: entered promiscuous mode [ 605.952352][T20087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.965637][T20087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.989110][T20142] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3854'. [ 606.011438][T20142] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3854'. [ 606.020584][T20143] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3854'. [ 606.048646][T20143] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3854'. [ 606.115682][T20148] bridge0: Caught tx_queue_len zero misconfig [ 606.168617][T20087] team0: Port device team_slave_0 added [ 606.193877][T20087] team0: Port device team_slave_1 added [ 606.231511][ T5833] Bluetooth: hci3: command tx timeout [ 606.293058][T20087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.301767][T20087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.392510][T20087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.436174][T20087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.454500][T20087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.486770][T20087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.658858][T20087] hsr_slave_0: entered promiscuous mode [ 606.689435][T20087] hsr_slave_1: entered promiscuous mode [ 606.697521][T20087] debugfs: 'hsr0' already exists in 'hsr' [ 606.704748][T20087] Cannot create hsr debugfs directory [ 606.964621][T20189] __nla_validate_parse: 4 callbacks suppressed [ 606.964642][T20189] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3869'. [ 607.070821][T20201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3873'. [ 607.274139][T20208] netlink: 'syz.3.3875': attribute type 1 has an invalid length. [ 607.340365][T20087] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 607.359909][T20087] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 607.376400][T20087] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 607.389898][T20087] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 607.552358][T20228] syzkaller0: entered promiscuous mode [ 607.557925][T20228] syzkaller0: entered allmulticast mode [ 607.679472][T20087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.788934][T20087] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.800736][T20241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3884'. [ 607.816469][T15297] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.823646][T15297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.835010][T15297] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.842235][T15297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.869790][T20241] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 607.889355][T20241] team0: Port device batadv3 added [ 608.178114][T20263] syzkaller0: entered promiscuous mode [ 608.184053][T20263] syzkaller0: entered allmulticast mode [ 608.240864][T20266] batadv_slave_0: entered promiscuous mode [ 608.263750][T20266] syzkaller0: entered promiscuous mode [ 608.269376][T20266] syzkaller0: entered allmulticast mode [ 608.279044][T20266] 0: reclassify loop, rule prio 0, protocol 800 [ 608.312305][ T5833] Bluetooth: hci3: command tx timeout [ 608.348250][T20268] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 608.361016][T20087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.474416][T20264] batadv_slave_0: left promiscuous mode [ 608.749220][T20287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3895'. [ 608.882517][T20087] veth0_vlan: entered promiscuous mode [ 608.923813][T20087] veth1_vlan: entered promiscuous mode [ 609.022795][T20087] veth0_macvtap: entered promiscuous mode [ 609.038185][T20087] veth1_macvtap: entered promiscuous mode [ 609.121116][T20087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.142795][T20087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.171839][T15300] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.194982][T15300] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.217600][T15300] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.233979][T15300] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.501706][T20307] netlink: 'syz.3.3898': attribute type 1 has an invalid length. [ 609.560460][T20305] veth0: entered promiscuous mode [ 609.567333][T20306] veth0: left promiscuous mode [ 609.616700][T20311] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3900'. [ 609.920273][ T7969] erspan0 (unregistering): left promiscuous mode [ 609.963381][ T7969] F (unregistering): left promiscuous mode [ 610.028796][ T7969] dvmrp1 (unregistering): left allmulticast mode [ 610.050160][ T7969] bond10 (unregistering): (slave geneve2): Releasing active interface [ 610.087002][ T7969] bridge0 (unregistering): left promiscuous mode [ 610.327526][ T7969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.336617][ T7969] bond_slave_0: left promiscuous mode [ 610.344310][ T7969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.353421][ T7969] bond_slave_1: left promiscuous mode [ 610.360686][ T7969] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 610.371973][ T7969] bridge_slave_1: left promiscuous mode [ 610.377998][ T7969] bond0 (unregistering): Released all slaves [ 610.388292][ T7969] bond1 (unregistering): Released all slaves [ 610.391814][ T5833] Bluetooth: hci3: command tx timeout [ 610.404560][ T7969] bond2 (unregistering): Released all slaves [ 610.420885][ T7969] bond3 (unregistering): Released all slaves [ 610.442047][ T7969] bond4 (unregistering): Released all slaves [ 610.457111][ T7969] bond5 (unregistering): (slave vcan1): Releasing backup interface [ 610.465120][ T7969] vcan1: left promiscuous mode [ 610.474630][ T7969] bond5 (unregistering): Released all slaves [ 610.494740][ T7969] bond6 (unregistering): Released all slaves [ 610.510706][ T7969] bond7 (unregistering): (slave veth7): Releasing active interface [ 610.527098][ T7969] bond7 (unregistering): Released all slaves [ 610.541645][ T7969] bond8 (unregistering): (slave lo): Releasing backup interface [ 610.549778][ T7969] bond8 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 610.561881][ T7969] bond8 (unregistering): Released all slaves [ 610.575387][ T7969] bond9 (unregistering): Released all slaves [ 610.589513][ T7969] bond10 (unregistering): Released all slaves [ 610.606364][ T7969] bond11 (unregistering): Released all slaves [ 610.630026][ T7969] bond12 (unregistering): (slave bond13): Releasing backup interface [ 610.643093][ T7969] bond12 (unregistering): Released all slaves [ 610.658515][ T7969] bond13 (unregistering): Released all slaves [ 610.672213][ T7969] bond14 (unregistering): Released all slaves [ 610.718736][T20319] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 610.963178][ T7969] : left promiscuous mode [ 611.059285][T20333] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.3907'. [ 611.068925][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.085195][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.093783][T20333] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 611.102584][T20335] netlink: 'syz.3.3908': attribute type 21 has an invalid length. [ 611.133610][ T7969] 9: left promiscuous mode [ 611.191192][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 611.199332][ C0] lec:lec_tx_timeout: lec0 [ 611.205698][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 611.241490][T20340] netlink: 'syz.0.3909': attribute type 11 has an invalid length. [ 611.256679][ T7969] tipc: Disabling bearer [ 611.261919][T20340] netlink: 'syz.0.3909': attribute type 11 has an invalid length. [ 611.270191][T20340] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3909'. [ 611.286324][ T7969] tipc: Disabling bearer [ 611.294878][ T7969] tipc: Left network mode [ 611.328507][ T7969] IPVS: stopping backup sync thread 11474 ... [ 611.333204][T15296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.346294][T15296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.563704][T20351] netlink: 'syz.0.3912': attribute type 1 has an invalid length. [ 612.450293][T20391] x_tables: duplicate underflow at hook 2 [ 612.475206][ T5833] Bluetooth: hci3: command tx timeout [ 612.609610][ T7969] hsr_slave_0: left promiscuous mode [ 612.647350][ T7969] hsr_slave_1: left promiscuous mode [ 612.673655][ T7969] veth1_macvtap: left promiscuous mode [ 613.209891][T20431] netlink: 'syz.5.3922': attribute type 4 has an invalid length. [ 613.472127][ T7969] team0 (unregistering): Port device team_slave_1 removed [ 613.494669][ T7969] team0 (unregistering): Port device team_slave_0 removed [ 613.660014][ T36] smc: removing ib device syz2 [ 614.181938][T20456] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3928'. [ 614.190966][T20456] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3928'. [ 614.249473][T20459] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 614.493376][T20466] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3931'. [ 614.780291][T20476] netlink: 'syz.3.3933': attribute type 21 has an invalid length. [ 614.823456][T20484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3935'. [ 615.278015][T20500] netlink: 'syz.4.3938': attribute type 2 has an invalid length. [ 615.403418][T20500] 9: entered promiscuous mode [ 615.566438][T20508] netlink: 280 bytes leftover after parsing attributes in process `syz.4.3938'. [ 616.221220][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 616.229420][ C0] lec:lec_tx_timeout: lec0 [ 616.373133][T20532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3943'. [ 616.471882][ T5833] Bluetooth: hci0: command 0x080f tx timeout [ 616.898423][T20544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3943'. [ 618.520227][T20549] netlink: 'syz.5.3945': attribute type 1 has an invalid length. [ 618.530938][T20549] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3945'. [ 618.728769][ T7969] IPVS: stop unused estimator thread 0... [ 618.729031][T20559] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3950'. [ 618.762005][T20561] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 618.959451][T20567] netlink: 'syz.0.3952': attribute type 1 has an invalid length. [ 619.037871][T20567] 8021q: adding VLAN 0 to HW filter on device bond3 [ 619.101963][T20571] netlink: 'syz.3.3954': attribute type 49 has an invalid length. [ 619.128009][T20571] netlink: 'syz.3.3954': attribute type 21 has an invalid length. [ 619.145878][T20581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3957'. [ 619.328806][T20592] __nla_validate_parse: 1 callbacks suppressed [ 619.328829][T20592] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3960'. [ 619.381011][T20592] sctp: [Deprecated]: syz.3.3960 (pid 20592) Use of int in maxseg socket option. [ 619.381011][T20592] Use struct sctp_assoc_value instead [ 619.417197][T20592] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3960'. [ 619.454185][T20592] veth0_to_team: entered promiscuous mode [ 619.464163][T20592] veth0_to_team: left promiscuous mode [ 619.869763][T20624] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3969'. [ 619.895838][T20624] xt_policy: neither incoming nor outgoing policy selected [ 619.954211][T20626] netlink: 'syz.4.3970': attribute type 18 has an invalid length. [ 620.017550][ T7969] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.038381][ T7969] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.049387][ T7969] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.060824][ T7969] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.184427][T20641] syz_tun: entered allmulticast mode [ 620.193611][T20635] syz_tun: left allmulticast mode [ 620.263602][T20645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3974'. [ 