last executing test programs: 2.444912978s ago: executing program 1 (id=5052): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x3fd}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000000c0)="06106726d2", 0x5}], 0x1}}], 0x2, 0x40) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) clock_gettime(0x0, &(0x7f00000044c0)={0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r4, &(0x7f0000000180)='\r', 0x1, 0x6d91fb6102d8910c, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r5, 0x0) recvfrom(r4, &(0x7f0000002a80)=""/4042, 0xfca, 0x111, 0x0, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x5, 0x0, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000004400)=[{{&(0x7f0000000600)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/167, 0xa7}, {&(0x7f0000000740)=""/186, 0xba}], 0x2, &(0x7f0000000e80)=""/4096, 0x1000}, 0x1}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e80)=""/88, 0x58}, {&(0x7f0000001f00)=""/183, 0xb7}], 0x2, &(0x7f0000002000)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000003000)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000004300)=[{&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f0000003180)=""/23, 0x17}, {&(0x7f00000031c0)=""/184, 0xb8}, {&(0x7f0000003280)=""/82, 0x52}, {&(0x7f0000003300)=""/4096, 0x1000}], 0x5, &(0x7f0000004380)=""/96, 0x60}, 0x3ff}], 0x3, 0x40000100, &(0x7f0000004500)={r2, r3+60000000}) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0x6, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x0, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf8, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x6, 0xfeffff7f00000001, 0x0, 0x60000, 0x0, 0x800000000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0xffffffff, 0x0, 0xa, 0x2, 0x0, 0x53}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x4}]}, 0xf8}}, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r7, 0x0, 0x1, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000600009500000000000000b7020000000000007b9af8ff00000000d509000013ffffff7baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d0000000000000056080000010000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x224000, 0x0) 1.903701352s ago: executing program 0 (id=5066): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@getsadinfo={0x90, 0x23, 0x200, 0x70bd26, 0x25dfdbfb, 0x0, [@replay_val={0x10, 0xa, {0x70bd28, 0x70bd29}}, @proto={0x5, 0x19, 0x33}, @address_filter={0x28, 0x1a, {@in=@dev={0xac, 0x14, 0x14, 0x3d}, @in=@empty, 0x2, 0x2, 0x8}}, @lifetime_val={0x24, 0x9, {0xd4, 0xf888, 0x0, 0xfffffffffffffffe}}, @etimer_thresh={0x8, 0xc, 0x4}, @replay_val={0x10, 0xa, {0x70bd27, 0x70bd2b}}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x8000040) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c00)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@mcast2, 0x0, 0x6c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x14}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@getsadinfo={0x90, 0x23, 0x200, 0x70bd26, 0x25dfdbfb, 0x0, [@replay_val={0x10, 0xa, {0x70bd28, 0x70bd29}}, @proto={0x5, 0x19, 0x33}, @address_filter={0x28, 0x1a, {@in=@dev={0xac, 0x14, 0x14, 0x3d}, @in=@empty, 0x2, 0x2, 0x8}}, @lifetime_val={0x24, 0x9, {0xd4, 0xf888, 0x0, 0xfffffffffffffffe}}, @etimer_thresh={0x8, 0xc, 0x4}, @replay_val={0x10, 0xa, {0x70bd27, 0x70bd2b}}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x8000040) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) connect$inet(r1, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) (async) socket$kcm(0xa, 0x1, 0x106) (async) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) (async) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c00)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@mcast2, 0x0, 0x6c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x14}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) (async) 1.73723767s ago: executing program 3 (id=5068): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) r0 = socket(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1, 0xff, 0x0, 0xfffe}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'wlan1\x00', 0x1000}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b0000000001000000010004090000e567ccac374e1b19e5a1d70e115c0001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r4}, 0x38) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0xf000000) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x10, 0x5, 0x2102a}, 0x2c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000030007116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendto$phonet(r0, &(0x7f0000000080)="324bbe9b4de109a11c86829aae291267c7d9522047", 0x15, 0x48046, &(0x7f0000000140)={0x23, 0x5, 0xb4, 0x81}, 0x10) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000000)={r8, 0xb5}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={r8, @in6={{0xa, 0x4e24, 0x4, @loopback, 0x5e4}}, 0x66b, 0x9}, &(0x7f0000000400)=0x90) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) 1.552719138s ago: executing program 1 (id=5069): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000800)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1}}], 0x48, 0xc800}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000340)={r0, &(0x7f0000000240)='{\x00', 0xd4801, &(0x7f0000000280)={@_ha_fsid={[0x200, 0x9]}, {0x739e, 0x4, 0xf, 0x8ec}}, 0x1000, &(0x7f00000002c0), &(0x7f0000000300)=0x5}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000140)={0x2, 0x1697}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000005000100000000000500070019000000050011007f0000000c0009000200aaaaaaaaaaaa06000a00ffff00000c0009"], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x20, 0x1, 0x1000, 0x4, {{0x17, 0x4, 0x0, 0xb, 0x5c, 0x66, 0x9, 0x4a, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@timestamp={0x44, 0x8, 0x28, 0x0, 0x6, [0x0]}, @timestamp_prespec={0x44, 0x2c, 0xb0, 0x3, 0x4, [{@private=0xa010101, 0x2c8a}, {@rand_addr=0x64010101, 0xca4}, {@multicast1, 0xfffffffb}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x401}]}, @timestamp={0x44, 0xc, 0x8b, 0x0, 0x6, [0x8000, 0x4]}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000006a00000128bd7000fbdbdf250a0000000000000008000500", @ANYRES32=r5, @ANYBLOB="4c05ecbada56281e4a3018bdcea3c7502a41e6054c1526a98012b64a477defe68c63d0dec498190a951fd7d0345b55edac6640e10cd58babb645bcdc54dfb4e1c2f22105728e3e49328ef7e4c818d18e13877d932fb9497c9e7d075e7797d9f50a92f8ef1d232ccf0cbf6d8d742e320c00088040ca5d48f1835738ec50373e4fb367441e6d2a9e2ac78b4534a651ae1554c780363b84a1210f395fe8a2432d7aaf40b79bfb9659c6fbee5a07f2519bc6eda3edfe6221a40ac5cdde7cbcc97ebf4173d7a4ecd78fcc7f486da0bf85a7fc2d5ac177c83af249d0e6df55f0a3493549ac7d6666bed5a867f8d63d0595db4065d80d3a4d947fa9387cfe2405ca13bfd84b3e971fd71660913225abb915bc9fddcb9540d65f5bb6095adf52f29c588c11cee02a471b82bd25d14b37c7"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) 1.551146024s ago: executing program 0 (id=5070): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES64=r3], 0x8) connect$inet6(r4, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r4, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f0000000540)="bd", 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r4, &(0x7f00000000c0)="efb6d650b67a2db62f42d892c833ead2f2c90b3b895ebe", 0x17, 0x20003340, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) r5 = accept4$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x2711}, 0x10, 0x80000) shutdown(r1, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x10, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="0100ffffffff00000100010000000c00060003000000000000000400078008000100000000000c000200ff7f0000000000000918f821305ee062e26d61448d6c71cd9e4fee2c32c23e179f52701ffdca35e84f00be9b74f65db4a5dc3dbddd0b675c5b392c50e9f889d7c23ff2b86daba4800f4bd15a7fa8f947b08b81730977873f2eaf37bfca1fa67900d353b2004a2b55c4146ab805de278b516a4bc5d993aacfefd7a70a71da5c2ca53fedaac96420e83a3fd845ead0bc04e37debdcf4125d", @ANYBLOB="87a66714a68c1083b7", @ANYRESOCT=r0], 0x38}}, 0x4008008) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000080)=0x3, 0x8) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x20000000) 1.48892918s ago: executing program 3 (id=5073): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req3={0x10000, 0x100000001, 0x10003, 0x1, 0x0, 0x0, 0xfffffffc}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004000000100000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6}}]}, 0x30}}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000080)=0xc) 1.36874972s ago: executing program 1 (id=5074): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x2, 0x146, [0x2000000025c0, 0x0, 0x0, 0x2000000025f0, 0x200000002620], 0x0, 0x0, &(0x7f00000025c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x9, 0x8, 0xc, 'batadv0\x00', 'netdevsim0\x00', 'ipvlan1\x00', 'veth1_to_bond\x00', @remote, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], @random="d685fc5d0114", [0x7f, 0x0, 0x101, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xb6, [], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x5a, 0x6, {0x6}}}}}]}]}, 0x1be) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) 1.36725106s ago: executing program 3 (id=5075): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x9, 0x81, 0xd4, 0x7, 0xfffffffb, 0x100, 0xf4e5, 0x5}}}}]}, 0x58}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x44840) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) syz_emit_ethernet(0x52, &(0x7f0000000200)={@local, @random, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0xdf, [@local]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x6, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r8, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8, 0x6, r6}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) 1.273010244s ago: executing program 4 (id=5076): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, @llc={0x1a, 0x338, 0xc3, 0x3, 0x80, 0x44, @multicast}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x3d}) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='veth1_to_bridge\x00', 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000040)={@rand_addr=0x64010102, @empty, r3}, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0xffff, 0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffff230c}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x880) 999.595284ms ago: executing program 2 (id=5078): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x6}, 0x4) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000001b6c00001c000000000000020000000900020073797a32000000000900010073797a303edad08a8ee16d503c0001800b00010065787468647200002c9202800800074000fdff000500020000000000080003400400008f080004400000000008000340000000af1400000011000100000000000000000000000300"], 0x94}}, 0x48) 736.96667ms ago: executing program 2 (id=5079): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x18, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xb881}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x27}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x801}, @exit, @cb_func={0x18, 0xe, 0x4, 0x0, 0x2}, @jmp={0x5, 0x1, 0x10, 0x7, 0xa, 0xfffffffffffffffe}, @exit]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) 736.194793ms ago: executing program 4 (id=5080): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3a8, 0xffffffff, 0x1b0, 0x0, 0xe0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff, 0x0, 0xff000000, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'ip6erspan0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x23, 0x3, 0x2}, 0x2f2, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x4, 0x3}, {0xffffffffffffffff, 0x1, 0x1}, {0x3, 0x5, 0x6}, 0x10000}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00', [0xff, 0x0, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x2c, 0x79, 0x4, 0x44}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "eac3", 0x1}}, @common=@frag={{0x30}, {[0x2, 0x7], 0xfff, 0x4, 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000440)=0x5, &(0x7f0000000480)=0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="05002abd700008dcdf2501000000080001770d34644d29", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0x5, [@enum={0xa, 0x4, 0x0, 0x6, 0x4, [{0x0, 0x7fff}, {0x7, 0x6}, {0x9}, {0xe, 0x5}]}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x4, 