620.454923][T20656] sctp: [Deprecated]: syz.4.3976 (pid 20656) Use of int in maxseg socket option. [ 620.454923][T20656] Use struct sctp_assoc_value instead [ 620.626801][T20669] netlink: 'syz.0.3979': attribute type 11 has an invalid length. [ 620.641102][T20669] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.3979'. [ 620.743276][T20676] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3982'. [ 620.755475][T20676] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3982'. [ 620.927980][T20682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3984'. [ 620.956657][T20682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3984'. [ 620.966025][T20682] netlink: 'syz.0.3984': attribute type 14 has an invalid length. [ 620.974370][T20682] netlink: 'syz.0.3984': attribute type 13 has an invalid length. [ 621.135986][T20699] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3989'. [ 621.430833][T20697] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.438311][T20697] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.758929][T20697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 621.787553][T20697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.074923][T20697] ip6erspan0: left allmulticast mode [ 622.144336][T20697] geneve2: left promiscuous mode [ 622.153765][T20697] geneve2: left allmulticast mode [ 622.243519][T20699] macvlan2: entered promiscuous mode [ 622.253514][T20699] macvlan2: entered allmulticast mode [ 622.459859][T20718] syzkaller0: entered promiscuous mode [ 622.502819][T20718] syzkaller0: entered allmulticast mode [ 622.539578][ T36] netdevsim netdevsim3 : unset [0, 0] type 1 family 0 port 256 - 0 [ 622.563258][ T36] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.575417][ T36] netdevsim netdevsim3 : unset [1, 1] type 2 family 0 port 19999 - 0 [ 622.584721][ T36] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 622.595753][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.607838][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 622.653895][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 622.666208][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 622.682168][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 622.690524][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 622.708979][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 624.285561][ T36] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 624.295496][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.304684][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 624.315386][ T36] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 624.324999][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.336239][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 624.661089][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 624.792081][ T5833] Bluetooth: hci6: command tx timeout [ 625.044363][T20791] netlink: 'syz.0.4008': attribute type 1 has an invalid length. [ 625.100245][T20797] netlink: 'syz.0.4008': attribute type 1 has an invalid length. [ 625.119601][T20746] chnl_net:caif_netlink_parms(): no params data found [ 625.175801][T20791] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 625.177127][T20797] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 625.204376][T20803] __nla_validate_parse: 2 callbacks suppressed [ 625.204395][T20803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4009'. [ 625.257154][T20803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4009'. [ 625.302437][T20803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4009'. [ 625.330628][T20803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4009'. [ 625.364172][T20803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4009'. [ 625.373785][T20746] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.377037][T20817] netlink: 'syz.0.4011': attribute type 142 has an invalid length. [ 625.382614][T20746] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.397404][T20746] bridge_slave_0: entered allmulticast mode [ 625.406019][T20746] bridge_slave_0: entered promiscuous mode [ 625.415495][T20746] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.423219][T20746] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.430675][T20746] bridge_slave_1: entered allmulticast mode [ 625.439057][T20746] bridge_slave_1: entered promiscuous mode [ 625.485070][T20803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4009'. [ 625.489027][T20746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.507765][T20821] Unsupported ieee802154 address type: 0 [ 625.515532][T20820] Unsupported ieee802154 address type: 0 [ 625.520997][T20746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.532550][T20803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4009'. [ 625.607057][T20803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4009'. [ 625.609770][T20746] team0: Port device team_slave_0 added [ 625.627768][T20803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4009'. [ 625.630247][T20746] team0: Port device team_slave_1 added [ 625.658194][T20826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4014'. [ 625.715865][T20746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.724157][T20746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.781256][T20746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.841382][T20746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.858601][T20746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.890875][T20746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.917333][T20835] netlink: 'syz.5.4016': attribute type 39 has an invalid length. [ 625.936435][T20834] lo: entered allmulticast mode [ 625.989374][T20828] lo: left allmulticast mode [ 626.037411][T20746] hsr_slave_0: entered promiscuous mode [ 626.045850][T20746] hsr_slave_1: entered promiscuous mode [ 626.054594][T20746] debugfs: 'hsr0' already exists in 'hsr' [ 626.060361][T20746] Cannot create hsr debugfs directory [ 626.209723][T20845] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 626.252985][T20846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.871400][ T5833] Bluetooth: hci6: command tx timeout [ 626.974675][T20746] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 627.031603][T20746] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 627.052277][T20746] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 627.093066][T20746] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 627.546764][T20746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.568041][T20746] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.598071][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.605558][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.720931][T15316] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.728220][T15316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.855190][T20930] IPv6: sit3: Disabled Multicast RS [ 627.869735][T20930] sit3: entered allmulticast mode [ 628.085830][T20746] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 628.103450][T20937] x_tables: duplicate underflow at hook 3 [ 628.640123][T20959] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 628.676661][T20959] bond5: (slave lo): Enslaving as an active interface with an up link [ 628.700781][T20959] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 628.800638][T20746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.952087][ T5833] Bluetooth: hci6: command tx timeout [ 628.973101][T20975] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 629.022399][T20975] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 629.032691][T20975] gretap1: entered promiscuous mode [ 629.038955][T20975] gretap1: entered allmulticast mode [ 629.281483][T20991] netlink: 'syz.0.4054': attribute type 1 has an invalid length. [ 629.297013][T20991] netlink: 'syz.0.4054': attribute type 2 has an invalid length. [ 629.505242][T21000] netlink: 'syz.0.4057': attribute type 83 has an invalid length. [ 629.775514][T20746] veth0_vlan: entered promiscuous mode [ 629.957042][T21016] smc: removing net device team0 with user defined pnetid SYZ2 [ 630.030777][T21016] team0 (unregistering): Port device team_slave_0 removed [ 630.044400][T21027] openvswitch: netlink: IP tunnel dst address not specified [ 630.100105][T21016] team0 (unregistering): Port device team_slave_1 removed [ 630.151291][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5490 ms [ 630.159422][ C0] lec:lec_tx_timeout: lec0 [ 630.164711][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 630.252251][T20746] veth1_vlan: entered promiscuous mode [ 630.299688][T21006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.383982][T20746] veth0_macvtap: entered promiscuous mode [ 630.394748][T21046] __nla_validate_parse: 40 callbacks suppressed [ 630.394768][T21046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4064'. [ 630.494458][T20746] veth1_macvtap: entered promiscuous mode [ 630.535991][T21052] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4066'. [ 630.585131][T20746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.667241][T21053] netlink: 'syz.5.4066': attribute type 2 has an invalid length. [ 630.724193][T21052] netlink: 'syz.5.4066': attribute type 2 has an invalid length. [ 630.742894][T21057] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 630.764040][T20746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.828215][T15314] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.859961][T15314] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.886259][T21066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4069'. [ 630.903203][T15314] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.913310][T15314] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.998171][T21069] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4068'. [ 631.024105][T21069] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4068'. [ 631.032743][ T5833] Bluetooth: hci6: command tx timeout [ 631.325497][T15296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.356472][T15296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.372968][T21084] netlink: 'syz.4.4073': attribute type 21 has an invalid length. [ 631.422113][T21084] IPv6: NLM_F_CREATE should be specified when creating new route [ 631.582761][ T7969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.603560][ T7969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.610418][T21089] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 631.896368][T21103] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3993'. [ 631.960608][ T30] audit: type=1800 audit(1775342038.256:7): pid=21110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4080" name="memory.events" dev="tmpfs" ino=1440 res=0 errno=0 [ 632.023929][ T30] audit: type=1804 audit(1775342038.256:8): pid=21110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4080" name="/newroot/280/memory.events" dev="tmpfs" ino=1440 res=1 errno=0 [ 632.188659][T21126] netlink: 'syz.4.4084': attribute type 1 has an invalid length. [ 632.239569][T21122] netlink: 164 bytes leftover after parsing attributes in process `syz.6.4082'. [ 632.296181][T21135] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4086'. [ 632.399108][T21135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.409670][T21144] netlink: 164 bytes leftover after parsing attributes in process `syz.6.4082'. [ 632.465054][T21135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.517095][T21135] bond0 (unregistering): Released all slaves [ 632.617665][T21152] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4088'. [ 632.936383][T21178] x_tables: duplicate underflow at hook 1 [ 632.999925][T21168] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 633.022547][T21181] nbd: socks must be embedded in a SOCK_ITEM attr [ 633.073622][T21187] openvswitch: netlink: Message has -2 unknown bytes. [ 633.077012][T21188] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 633.776471][T21225] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 633.807359][T21226] IPVS: Error joining to the multicast group [ 633.893651][T21229] IPVS: Error joining to the multicast group [ 633.925489][T21230] netlink: 'syz.6.4108': attribute type 1 has an invalid length. [ 633.989777][T21237] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 634.026515][T21236] netlink: 'syz.4.4110': attribute type 1 has an invalid length. [ 634.124389][T21236] bond5: entered promiscuous mode [ 634.125184][T21243] x_tables: duplicate underflow at hook 1 [ 634.129622][T21236] bond5: entered allmulticast mode [ 634.142499][T21236] 8021q: adding VLAN 0 to HW filter on device bond5 [ 634.165065][T20729] IPVS: starting estimator thread 0... [ 634.262146][T21247] IPVS: using max 29 ests per chain, 69600 per kthread [ 634.355636][T21257] netlink: 'syz.6.4115': attribute type 1 has an invalid length. [ 634.398049][T21236] bond6: option mode: invalid value (133) [ 634.406142][T21236] bond6 (unregistering): Released all slaves [ 634.797729][ T7969] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.808715][ T7969] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.820692][ T7969] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.842427][T15296] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.191578][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 635.199792][ C0] lec:lec_tx_timeout: lec0 [ 635.238177][T21296] netem: invalid attributes len -24 [ 635.243554][T21296] netem: change failed [ 635.446318][T21306] __nla_validate_parse: 11 callbacks suppressed [ 635.446332][T21306] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4127'. [ 637.370181][T21263] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 637.629887][T21318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4130'. [ 637.644022][T21318] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4130'. [ 637.713971][T21320] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4132'. [ 637.746136][T21320] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.753689][T21320] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.877049][T21334] netlink: 'syz.6.4134': attribute type 10 has an invalid length. [ 637.943438][T21334] team0: Port device dummy0 added [ 638.004378][T21334] tipc: Started in network mode [ 638.010699][T21334] tipc: Node identity 4, cluster identity 4711 [ 638.032018][T21334] tipc: Node number set to 4 [ 638.124532][T21344] syzkaller0: entered promiscuous mode [ 638.130191][T21344] syzkaller0: entered allmulticast mode [ 638.229515][T21344] : entered promiscuous mode [ 638.257664][T21345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4139'. [ 638.370085][T21358] netlink: 'syz.5.4143': attribute type 1 has an invalid length. [ 638.387209][T21359] netlink: 'syz.6.4145': attribute type 21 has an invalid length. [ 638.476890][T21361] bond6: option all_slaves_active: invalid value (222) [ 638.486900][T21361] bond6 (unregistering): Released all slaves [ 638.523168][T21363] 8021q: adding VLAN 0 to HW filter on device bond2 [ 638.533174][T21368] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4143'. [ 638.536680][T21363] bond0: (slave bond2): making interface the new active one [ 638.550083][T21363] bond0: (slave bond2): Enslaving as an active interface with an up link [ 638.589194][T21358] bond0: (slave gretap1): Enslaving as a backup interface with an up link [ 638.602475][T21368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.827404][T21376] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4149'. [ 639.383740][T21411] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4159'. [ 639.458752][T21416] tipc: Can't bind to reserved service type 0 [ 639.652808][T21428] sctp: [Deprecated]: syz.5.4162 (pid 21428) Use of struct sctp_assoc_value in delayed_ack socket option. [ 639.652808][T21428] Use struct sctp_sack_info instead [ 639.784360][T21433] netlink: 'syz.6.4163': attribute type 10 has an invalid length. [ 639.836335][T21437] netlink: 'syz.6.4163': attribute type 21 has an invalid length. [ 639.886661][T21433] team0: Device ipvlan1 failed to register rx_handler [ 639.887102][T21442] SET target dimension over the limit! [ 639.983636][T21442] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4163'. [ 640.222450][T21459] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4168'. [ 640.398082][T21461] netlink: 'syz.5.4170': attribute type 1 has an invalid length. [ 640.444064][T21467] tipc: New replicast peer: 255.255.255.255 [ 640.472103][T21467] tipc: Enabled bearer , priority 10 [ 640.571495][T21473] netlink: 'syz.3.4173': attribute type 1 has an invalid length. [ 640.582617][T21475] __nla_validate_parse: 2 callbacks suppressed [ 640.582637][T21475] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4172'. [ 640.598313][T21473] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4173'. [ 640.598339][T21473] NCSI netlink: No device for ifindex 0 [ 642.075646][T21491] bridge_slave_0: invalid flags given to default FDB implementation [ 642.302401][T21525] Bluetooth: MGMT ver 1.23 [ 642.336468][T21525] tipc: Enabling of bearer rejected, failed to enable media [ 642.390239][T21529] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4181'. [ 642.440968][T21529] xt_l2tp: unknown flags: 10 [ 642.602253][T21535] x_tables: duplicate underflow at hook 3 [ 642.797924][T21550] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4187'. [ 643.125171][T21560] bridge0: port 3(gretap0) entered blocking state [ 643.132370][T21560] bridge0: port 3(gretap0) entered disabled state [ 643.139037][T21560] gretap0: entered allmulticast mode [ 643.165201][T21560] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 644.391635][T10543] Bluetooth: hci2: command 0x0406 tx timeout [ 644.392952][ T5833] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 645.573293][T21537] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 645.803631][T21582] netlink: 'syz.0.4199': attribute type 1 has an invalid length. [ 645.819892][T21582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4199'. [ 645.989215][T21591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4203'. [ 646.022465][T21591] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4203'. [ 646.032792][T21591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4203'. [ 646.053213][T21598] netlink: 'syz.3.4204': attribute type 4 has an invalid length. [ 646.114755][T21601] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 646.317127][T21612] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 646.328222][T21612] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 646.465941][T21617] netlink: 146832 bytes leftover after parsing attributes in process `syz.5.4211'. [ 646.566824][T21622] openvswitch: netlink: Tunnel attr 16 has unexpected len 20 expected 0 [ 646.578271][T21622] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 646.896032][T21636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4218'. [ 647.200615][T21652] netlink: 'syz.5.4224': attribute type 10 has an invalid length. [ 647.221476][T21648] netlink: 'syz.0.4222': attribute type 32 has an invalid length. [ 647.224177][T21652] bridge_slave_1: left allmulticast mode [ 647.229420][T21648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4222'. [ 647.264302][T21652] bridge_slave_1: left promiscuous mode [ 647.278024][T21652] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.348580][T21648] bond6: option coupled_control: invalid value (192) [ 647.365942][T21666] netlink: 'syz.4.4226': attribute type 1 has an invalid length. [ 647.377688][T21648] bond6 (unregistering): Released all slaves [ 647.610825][T21666] 8021q: adding VLAN 0 to HW filter on device bond6 [ 647.667501][T21671] bond6: (slave veth5): Enslaving as an active interface with a down link [ 647.837539][T21685] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4229'. [ 647.893813][T21687] delete_channel: no stack [ 648.054833][T21701] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4231'. [ 648.065016][T21698] netlink: 'syz.0.4232': attribute type 1 has an invalid length. [ 648.082271][T21701] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4231'. [ 648.215560][T21691] netlink: 'syz.5.4231': attribute type 2 has an invalid length. [ 648.309184][T21715] netlink: 'syz.3.4235': attribute type 6 has an invalid length. [ 648.343592][T21705] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 648.368379][T21708] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface [ 648.397123][T21708] bond6 (unregistering): Released all slaves [ 648.413317][T21717] netlink: 'syz.6.4237': attribute type 10 has an invalid length. [ 648.455958][T21710] dvmrp0: entered allmulticast mode [ 648.497485][T21717] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.538276][T21717] bridge_slave_1: left allmulticast mode [ 648.546021][T21717] bridge_slave_1: left promiscuous mode [ 648.558204][T21717] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.582028][T21717] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 648.598910][T15318] netdevsim netdevsim3 : set [0, 0] type 1 family 0 port 8472 - 0 [ 648.613190][T15318] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.632946][T15318] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.658898][T15318] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.744852][T21736] 8021q: VLANs not supported on vxcan1 [ 648.803166][T21734] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.871477][T21738] syzkaller0: entered promiscuous mode [ 648.877028][T21738] syzkaller0: entered allmulticast mode [ 648.890709][T21740] netlink: 'syz.5.4243': attribute type 21 has an invalid length. [ 648.897255][T21729] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 649.279025][ T30] audit: type=1800 audit(1775342055.576:9): pid=21757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4249" name="memory.events" dev="tmpfs" ino=1585 res=0 errno=0 [ 649.315336][T21762] macvtap1: entered promiscuous mode [ 649.334691][T21762] macvtap1: entered allmulticast mode [ 649.340148][T21762] veth1_vlan: entered allmulticast mode [ 649.448334][T21764] macvtap2: entered promiscuous mode [ 649.454771][T21764] macvtap2: entered allmulticast mode [ 649.531688][T21772] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 650.025080][T21800] bond0: entered promiscuous mode [ 650.069378][T21800] bond_slave_0: entered promiscuous mode [ 650.086879][T21800] bond_slave_1: entered promiscuous mode [ 650.103556][T21800] bridge_slave_1: entered promiscuous mode [ 650.170871][T21800] bond0: left promiscuous mode [ 650.211216][T21800] bond_slave_0: left promiscuous mode [ 650.249381][T21800] bond_slave_1: left promiscuous mode [ 650.290030][T21800] bridge_slave_1: left promiscuous mode [ 650.502582][T21823] : renamed from bond0 [ 650.764105][T21842] tipc: Enabling of bearer rejected, failed to enable media [ 650.900172][T21849] __nla_validate_parse: 13 callbacks suppressed [ 650.900195][T21849] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4272'. [ 651.150639][T21861] sctp: [Deprecated]: syz.4.4278 (pid 21861) Use of struct sctp_assoc_value in delayed_ack socket option. [ 651.150639][T21861] Use struct sctp_sack_info instead [ 651.353579][T21872] validate_nla: 3 callbacks suppressed [ 651.353600][T21872] netlink: 'syz.4.4282': attribute type 29 has an invalid length. [ 