0x9}, @var={0x1, 0x0, 0x0, 0xe, 0x2, 0x1}, @enum64={0x5, 0x9, 0x0, 0x13, 0x0, 0x1, [{0xf, 0x4, 0xfffffffc}, {0x4, 0x10, 0x8}, {0x2, 0xa, 0x6}, {0xd, 0xfff, 0x3}, {0x1, 0x97, 0x80000000}, {0xb, 0x4, 0x5}, {0x5, 0x9, 0x9}, {0x6, 0x9, 0x3}, {0x400000d, 0x1, 0x3}]}]}, {0x0, [0x2e, 0x2e, 0x5f]}}, &(0x7f0000000840)=""/67, 0xe1, 0x43, 0x0, 0x8}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r4}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x8001, 0x6, 0x5}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x12, r7, 0x4}, 0x38) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000380)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0xc0, 0x7, 0xc2, 0x4, 0x66, 0x4, [0x20044, 0x81, 0x10, 0x40, 0x6, 0x8, 0x2001, 0x2174]}}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)={0x30, r11, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x85}, 0x4c840) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="08010000", @ANYRES16=r11, @ANYBLOB="01002dbd7000fbdbdf250600000008000300", @ANYRES32=r13, @ANYBLOB="0500530001000000080005000500000008000500080000000c00178004000300040001001c00e7004f53d6f4eb54cde1b86d3a130315ce7db60ddf5d4fac5519080017800400050008001780040003001c00e70039a927204fd2af19c9ffcd0e46d392fc939658d3f6c14bed100017800400060004000500040004001c00e700320577412a6c34a97aa466c393812a3566fb1951c9c172df1c00e700838163d7858251f7c6ed1ed8ec89792ddf392a33da8767b51c00e7004ec64b18ddb53f69f060ceca4ff4cbf3112b29c60dc26b4d080017800400040005005300000000000a0018000303030303030000bfb49b7e61f8899c5852ee372fc5985aa047c2bd1f5213bcf463a477a63a5ae0b785d4addf61ae473f40f34a3f4036009fc28dd938d45fd692b301dd23760833ffcfb9a4ce8daa4ed3ba8d7f1cd5db7370e947fcbc98cbd8fa922565f567a244da7284cadd2850275b58ebaebfe5e2d7cc9a7488e1d779fef50aba834b0ef4dcb51d04478e278a89389b89a3870b8e90c0c173d2291ba7b488d9ff93d97e6b"], 0x108}, 0x1, 0x0, 0x0, 0x80}, 0x4044004) 660.127736ms ago: executing program 3 (id=5081): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d00000000000000000000000105000000030000000000000000000003000000000100000002"], 0x0, 0x4e}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x3, 0x2, 0x1}, 0x48}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) close(r3) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r7, 0x40}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)="27030200000314000e00203c0024000000000006", 0x14}, {&(0x7f00000022c0)="6037524d630f68287629547bd5c098e381953c405689f3afe4ec", 0x1a}], 0x2}, 0x4041) 645.854902ms ago: executing program 2 (id=5082): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4803, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000003700)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001340)="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", 0x200}], 0x1, &(0x7f0000000540)=[@assoc={0x18, 0x117, 0x4, 0x80}], 0x18, 0x20000000}], 0x1, 0x20044881) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0xffffffffffffff49) 569.452485ms ago: executing program 0 (id=5083): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0xd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x0, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {0xc}, {0xb, 0xffe0}}}, 0x24}}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newtfilter={0x44, 0x2c, 0xd27, 0xffffffff, 0x25dfd9ff, {0x0, 0x0, 0x0, r1, {0x10, 0xa}, {}, {0x1c, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004081}, 0x24000085) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) syz_emit_ethernet(0x7a, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6076db4000442f00fe800000000000000000000000000021ff020000000000000000000000000001042065580000000000000800000086dd080088030000", @ANYRESDEC=r3, @ANYRES16=r3, @ANYBLOB="ae281cacccb23b522a8d36a2a338ffb2b225648babf18526239c3432d884af317203600e86f12836ba48affe3ffb7bf6121e30bd42f15726220f87776425e316e7dccf5eda02714db6d00e61209f264a75bffd9c4ca2427c7882", @ANYRES64=r3], 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32], 0x5c}}, 0x40) 517.33897ms ago: executing program 4 (id=5084): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000000000000000000b556a705251e6182149a08c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c1504bb918689d9193e9bd1c1b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000800) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 439.318547ms ago: executing program 2 (id=5085): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r2}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x541b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)={0x34, r4, 0x7, 0x0, 0xfffffffe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}]}, 0x34}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c0000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000800000000000000000000a60000000060a0b04661f794a000000000200000034000480300001800b0001006c6f6f6b75700000200002800900010073797a30000000000800054000000000080003400000001d0900010073797a30000000000900020073797a32"], 0x88}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x86, &(0x7f0000002480)=ANY=[@ANYBLOB="aaaaaaaaaaaa1ab9000000008100000086dd60b70bff004c2f0000000000000000000000ffff7f000001ff020000000000000000000000000001000008"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x1, 0xb589, 0x42, @private1, @empty, 0x40, 0x7800, 0x9, 0xe68}}) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)={0x14, r11, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) (async) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x5, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r12, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r14, r13, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x5, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r12, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r14, r13, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="760a0000000000006111980806000000180000000000000000000000000000009500000000000000231b88f72ce48a93e19e73c170506df7c878268fd6502f4c914e0faa1342c4ffc112bd7f506390084930036e74c0d440d9427c609e5112d25d8f724514050cf0147bb3f0cebcc8ac326b03f2b08b22cb91dcd22959dcfc2a959ea383f289e5df042ccdaef1080b0100000000000000091cd49bb181a38c74635d98e5"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r14}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="760a0000000000006111980806000000180000000000000000000000000000009500000000000000231b88f72ce48a93e19e73c170506df7c878268fd6502f4c914e0faa1342c4ffc112bd7f506390084930036e74c0d440d9427c609e5112d25d8f724514050cf0147bb3f0cebcc8ac326b03f2b08b22cb91dcd22959dcfc2a959ea383f289e5df042ccdaef1080b0100000000000000091cd49bb181a38c74635d98e5"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r14}, 0x94) sendmsg$FOU_CMD_ADD(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="0b0528bd7200fedbdf250134f5bcc18a44ba73994a64afa3269c000000"], 0x14}, 0x1, 0x0, 0x0, 0x2405c000}, 0x24000848) (async) sendmsg$FOU_CMD_ADD(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="0b0528bd7200fedbdf250134f5bcc18a44ba73994a64afa3269c000000"], 0x14}, 0x1, 0x0, 0x0, 0x2405c000}, 0x24000848) sendmsg$FOU_CMD_DEL(r7, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, r11, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0xb}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x39}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc881}, 0x81) bind$xdp(r6, &(0x7f00000007c0)={0x2c, 0x8, r9, 0x32, r6}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000080), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="09000000040000000004000008"], 0x50) 432.931478ms ago: executing program 1 (id=5086): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x90}]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x3, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x2004c880) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)="5c6817", 0x3}], 0x1, &(0x7f0000000d80)=ANY=[], 0x18}, 0x8080) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="8900", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) 377.713491ms ago: executing program 3 (id=5087): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001040)={0x24, 0x25, 0x109, 0x70bd22, 0xfffffffc, {0x5c}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}, @nested={0x8, 0x6b, 0x0, 0x1, [@generic="14000000"]}]}, 0x24}, 0x1, 0x0, 0x0, 0x449d7}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x1, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20091}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x7800, 0x7800, 0x2, 0x10001, {{0x9, 0x4, 0x1, 0x21, 0x24, 0x68, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast2, {[@end, @lsrr={0x83, 0xf, 0xf, [@loopback, @multicast2, @multicast1]}]}}}}}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000001c0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x6, 0x7, 0xfff, 0x400, 0x1, 0x800000, r2}) 376.671266ms ago: executing program 4 (id=5088): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000680008806400008024000100f44da367a88ee6564f0202114567a7082f5cebee8b1bf5eb7337341b459b39223c0009801c0000800600010002000000080002007f00000105000300030000001c000080060001000200000008000200000000000529fb17385a4b615c000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e140056bc24a0cd80e7a33ce21f7ae825020077673000"/188], 0xb4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 374.23145ms ago: executing program 0 (id=5089): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x7c}}, 0x0) setsockopt(r0, 0x8, 0x7, &(0x7f00000002c0)="c1841d67", 0x4) 251.394612ms ago: executing program 3 (id=5090): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000040)={r3, 0x8001}, 0x8) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = accept4$phonet_pipe(r5, 0x0, &(0x7f00000000c0), 0x800) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000008640)=@delchain={0x3ab8, 0x65, 0x8, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0x3}, {0xfff2, 0x7}, {0xa, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x3a88, 0x2, [@TCA_BASIC_EMATCHES={0x118, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0xfc, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x2, 0x1, 0x7f}, {0xdb5, 0x4, 0x6, 0x3, 0x9, 0x2, 0x1}}}, @TCF_EM_META={0x84, 0x3, 0x0, 0x0, {{0x0, 0x4, 0x9}, [@TCA_EM_META_LVALUE={0x1e, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR='d', @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="b5bf0814df9430", @TCF_META_TYPE_VAR='R$']}, @TCA_EM_META_LVALUE={0x26, 0x2, [@TCF_META_TYPE_VAR="baeb9bbb1f", @TCF_META_TYPE_VAR="84342f7d249976", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="64d6", @TCF_META_TYPE_INT=0xb, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="8a40ef3b", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0xab, 0x1}, {0x81, 0xd, 0x1}}}, @TCA_EM_META_RVALUE={0x24, 0x3, [@TCF_META_TYPE_VAR="02497c75100f15", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR='m', @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="86ccd90af33a9dda", @TCF_META_TYPE_INT=0x6]}]}}, @TCF_EM_META={0x5c, 0x2, 0x0, 0x0, {{0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5c, 0xd1}, {0x3, 0x4, 0x1}}}, @TCA_EM_META_LVALUE={0x7, 0x2, [@TCF_META_TYPE_VAR="9242", @TCF_META_TYPE_VAR="15"]}, @TCA_EM_META_LVALUE={0x13, 0x2, [@TCF_META_TYPE_VAR="f5bdc796abe66c", @TCF_META_TYPE_VAR="48b6c167d130ca", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR='p']}, @TCA_EM_META_RVALUE={0x9, 0x3, [@TCF_META_TYPE_VAR="7720f6032a"]}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR='7', @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="b5dc69f4c003156b", @TCF_META_TYPE_INT=0x8]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0xfff3}}, @TCA_BASIC_ACT={0x1484, 0x3, [@m_bpf={0x7c, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0x52, 0x6, "069e5e96d751e90d09101681a2a5eb8061229064c543293fd27d64ebdfacd194df0f8fd5f5e1b3d4b96a4739e9750741ffa11d7cc8e3a0e29b6f0d7ad8d30ca39ecf805762a85d398fedfb89dfc8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x7}}}}, @m_xt={0x80, 0x3, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x32be}]}, {0x4f, 0x6, "9115a6bc469cd23c0495b098cb7b195f8dc9350365e7ab337937b43c46a7f5f37970d3914b453633f64816ed3b4c3f2110db282daa4d6354cd5fd44fc706ceaa7f0c2a4aebaff8204a806f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbmod={0xc8, 0x5, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x9, 0xa9cf85d145bb399, 0x7fff, 0x2}, 0xb}}]}, {0x58, 0x6, "6b29bc88ca76001b142184d8d5551f13df906df0a210f7b55c9add4e7d75419911ae883f5650ecff3f413fc0d9b2e8accc221f0ab0351327fae84d2e2327c306acf1b595806067357b7385fcb5feddefb44040d5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x4dc, 0x13, 0x0, 0x0, {{0xb}, {0x490, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1e4, 0x0, 0xb9d, 0x7fffffff, 0x8, 0xcf0, 0x3, 0x7f, 0xa1c, 0xffff6d11, 0x1, 0x3f5c, 0x3, 0xffffffda, 0xd, 0xe, 0x2, 0x22, 0xc80, 0xffff, 0x3, 0x67a, 0x4, 0x3, 0x7f, 0x8, 0x6, 0x0, 0x6, 0x1000000, 0x2, 0x3, 0xba5, 0xfffffffa, 0x10001, 0x9e, 0x0, 0x8, 0x5, 0x10000, 0x6, 0xd, 0x1ff, 0x6, 0x4cb5a40a, 0xe0000, 0x800, 0xe146, 0x2, 0xf, 0x3250000, 0x0, 0x5ce086d6, 0x4, 0x7fffffff, 0x0, 0x9, 0x101, 0x3, 0x9, 0x8000000, 0x0, 0x4, 0x755d0, 0x3, 0x81, 0x4, 0xf6dd, 0x8773, 0xd, 0x9, 0x8, 0x842e, 0xc, 0x4, 0x1, 0x40, 0x0, 0x5, 0x9, 0x80000000, 0x2, 0x7, 0x0, 0x2, 0x7c03a8cc, 0xff67, 0x2, 0x2, 0x1, 0xfffffffc, 0x1, 0x6, 0x8, 0x101, 0x9, 0xffffff5b, 0x8, 0x80000000, 0x8000, 0x2, 0x200, 0x3, 0x4, 0x1, 0xc9f, 0x3800, 0x0, 0x2, 0x5, 0x3ff, 0x5, 0x10000, 0x2, 0xf, 0x1, 0xf, 0x3, 0x4, 0x7, 0x526e, 0x9, 0x948b, 0x8001, 0x4, 0xb6c, 0x7, 0x1, 0x8, 0x2e, 0x2, 0x7, 0x80, 0xad1, 0x7, 0x4, 0x5, 0x80, 0x0, 0x4, 0x16, 0xa61, 0x88, 0x89, 0x5, 0x4, 0x1ff, 0x6, 0x8000, 0x815, 0x6, 0x8, 0x0, 0x7, 0x5, 0x1, 0xb066, 0x2, 0x10, 0x1, 0x200, 0xffffff80, 0x1, 0x2, 0x5, 0x4, 0x0, 0x9, 0x8, 0xa5c8, 0x5a4, 0x1, 0x932, 0x6, 0x7, 0xaa8e, 0xfffffffd, 0x2f, 0x9, 0x9, 0x8, 0x6, 0x81, 0x100, 0x5, 0xff0d, 0xfffffffd, 0x4, 0xffffffff, 0x8, 0x200, 0x9, 0x7, 0x8, 0x2, 0x0, 0xdfb, 0xffff, 0xcc, 0x5, 0x3, 0x1000, 0x9, 0xffffff81, 0x2, 0x0, 0x1, 0x0, 0x80000001, 0x1, 0x401, 0x9, 0x6, 0x8, 0x6, 0x8, 0xff, 0x8, 0xee4d, 0x0, 0x4, 0x6, 0x1c69800, 0x593, 0xffffff1d, 0x6, 0x8, 0x0, 0x5, 0x5, 0x1, 0x9, 0x6, 0x6, 0x7f, 0x40, 0x0, 0x80000001, 0x8, 0xa6, 0x72, 0x4, 0x8, 0x4, 0x95b, 0x5, 0xb3d, 0x2, 0xfff, 0x9, 0xffffffff, 0x5, 0x3af, 0xbce7, 0x400, 0x80000000]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xaf}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x2, 0x1, 0x5, 0x1fe8, {0x8, 0x1, 0x1, 0x9, 0x2, 0xfffffffd}, {0x7b, 0x0, 0x7, 0x0, 0x100, 0xe}, 0x6, 0x4, 0x7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}], [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]]}, {0x21, 0x6, "fa25feb3208ba49c02c3d0ae6c5b1499b142309635d778232ccc758f10"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_police={0xd64, 0xb, 0x0, 0x0, {{0xb}, {0xc60, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xda94488}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x9, 0x7, 0x4, 0x6, 0xfffffff7, 0xc41, 0x9, 0x2a, 0x22, 0xe, 0x7c3, 0x400, 0x9d, 0x7, 0x3, 0x6, 0x1, 0x9a, 0x0, 0x101, 0x8b, 0x1, 0x97a, 0x5, 0xcc23, 0x80000001, 0x2, 0x2, 0x4, 0x0, 0x9, 0x4, 0xfffffffc, 0x4, 0xfffffffc, 0x8000, 0x1ff, 0x3, 0xfffffffe, 0x91ad48b4, 0x6, 0x1ff, 0x5c51, 0x80000000, 0xc93, 0x2, 0x7, 0x3a9b, 0x8, 0x1, 0x7, 0x80, 0x7, 0x2, 0x8001, 0x10001, 0x0, 0x6, 0x8, 0x1, 0x1, 0x4, 0x7a8, 0x4, 0x3, 0x80000000, 0x7, 0x2, 0x101, 0x750, 0x3, 0x9, 0xfffffff6, 0x5, 0x4, 0x6, 0x8, 0x3, 0xef, 0x5, 0x9ac1, 0xe9, 0x6, 0x1, 0x3, 0x4, 0x8, 0x9, 0x9, 0xb34f, 0x0, 0x2, 0xffffbd30, 0x2, 0xdd7, 0x2, 0x1bf, 0xd, 0x0, 0x6, 0x7a, 0xe7e, 0xa8ec, 0x200, 0x6, 0x4, 0x8, 0xfffffffb, 0x289, 0x3, 0x3ff, 0x4, 0x0, 0x3ef, 0x800, 0x4, 0x101, 0x4, 0x3, 0x9, 0x2, 0x6e, 0x6, 0x688b77e3, 0x6, 0x1, 0x2, 0x5, 0x2a851f4e, 0x3, 0x4, 0x3, 0x5, 0x4, 0x80000001, 0x9ec0682, 0x210c, 0x80, 0x2, 0xc, 0x5, 0xb0, 0x6, 0x5, 0x8001, 0x3bd, 0x2c, 0x5, 0x3, 0x4, 0x6, 0xffffa790, 0x4, 0x2, 0x6404, 0x2, 0x9, 0x2, 0x88aa, 0x1, 0x9, 0x9, 0x9, 0xc, 0x9, 0x8, 0x1ff, 0x2, 0x47, 0xd407, 0x8001, 0x8, 0xfd6f, 0x7, 0x2, 0x7, 0x9, 0xfffff462, 0x3, 0x5, 0x8, 0x4, 0x6, 0x84, 0x5, 0x10, 0x5, 0x6, 0x1ff, 0x7, 0x5, 0x10000, 0x401, 0x33a1, 0xfe7, 0x101, 0x7, 0xfffffffd, 0x7, 0x0, 0x6, 0x2, 0x1800000, 0x2, 0x3, 0x2, 0x100, 0x9f85, 0x1ff, 0x400, 0x7, 0xa, 0x7, 0x0, 0x9, 0x3, 0xc5, 0x8, 0x3, 0x5, 0x4, 0xb, 0x4, 0x54, 0xffffffa5, 0x6, 0x85, 0x80000000, 0x2, 0x400, 0x9, 0x40, 0x7d56, 0x7, 0x9, 0x4, 0x9, 0x17d, 0xa96, 0x400000, 0x101, 0x4, 0xa, 0x61624a23, 0xe5c, 0x3, 0x4, 0x7, 0x3, 0x9, 0x100, 0x7fff, 0xfff, 0x9, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x300, 0x9a, 0xfff, 0x7, 0x0, 0x8, 0x910, 0x4e, 0x8001, 0x87, 0x1b, 0x6533, 0x2, 0x7, 0xfff, 0x7, 0x5, 0xc7, 0x0, 0x3, 0xf5a, 0x2, 0x80000001, 0x100, 0x8, 0x180, 0x8, 0x28000000, 0xa17, 0xe, 0xd98, 0x5, 0xffff8001, 0x5, 0x80000000, 0x898, 0x4, 0x7, 0xd6c7, 0x7f, 0x0, 0x6, 0x2, 0x80, 0x8, 0x0, 0x7, 0x7, 0x2, 0xace, 0x2, 0x0, 0x7fffffff, 0x0, 0x1000, 0x10d, 0x800, 0x5, 0x40, 0x100, 0x5, 0x2cb, 0x4a, 0x53e1, 0xffff, 0x38c80940, 0x7, 0x8000, 0x3, 0x4, 0x1, 0x3ff, 0x8001, 0x100000, 0x29, 0x4, 0x8, 0xe3, 0x7, 0xd8, 0x2, 0x3, 0x6, 0x2, 0x3, 0x8000, 0x5, 0x617e, 0x7fff, 0x4, 0x2, 0x10000, 0xf, 0x4, 0xffffff39, 0x9, 0x9, 0x2, 0x5, 0x8, 0xf, 0x8, 0x4, 0x9, 0xfffffffc, 0x2, 0x1, 0x7, 0x12, 0x8, 0x7, 0x0, 0xffffc2c6, 0x8001, 0x2, 0x7, 0x8, 0x2, 0x3, 0x0, 0x8, 0x1ff, 0x23, 0x6, 0x4, 0x4, 0x6, 0x1, 0x1, 0x8, 0xf84, 0x479c, 0x6, 0x7fffffff, 0x9, 0xff, 0xfffffffb, 0xb5, 0x1, 0x7, 0xfffffffc, 0x48, 0x3, 0x10001, 0x3, 0x0, 0xffff, 0x5, 0x6, 0x10, 0xbe7, 0x81, 0x9, 0xac, 0x6, 0x4, 0x3ff, 0x7fc0000, 0x20, 0xa, 0x8, 0x840, 0xa0, 0x5, 0x1e6, 0x3, 0x9, 0x7fffffff, 0xfff, 0x3, 0x10001, 0x1, 0x4aa, 0x4, 0x2, 0xb, 0x6be7, 0x80, 0xfffffffb, 0x48, 0x0, 0xd04f, 0x8, 0x2, 0x6, 0xffff, 0xcc9, 0x86, 0x7, 0x5, 0x7, 0x2, 0x9, 0x1, 0x7, 0x6, 0x1, 0x9, 0x2, 0x8000, 0x3, 0x2, 0x6, 0x3ff, 0xed64, 0x1, 0x7, 0x6, 0x4, 0x9, 0x1, 0x44, 0x5, 0x9, 0x0, 0xfffffffe, 0xb0d1, 0x400, 0x2, 0x4, 0x40, 0x5, 0xc0b6, 0x8, 0x81, 0xf, 0x502e, 0x1, 0x1, 0x1, 0x9, 0x80, 0x1, 0x7, 0x4, 0x8001, 0x9, 0x0, 0x7, 0x9, 0x1000, 0xd, 0x101, 0xf, 0x5, 0x7, 0x5, 0x7ff, 0x9, 0x3, 0x80000000, 0x5e2d, 0x8, 0x7, 0x3, 0x7f]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x1, 0x5, 0x7, 0x5, 0x2, 0x8, 0x27, 0x8, 0x6, 0x8001, 0x800, 0x5, 0x1, 0x7, 0x8, 0x6, 0x2, 0xbd0, 0x6, 0x101, 0x2d1a599f, 0x1, 0x1, 0x3, 0x3, 0x200, 0xdac, 0xfffffffd, 0x2, 0x1000, 0xff, 0xb, 0x6a1, 0xefa6, 0x401, 0xfffffff2, 0x9, 0x4, 0xffffff00, 0x9, 0x80, 0x5, 0x8b, 0x2, 0x3, 0x8, 0x7ff, 0x2, 0x7369, 0xfffffffb, 0x10, 0x7f, 0xfffffffc, 0x200, 0x18c, 0x8, 0x8, 0x2, 0x300000, 0xc123, 0x1, 0x0, 0x10000, 0x8, 0x4, 0xc8c, 0x4, 0x5, 0x8, 0x7, 0x6, 0x80000000, 0x80000000, 0x4, 0x401, 0x2, 0x4, 0x1, 0x8, 0xff, 0x1, 0xfff, 0x80000000, 0xc, 0x2, 0x101, 0xc, 0x1, 0x800, 0xff, 0x7, 0x77, 0x7fff, 0x86, 0x5, 0x5, 0x4, 0x2, 0x3, 0x0, 0x8000, 0x401, 0x0, 0x3, 0x0, 0x3, 0xe, 0x81, 0x1, 0x1800000, 0x80000001, 0x401, 0x4, 0x9, 0x1, 0x838, 0x6, 0x0, 0x5, 0x8, 0x9, 0x9, 0x3ff, 0x8, 0x178, 0x6, 0x334e, 0x230f, 0x8000, 0x101, 0xf0d, 0x3, 0x839, 0xe, 0x4, 0x3, 0xc1a4, 0x80, 0x0, 0x8, 0x4, 0x1, 0x5, 0x2, 0x8001, 0xd, 0x100, 0x4959, 0x200, 0x80000001, 0x80000000, 0xfffeffff, 0x8001, 0x6942287d, 0xfff, 0x75b4, 0x4, 0xfffffe00, 0x4, 0xf40, 0x94, 0x565, 0x2, 0x2da, 0x5, 0x6, 0x8000, 0x200, 0x9, 0x2, 0xb, 0x62ce4a81, 0x8, 0x6, 0x5d, 0x8, 0x0, 0xc7, 0x4, 0xc787, 0x401, 0x8, 0x462b, 0xffffffff, 0x0, 0x7, 0x2, 0x40, 0x8d9e, 0x1, 0xfffffff3, 0xd5, 0x1, 0xffffffff, 0x80000001, 0xffff8000, 0x9, 0x5, 0x7, 0x5000000, 0x0, 0x8, 0x0, 0x7, 0x0, 0xcf0, 0x2, 0x8e5, 0x4, 0x7fffffff, 0x6, 0x7a16, 0x8, 0x80, 0x7, 0x2, 0x1, 0x400, 0x9, 0x6, 0x1, 0x8, 0x7fffffff, 0x1, 0xffffffff, 0x1, 0x8, 0xd855, 0xe4, 0x1, 0x38f8, 0x7, 0x10, 0x0, 0x7, 0x6054, 0x8, 0x8, 0x8, 0x6, 0x2, 0x6, 0x7, 0x4, 0x6, 0x7, 0xf, 0x1, 0x0, 0xb2fa, 0x4, 0xb38, 0x8, 0x4, 0x6]}]]}, {0xd9, 0x6, "76c310a0a4ec80b8361d1832f03a270095696c3a38f2e4a02bd4209c7005e2e53c727a1ef716732e76a2f2052c3c59d705a316ef36ff3e27f2b09f258237efa74d71dc22b08bdf11a339a8f624244f9a6f91acdb6e4b33d2c3ce81bf3560c6525aef254cf6b9d2b288c104d8710e02c483e8026f6ec488621887c58e15355b5dafa898204668e57c99562dd597c9456a428f33b1c5a044c463b36dbe76bfe2b30ec83d78f973bb7ae8f3acfc35b7859acd934b95ba08c0330e291c1bd6659cc6b38644ce0e4855f3ed1a5608b575b90c58481a53ac"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}, @m_tunnel_key={0x7c, 0x20, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x40}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x3000}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}]}, {0x13, 0x6, "7b980a9d7f9566a6700cc2460d7073"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BASIC_EMATCHES={0x1a4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x9c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x2c, 0x1, 0x6}, {0x8, 0x4, 0x7, 0x1, 0x3, 0x1, 0x1}}}, @TCF_EM_IPT={0x40, 0x3, 0x0, 0x0, {{0x0, 0x9, 0x6}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x77, 0x7, 0x7fff}, {{0x1, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0xfeff}, {0x6, 0x6, 0x4, 0x3}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3}, {0x2, 0x4, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}, @TCA_EMATCH_TREE_LIST={0xe4, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc4, 0x1, 0x0, 0x0, {{0x8001, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="e0b954e3", @TCF_META_TYPE_VAR="c5"]}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="7f4de473bd2b9e6ad617", @TCF_META_TYPE_VAR="a2", @TCF_META_TYPE_VAR="014a"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x9, 0x1}, {0x5, 0x2, 0x2}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0x21, 0x3, [@TCF_META_TYPE_VAR="7c069aa18ad5f5", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="c8529a72dad716463961", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xad, 0x5, 0x1}, {0x0, 0xeb, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xd}, {0x9, 0xc, 0x1}}}, @TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_VAR="7086a9146f418099a4", @TCF_META_TYPE_VAR="d0", @TCF_META_TYPE_VAR="413f944576d636", @TCF_META_TYPE_VAR="88781b23f1"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x3}, {0x6, 0x51, 0x1}}}, @TCA_EM_META_LVALUE={0x17, 0x2, [@TCF_META_TYPE_VAR="776c5d9651285ce0a4f9", @TCF_META_TYPE_VAR="84b28ac2c83f1d8284"]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0x2}, {0x0, 0xc672, 0x7fffffff, 0x80000000}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x40}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}, @TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x49, 0xffffffffffffffff, 0xfffffff0, 0x80000001, 0x1, {0x81, 0x0, 0x7, 0x1, 0x0, 0xbab}, {0x5, 0x2, 0x1000, 0x8000, 0x8, 0x9}, 0x7fff, 0x8e, 0x51a}}]}, @TCA_BASIC_ACT={0x188, 0x3, [@m_mirred={0x184, 0x14, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7ff, 0x3, 0x5, 0x0, 0x774}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0xfffff801, 0x1, 0x3, 0x1}, 0x2, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0xb1, 0x8, 0x2, 0x100}, 0x3}}]}, {0xf6, 0x6, "f8454a494259f8c44146e80c97041436bdd412ad49b04fc7a41a1dad779806d875a8f554100214cc43f8957f0921aed62ecd1fb0370ce988530d8897bed28a388d1ba40bb5b187db7b71f64213ec4f5bd1a14f7c56a96e0ba7906f833e37e157e11dcf8f41e3e278f598162267a8a4f7a9b5a411fa5b5905d14d88f0d1370751553f2675d406e8e05763aa12dacd064248b47ca0e3714616880f739a1b5068f6bf9ab57b05c8726b6b8eac310a5d3d44f286361a9547fd74ad95132db28bcfd3b2d89706e8417eb0335b76323dd79a8c03547980dd1d92de4888a40d4fc9c6147c364c3b892215b9e1680d5695a753c98d5e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BASIC_ACT={0x1d64, 0x3, [@m_bpf={0x6c, 0x20, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x5, 0x5, 0x1, 0x4, 0xb7}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x2, 0x81, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x16c, 0x3, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x14, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x78}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_TYPE={0x6, 0x5, 0x8000}, @TCA_IFE_SMAC={0xa, 0x4, @random="f13937a6cc44"}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_TCINDEX={0x6}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x4000}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x83}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x74}]}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}]}, {0xb6, 0x6, "0e439048fadf1b8f80eda0b944e3f8674de22c306c8f3efb12f5a47b5c87b07c49edc95209503696789ab8aeda23031e419912d697f5b8f91e6217b508fcf70466ecd9f47c34b1c700d06885a0d5af59572f663c5051f4daf167f0a5c4386bec499b713643352bc57e8318799118d715a1a4d220b345624f8cb14ab7fb2ec9d3c4aa21bd73746a75ed527bd6b91c36cda4186dc7d30e3103e57efe113db4d08b98a949196fdc1546266117780dca4a3df4d6"}, {0xc}, {0xc, 