651.383417][T21875] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4283'. [ 651.400988][T21872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4282'. [ 651.529495][T21880] netlink: 'syz.3.4285': attribute type 12 has an invalid length. [ 651.537587][T21880] netlink: 'syz.3.4285': attribute type 29 has an invalid length. [ 651.547828][T21880] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4285'. [ 651.570471][T21880] netlink: 59 bytes leftover after parsing attributes in process `syz.3.4285'. [ 651.695556][T21889] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4287'. [ 651.704738][T21889] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4287'. [ 651.726642][T21886] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4287'. [ 651.823809][T21894] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 652.024613][T21908] veth1: entered promiscuous mode [ 652.071898][T21908] bond_slave_0: entered promiscuous mode [ 652.205125][T21917] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 652.371799][T21929] syzkaller1: entered promiscuous mode [ 652.379952][T21929] syzkaller1: entered allmulticast mode [ 652.747674][T21945] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4305'. [ 652.855054][T21951] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4308'. [ 653.012021][T21959] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 654.627533][T22015] ip6t_rpfilter: unknown options [ 655.782385][T21949] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 656.097919][T22029] syzkaller1: entered promiscuous mode [ 656.131263][T22029] syzkaller1: entered allmulticast mode [ 656.186203][T22038] syzkaller1: entered promiscuous mode [ 656.192529][T22038] syzkaller1: entered allmulticast mode [ 656.476877][T22057] __nla_validate_parse: 5 callbacks suppressed [ 656.476898][T22057] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4330'. [ 656.587620][T22062] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4331'. [ 656.597836][T22062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4331'. [ 656.607299][T22062] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4331'. [ 656.622161][T22062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4331'. [ 656.643047][T22066] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4333'. [ 656.644274][T22062] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4331'. [ 656.660283][T22066] nbd: illegal input index -8454144 [ 656.845082][T22078] netlink: 'syz.3.4337': attribute type 8 has an invalid length. [ 656.856335][T22078] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4337'. [ 657.065397][T22094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4342'. [ 657.257818][T22105] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4347'. [ 657.480097][T22120] netlink: 'syz.0.4351': attribute type 1 has an invalid length. [ 657.540133][T22120] 8021q: adding VLAN 0 to HW filter on device bond6 [ 657.593959][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880355be800: rx timeout, send abort [ 657.606751][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880355be800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 658.398096][T22174] tap0: tun_chr_ioctl cmd 2148553947 [ 658.536913][T22184] sit0: Caught tx_queue_len zero misconfig [ 658.851010][T20729] IPVS: starting estimator thread 0... [ 658.986017][T22199] IPVS: using max 24 ests per chain, 57600 per kthread [ 659.623990][T22243] netlink: 'syz.0.4388': attribute type 39 has an invalid length. [ 659.879399][T22252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.973747][T22258] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 659.973937][T22270] openvswitch: netlink: IPv4 tunnel dst address is zero [ 660.213863][T22283] block nbd4: NBD_DISCONNECT [ 660.218901][T22283] block nbd4: Send disconnect failed -32 [ 660.237323][T22283] block nbd4: shutting down sockets [ 660.389382][T22283] bridge0: port 3(gretap0) entered blocking state [ 660.396111][T22283] bridge0: port 3(gretap0) entered forwarding state [ 660.717026][T22309] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 660.867349][T22309] bond1: (slave lo): Enslaving as an active interface with an up link [ 660.885882][T22309] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 661.224784][T22332] xt_bpf: check failed: parse error [ 661.288194][T22341] macsec3: entered promiscuous mode [ 661.529376][T22354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 661.679387][T22363] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 661.707853][T22363] lo: left promiscuous mode [ 661.739934][T22363] tunl0: left promiscuous mode [ 661.764010][T22363] gre0: left promiscuous mode [ 662.073532][T22363] bridge0: port 3(gretap0) entered disabled state [ 662.089149][T22363] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 662.160527][T22372] __nla_validate_parse: 15 callbacks suppressed [ 662.160548][T22372] netlink: 320 bytes leftover after parsing attributes in process `syz.5.4426'. [ 662.301499][T22390] netlink: 'syz.0.4430': attribute type 1 has an invalid length. [ 662.828618][T22427] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4441'. [ 662.845973][T22419] bond2: Removing last ns target with arp_interval on [ 662.895280][T22431] netlink: 'syz.4.4441': attribute type 1 has an invalid length. [ 662.963915][T22433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4441'. [ 663.170405][T22430] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 664.127250][T22479] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 664.564519][T22496] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4458'. [ 664.832926][T22510] netlink: 'syz.4.4462': attribute type 1 has an invalid length. [ 664.845360][T22509] netlink: 'syz.4.4462': attribute type 1 has an invalid length. [ 664.917520][T22506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4460'. [ 665.300275][T22526] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 665.329835][T22527] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 666.230867][T22569] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4477'. [ 666.278437][T22569] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 666.321456][T22569] gretap1: entered promiscuous mode [ 666.335610][T22569] gretap1: entered allmulticast mode [ 666.368537][T22570] syzkaller1: entered promiscuous mode [ 666.404724][T22570] syzkaller1: entered allmulticast mode [ 666.671605][T22589] netlink: 'syz.6.4481': attribute type 10 has an invalid length. [ 666.679514][T22589] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4481'. [ 666.756183][T22589] dummy0: entered promiscuous mode [ 666.785320][T22589] team0: Port device dummy0 removed [ 666.797165][T22589] bridge0: port 2(dummy0) entered blocking state [ 666.804078][T22589] bridge0: port 2(dummy0) entered disabled state [ 666.810987][T22589] dummy0: entered allmulticast mode [ 667.373923][T22636] netlink: 'syz.6.4495': attribute type 9 has an invalid length. [ 667.453891][T22638] ipt_REJECT: TCP_RESET invalid for non-tcp [ 667.470248][T22638] netlink: 'syz.4.4496': attribute type 16 has an invalid length. [ 667.549879][T22644] sctp: [Deprecated]: syz.0.4499 (pid 22644) Use of struct sctp_assoc_value in delayed_ack socket option. [ 667.549879][T22644] Use struct sctp_sack_info instead [ 667.626453][T22650] bond0: Caught tx_queue_len zero misconfig [ 667.833303][T22663] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4505'. [ 667.865221][T22662] netlink: 'syz.4.4506': attribute type 3 has an invalid length. [ 668.137490][T22683] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4510'. [ 668.218877][T22674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4510'. [ 668.310427][T22688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 670.929543][T22667] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 671.192625][T22722] syzkaller0: entered allmulticast mode [ 671.206388][T22725] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4523'. [ 671.478212][T22747] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4533'. [ 671.489006][T22748] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4533'. [ 672.386748][T22791] syzkaller0: create flow: hash 77491272 index 1 [ 672.391860][T22796] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4548'. [ 672.424673][T22795] tap0: tun_chr_ioctl cmd 1074025673 [ 672.430963][T15297] syzkaller0: tun_net_xmit 76 [ 672.441768][T15297] syzkaller0: tun_net_xmit 48 [ 672.447284][T22799] tap0: tun_chr_ioctl cmd 1074025672 [ 672.453120][T22799] tap0: ignored: set checksum disabled [ 672.462329][T20723] syzkaller0: tun_net_xmit 76 [ 672.477367][T22771] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 672.589056][T22790] syzkaller0: delete flow: hash 77491272 index 1 [ 674.541528][T22827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4555'. [ 674.669963][T22827] bond7: Invalid ad_actor_system MAC address. [ 674.680568][T22827] bond7: option ad_actor_system: invalid value (1) [ 674.694800][T22827] bond7 (unregistering): Released all slaves [ 674.888985][T22831] syzkaller0: entered promiscuous mode [ 674.894871][T22831] syzkaller0: entered allmulticast mode [ 674.962909][T22857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4562'. [ 676.800785][T22847] syzkaller0: entered promiscuous mode [ 676.806480][T22847] syzkaller0: entered allmulticast mode [ 676.905211][T22870] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4566'. [ 677.114805][T22884] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4570'. [ 678.763705][T22888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4571'. [ 678.793541][T22888] veth0: Caught tx_queue_len zero misconfig [ 678.828128][T22893] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.4573'. [ 678.836324][T22888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4571'. [ 679.125656][T22914] syzkaller1: entered promiscuous mode [ 679.140623][T22921] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 679.149573][T22914] syzkaller1: entered allmulticast mode [ 679.170378][T22921] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4581'. [ 679.179794][T22910] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 679.186730][T22928] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 679.188329][T22921] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 679.217941][T22910] syzkaller1: linktype set to 823 [ 679.235541][T22910] netlink: 'syz.3.4577': attribute type 24 has an invalid length. [ 679.275054][T22910] xt_nat: multiple ranges no longer supported [ 679.281719][T22910] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20000 [ 679.446092][T22938] team_slave_1: Caught tx_queue_len zero misconfig [ 679.587908][T22949] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.4588'. [ 679.634392][T22952] openvswitch: netlink: Flow actions attr not present in new flow. [ 680.210036][T22983] syzkaller0: entered promiscuous mode [ 680.218965][T22983] syzkaller0: entered allmulticast mode [ 680.425088][T22993] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4601'. [ 680.582989][T22993] bond3 (unregistering): Released all slaves [ 680.840574][T23020] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4609'. [ 680.979775][T23032] ipvlan1: entered promiscuous mode [ 681.041676][T23032] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4611'. [ 681.060036][T23032] netlink: 7056 bytes leftover after parsing attributes in process `syz.0.4611'. [ 681.083478][T23032] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 681.110961][T23034] netlink: 216 bytes leftover after parsing attributes in process `syz.3.4612'. [ 681.167073][T23034] tc_dump_action: action bad kind [ 681.263602][T23047] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4615'. [ 681.423031][T23049] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 681.453117][T23049] bond4 (unregistering): Released all slaves [ 681.613413][T23065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4621'. [ 681.681833][T23065] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4621'. [ 681.705402][T23073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.714589][T23079] netlink: 'syz.5.4624': attribute type 16 has an invalid length. [ 681.723687][T23073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 681.732989][T23079] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4624'. [ 681.750495][T23073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 681.768493][T23073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.159052][T23101] ip6tnl3: entered allmulticast mode [ 682.379794][T23110] Dead loop on virtual device ip6_vti0, fix it urgently! [ 683.260249][T23155] netlink: 'syz.0.4649': attribute type 7 has an invalid length. [ 683.271599][T23155] netlink: 'syz.0.4649': attribute type 7 has an invalid length. [ 683.706126][T23177] netlink: 'syz.3.4657': attribute type 2 has an invalid length. [ 683.815733][T23184] netlink: 'syz.0.4658': attribute type 1 has an invalid length. [ 683.835191][T23182] digital: digital_start_poll: Unknown protocol [ 683.852671][T23184] netlink: 'syz.0.4658': attribute type 10 has an invalid length. [ 683.878413][T23184] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.886357][T23184] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.927897][T23184] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.935168][T23184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.942765][T23184] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.949951][T23184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.003105][T23202] netlink: 'syz.5.4664': attribute type 1 has an invalid length. [ 684.020167][T23184] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 684.029385][T23202] netlink: 'syz.5.4664': attribute type 3 has an invalid length. [ 684.039673][T23202] NCSI netlink: No device for ifindex 813332851 [ 684.104746][T23197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 684.127257][T23206] sctp: [Deprecated]: syz.5.4664 (pid 23206) Use of struct sctp_assoc_value in delayed_ack socket option. [ 684.127257][T23206] Use struct sctp_sack_info instead [ 684.159670][T23205] netlink: 'syz.0.4665': attribute type 1 has an invalid length. [ 684.227069][T23205] 8021q: adding VLAN 0 to HW filter on device bond7 [ 684.310231][T23212] netlink: 'syz.4.4667': attribute type 6 has an invalid length. [ 684.318506][T23212] netlink: 'syz.4.4667': attribute type 5 has an invalid length. [ 684.358350][T23209] bond7: (slave veth5): Enslaving as an active interface with a down link [ 684.380043][T23205] bond7: (slave veth0_to_bond): making interface the new active one [ 684.382048][T23217] netlink: 'syz.3.4669': attribute type 9 has an invalid length. [ 684.390533][T23205] veth0_to_bond: entered promiscuous mode [ 684.404837][T23205] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 684.487844][T23214] bond7: (slave veth7): Enslaving as an active interface with a down link [ 684.785115][T23238] __nla_validate_parse: 17 callbacks suppressed [ 684.785136][T23238] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4678'. [ 684.814096][T23234] IPv6: sit3: Disabled Multicast RS [ 684.820653][T23234] sit3: entered allmulticast mode [ 684.943874][T23244] macvlan0: entered promiscuous mode [ 685.064709][T23250] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4681'. [ 685.801303][T23280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4691'. [ 686.083632][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 686.147563][T23299] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4694'. [ 686.210527][T23292] bond8 (unregistering): Released all slaves [ 686.464183][T23309] xt_TCPMSS: Only works on TCP SYN packets [ 686.472371][T23309] netlink: 404 bytes leftover after parsing attributes in process `syz.5.4699'. [ 686.506813][T23309] xt_hashlimit: size too large, truncated to 1048576 [ 686.734329][T23319] bond4: entered promiscuous mode [ 686.739452][T23319] bond4: entered allmulticast mode [ 686.788749][T23319] 8021q: adding VLAN 0 to HW filter on device bond4 [ 687.148171][T23347] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4706'. [ 687.314549][T23352] netlink: 'syz.3.4708': attribute type 1 has an invalid length. [ 687.341704][T23352] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4708'. [ 687.363261][T23352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4708'. [ 687.404066][T23363] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4711'. [ 687.535870][T23370] delete_channel: no stack [ 687.549523][T23364] bond5: (slave lo): Releasing backup interface [ 687.583725][T23364] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 687.601275][T23372] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4712'. [ 687.623039][T23364] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 687.704315][T23364] bond8: (slave lo): Enslaving as an active interface with an up link [ 687.734950][T23364] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 688.344541][T23405] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 688.382171][T23405] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 688.413640][T23405] team0: Failed to send options change via netlink (err -105) [ 688.454371][T23405] team0: Port device batadv1 added [ 688.852366][T23437] wireguard: wg2: Could not create IPv4 socket [ 688.994874][T23452] xt_TPROXY: Can be used only with -p tcp or -p udp [ 689.375567][T23474] netlink: 'syz.3.4743': attribute type 2 has an invalid length. [ 689.405280][T23474] netlink: 'syz.3.4743': attribute type 5 has an invalid length. [ 689.568779][T23490] netlink: 'syz.6.4748': attribute type 10 has an invalid length. [ 689.640041][T23490] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 689.696722][T23490] netlink: 'syz.6.4748': attribute type 1 has an invalid length. [ 690.049074][T23518] sch_tbf: burst 0 is lower than device lo mtu (1514) ! [ 690.199250][T23528] netlink: 'syz.3.4759': attribute type 11 has an invalid length. [ 690.209113][T23530] __nla_validate_parse: 9 callbacks suppressed [ 690.209132][T23530] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4756'. [ 690.210668][T23528] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4759'. [ 690.490201][T23540] openvswitch: netlink: Flow actions attr not present in new flow. [ 690.740690][T23554] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4765'. [ 691.194034][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms [ 691.202179][ C0] lec:lec_tx_timeout: lec0 [ 691.232769][T23582] lo speed is unknown, defaulting to 1000 [ 691.240354][T23589] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4774'. [ 691.240786][T23582] lo speed is unknown, defaulting to 1000 [ 691.251903][T23589] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4774'. [ 691.273995][T23582] lo speed is unknown, defaulting to 1000 [ 691.600759][T23603] netlink: 'syz.6.4778': attribute type 1 has an invalid length. [ 691.786665][T23616] erspan0: entered allmulticast mode [ 691.830217][T23614] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4781'. [ 691.983080][T23582] infiniband syz2: set active [ 691.987923][T23582] infiniband syz2: added lo [ 691.994980][T20710] lo speed is unknown, defaulting to 1000 [ 692.064691][T23582] RDS/IB: syz2: added [ 692.080054][T23582] smc: adding ib device syz2 with port count 1 [ 692.090756][T23630] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4785'. [ 692.108791][T23630] netlink: 'syz.5.4785': attribute type 1 has an invalid length. [ 692.111649][T23582] smc: ib device syz2 port 1 has no pnetid [ 692.120960][T23630] netlink: 228 bytes leftover after parsing attributes in process `syz.5.4785'. [ 692.138113][T20710] lo speed is unknown, defaulting to 1000 [ 692.147355][T23582] lo speed is unknown, defaulting to 1000 [ 692.621284][T11272] lec:lec_start_xmit: lec0:No lecd attached [ 692.725365][T23655] Cannot find add_set index 0 as target [ 692.787335][T23664] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4791'. [ 692.912589][T23582] lo speed is unknown, defaulting to 1000 [ 693.028329][T23674] Cannot find del_set index 4 as target [ 693.217014][T23681] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4798'. [ 693.493045][T23696] netlink: 'syz.3.4804': attribute type 1 has an invalid length. [ 693.545044][T15318] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.571534][T15318] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.613009][T15296] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.637980][T15296] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.724767][T23582] lo speed is unknown, defaulting to 1000 [ 694.077185][T23722] SET target dimension over the limit! [ 694.155729][T23725] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 694.212095][T23725] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 694.330792][T23729] syzkaller1: entered promiscuous mode [ 694.337456][T23729] syzkaller1: entered allmulticast mode [ 694.378579][T23582] lo speed is unknown, defaulting to 1000 [ 694.910106][T23752] netlink: 'syz.6.4817': attribute type 1 has an invalid length. [ 694.919269][T23582] lo speed is unknown, defaulting to 1000 [ 695.057166][T23756] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 695.094261][T23756] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 695.148068][T23756] bond1: (slave ip6gre1): making interface the new active one [ 695.199001][T23756] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 695.256286][T23764] __nla_validate_parse: 12 callbacks suppressed [ 695.256309][T23764] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.4822'. [ 695.416418][T23773] pimreg: entered allmulticast mode [ 695.585438][T15300] veth0_to_bond: left promiscuous mode [ 695.611822][T23582] lo speed is unknown, defaulting to 1000 [ 695.833905][T23791] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4832'. [ 695.885768][T23793] netlink: 'syz.5.4831': attribute type 21 has an invalid length. [ 695.959788][T23795] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4833'. [ 695.971951][T23795] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4833'. [ 696.171096][T23582] lo speed is unknown, defaulting to 1000 [ 696.575799][T23819] netlink: 'syz.6.4838': attribute type 16 has an invalid length. [ 696.584853][T23819] netlink: 'syz.6.4838': attribute type 17 has an invalid length. [ 696.653317][T23819] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.660639][T23819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.702382][T23819] bridge0: port 2(dummy0) entered blocking state [ 696.709160][T23819] bridge0: port 2(dummy0) entered forwarding state [ 696.735470][T23819] bridge0: port 2(dummy0) entered disabled state [ 696.755003][T23819] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 696.806333][T23582] lo speed is unknown, defaulting to 1000 [ 696.863077][T23823] netlink: 'syz.5.4839': attribute type 1 has an invalid length. [ 697.041457][T23826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4840'. [ 697.331617][T23582] lo speed is unknown, defaulting to 1000 [ 697.804178][T23848] xt_CT: You must specify a L4 protocol and not use inversions on it [ 697.847555][T23850] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4848'. [ 697.892493][T23850] bridge_slave_0: left allmulticast mode [ 697.909256][T23850] bridge_slave_0: left promiscuous mode [ 697.922430][T23850] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.943685][T23855] netlink: 