0x8, {0x760bb14b34e5e4, 0x3}}}}, @m_gact={0x108, 0x8, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x3d0, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x24aa, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x6, 0x0, 0x4, 0xa25}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x8, 0x7, 0xcf2b, 0xbc9f}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x21cb, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x4, 0xffffffffffffffff, 0xbd4, 0x1}}]}, {0x6e, 0x6, "45a8081ce851c5f3d3c4836d0396a76ce1f9526cf83b8672fdf45fec32fe593535ab7da69a2aecb9f33c942c65df112c1eecb97a7697d1e8fc37e6ecc88dc57dc453983c387c83fe9b344499c04f15955449198f7e0fb3f56aaedb16073df889d9642975f6c72a5cc48f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x88, 0x9, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x7, 0x7, 0x3ff, 0x3}, 0x4a}}]}, {0x3f, 0x6, "f2e24535309c50aef3aeb8c8bf85286bee59db31c68d821a608f8d009a99e958c92793738aac14858d1fbead84a86442802d29e57603d5ef3f8e1a"}, {0xc}, {0xc, 0x8, {0x0, 0x5}}}}, @m_vlan={0x158, 0x6, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x2a5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x61a}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xae6}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0x54, 0x1b, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private=0xa010100}, @TCA_CT_LABELS={0x14, 0x7, "23f18972219c3f3da5e665e924894561"}]}, {0xd, 0x6, "b8eb9356000b82d7de"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_police={0x184c, 0x1b, 0x0, 0x0, {{0xb}, {0x820, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x2e54f331, 0xc4f, 0x6, 0x5e12be00, 0x10000, 0x2, 0x2, 0x3, 0xffff, 0x1, 0xe, 0x401, 0x10000, 0x80000001, 0x0, 0x7f, 0x401, 0x3, 0x4, 0x6, 0x7, 0x3, 0x4, 0x8, 0x1003, 0x9, 0x5, 0x0, 0x7, 0x797, 0x3, 0x4, 0x5, 0x2, 0x4, 0x2, 0x6, 0x4, 0x3, 0x0, 0x0, 0x4, 0xf, 0x0, 0x4, 0x55b1, 0x3, 0xfff, 0x24b, 0x8, 0x0, 0xffffff99, 0x40, 0x7, 0x6, 0xa186000, 0x4, 0xf, 0x9, 0x3b, 0x10001, 0x10001, 0x3ad2, 0xd82a, 0x2, 0x8, 0x8, 0x8, 0x9, 0x7, 0x10000, 0x400, 0x6, 0x9, 0x800, 0x7, 0x363, 0x8, 0x93f, 0x8001, 0x3, 0x4, 0x1, 0xfffff3ae, 0xb8d, 0x4, 0x8fb, 0xc4e, 0x1, 0xf, 0x5, 0x8cd, 0x4, 0x7, 0x8, 0xf4, 0x7, 0x2, 0x4, 0x7, 0x400, 0x6, 0x8, 0x9, 0x5, 0x4, 0x3ff, 0x101, 0x8, 0x3, 0x5, 0x7, 0x401, 0xa, 0x10, 0xbf, 0x1e5, 0x5, 0x6, 0x40000000, 0x8c, 0xfffffff6, 0x6, 0x81, 0x7cd, 0xc, 0x5, 0x0, 0x8, 0xffff, 0x0, 0x8000, 0xffff, 0x1, 0x60000, 0x1000, 0x1, 0xc, 0x6, 0x8, 0x1, 0x2, 0x1, 0x2, 0x7fffffff, 0x6, 0x3ff, 0x8, 0x4, 0x2, 0x6, 0xfff, 0x3, 0x2, 0x9, 0x4, 0xe6, 0x3, 0x3, 0x4, 0x5, 0x9, 0x5, 0x7fffffff, 0xfffffff1, 0x0, 0x9, 0x3, 0x3, 0x6, 0x0, 0x3ff, 0x5, 0x3, 0x1200, 0x0, 0x7, 0x80, 0xfd, 0x8, 0x576, 0xfffffa2b, 0x1, 0x8000, 0x401, 0x41, 0x7, 0x0, 0x10000, 0x10000, 0x1, 0xffffffbe, 0x5, 0x1, 0x80, 0x3, 0x2, 0x4, 0x2, 0x7, 0xfffffffe, 0x400, 0x0, 0x80, 0x0, 0xba, 0xffff8000, 0x9, 0x1c00000, 0x5, 0x1ff, 0x0, 0x800, 0x6e4, 0x9, 0x3, 0x80000000, 0x5, 0x1c0000, 0x7, 0x7ff, 0x6, 0x9, 0x1, 0x0, 0x7, 0x3, 0x6, 0xb, 0x3, 0xf, 0x2, 0x2, 0x82, 0xce57, 0x40, 0x0, 0x2, 0x3, 0x800, 0xc, 0x8, 0x8, 0x0, 0x9, 0x5, 0x1, 0x5, 0x1, 0xc0d, 0x6, 0x5, 0x4, 0x8000, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10000}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xffffff4f, 0x100, 0x0, 0x9, 0x30fcd2af, 0xd8, 0x6, 0x2, 0x4, 0x8, 0x9, 0x3, 0x0, 0x8, 0x7, 0x900000, 0xb, 0x8, 0xaeb, 0x7, 0x3, 0x2, 0xa, 0x0, 0x48e, 0xa, 0x72, 0x915c, 0x7, 0x4, 0xff48, 0x2, 0x8, 0x2, 0x1, 0x5, 0xc6ac075, 0xd0d, 0x6, 0x7f, 0x9, 0x7, 0x44ba, 0x3, 0xda5, 0x79, 0x81, 0x1, 0x81, 0x6, 0x4, 0x400, 0x7ff, 0xffffffff, 0x91d5, 0x1, 0x0, 0x4, 0xffffff80, 0xd, 0x4, 0x928, 0x7, 0x0, 0x0, 0x9, 0x7, 0x5, 0x3139f837, 0x0, 0x7f, 0x3, 0x9, 0x5, 0x7, 0x114e65f1, 0x7b3, 0x0, 0x5, 0xfffffffc, 0x2, 0x2, 0x7, 0x3a, 0xb, 0x3ff, 0x401, 0x5, 0x9, 0x200, 0x1000, 0x7, 0x8000, 0x3, 0x5, 0x80000000, 0x8, 0xfffffff8, 0x9, 0x7, 0x6, 0xe45, 0x6, 0x4, 0x200, 0x8, 0x4, 0x6, 0x4, 0x4, 0x667, 0x8, 0x401, 0x6, 0x6b2, 0x9, 0x200, 0xe4, 0xffff682b, 0xd86, 0x7, 0x2, 0xc5, 0x4, 0x7, 0x3, 0x800, 0x26, 0xffff8000, 0x6, 0x8, 0x0, 0x1, 0x2, 0x0, 0xebc, 0xfff, 0x3, 0x1, 0x4, 0xec4, 0x4, 0xfffffffd, 0x2bcf9e4d, 0xd4354bbe, 0xf, 0x1000, 0x9, 0x4, 0x6, 0x4, 0x1, 0x24a7, 0x8, 0xf, 0x356f, 0x400, 0x3, 0x40, 0x6, 0xc, 0x4, 0x9, 0x8, 0x9, 0x8001, 0x5, 0x9, 0x100, 0x200, 0x800000, 0x4, 0x1, 0x7, 0x4, 0x9, 0xfd12, 0x9, 0xb, 0x6, 0x9, 0xffff, 0x7, 0x7f, 0x4, 0x6, 0x3fe, 0x20000, 0x6, 0x6, 0x3ff, 0x9, 0xe664, 0xfffffff7, 0x6, 0x65, 0x3, 0xffff, 0x2, 0x5, 0x5541, 0x8001, 0x2270, 0x2, 0x10001, 0x9, 0x8000, 0x2, 0x5, 0x1ff, 0xd, 0x80000000, 0x0, 0x4, 0x100, 0x9, 0x8, 0xe918, 0x8, 0xfffffffe, 0x4, 0x2db, 0xd2d, 0x101, 0x7fffffff, 0x8, 0x400, 0x5, 0x3, 0x2, 0x3ff, 0x8, 0x18000, 0x3, 0x1, 0x8a, 0x2, 0x5343, 0x10001, 0x93f, 0x8, 0x8, 0x60d, 0x5, 0x9, 0xffffffff, 0x6, 0x3, 0x0, 0x2, 0x0, 0x0, 0xba, 0x0, 0x5000000]}]]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0x10}}, @TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xeeea, 0x8, 0x1, 0x6, 0x8, 0x7, 0x8, 0x443, 0x7, 0x1, 0x7f, 0x6c89, 0x7fffffff, 0x5, 0x100, 0x5, 0x8, 0x3, 0x9, 0x1c, 0x5, 0x8, 0x3, 0xb, 0x1, 0x8, 0xff, 0xaf5, 0xe8, 0x2, 0x3, 0x10, 0x8, 0x6, 0xea4, 0x8, 0x8, 0x0, 0xb, 0x5, 0x1, 0xfffffffa, 0x4, 0x8, 0x1, 0x4, 0xdf, 0x8, 0x0, 0x6e, 0x4, 0x1ff, 0x13, 0x40, 0x5, 0x5, 0x1, 0x18ee, 0x3, 0x1000, 0x74, 0x6, 0xe, 0x3, 0x3, 0xffffffff, 0x7, 0xb4c, 0x40, 0x6, 0x7f, 0x0, 0x4, 0x7, 0xf6, 0x4bd66348, 0x3, 0x5, 0x3, 0x8000, 0x1ae, 0x0, 0x1ff, 0xf74, 0x6, 0x0, 0x4, 0x9, 0x6, 0x7, 0x1, 0x6b, 0x9, 0x7ff, 0xfff, 0x8, 0x9, 0x1, 0x3, 0x0, 0x7f, 0x0, 0x973, 0x0, 0x1, 0x2, 0x5, 0x7, 0xf9, 0x30000000, 0xfffffffc, 0x6, 0x3, 0x1, 0x400, 0x8, 0x4, 0x8, 0x6, 0x28375dac, 0x2, 0x0, 0xd7f, 0x4, 0x29, 0x0, 0x1, 0x4, 0x5, 0x7, 0x8, 0x2, 0x5, 0x3, 0x5, 0x0, 0x101, 0x3, 0x400, 0xc, 0x3, 0xc598, 0x9, 0x3, 0x400, 0x9, 0x7, 0x0, 0x0, 0x1ff, 0x100, 0x1b, 0x880f, 0x7, 0x4, 0x80000000, 0xfffffffe, 0x9, 0x2, 0x8e, 0x10, 0xf, 0x8, 0xc, 0x1, 0x1c56, 0x0, 0x9, 0x5, 0x1, 0x50, 0xfffffffc, 0x5, 0x800, 0x6, 0x4, 0x1, 0xffff56fc, 0xbd5, 0x10, 0x9, 0x6, 0x3ff, 0xc7, 0x1, 0x10000, 0x5d3f, 0xdf6, 0x6, 0x100, 0x2, 0x3, 0x0, 0x69, 0x4, 0x5, 0x0, 0x1e5, 0x1, 0x1, 0x7ff, 0x0, 0x3, 0x3, 0x9, 0x8, 0xd28d, 0xfff, 0xa, 0x7fffffff, 0x3, 0x9, 0x6, 0x7fffffff, 0x0, 0x9, 0x200, 0x3, 0x2, 0x5695, 0xfffffffb, 0x2, 0x101, 0x0, 0x0, 0x7, 0xff, 0x800, 0x4, 0x9, 0x264, 0x7, 0x1, 0x3, 0xc3, 0x3146, 0x81, 0x3, 0x6, 0x3, 0x1, 0x6, 0x2, 0x0, 0x1, 0x9, 0x400, 0xfffffff6, 0x1, 0x7, 0x4, 0x200, 0x2, 0x5ad, 0x9]}]}]}}]}, 0x3ab8}}, 0x40000) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000085c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {}, {0x6, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x0, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x4}, {{0x3, 0x1, 0x0, 0x1}, {0x4, 0x1}}}}, @TCF_EM_NBYTE={0xfffffffffffffd23, 0x2, 0x0, 0x0, {{0x24}, {0x7d}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}}, 0x40090) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r10, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r0], 0x88}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r10], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa2c09000000f80000451f00300067000009019078ac1414a1ac1414bb050190780a01010145ab0c7e006400dd02210005ac1e0101ac186148f058426ff35f4aea03089ed6da86f7391029aab070830c5dce6338"], 0x0) bind$alg(r11, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0) r13 = accept4$alg(r11, 0x0, 0x0, 0x0) sendmmsg$alg(r13, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) write(r13, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000100039042cbd7000eaffffff000003e4", @ANYRES32=r10, @ANYBLOB="83000400000000004800128008000100736974003c0002800500090029000000190010"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 241.784183ms ago: executing program 4 (id=5091): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @local}, {0x306, @remote}, 0x0, {0x2, 0x4e24, @empty}, 'macvtap0\x00'}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000440)={0x0, 0x1, 0x1, 0x5, @vifc_lcl_addr=@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 185.706043ms ago: executing program 0 (id=5092): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000180)={0x0, 'dvmrp1\x00', {0x3}, 0x3}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) sendfile(r1, r1, 0x0, 0xa) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x10000}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={r2, @in6={{0xa, 0x4e22, 0x45, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}}, 0x5}, 0x90) 184.838893ms ago: executing program 2 (id=5093): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001380)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x7fff, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xf6, 0x8, 0x9}, {0x1, 0x4}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT=r5], 0xb8}}, 0x20040010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b40000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000400000000000000000000aa00000004000000000a006080"], 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x4051) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a00000002000000000000010200416c806c00010800000001000004090000000400000001000000010000000061615f5f0000305f"], 0x0, 0x4a, 0x0, 0x1}, 0x28) sendmsg$nl_xfrm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 180.875071ms ago: executing program 1 (id=5094): clock_gettime(0xfffffffffffffffd, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f00000003c0)=0x4, 0x4) sendmsg(r1, &(0x7f0000005c80)={&(0x7f0000005c00)=@in={0x2, 0x4e24, @empty}, 0x80, 0x0}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xf, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0xfffffffc}, {0x24caf689, 0x80003}]}}) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000040), &(0x7f00000000c0)=0xc) 96.801121ms ago: executing program 1 (id=5095): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2041) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071122500000200009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) r1 = accept4(r0, &(0x7f0000000080)=@rc={0x1f, @fixed}, &(0x7f0000000140)=0x80, 0x180800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/62, 0x1338000, 0x800}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, 0x0, 0x4040815) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x1c, 0x21, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r7 = socket$can_j1939(0x1d, 0x2, 0x7) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) connect$can_j1939(r7, &(0x7f0000000380)={0x1d, r9, 0x2, {0x1, 0x0, 0x2}}, 0x18) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0xa485, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2, 0x2}, 0xe) 54.726673ms ago: executing program 0 (id=5096): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) (async) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000940)={0x28, r3, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="e5"}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x810) (async) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000940)={0x28, r3, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="e5"}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x810) r5 = socket(0x10, 0x803, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x6001}, 0x40400c0) r8 = socket(0x10, 0x3, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000300)='cgroup.freeze\x00', 0x275a, 0x0) pread64(r10, &(0x7f0000000100)=""/165, 0xa5, 0x9) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000280)={r5, &(0x7f00000000c0)='veth0_to_hsr\x00', 0x24000, &(0x7f0000000100)={@align=0x8, {0x865, 0x5, 0x401, 0x4}}, 0x9, &(0x7f0000000200), &(0x7f0000000240)=0x80000000}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000280)={r5, &(0x7f00000000c0)='veth0_to_hsr\x00', 0x24000, &(0x7f0000000100)={@align=0x8, {0x865, 0x5, 0x401, 0x4}}, 0x9, &(0x7f0000000200), &(0x7f0000000240)=0x80000000}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r7, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9e, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x19, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1, 0x14, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@map_val={0x18, 0x4, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @jmp={0x5, 