'syz.6.4849': attribute type 21 has an invalid length. [ 698.058925][T23854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4850'. [ 698.104136][T23864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4852'. [ 698.151204][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5530 ms [ 698.159326][ C0] lec:lec_tx_timeout: lec0 [ 698.260887][T23870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4857'. [ 698.282413][T23873] team0: No ports can be present during mode change [ 698.304811][T23874] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4854'. [ 698.313147][T23869] netlink: 'syz.4.4855': attribute type 1 has an invalid length. [ 698.409385][T23880] bond9: (slave gretap2): making interface the new active one [ 698.420809][T23880] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 698.521521][T15314] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 698.544142][T15296] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 698.562600][T15296] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 698.594334][T15296] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 698.625126][T23895] delete_channel: no stack [ 699.008280][T23928] x_tables: duplicate underflow at hook 1 [ 699.422933][T23946] netlink: 'syz.5.4877': attribute type 21 has an invalid length. [ 699.786058][T23962] bond9: Removing last ns target with arp_interval on [ 699.838518][T23965] bond10: Removing last ns target with arp_interval on [ 700.016251][T23977] gtp1: entered promiscuous mode [ 700.030780][T23977] gtp1: entered allmulticast mode [ 700.307699][T23990] __nla_validate_parse: 10 callbacks suppressed [ 700.307722][T23990] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4890'. [ 700.346035][T23990] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4890'. [ 700.917133][T24031] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4897'. [ 702.071064][T23994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.104257][T23994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.584422][T24014] syzkaller1: entered promiscuous mode [ 702.590243][T24014] syzkaller1: entered allmulticast mode [ 702.630070][T24027] syzkaller1: entered promiscuous mode [ 702.637096][T24027] syzkaller1: entered allmulticast mode [ 702.693218][T24032] syzkaller0: entered promiscuous mode [ 702.698826][T24032] syzkaller0: entered allmulticast mode [ 702.725609][ T7969] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.745649][ T7969] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.756916][ T7969] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.767011][ T7969] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.892311][ T7969] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.909474][ T7969] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.937545][ T7969] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.959226][ T7969] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.360977][T24074] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4907'. [ 704.887931][T24074] F: renamed from gre0 (while UP) [ 704.898024][T24074] F: entered allmulticast mode [ 705.207190][T24103] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4915'. [ 705.562285][T24121] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 705.650894][T24122] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 705.754049][T24133] syzkaller0: entered promiscuous mode [ 705.759608][T24133] syzkaller0: entered allmulticast mode [ 705.770090][T24133] tc action pedit offset must be on 32 bit boundaries [ 706.078040][T24151] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4928'. [ 706.209668][T24156] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 706.266291][T24160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4932'. [ 706.467793][T24164] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4933'. [ 706.499079][T24164] netlink: 'syz.3.4933': attribute type 7 has an invalid length. [ 706.520542][T24164] netlink: 'syz.3.4933': attribute type 8 has an invalid length. [ 706.531777][T24171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4936'. [ 706.541715][T24166] netlink: 'syz.6.4935': attribute type 1 has an invalid length. [ 706.549481][T24166] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4935'. [ 706.568972][T24164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4933'. [ 706.581811][T24172] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4933'. [ 706.590960][T24166] netlink: 658 bytes leftover after parsing attributes in process `syz.6.4935'. [ 706.606206][T24166] netlink: 'syz.6.4935': attribute type 1 has an invalid length. [ 706.726407][T24168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4934'. [ 706.822955][T24186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4934'. [ 706.893552][T24186] block nbd6: Unsupported socket: should be TCP or UNIX. [ 707.270781][T24207] 8021q: adding VLAN 0 to HW filter on device bond3 [ 707.454553][T24222] netlink: 'syz.6.4947': attribute type 3 has an invalid length. [ 707.504351][T24195] lec:lec_atm_close: lec0: Shut down! [ 707.527972][T24226] block nbd6: Unsupported socket: should be TCP or UNIX. [ 707.556084][T24235] netlink: 'syz.6.4949': attribute type 2 has an invalid length. [ 707.962445][T24251] netlink: 'syz.6.4953': attribute type 8 has an invalid length. [ 708.302090][T24270] xt_hashlimit: size too large, truncated to 1048576 [ 708.339382][T24265] bond4: entered promiscuous mode [ 708.388081][T24265] 8021q: adding VLAN 0 to HW filter on device bond4 [ 708.409695][T24272] bridge4: entered promiscuous mode [ 708.422692][T24272] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 708.518495][T24275] macvlan2: entered promiscuous mode [ 708.524081][T24275] macvlan2: entered allmulticast mode [ 708.530105][T24275] bond4: (slave macvlan2): Error -98 calling set_mac_address [ 708.702508][T24285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 709.316893][T24316] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 709.343458][T24315] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 709.654635][T24336] netlink: 'syz.5.4981': attribute type 4 has an invalid length. [ 709.732877][T24338] netlink: 'syz.6.4982': attribute type 15 has an invalid length. [ 710.108176][T24364] netlink: 'syz.5.4987': attribute type 1 has an invalid length. [ 710.248023][T24364] bond5: entered promiscuous mode [ 710.290974][T24364] 8021q: adding VLAN 0 to HW filter on device bond5 [ 710.964904][T24410] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 710.990621][T24410] team0: Port device batadv1 added [ 711.328529][T24428] __nla_validate_parse: 85 callbacks suppressed [ 711.328551][T24428] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5006'. [ 711.392088][T24427] team0 (unregistering): Port device team_slave_0 removed [ 711.444263][T24427] team0 (unregistering): Port device team_slave_1 removed [ 711.490226][T24427] team0 (unregistering): Port device batadv1 removed [ 711.601837][T24438] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 711.613506][T24438] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 711.662348][T24445] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 712.237732][T24475] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 712.309195][T24487] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5021'. [ 712.406588][T24489] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5021'. [ 712.507163][T24496] sctp: [Deprecated]: syz.5.5022 (pid 24496) Use of int in max_burst socket option. [ 712.507163][T24496] Use struct sctp_assoc_value instead [ 712.806661][T24510] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5025'. [ 713.062813][T24529] validate_nla: 1 callbacks suppressed [ 713.062832][T24529] netlink: 'syz.4.5030': attribute type 2 has an invalid length. [ 713.093571][T24529] netlink: 119 bytes leftover after parsing attributes in process `syz.4.5030'. [ 713.101921][T24535] delete_channel: no stack [ 713.191869][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5690 ms [ 713.199973][ C0] lec:lec_tx_timeout: lec0 [ 713.547761][T24551] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5036'. [ 713.571924][T24551] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5036'. [ 713.852735][T24562] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5039'. [ 714.002976][T24568] netlink: 'syz.6.5040': attribute type 30 has an invalid length. [ 714.483634][T24597] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5049'. [ 714.535929][T24597] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5049'. [ 714.739692][T24606] syzkaller1: entered promiscuous mode [ 714.757684][T24606] syzkaller1: entered allmulticast mode [ 714.787688][T24606] rdma_op ffff8880589601f0 conn xmit_rdma 0000000000000000 [ 715.105404][T24625] syzkaller0: entered promiscuous mode [ 715.110945][T24625] syzkaller0: entered allmulticast mode [ 715.222347][T24635] sock: sock_set_timeout: `syz.0.5060' (pid 24635) tries to set negative timeout [ 715.260668][T24640] openvswitch: netlink: Flow actions attr not present in new flow. [ 715.702522][T24659] syzkaller0: entered promiscuous mode [ 715.722970][T24659] syzkaller0: entered allmulticast mode [ 716.706811][T24668] syzkaller0: entered promiscuous mode [ 716.712806][T24668] syzkaller0: entered allmulticast mode [ 717.548119][T24722] netlink: 'syz.4.5082': attribute type 21 has an invalid length. [ 717.556485][T24722] __nla_validate_parse: 12 callbacks suppressed [ 717.556506][T24722] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5082'. [ 718.764454][T24717] netlink: 'syz.0.5081': attribute type 12 has an invalid length. [ 718.783609][T24722] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5082'. [ 718.875398][T10543] Bluetooth: hci4: command 0x0405 tx timeout [ 718.965659][T24728] netlink: 'syz.4.5085': attribute type 1 has an invalid length. [ 719.096559][T24734] netlink: 'syz.6.5086': attribute type 4 has an invalid length. [ 719.174332][T24736] netlink: 'syz.6.5089': attribute type 8 has an invalid length. [ 719.350647][T24744] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5091'. [ 719.437560][T24748] netlink: 'syz.3.5093': attribute type 4 has an invalid length. [ 719.482016][T24752] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5095'. [ 719.533988][T24753] syzkaller0: entered promiscuous mode [ 719.681625][T24760] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5098'. [ 719.869579][T24769] bond5: option lp_interval: invalid value (0) [ 719.876672][T24769] bond5: option lp_interval: allowed values 1 - 2147483647 [ 719.889394][T24769] bond5 (unregistering): Released all slaves [ 719.937080][T24777] macvlan0: entered promiscuous mode [ 720.103679][T24781] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5105'. [ 720.468076][T24802] netlink: 6024 bytes leftover after parsing attributes in process `syz.5.5111'. [ 720.479697][T24802] netlink: 'syz.5.5111': attribute type 3 has an invalid length. [ 720.786847][T24811] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.851472][T24834] netlink: 'syz.4.5118': attribute type 1 has an invalid length. [ 720.887698][T24834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5118'. [ 720.974167][T24838] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5119'. [ 720.985271][T24838] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5119'. [ 721.063610][T24811] gretap1: left promiscuous mode [ 721.068619][T24811] gretap1: left allmulticast mode [ 721.088535][T24811] bond4: left promiscuous mode [ 721.093942][T24811] bridge4: left promiscuous mode [ 721.109441][ T7969] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.129324][ T7969] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.139237][ T7969] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.148964][ T7969] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.158252][ T7969] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.168938][ T7969] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.178347][ T7969] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.188006][ T7969] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.240834][ T30] audit: type=1107 audit(1775342127.536:10): pid=24842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 721.334855][T24848] Unsupported ieee802154 address type: 0 [ 721.438409][T24848] syzkaller0: entered promiscuous mode [ 721.444768][T24848] syzkaller0: entered allmulticast mode [ 723.590188][T24816] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 723.788615][T24888] __nla_validate_parse: 6 callbacks suppressed [ 723.788635][T24888] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5133'. [ 723.813677][T24890] netlink: 'syz.5.5134': attribute type 1 has an invalid length. [ 723.844431][T24895] netlink: 4096 bytes leftover after parsing attributes in process `syz.6.5132'. [ 723.868396][T24895] netlink: 4096 bytes leftover after parsing attributes in process `syz.6.5132'. [ 723.952028][T24898] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 723.975344][T24898] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 724.126444][T24912] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 724.210935][T24914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5142'. [ 724.255534][T24917] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5143'. [ 724.428559][T24927] sit0: entered promiscuous mode [ 724.437583][T24927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5148'. [ 724.482065][T24931] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 724.656042][T24935] ip6erspan0: entered allmulticast mode [ 724.740380][T24942] syzkaller1: entered promiscuous mode [ 724.755744][T24942] syzkaller1: entered allmulticast mode [ 724.778289][T24945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5154'. [ 724.827404][T24946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5154'. [ 724.924148][T24953] IPVS: Error connecting to the multicast addr [ 725.066337][T24961] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5158'. [ 725.084583][T24961] xt_policy: neither incoming nor outgoing policy selected [ 725.115265][T24962] ipvlan2: entered allmulticast mode [ 725.120728][T24962] bond0: entered allmulticast mode [ 725.132137][T24962] bond_slave_0: entered allmulticast mode [ 725.145666][T24962] bond_slave_1: entered allmulticast mode [ 725.145853][T24965] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5159'. [ 725.247611][T24965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 725.257594][T24965] bond_slave_0: left allmulticast mode [ 725.266327][T24965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 725.278990][T24965] bond_slave_1: left allmulticast mode [ 725.295920][T24965] bond0 (unregistering): Released all slaves [ 726.087892][T25004] syzkaller0: entered promiscuous mode [ 728.373790][T25049] netlink: 'syz.3.5182': attribute type 7 has an invalid length. [ 728.405488][T25049] netlink: 'syz.3.5182': attribute type 8 has an invalid length. [ 728.437882][T25049] : entered promiscuous mode [ 728.447651][T25053] netlink: 'syz.5.5187': attribute type 21 has an invalid length. [ 728.456177][T25049] bond_slave_0: entered promiscuous mode [ 728.463897][T25049] bond_slave_1: entered promiscuous mode [ 728.478344][T25049] syz_tun: entered promiscuous mode [ 728.505294][T25049] erspan0: entered promiscuous mode [ 728.526262][T25049] hsr1: Slave A () is not up; please bring it up to get a fully working HSR network [ 728.540631][T25049] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 728.555917][T25049] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network [ 728.987148][T25086] __nla_validate_parse: 13 callbacks suppressed [ 728.987179][T25086] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5197'. [ 729.024466][T25081] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5194'. [ 729.259776][T25101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5201'. [ 729.310465][T25101] netlink: 'syz.0.5201': attribute type 4 has an invalid length. [ 729.427582][T25114] lo: entered promiscuous mode [ 729.452741][T25114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 729.488245][T25114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 729.505195][T25117] syzkaller1: entered promiscuous mode [ 729.510803][T25117] syzkaller1: entered allmulticast mode [ 729.527379][T25114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 729.545663][T25114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 729.561436][T25114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 729.640210][T25114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 729.668733][T25114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 729.711472][T25114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 729.760508][T25114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 729.839923][T25114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 729.850031][T25139] netlink: 248 bytes leftover after parsing attributes in process `syz.5.5213'. [ 729.888977][T25139] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5213'. [ 730.494892][T25176] macvtap1: entered promiscuous mode [ 730.500490][T25176] macvtap1: entered allmulticast mode [ 730.541035][T25181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5221'. [ 730.544977][T25176] veth1_vlan: entered allmulticast mode [ 730.572601][T25177] macvtap2: entered promiscuous mode [ 730.578168][T25177] macvtap2: entered allmulticast mode [ 730.813741][T25193] sctp: [Deprecated]: syz.3.5225 (pid 25193) Use of struct sctp_assoc_value in delayed_ack socket option. [ 730.813741][T25193] Use struct sctp_sack_info instead [ 730.835830][T25156] tipc: Enabled bearer , priority 0 [ 730.845294][T25156] +: renamed from syzkaller0 [ 730.853391][T25156] tipc: Disabling bearer [ 730.955529][T25200] sctp: [Deprecated]: syz.6.5228 (pid 25200) Use of int in maxseg socket option. [ 730.955529][T25200] Use struct sctp_assoc_value instead [ 731.109627][T25204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5229'. [ 731.181882][T25208] netlink: 'syz.6.5231': attribute type 1 has an invalid length. [ 731.415859][T25221] lo speed is unknown, defaulting to 1000 [ 731.521797][T25223] SET target dimension over the limit! [ 731.529479][T25228] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5236'. [ 731.569293][T25228] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5236'. [ 731.627806][T25231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5237'. [ 731.650562][T25231] netlink: 'syz.4.5237': attribute type 28 has an invalid length. [ 731.659394][T25231] netlink: 'syz.4.5237': attribute type 3 has an invalid length. [ 732.408817][T25262] netlink: 'syz.6.5247': attribute type 11 has an invalid length. [ 732.430150][T25262] netlink: 'syz.6.5247': attribute type 4 has an invalid length. [ 732.439386][T25262] netlink: 'syz.6.5247': attribute type 5 has an invalid length. [ 732.448045][T25262] netlink: 'syz.6.5247': attribute type 6 has an invalid length. [ 733.080516][T25310] netlink: 'syz.5.5259': attribute type 1 has an invalid length. [ 733.759372][T25338] syzkaller0: entered promiscuous mode [ 733.765906][T25338] syzkaller0: entered allmulticast mode [ 734.003094][T25364] netlink: 'syz.3.5274': attribute type 9 has an invalid length. [ 734.074402][T25371] Cannot find map_set index 65533 as target [ 734.237053][T25254] Bluetooth: hci3: command 0x0406 tx timeout [ 734.306643][T25378] __nla_validate_parse: 12 callbacks suppressed [ 734.306658][T25378] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5277'. [ 734.462827][T25384] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5278'. [ 735.807615][T25376] netlink: 'syz.5.5277': attribute type 29 has an invalid length. [ 735.837483][T25381] syzkaller1: entered promiscuous mode [ 735.847439][T25381] syzkaller1: entered allmulticast mode [ 736.053102][T25399] net_ratelimit: 57 callbacks suppressed [ 736.053121][T25399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 736.484670][T25419] lo speed is unknown, defaulting to 1000 [ 736.538991][T25432] netlink: 'syz.5.5288': attribute type 13 has an invalid length. [ 736.575822][T25432] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5288'. [ 736.661922][T25432] netlink: 'syz.5.5288': attribute type 13 has an invalid length. [ 736.670238][T15297] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.694325][T15297] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.712815][T25432] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5288'. [ 736.722740][T15297] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.740314][T15297] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.893209][T25441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5291'. [ 736.903349][T25440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5291'. [ 737.897317][T25484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 739.134459][T25407] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 739.616985][T25527] netlink: 'syz.4.5320': attribute type 1 has an invalid length. [ 739.643741][T25527] netlink: 'syz.4.5320': attribute type 2 has an invalid length. [ 739.839790][T25544] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5326'. [ 739.849995][T25540] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5324'. [ 739.860494][T25544] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5326'. [ 739.918945][T25550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5327'. [ 739.919748][T25551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5327'. [ 739.990844][T25553] nbd: must specify a device to reconfigure [ 740.122055][T25557] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5330'. [ 740.163219][T25560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5331'. [ 740.236523][T25562] netlink: 'syz.5.5332': attribute type 24 has an invalid length. [ 740.345115][T25567] netlink: 'syz.5.5334': attribute type 11 has an invalid length. [ 740.652201][T25586] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5336'. [ 740.664810][T25586] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5336'. [ 740.739156][T25591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 740.783356][T25586] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5336'. [ 741.148549][T25612] syzkaller0: entered allmulticast mode [ 741.311542][T25620] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 741.748098][T25630] Bluetooth: MGMT ver 1.23 [ 741.755675][T25630] netlink: 'syz.6.5352': attribute type 1 has an invalid length. [ 741.792845][T25630] 8021q: adding VLAN 0 to HW filter on device bond6 [ 742.251415][T25658] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 742.274440][T25661] netlink: 'syz.4.5363': attribute type 2 has an invalid length. [ 742.288091][T25661] netlink: 'syz.4.5363': attribute type 5 has an invalid length. [ 742.508806][T25678] netlink: 'syz.0.5367': attribute type 21 has an invalid length. [ 743.249382][T25727] openvswitch: netlink: IP tunnel dst address not specified [ 743.653457][T25751] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 743.696015][T25751] bond0: (slave lo): Error: Device can not be enslaved while up [ 743.929006][T25775] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 744.103865][T25793] netlink: 'syz.0.5396': attribute type 3 has an invalid length. [ 744.353061][T25812] x9: renamed from bridge_slave_0 (while UP) [ 744.525161][T25816] netlink: 'syz.4.5403': attribute