0x0, 0xb, 0x2, 0x2, 0xffffffffffffffc0, 0x1}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @jmp={0x5, 0x1, 0x5, 0x2, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000500)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x63880, 0xf8, '\x00', r1, @fallback=0x34, r0, 0x8, &(0x7f0000000540)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x1, 0x2, 0x6}, 0x10, r12, r7, 0x4, &(0x7f0000000ac0)=[r6], &(0x7f0000000b00)=[{0x5, 0x2, 0x5, 0x9}, {0x3, 0x2, 0x0, 0x2}, {0x4, 0x2}, {0x3, 0x5, 0x8, 0x4}], 0x10, 0x1225}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1, 0x14, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@map_val={0x18, 0x4, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @jmp={0x5, 0x0, 0xb, 0x2, 0x2, 0xffffffffffffffc0, 0x1}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @jmp={0x5, 0x1, 0x5, 0x2, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000500)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x63880, 0xf8, '\x00', r1, @fallback=0x34, r0, 0x8, &(0x7f0000000540)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x1, 0x2, 0x6}, 0x10, r12, r7, 0x4, &(0x7f0000000ac0)=[r6], &(0x7f0000000b00)=[{0x5, 0x2, 0x5, 0x9}, {0x3, 0x2, 0x0, 0x2}, {0x4, 0x2}, {0x3, 0x5, 0x8, 0x4}], 0x10, 0x1225}, 0x94) bind$unix(r8, &(0x7f0000000880)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.610613ms ago: executing program 4 (id=5097): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000000)=0xfffffffd, 0x4) r3 = accept$packet(r1, &(0x7f0000000380), &(0x7f0000000540)=0x14) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x18, r2, 0x1, 0x10, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000076000d0b000000080000000003c00e0000000000080001000100000008000a0000000000080005"], 0x30}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x8, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r8, 0x6, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x2, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x30, 0x2e, 0x61]}}, 0x0, 0x29, 0x0, 0x1, 0x43}, 0x20) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000100)=@sco={0x1f, @none}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)=""/212, 0xd4}, {&(0x7f0000000400)=""/126, 0x7e}], 0x2, &(0x7f00000004c0)=""/37, 0x25}, 0x40000000) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYRESDEC=r0], 0x6c}}, 0x0) 0s ago: executing program 2 (id=5098): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)={0x0, @private, @empty}, &(0x7f0000000580)=0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f00000016c0)=ANY=[@ANYBLOB="18080200d4ff000000000000ff000015182e1b43", @ANYRES32=r2, @ANYBLOB="0000000002000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmmsg$inet6(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="c69cc1da6a4cbd4a3b9f2bb83cb8f0", 0xf}], 0x1, &(0x7f0000000080)=[@tclass={{0x14, 0x29, 0x43, 0x100}}, @hopopts_2292={{0x2b8, 0x29, 0x36, {0x93, 0x54, '\x00', [@generic={0xff, 0xf1, "5cbebbc13ad5b17adef76923e44fcb6ac34bd455a18dfc3573090e3f727495dc8e38301d293418251c183775caba50643f2fc2adeb8e88b6e85eb19f7b998cf4a3ba0aa8078489374af4d0e827c4d4d4ce36ab5d82bbbdf603c1e5e58fd926970327a840d0dbb5ae87461881b78cf52ca27ccb2ab83c174318f812fede196b2ef4ec2b42dde49d61bade6993de14520cb1d21d6d23de248f46720ba01ca0b9264aacf3f1970c3d0d0eea3991702e0a566653c1ca34f015e0faa88724a2ca270f03ec89ba927d87e355faa2b2997dbd9151e806416d435d31a953fcb6210417e0b97e965daecb45b2d7520bd242573782db"}, @generic={0xf4, 0xe2, "6bc3d458b24ed6a33da24e99a2ba503b7b356814121cb5895edb00b7fbe5afbbfec6742d2fe0accd4f878a6a851d8db2ac75e56843f8ac6b69d860ce813d859f73845aa9017ab09df2608bba208c00a81fcfb977821894fc94b0a8c08cf98186182d7aeff2c972841b8f131e069242231511fb676eb1e585f22315e3c9f2dc711e7c61a8748233d8edb34d359b7852a645cdd5f06f833577a2af16da2bc1272f81bb35aefa5b9f22cb97851701af81c9a087e794b18c8f56b25246605d46a63f92bbf885c433a665c9f9dbff85bda1fe725c13f530f559276d14f4d97e749946d768"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x59, 0x8, [0xae5, 0x2, 0x7]}}, @generic={0x4, 0x79, "0b7a2084d24390e2ae6747c9f5e8c8256f5c5b62ba48d5fbad37520d5d301cb2ad52c5812bcbbace30d53bc9f1ba161a0cd2c609b0d5ca6a9dcf5e2b47357ca335057d7993eab4b01b1f78e4605d402f3d444fe3bb1e9e7647d74e69ded74fbecf865a3a6bf0ebaafd7d455ab61447d9bd1d10547a9c506387"}, @hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0x8}, @jumbo={0xc2, 0x4, 0x7}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xe0}, @generic={0x2, 0x3, "45c167"}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x56, 0x8, 0x1, 0x5, 0x0, [@private1, @private0, @empty, @loopback]}}}], 0x328}}, {{&(0x7f00000003c0)={0xa, 0x4e20, 0x29c00, @ipv4={'\x00', '\xff\xff', @local}, 0xe42}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000400)="787787c8ff3dbc3f3f3aa78bc47eefbbcbf4be536e7d13660262a48ebbfdb7aefb8f017e7bcab585798f56cce27182b8ece43eb8b5eb87942bf5e35f45375e1ff0aff72b7fc870f034ed1c83705174c8d81779e103e09cadf506e0068f00086ae4ab34627555778574d2c7ba039be37ed7e70a33f79ad3de5be96a1e67352bbe86813fe926efb21f2aad26068464ce6427a22de22c49c548efc989f06853ee02ebd96b8f857e984292372cbd51a45611936262eb2cf6d3ff39e97a790fd3f0c86ac09994fccf25929872d2f54daeda936c5ad64f298678aa97cfbe113aa65bab66f7eeeb56ab3b22f2", 0xe9}], 0x1, &(0x7f00000005c0)=[@rthdr={{0x38, 0x29, 0x39, {0x2c, 0x4, 0x2, 0x97, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x8, 0x0, [@private2, @private2]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r1}}}, @hopopts={{0x130, 0x29, 0x36, {0x29, 0x22, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0x2aa8}, @generic={0x9, 0xf1, "717405a78094112a791e9bbd62f9b4f4fb1d6f1cf2090c828b687d78f35803dfcc3ec8af82290a3fd93aa25209f2480b3169469b3b19e37d8408ad0ba4f51f885af49ee11d9f71a02b315303ac97e694a71a11be6d0c88f37f646c55433699b7ba769789fe80e19b60761d8189a33eaa4da3c751c9cea27622a42c8a80a7cca2d8f329e73d266bf8a3c1d4729f8c0dfe3cdbcca827ddc2b3d970def9ff3d9472d4fe6e21dcc47665b3a354429889bde93526f74199bb2f682137990a5a7f7d3e19e73f76d5043a9f400d7f986f40d025b100a67a6f77f9fe322b0cc724534a7ff99e2d45bc83072c85f01e03577b3e9c48"}, @enc_lim={0x4, 0x1, 0x7}, @pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x3a, 0x3, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0xff}, @hao={0xc9, 0x10, @private1}, @enc_lim={0x4, 0x1, 0xc}, @enc_lim={0x4, 0x1, 0x4}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xf9}}], 0x218}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0xa2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x101}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000840)="e5537577770e3292684ab8a41256e44844dc9b8820", 0x15}, {&(0x7f0000000880)="766c9eb4c7e2abbbbb0e8a82309b24e1feb9836baa151c5d829a93b8c22f87f48d29f7628e527a32c6f64ffefaae4c0c8b939bd1a301bb65d5fcc8c5cb35fb15e0ae8d44ff6377978026a900bcbfc533d609c8168f81396c88f7d2af9f071489849929bbcb96d97f1216b1ecdd8d24b098a7f9165d", 0x75}, {&(0x7f0000000900)="eb67f57012e120cb2360f6211662725f763c3a69846ce3e161bffcf0856100d94e80814bf869ed6adfbfa25d310c8099e9a84729ebc1527cdbf5c24ea8cbdc2ba7b698f24fe040f6a66b05599d050973824c7dedeb9fb0103c66885f3065e66a725926f4d4fff9a67c73637df0f3e5904efb4e458f3297a34951446aa57acf3a0757c87b1ef7a243bde2695362754f993d3ff90ba413aacbf802d51b2cbb3aaf9a884c5231b3c52f20d7f325bdb3076468b303da53fd496a721231a46d324899bb20eaeedf174dbeacb6c5eed44f98a2fa7c17d983384284086012fa9a4399114f3b9c4189ba40a7", 0xe8}, {&(0x7f0000000a00)="e69819247716d69a9a0069d6b7ffa73e55464b3da522ea09dbd41ab490a83c69ce89fd342be72743c21839bee27ffdd0d41a16a006d14a3aa98b60315947156351331eebbdc283a6798d91251cd201f63c688b8cfed7038f879fc0c58d1b1b0342e6180bac5059b73e6cbf583af5d8971220c15954f37cebaa33a823b73cc156", 0x80}, {&(0x7f0000000a80)="e02407bbf8f45c095d932486410729cacd2961945c8aabbf118cec71f07ea60c7eb2e1336fc7444368f220dc1adb5c9decaf5094e0a436bdbd62d30a8fbc146f64182c0aac57fc52b9a62645f0e77dfa448fd76ac7cd672696823d9f8e65d140472ded309761fc12aab509655bd844b898dc7e9604387a43aeb9f1a714dadc45fe541fd9bdcdddae", 0x88}], 0x5, &(0x7f0000000bc0)=[@rthdr={{0x78, 0x29, 0x39, {0x8, 0xc, 0x0, 0xf0, 0x0, [@empty, @remote, @remote, @mcast1, @remote, @private2]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r1}}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x3b, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x28, {0x2, 0x8, 0xb, 0x4, [0x86, 0x4, 0x3, 0x3]}}, @enc_lim={0x4, 0x1, 0xf5}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0x10000}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @dstopts_2292={{0xd0, 0x29, 0x4, {0xc, 0x16, '\x00', [@hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @private1}, @calipso={0x7, 0x38, {0x2, 0xc, 0x1, 0x1, [0x8001, 0x8, 0x2, 0x2, 0xe, 0x100000001]}}, @generic={0x7, 0x44, "e6cef9c85b6abf22fbdad67152fe8056f6f836198ac2e0da638b938b25b05700ffc9e0d3820a33e0a17a4f85b5abb5599f56679772b8be4e9452d61c78a1a94b250ea6bb"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}}}], 0x1f0}}, {{&(0x7f0000000dc0)={0xa, 0x4e20, 0x5, @remote, 0x7ff}, 0x1c, &(0x7f0000001100)=[{&(0x7f0000000e00)="cf75119b77fef05b39248660c91cd6dfd3f6e932e25d68e75c863f8971473a9958fea406dc13d1a3fd5ccabdd4b1a9f8633fe3f5c40df7e4a04b503034af57591952f452030e10e72e891f64c387c8541a9b9ee3bb5d1f30e81f5708e204de700a796bc014c4159af219cbd771d0486fd299db8ae5f9f32124b34b0294818366473e4a034cfda0a83cba612f5c08118b570984f1a6b2552f887f20b8937f01c02fe7f537567839ba04ebe878b475679e0aba1f02cd480220e19169475b8ab38a1dbc5a92ebaba78ded27e7b05b16118bb651c401b03f5e535c82f47df0f9c1917743b14d155c3a44a26afd1dd7670887e1b1", 0xf2}, {&(0x7f0000000f00)="b1f92f21a389c228413a490501063bf55a2392f04a21e3eb09f0962f6f03776db7461e486abce85ddbc68ce83851c1779bf54566f38b7804b4f6f38aff137ee2221126c3d619989b834ce858b5e10ef178849ef54adaacfabb0dba39105cc0fac48c1483a07223ede4ae08785ea9abb300c02858980c6600f7537c0116bb3cf9a67236c76e64c241c26450d3e1c5cf5c518468d6b9e69283379c2e1d43fb0cd68e093fbec5aace43217970c16c3be5dbabb34c43ce48ead820097d5b1be1a3acea99084b32d1578fcbffec15436cfa0a31a932c56a995a", 0xd7}, {&(0x7f0000001000)="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", 0xfe}], 0x3, &(0x7f0000001140)=[@hopopts={{0x30, 0x29, 0x36, {0x2e, 0x2, '\x00', [@calipso={0x7, 0x10, {0x5, 0x2, 0x67, 0x8000, [0xdc38]}}]}}}, @rthdrdstopts={{0x78, 0x29, 0x37, {0x67, 0xb, '\x00', [@calipso={0x7, 0x50, {0x3, 0x12, 0x9, 0x0, [0x4, 0x6, 0x8, 0xc9, 0xff, 0x1, 0x27ec4516, 0xffffffffffffffff, 0x2]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x11, 0x2, '\x00', [@ra={0x5, 0x2, 0xecfa}, @calipso={0x7, 0x10, {0x2, 0x2, 0x9, 0xf000, [0x46ad1675]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @tclass={{0x14}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @rthdr={{0x98, 0x29, 0x39, {0x3b, 0x10, 0x2, 0x20, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2d}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @private2, @mcast2, @private0]}}}], 0x1b8}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)="4233912ab203d49dd9f94cfb86d84b068d280eb34cc02aa378662987cca3ef647856", 0x22}, {&(0x7f0000001340)="34bd7bd486fd10c3900963b07fa71644773264c4eda6cd4dc8665c3da5927d998882b97b7082a4668178", 0x2a}, {&(0x7f0000001380)="7283296a4a1afcdbb8d7fb6460a292bd873bcf8bc745a11c4669c333c4b0e2f483ee348dfe5dee3b1f63c14ca27d9ed37e47e93fd582d9f3910023295d29d0ce02e26a037a6c91dec9adf1970a4a83c5ebf5cdebff7b82c7a499a993d1a499c90f90c56a1928bd9cac664667345a4a337506ac60321415cbc32ca46ed44ff441dc6c6ce237f9d20cf53c48b543061dc9d1c1aab1b2bd94c6ea363d4adbf2842bc41572af927ae36d3304d9763fda1687134f824015", 0xb5}, {&(0x7f0000001440)="d3cd55f5af12b3edae36474b539fe7498bde27bf4c36c155b7c58bd59d7ed99d", 0x20}, {&(0x7f0000001480)="e7e6c9f52ed63a1f294fa4f10c4fda3931e615d8448a07673aba2d40605941a478b71cec519d5a598ff0443e079298aea9aa50a6103b63507b5f486dcac0c943294089aed8ecaf22bc550f84ec35072f0569d3978bfd1644ec9e9fc0ed3ffdf1fd80cab4018b631cb9203db94b88bbe8c4", 0x71}], 0x5, &(0x7f0000001580)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x4}]}}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @flowinfo={{0x14, 0x29, 0xb, 0xff}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x89, 0x2, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x5}, @enc_lim={0x4, 0x1, 0x6}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @dstopts={{0x120, 0x29, 0x37, {0x33, 0x20, '\x00', [@jumbo={0xc2, 0x4, 0xb85}, @pad1, @pad1, @generic={0x1, 0x22, "0b5b832e72fe978e83d3d6aacc4dc24317750425f710d3976378f7d78c3a98834c9d"}, @generic={0x0, 