type 20 has an invalid length. [ 744.575913][T25816] IPv6: NLM_F_CREATE should be specified when creating new route [ 744.983363][T25844] __nla_validate_parse: 25 callbacks suppressed [ 744.983385][T25844] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5413'. [ 747.518202][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 748.022490][T25848] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 748.253252][T25889] geneve2: entered promiscuous mode [ 748.259290][T25889] geneve2: entered allmulticast mode [ 748.268723][T25890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5422'. [ 748.278643][T25890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5422'. [ 748.313224][T15300] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.358426][T15300] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.486350][T15300] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.521397][T15300] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.566464][T25908] tipc: Enabling of bearer rejected, failed to enable media [ 748.619734][T25910] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5428'. [ 748.641975][T25910] unsupported nlmsg_type 40 [ 748.909090][T25928] netlink: 180 bytes leftover after parsing attributes in process `syz.6.5435'. [ 748.979570][T25932] netlink: 'syz.4.5434': attribute type 13 has an invalid length. [ 749.000789][T25934] sctp: [Deprecated]: syz.0.5436 (pid 25934) Use of struct sctp_assoc_value in delayed_ack socket option. [ 749.000789][T25934] Use struct sctp_sack_info instead [ 749.003512][T25932] gretap0: refused to change device tx_queue_len [ 749.025807][T25932] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 749.200396][T25942] netlink: 'syz.4.5441': attribute type 11 has an invalid length. [ 749.284040][T25950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5442'. [ 749.728509][T25972] syzkaller0: entered promiscuous mode [ 749.754949][T25972] syzkaller0: entered allmulticast mode [ 749.782090][T25979] netlink: 'syz.4.5453': attribute type 3 has an invalid length. [ 749.816776][T25975] IPv6: NLM_F_CREATE should be specified when creating new route [ 750.066768][T25994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5454'. [ 750.076663][ T31] INFO: task syz.1.3865:20178 blocked for more than 143 seconds. [ 750.088281][ T31] Not tainted syzkaller #0 [ 750.094694][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 750.105458][ T31] task:syz.1.3865 state:D stack:26344 pid:20178 tgid:20176 ppid:17415 task_flags:0x400040 flags:0x00080002 [ 750.139444][ T31] Call Trace: [ 750.148339][ T31] [ 750.153508][ T31] __schedule+0x15dd/0x52d0 [ 750.158098][ T31] ? __pfx___schedule+0x10/0x10 [ 750.165037][ T31] ? schedule+0x90/0x360 [ 750.169344][ T31] schedule+0x164/0x360 [ 750.173673][ T31] schedule_preempt_disabled+0x13/0x30 [ 750.179170][ T31] __mutex_lock+0x7fe/0x1300 [ 750.187478][ T31] ? __mutex_lock+0x5ac/0x1300 [ 750.193091][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 750.198969][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 750.204669][ T31] ? __nlmsg_put+0xef/0x1b0 [ 750.209225][ T31] ? genlmsg_put+0x137/0x2e0 [ 750.214256][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 750.219984][ T31] ? dev_hard_start_xmit+0x802/0x870 [ 750.226101][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 750.232680][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 750.238273][ T31] ? __asan_memcpy+0x40/0x70 [ 750.244476][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 750.250629][ T31] genl_rcv_msg+0x61c/0x7a0 [ 750.256072][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 750.261741][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 750.267961][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 750.273340][ T31] netlink_rcv_skb+0x232/0x4b0 [ 750.278185][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 750.284577][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 750.290741][ T31] ? down_read+0x272/0x2e0 [ 750.297650][ T31] ? genl_rcv+0xd/0x40 [ 750.301928][ T31] genl_rcv+0x28/0x40 [ 750.305959][ T31] netlink_unicast+0x80f/0x9b0 [ 750.310786][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 750.316988][ T31] ? netlink_sendmsg+0x650/0xb40 [ 750.322292][ T31] ? skb_put+0x11b/0x210 [ 750.327200][ T31] netlink_sendmsg+0x813/0xb40 [ 750.341948][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 750.347322][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 750.361624][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 750.366989][ T31] ____sys_sendmsg+0x972/0x9f0 [ 750.391425][ T31] ? futex_unqueue+0x211/0x240 [ 750.396283][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 750.404120][ T31] ? import_iovec+0x73/0xa0 [ 750.408689][ T31] ___sys_sendmsg+0x2a5/0x360 [ 750.413634][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 750.418887][ T31] ? futex_wait+0x29a/0x380 [ 750.423619][ T31] ? __fget_files+0x2a/0x420 [ 750.428262][ T31] ? __fget_files+0x3a0/0x420 [ 750.433977][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 750.438978][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 750.444801][ T31] ? rcu_is_watching+0x15/0xb0 [ 750.449628][ T31] do_syscall_64+0x14d/0xf80 [ 750.454452][ T31] ? trace_irq_disable+0x3b/0x150 [ 750.459524][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.466508][ T31] ? clear_bhb_loop+0x40/0x90 [ 750.471485][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.477425][ T31] RIP: 0033:0x7fc1e0b9c819 [ 750.483651][ T31] RSP: 002b:00007fc1e19b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 750.493362][ T31] RAX: ffffffffffffffda RBX: 00007fc1e0e15fa0 RCX: 00007fc1e0b9c819 [ 750.501560][ T31] RDX: 0000000020040000 RSI: 0000200000000140 RDI: 0000000000000003 [ 750.509586][ T31] RBP: 00007fc1e0c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 750.518179][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 750.527014][ T31] R13: 00007fc1e0e16038 R14: 00007fc1e0e15fa0 R15: 00007fffcba1d9a8 [ 750.535179][ T31] [ 750.538311][ T31] [ 750.538311][ T31] Showing all locks held in the system: [ 750.564942][ T31] 1 lock held by khungtaskd/31: [ 750.570123][ T31] #0: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 750.588186][ T31] 2 locks held by getty/5582: [ 750.604741][ T31] #0: ffff8880368b10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 750.616771][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 750.631039][ T31] 2 locks held by syz.2.3623/19349: [ 750.638959][ T31] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 750.648079][ T31] #1: ffffffff8ea86b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 750.659083][ T31] 2 locks held by syz.1.3865/20178: [ 750.664471][ T31] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 750.676315][ T31] #1: ffffffff8ea86b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 750.687230][ T31] 2 locks held by syz.0.5456/25995: [ 750.692656][ T31] #0: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 750.702866][ T31] #1: ffffffff8e7648f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 750.714830][ T31] 1 lock held by syz.3.5457/26006: [ 750.719981][ T31] #0: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 750.729154][ T31] 4 locks held by syz.5.5458/26001: [ 750.734874][ T31] #0: ffff888059ba1ec8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 750.745325][ T31] #1: ffffffff8fc3beb0 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 750.756683][ T31] #2: ffff888078749cd8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x13d/0xdb0 [ 750.767921][ T31] #3: ffffffff8e7648f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 750.778989][ T31] [ 750.781559][ T31] ============================================= [ 750.781559][ T31] [ 750.790046][ T31] NMI backtrace for cpu 1 [ 750.790065][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 750.790085][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 750.790096][ T31] Call Trace: [ 750.790103][ T31] [ 750.790111][ T31] dump_stack_lvl+0xe8/0x150 [ 750.790144][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 750.790165][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 750.790194][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 750.790218][ T31] sys_info+0x135/0x170 [ 750.790245][ T31] watchdog+0xfd9/0x1030 [ 750.790269][ T31] ? watchdog+0x21a/0x1030 [ 750.790295][ T31] kthread+0x388/0x470 [ 750.790316][ T31] ? __pfx_watchdog+0x10/0x10 [ 750.790330][ T31] ? __pfx_kthread+0x10/0x10 [ 750.790350][ T31] ret_from_fork+0x51e/0xb90 [ 750.790380][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 750.790403][ T31] ? __switch_to+0xc7d/0x1450 [ 750.790430][ T31] ? __pfx_kthread+0x10/0x10 [ 750.790451][ T31] ret_from_fork_asm+0x1a/0x30 [ 750.790496][ T31] [ 750.790503][ T31] Sending NMI from CPU 1 to CPUs 0: [ 750.905120][ C0] NMI backtrace for cpu 0 [ 750.905138][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 750.905163][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 750.905173][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 750.905198][ C0] Code: ce 6b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 f2 19 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 750.905211][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000242 [ 750.905226][ C0] RAX: 000000000028e485 RBX: ffffffff819a91fa RCX: 0000000080000001 [ 750.905238][ C0] RDX: 0000000000000001 RSI: ffffffff8defadf3 RDI: ffffffff8c27d100 [ 750.905249][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863399b R09: 1ffff110170c6733 [ 750.905260][ C0] R10: dffffc0000000000 R11: ffffed10170c6734 R12: 0000000000000000 [ 750.905271][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 1ffffffff1c929d8 [ 750.905282][ C0] FS: 0000000000000000(0000) GS:ffff888125457000(0000) knlGS:0000000000000000 [ 750.905295][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 750.905305][ C0] CR2: 00007f5966deb4b8 CR3: 0000000076bbc000 CR4: 00000000003526f0 [ 750.905321][ C0] Call Trace: [ 750.905327][ C0] [ 750.905333][ C0] default_idle+0x9/0x20 [ 750.905353][ C0] default_idle_call+0x72/0xb0 [ 750.905373][ C0] do_idle+0x36a/0x5f0 [ 750.905396][ C0] ? __pfx_do_idle+0x10/0x10 [ 750.905420][ C0] cpu_startup_entry+0x43/0x60 [ 750.905439][ C0] rest_init+0x2de/0x300 [ 750.905455][ C0] start_kernel+0x385/0x3d0 [ 750.905477][ C0] x86_64_start_reservations+0x24/0x30 [ 750.905495][ C0] x86_64_start_kernel+0x143/0x1c0 [ 750.905512][ C0] common_startup_64+0x13e/0x147 [ 750.905535][ C0] [ 751.092474][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 751.099383][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 751.108540][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 751.118603][ T31] Call Trace: [ 751.121887][ T31] [ 751.124849][ T31] vpanic+0x56c/0xa60 [ 751.128876][ T31] ? __pfx___schedule+0x10/0x10 [ 751.133755][ T31] ? __pfx_vpanic+0x10/0x10 [ 751.138269][ T31] ? __pfx_console_unlock+0x10/0x10 [ 751.143497][ T31] panic+0xc5/0xd0 [ 751.147221][ T31] ? __pfx_panic+0x10/0x10 [ 751.151650][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 751.157055][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 751.163220][ T31] watchdog+0x1023/0x1030 [ 751.167565][ T31] ? watchdog+0x21a/0x1030 [ 751.172002][ T31] kthread+0x388/0x470 [ 751.176080][ T31] ? __pfx_watchdog+0x10/0x10 [ 751.180764][ T31] ? __pfx_kthread+0x10/0x10 [ 751.185364][ T31] ret_from_fork+0x51e/0xb90 [ 751.189985][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 751.195110][ T31] ? __switch_to+0xc7d/0x1450 [ 751.199807][ T31] ? __pfx_kthread+0x10/0x10 [ 751.204423][ T31] ret_from_fork_asm+0x1a/0x30 [ 751.209265][ T31] [ 751.213619][ T31] Kernel Offset: disabled [ 751.217959][ T31] Rebooting in 86400 seconds..