0xc2, "4263728a6814812c300dde7b275340ce983d5a4706b491f58e3809f07a0c08d5d3278a54d8ff71050ca72455bd355ebff4b30cafecf69eebe58ada5084ec2ac6363f146b31be507494d2427c9bf9507e7c505e2e2dc93d8b031871fab03778b4c487247b1fd7af96518d6c328eb9dfd76116e4e0382a9681fdf897386819533ea2418e7750628d66bb8cc55859bd70477e25eb9e739cad3cf0ee3c6130a6dcf893b5dc6c6d52fe17d53c39c990bd947b15c234dec21fd9a8c069db26b105bb9e1020"}, @ra={0x5, 0x2, 0x8}, @ra={0x5, 0x2, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xffffff0d}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x2f, 0x3, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x6}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3ff}]}}}], 0x208}}, {{&(0x7f00000017c0)={0xa, 0x4e23, 0x7ce6, @private1, 0x6}, 0x1c, &(0x7f0000001a80)=[{&(0x7f0000001800)="9e7ddf4558d57cb2cb1b951d3b04209241d8c18731d7ed4cf698d6da977dd93d116dc55b3b49f2ff48426122d467639e2ad063d2efbe001a2b9a733d15b980298c0fdf2442eac8f28e4ee7ffb4c49bb1ce1413c9692bd7bd30718d2f7a4f5dc2f9f975cae6c37452fc83e7b611803f33842a36e55b37297e4e415dde46097b49a490c3e6a85f057c75460f0ea1d8b5dbe3b2a33fd49f97e6b1d7b6175be4313cb5da1cbfe0", 0xa5}, {&(0x7f00000018c0)="523f95802b387f8aee460c0eafef6f45fa4891b8b4550c6ae20ebd4aa8a27311507f7396ca5847abc0eff1f8b18ee9b4adc0eafb759d4d2fdfd17764c0213b4610b15b5123901e4067ab2730911320bbbdb6cc88e4382e43c14144e974963163637acc1ceb77a190220323e16881e68653ccb425f37c0a08d763", 0x7a}, {&(0x7f0000001940)="5f4aece4851ca9b0424a", 0xa}, {&(0x7f0000001980)="853b60604103d2dfa5d919abf39d37ad1c01fbe7f58e60575db6a18844e83d0d3b10312066ef46cf1d7f3c0f0ca1665f09a202721b52ca3947605704a436c16afe81710a1832885a42db691e302c2a23161b703688", 0x55}, {&(0x7f0000001a00)="08941d5a75ad07f50558b9ebdba076c5c48b5eff06e2a5203da7584599481e298c7b9f805f501465716e4d4d4bf3333116f7971018b8b484c809074728d85f4d8633f942cc5dcc707578d66efacccfc1c7f2bcb6f7ba476e2be2e6eeef195b89b87eb15209bb81dee84da1faeacc03a52d7114576fe15f4154", 0x79}], 0x5, &(0x7f0000001b00)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r1}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r1}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @hopopts={{0x110, 0x29, 0x36, {0x87, 0x1e, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x18, {0x3, 0x4, 0xff, 0x4a1, [0x10001, 0x80]}}, @hao={0xc9, 0x10, @private0}, @enc_lim, @hao={0xc9, 0x10, @mcast1}, @jumbo={0xc2, 0x4, 0x4e9}, @pad1, @jumbo={0xc2, 0x4, 0x1}, @generic={0x7, 0xa0, "13dfdd3041b5a486c63aca640a6175e97c1643cdbd5afd8df506da7151b348deb71d4d9e8301bce619484281dd6aef5dc47950fab1d5f6b8eaa6d23003c9b9ab5906cafd425849892f5831c1a048771be82778d6439ce3eb6a234131c5771abd2bcd3d758c70ee90561dd8dcea6f13decf68ca7192da6cebad00817ed4a1f112a01462e28ebf969e9dc96607743c0b992659a993e15e286b5004d70ab2341952"}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x6, 0x0, '\x00', [@generic={0xf6, 0x5, "ac5ff121bc"}]}}}], 0x1b0}}], 0x6, 0x40) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000001e40)) kernel console output (not intermixed with test programs): .401182][T17094] netlink: 'syz.1.3090': attribute type 7 has an invalid length. [ 332.408978][T17094] netlink: 'syz.1.3090': attribute type 8 has an invalid length. [ 332.451260][T17094] netlink: 'syz.1.3090': attribute type 7 has an invalid length. [ 332.459049][T17094] netlink: 'syz.1.3090': attribute type 8 has an invalid length. [ 332.609854][T17053] chnl_net:caif_netlink_parms(): no params data found [ 332.760087][T17103] openvswitch: netlink: Flow key attribute not present in set flow. [ 333.166066][T17053] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.201556][T17053] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.232085][T17053] bridge_slave_0: entered allmulticast mode [ 333.260889][T17053] bridge_slave_0: entered promiscuous mode [ 333.440627][T17053] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.447979][T17053] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.456768][T17053] bridge_slave_1: entered allmulticast mode [ 333.476901][T17053] bridge_slave_1: entered promiscuous mode [ 333.583434][T17129] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 333.612485][ T5844] Bluetooth: hci4: command tx timeout [ 333.636472][T17053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.653033][T17053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.814488][T17053] team0: Port device team_slave_0 added [ 333.846938][T17053] team0: Port device team_slave_1 added [ 333.897905][T17143] macvlan0: entered promiscuous mode [ 333.991791][T17150] netlink: 'syz.3.3103': attribute type 1 has an invalid length. [ 333.999761][T17150] __nla_validate_parse: 9 callbacks suppressed [ 333.999779][T17150] netlink: 280 bytes leftover after parsing attributes in process `syz.3.3103'. [ 334.038842][T17053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.053557][T17053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.080106][T17053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.099231][T17053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.108027][T17053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.141035][T17053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.233795][T17157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3106'. [ 334.277094][T17159] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3107'. [ 334.314439][T17053] hsr_slave_0: entered promiscuous mode [ 334.351820][T17053] hsr_slave_1: entered promiscuous mode [ 334.361233][T17053] debugfs: 'hsr0' already exists in 'hsr' [ 334.367010][T17053] Cannot create hsr debugfs directory [ 334.381840][T11374] bridge_slave_1: left allmulticast mode [ 334.387828][T11374] bridge_slave_1: left promiscuous mode [ 334.400118][T11374] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.417740][T11374] bridge_slave_0: left allmulticast mode [ 334.440631][T11374] bridge_slave_0: left promiscuous mode [ 334.446666][T11374] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.805315][T11374] bond8 (unregistering): (slave vti0): Releasing backup interface [ 334.814130][T11374] vti0 (unregistering): left promiscuous mode [ 334.851670][T11374] erspan0 (unregistering): left allmulticast mode [ 334.942972][T11374] bridge0 (unregistering): left allmulticast mode [ 335.036107][T11374] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 335.123941][T11374] bond7 (unregistering): (slave bridge4): Releasing backup interface [ 335.133156][T11374] bridge4 (unregistering): left promiscuous mode [ 335.320960][T11374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.332703][T11374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.344299][T11374] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 335.361918][T11374] bond0 (unregistering): Released all slaves [ 335.373074][T11374] bond1 (unregistering): Released all slaves [ 335.387983][T11374] bond2 (unregistering): (slave vlan0): Releasing backup interface [ 335.397142][T11374] bond2 (unregistering): Released all slaves [ 335.415132][T11374] bond3 (unregistering): (slave bond4): Releasing backup interface [ 335.425384][T11374] bond3 (unregistering): Released all slaves [ 335.438864][T11374] bond4 (unregistering): Released all slaves [ 335.455282][T11374] bond5 (unregistering): Released all slaves [ 335.472419][T11374] bond6 (unregistering): Released all slaves [ 335.490138][T11374] bond7 (unregistering): Released all slaves [ 335.509448][T11374] bond8 (unregistering): Released all slaves [ 335.523490][T11374] bond9 (unregistering): Released all slaves [ 335.538682][T11374] bond10 (unregistering): Released all slaves [ 335.556372][T11374] bond11 (unregistering): Released all slaves [ 335.571783][T17159] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3107'. [ 335.603258][T17171] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3108'. [ 335.703557][ T5844] Bluetooth: hci4: command tx timeout [ 335.796255][T11374] : left promiscuous mode [ 335.895568][T17192] netlink: 'syz.3.3113': attribute type 3 has an invalid length. [ 337.227787][T11374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.251396][T11374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.275469][T11374] veth0_macvtap: left allmulticast mode [ 337.353176][T11374] pim6reg (unregistering): left allmulticast mode [ 337.574172][T11374] team0 (unregistering): Port device team_slave_1 removed [ 337.597530][T11374] team0 (unregistering): Port device team_slave_0 removed [ 337.759544][T11374] team0 (unregistering): Port device dummy0 removed [ 337.777138][ T5844] Bluetooth: hci4: command tx timeout [ 338.124660][T11374] IPVS: stop unused estimator thread 0... [ 339.303536][T17216] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 339.342708][T17053] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 339.405488][T17053] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 339.486652][T17053] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 339.555391][T17053] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 339.619145][T17284] netlink: 'syz.1.3130': attribute type 1 has an invalid length. [ 339.629606][T17281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3128'. [ 339.649326][T17281] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3128'. [ 339.686695][T17284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.833959][T17053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.851350][ T5844] Bluetooth: hci4: command tx timeout [ 339.887723][T17053] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.895376][T17300] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3134'. [ 339.913934][T11377] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.921164][T11377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.957056][T17304] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 339.993337][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.009779][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.010977][T17309] xt_TPROXY: Can be used only with -p tcp or -p udp [ 340.385084][T17331] netlink: 'syz.3.3141': attribute type 4 has an invalid length. [ 340.420928][T17331] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3141'. [ 340.720712][T17353] netlink: 'syz.1.3147': attribute type 11 has an invalid length. [ 340.730078][T17353] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3147'. [ 340.733261][T17053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.759172][T17357] xt_cluster: node mask cannot exceed total number of nodes [ 340.883386][T17053] veth0_vlan: entered promiscuous mode [ 340.949765][T17053] veth1_vlan: entered promiscuous mode [ 341.037822][T17053] veth0_macvtap: entered promiscuous mode [ 341.054158][T17053] veth1_macvtap: entered promiscuous mode [ 341.102440][T17053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.123661][T17368] tipc: Resetting bearer [ 341.132412][T11851] IPVS: starting estimator thread 0... [ 341.174521][T17374] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3151'. [ 341.203849][T17053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.221513][T17370] IPVS: using max 50 ests per chain, 120000 per kthread [ 341.244861][T17374] bond11: Removing last ns target with arp_interval on [ 341.256928][T11377] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.267074][T11377] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.280763][T11377] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.301225][T11377] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.337376][T17377] netlink: 'syz.1.3152': attribute type 1 has an invalid length. [ 341.388183][T17377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.497941][T17387] netlink: 'syz.3.3155': attribute type 1 has an invalid length. [ 341.507112][T17387] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3155'. [ 341.647495][T17395] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3157'. [ 341.850140][T17368] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 341.860949][T17368] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 341.957461][T17368] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 341.964968][T17368] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 342.057288][T17368] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 342.073132][T17368] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 342.119673][T17418] team0: Unable to change to the same mode the team is in [ 342.240060][T17421] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 342.315231][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.355282][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.438641][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.455493][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.532393][T17436] syzkaller0: entered promiscuous mode [ 342.548028][T17436] syzkaller0: entered allmulticast mode [ 342.756223][T17448] x_tables: duplicate underflow at hook 1 [ 343.085073][T17461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3178'. [ 343.147808][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 343.163318][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 343.172653][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 343.226818][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 343.235282][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 343.362576][T17474] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 343.404077][T17468] vxcan1 speed is unknown, defaulting to 1000 [ 343.425320][T17485] netlink: 'syz.3.3183': attribute type 1 has an invalid length. [ 343.513830][T17485] bond12: entered promiscuous mode [ 343.519417][T17485] 8021q: adding VLAN 0 to HW filter on device bond12 [ 343.925330][T17490] bond12: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 343.972367][T17490] bond12: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 343.995621][T17490] bond12: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 344.018760][T17507] netlink: 'syz.2.3190': attribute type 11 has an invalid length. [ 344.026829][T17507] netlink: 'syz.2.3190': attribute type 11 has an invalid length. [ 344.040051][T17507] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3190'. [ 344.274674][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.286956][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 344.385753][T17515] bond13: entered promiscuous mode [ 344.391958][T17515] 8021q: adding VLAN 0 to HW filter on device bond13 [ 344.441902][T17518] bridge17: entered promiscuous mode [ 344.448590][T17518] bond13: (slave bridge17): Enslaving as an active interface with an up link [ 344.501384][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.525257][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 344.614979][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.627459][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 344.647843][T17531] __nla_validate_parse: 2 callbacks suppressed [ 344.647873][T17531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3196'. [ 344.655215][T17528] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 344.692580][T17531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3196'. [ 344.722901][T17531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3196'. [ 344.729266][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.744732][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 344.771098][T17531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3196'. [ 345.227422][T17468] chnl_net:caif_netlink_parms(): no params data found [ 345.291449][ T5838] Bluetooth: hci3: command tx timeout [ 345.302536][ T12] ip6gretap1: left allmulticast mode [ 345.307886][ T12] ip6gretap1: left promiscuous mode [ 345.313475][ T12] bridge3: port 1(ip6gretap1) entered disabled state [ 345.343336][T17562] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3205'. [ 345.879977][ T12] dvmrp1 (unregistering): left allmulticast mode [ 345.994813][ T12] bond7 (unregistering): (slave bridge2): Releasing backup interface [ 346.125653][ T12] bond1 (unregistering): Released all slaves [ 346.139729][ T12] bond2 (unregistering): Released all slaves [ 346.155064][ T12] bond3 (unregistering): Released all slaves [ 346.169166][ T12] bond4 (unregistering): Released all slaves [ 346.188076][ T12] bond5 (unregistering): Released all slaves [ 346.210802][ T12] bond6 (unregistering): Released all slaves [ 346.227952][ T12] bond7 (unregistering): Released all slaves [ 346.241485][ T12] bond8 (unregistering): Released all slaves [ 346.257134][ T12] bond0 (unregistering): Released all slaves [ 346.462638][ T12] v: left promiscuous mode [ 346.671324][ T12] tipc: Left network mode [ 346.775512][T17468] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.780750][T17600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3213'. [ 346.783020][T17468] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.800971][T17468] bridge_slave_0: entered allmulticast mode [ 346.809482][T17468] bridge_slave_0: entered promiscuous mode [ 346.828647][T17468] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.833015][T17606] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3215'. [ 346.836999][T17468] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.852561][T17468] bridge_slave_1: entered allmulticast mode [ 346.860234][T17468] bridge_slave_1: entered promiscuous mode [ 347.048970][T17468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.127451][T17615] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3218'. [ 347.138981][T17615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3218'. [ 347.160629][T17615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3218'. [ 347.215779][T17468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.233013][T17614] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 347.380755][ T5838] Bluetooth: hci3: command tx timeout [ 347.521703][T17468] team0: Port device team_slave_0 added [ 347.625221][T17468] team0: Port device team_slave_1 added [ 347.801152][T17468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.808167][T17468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.853972][T17468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.931958][T17468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.939242][T17468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.009522][T17468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.080866][T17656] netlink: 'syz.3.3228': attribute type 14 has an invalid length. [ 348.089061][T17656] netem: change failed [ 348.664816][T17468] hsr_slave_0: entered promiscuous mode [ 348.692086][T17468] hsr_slave_1: entered promiscuous mode [ 348.711633][T17468] debugfs: 'hsr0' already exists in 'hsr' [ 348.717417][T17468] Cannot create hsr debugfs directory [ 348.999324][ T12] hsr_slave_0: left promiscuous mode [ 349.070661][ T12] hsr_slave_1: left promiscuous mode [ 349.139107][T17704] netlink: 'syz.0.3243': attribute type 1 has an invalid length. [ 349.180118][T17704] netlink: 'syz.0.3243': attribute type 2 has an invalid length. [ 349.450550][ T5838] Bluetooth: hci3: command tx timeout [ 350.109545][T17743] netlink: 'syz.0.3251': attribute type 9 has an invalid length. [ 350.170468][T17743] netlink: 'syz.0.3251': attribute type 6 has an invalid length. [ 350.304647][T17749] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 350.377154][T17753] __nla_validate_parse: 12 callbacks suppressed [ 350.377177][T17753] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3253'. [ 350.747931][T17773] netlink: 'syz.3.3258': attribute type 1 has an invalid length. [ 350.752470][ T12] IPVS: stop unused estimator thread 0... [ 350.784366][T17773] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3258'. [ 350.803332][T17773] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3258'. [ 350.837135][T17773] netlink: 'syz.3.3258': attribute type 1 has an invalid length. [ 350.854105][T17773] netlink: 618 bytes leftover after parsing attributes in process `syz.3.3258'. [ 350.930596][T17776] netlink: 'syz.3.3258': attribute type 1 has an invalid length. [ 350.938863][T17776] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3258'. [ 350.965146][T17776] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3258'. [ 350.990868][T17776] netlink: 'syz.3.3258': attribute type 1 has an invalid length. [ 351.000628][T17776] netlink: 618 bytes leftover after parsing attributes in process `syz.3.3258'. [ 351.412575][T17468] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 351.479743][T17468] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 351.515849][T17468] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 351.530443][ T5838] Bluetooth: hci3: command tx timeout [ 351.548195][T17806] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 351.582622][T17468] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 351.604881][T17810] netlink: 'syz.2.3264': attribute type 1 has an invalid length. [ 351.616978][T17810] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3264'. [ 351.636532][T17810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3264'. [ 351.701765][T17814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3265'. [ 351.897270][T17836] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20003 [ 351.939987][T17468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.990289][T17468] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.033297][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.040521][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.097356][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.104719][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.444586][T17468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.529487][T17468] veth0_vlan: entered promiscuous mode [ 352.549159][T17468] veth1_vlan: entered promiscuous mode [ 352.627108][T17468] veth0_macvtap: entered promiscuous mode [ 352.639173][T17468] veth1_macvtap: entered promiscuous mode [ 352.675972][T17468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.691382][T17468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.715932][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.743363][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.760178][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.771736][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.873812][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.890640][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.936547][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.947090][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.145823][T17877] netlink: set zone limit has 4 unknown bytes [ 353.175673][T17879] netlink: zone id is out of range [ 353.180920][T17879] netlink: zone id is out of range [ 353.186090][T17879] netlink: zone id is out of range [ 353.193860][T17879] netlink: zone id is out of range [ 353.199027][T17879] netlink: zone id is out of range [ 353.204323][T17879] netlink: zone id is out of range [ 353.209646][T17879] netlink: zone id is out of range [ 353.217882][T17879] netlink: zone id is out of range [ 353.234220][T17879] netlink: zone id is out of range [ 353.315604][T17877] mac80211_hwsim hwsim47 wlan1: entered allmulticast mode [ 375.266486][T17934] __nla_validate_parse: 1 callbacks suppressed [ 375.266506][T17934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3273'. [ 375.387518][T17943] net_ratelimit: 74 callbacks suppressed [ 375.387539][T17943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.472258][T17946] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3276'. [ 375.512133][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 375.523189][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 375.535474][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 375.544053][T17949] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3278'. [ 375.557001][T17949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3278'. [ 375.567886][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 375.575848][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 375.579314][T17949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3278'. [ 375.709306][T17950] vxcan1 speed is unknown, defaulting to 1000 [ 375.831289][T17966] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3280'. [ 375.895990][T17969] netlink: 'syz.1.3282': attribute type 1 has an invalid length. [ 375.922087][T17969] vcan0: entered promiscuous mode [ 375.928264][T17969] vcan0: entered allmulticast mode [ 376.039484][T17976] netlink: 'syz.2.3284': attribute type 1 has an invalid length. [ 376.062937][T17976] netlink: 'syz.2.3284': attribute type 3 has an invalid length. [ 376.120424][T17976] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3284'. [ 376.129578][T17976] NCSI netlink: No device for ifindex 813332851 [ 376.193779][T17981] bond0: entered promiscuous mode [ 376.198931][T17981] bond_slave_0: entered promiscuous mode [ 376.210648][T17981] bond_slave_1: entered promiscuous mode [ 376.222784][ T9] syz1: Port: 1 Link DOWN [ 376.227442][T17981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3285'. [ 376.237539][T17981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3285'. [ 376.449278][T18003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3292'. [ 376.737879][T17950] chnl_net:caif_netlink_parms(): no params data found [ 376.818444][T18023] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 376.864615][T17950] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.872100][T17950] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.879438][T17950] bridge_slave_0: entered allmulticast mode [ 376.888150][T17950] bridge_slave_0: entered promiscuous mode [ 376.899327][T17950] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.906757][T17950] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.914351][T17950] bridge_slave_1: entered allmulticast mode [ 376.922826][T17950] bridge_slave_1: entered promiscuous mode [ 377.022215][T17950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.070212][T17950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.188896][T17950] team0: Port device team_slave_0 added [ 377.199211][T17950] team0: Port device team_slave_1 added [ 377.271710][T17950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.288796][T17950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.347453][T17950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.385870][T17950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.393012][T17950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.443689][T17950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.701041][ T5838] Bluetooth: hci0: command tx timeout [ 377.800052][T17950] hsr_slave_0: entered promiscuous mode [ 377.855105][T17950] hsr_slave_1: entered promiscuous mode [ 377.861831][T17950] debugfs: 'hsr0' already exists in 'hsr' [ 377.867709][T17950] Cannot create hsr debugfs directory [ 378.354635][T17950] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 60458 - 0 [ 378.382754][T17950] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 378.527632][T17950] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 60458 - 0 [ 378.566270][T17950] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 378.677774][T17950] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 60458 - 0 [ 378.707619][T17950] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 378.769283][T18080] xt_hashlimit: size too large, truncated to 1048576 [ 378.778210][T18073] bridge1: entered promiscuous mode [ 378.784295][T18073] bridge1: entered allmulticast mode [ 378.793545][T18073] team0: Port device bridge1 added [ 378.799452][T18075] netlink: 'syz.2.3309': attribute type 10 has an invalid length. [ 378.823228][T18074] bridge0: port 3(team0) entered blocking state [ 378.823605][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.851345][T18074] bridge0: port 3(team0) entered disabled state [ 378.857820][T18074] team0: entered allmulticast mode [ 378.870761][T18074] team_slave_0: entered allmulticast mode [ 378.877180][T18074] team_slave_1: entered allmulticast mode [ 378.886714][T18074] team0: entered promiscuous mode [ 378.895215][T18074] team_slave_0: entered promiscuous mode [ 378.901617][T18074] team_slave_1: entered promiscuous mode [ 378.908457][T18074] bridge0: port 3(team0) entered blocking state [ 378.914935][T18074] bridge0: port 3(team0) entered forwarding state [ 378.945796][T17950] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 60458 - 0 [ 378.982682][T17950] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 379.069942][T18090] openvswitch: netlink: Invalid VLAN frame [ 379.108659][T18090] netlink: 'syz.2.3311': attribute type 1 has an invalid length. [ 379.158074][T18093] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.395911][T18104] syzkaller1: entered promiscuous mode [ 379.411231][T18104] syzkaller1: entered allmulticast mode [ 379.419767][T17950] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 379.500095][T17950] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 379.542128][T17950] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 379.569828][T17950] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 379.772111][ T5838] Bluetooth: hci0: command tx timeout [ 379.832682][T17950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.857287][T17950] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.885943][T11374] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.893328][T11374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.935165][T11374] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.942512][T11374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.977359][T18142] lo: entered promiscuous mode [ 379.997149][T18142] tunl0: entered promiscuous mode [ 380.006506][T18142] gre0: entered promiscuous mode [ 380.031701][T18142] gretap0: entered promiscuous mode [ 380.043144][T18142] erspan0: entered promiscuous mode [ 380.050438][T18146] netlink: 'syz.2.3328': attribute type 4 has an invalid length. [ 380.054940][T18142] ip_vti0: entered promiscuous mode [ 380.286209][T18153] netlink: 'syz.1.3330': attribute type 1 has an invalid length. [ 380.301260][T18153] netlink: 'syz.1.3330': attribute type 2 has an invalid length. [ 380.364789][T18161] __nla_validate_parse: 7 callbacks suppressed [ 380.364812][T18161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3331'. [ 380.601954][T17950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.633703][T18168] netlink: 'syz.0.3333': attribute type 1 has an invalid length. [ 380.641816][T18168] netlink: 'syz.0.3333': attribute type 1 has an invalid length. [ 380.653079][T18168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3333'. [ 380.667799][T18168] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3333'. [ 380.701150][T18168] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3333'. [ 380.766357][T18174] smc: net device team0 applied user defined pnetid SYZ2 [ 380.789428][T18174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3335'. [ 380.805271][T18174] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 380.817347][T17950] veth0_vlan: entered promiscuous mode [ 380.825786][T17950] veth1_vlan: entered promiscuous mode [ 380.843897][T18181] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3336'. [ 380.909730][T17950] veth0_macvtap: entered promiscuous mode [ 380.924559][T17950] veth1_macvtap: entered promiscuous mode [ 380.993533][T17950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.014258][T18187] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.018189][T17950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.048602][T18192] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.058139][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.089332][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.115248][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.162009][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.395096][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.427314][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.615138][T11374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.623806][T11374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.727731][T18223] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3347'. [ 381.878006][ T5838] Bluetooth: hci0: command tx timeout [ 381.905735][T18227] vxcan1 speed is unknown, defaulting to 1000 [ 381.917949][T18234] netlink: 'syz.0.3349': attribute type 1 has an invalid length. [ 382.074025][T18241] netlink: 'syz.1.3351': attribute type 21 has an invalid length. [ 382.263551][T18248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3353'. [ 382.390917][T18250] Bluetooth: MGMT ver 1.23 [ 382.407800][T18256] netlink: 'syz.4.3355': attribute type 62 has an invalid length. [ 382.614140][T18260] syzkaller0: entered promiscuous mode [ 382.636983][T18260] syzkaller0: entered allmulticast mode [ 382.787690][T18277] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.3363'. [ 382.990615][T18286] x_tables: unsorted entry at hook 2 [ 383.387249][T18303] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 383.398635][T18303] netlink: 'syz.4.3373': attribute type 23 has an invalid length. [ 383.444611][T18303] pim6reg1: entered promiscuous mode [ 383.450077][T18303] pim6reg1: entered allmulticast mode [ 383.652861][T18320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3378'. [ 383.919681][T18338] netlink: 'syz.2.3382': attribute type 1 has an invalid length. [ 383.932331][ T5838] Bluetooth: hci0: command tx timeout [ 383.933953][T18336] Bluetooth: MGMT ver 1.23 [ 384.015058][T18338] bond1: entered promiscuous mode [ 384.021115][T18338] 8021q: adding VLAN 0 to HW filter on device bond1 [ 384.060368][T18347] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 384.073817][T18347] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 384.085472][T18347] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 384.268624][T18367] IPVS: length: 8 != 1152 [ 384.375545][T18372] nftables ruleset with unbound set [ 384.432777][T18378] syzkaller0: entered promiscuous mode [ 384.464112][T18378] syzkaller0: entered allmulticast mode [ 384.594978][T18387] netlink: 'syz.3.3398': attribute type 2 has an invalid length. [ 384.803361][T18392] bond1 (unregistering): Released all slaves [ 385.093751][T18414] syzkaller0: entered promiscuous mode [ 385.120554][T18414] syzkaller0: entered allmulticast mode [ 385.146820][T18414] 0: reclassify loop, rule prio 0, protocol 800 [ 385.207648][T18420] x_tables: duplicate underflow at hook 1 [ 385.786989][T18458] __nla_validate_parse: 7 callbacks suppressed [ 385.787011][T18458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3415'. [ 385.800795][T18464] siw: device registration error -23 [ 385.815975][T18463] siw: device registration error -23 [ 385.914292][T18469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3419'. [ 386.067273][T18458] vxcan1 speed is unknown, defaulting to 1000 [ 386.412505][T18495] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3426'. [ 386.512534][T18502] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3426'. [ 387.069173][T18523] syzkaller0: entered promiscuous mode [ 387.089046][T18523] syzkaller0: entered allmulticast mode [ 387.361809][T18536] syzkaller0: entered promiscuous mode [ 387.373062][T18536] syzkaller0: entered allmulticast mode [ 387.818015][T18564] netlink: 'syz.4.3450': attribute type 1 has an invalid length. [ 387.826801][T18564] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3450'. [ 387.848283][T18565] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3449'. [ 387.872124][T18565] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3449'. [ 387.903143][T18569] tipc: Failed to remove unknown binding: 66,0,0/0:1111926525/1111926526 [ 387.921193][T18569] tipc: Failed to remove unknown binding: 66,0,0/0:1111926525/1111926526 [ 388.075309][T18580] netlink: 'syz.3.3457': attribute type 1 has an invalid length. [ 388.100663][T18580] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3457'. [ 388.116582][T18580] netlink: 658 bytes leftover after parsing attributes in process `syz.3.3457'. [ 388.137977][T18580] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3457'. [ 388.900105][T18634] wireguard: wg2: Could not create IPv4 socket [ 389.209303][T18653] netlink: 'syz.1.3479': attribute type 1 has an invalid length. [ 389.280230][T18653] bond1: entered promiscuous mode [ 389.297553][T18653] 8021q: adding VLAN 0 to HW filter on device bond1 [ 389.335613][T18662] sit1: entered promiscuous mode [ 389.341376][T18662] sit1: entered allmulticast mode [ 389.506675][T18668] syzkaller0: entered promiscuous mode [ 389.512435][T18668] syzkaller0: entered allmulticast mode [ 391.796811][T18705] netlink: 'syz.0.3494': attribute type 51 has an invalid length. [ 392.087600][T18724] vxcan1 speed is unknown, defaulting to 1000 [ 392.165427][T18704] ip6t_srh: unknown srh match flags 4000 [ 392.189324][T18732] gretap0: entered promiscuous mode [ 392.201468][T18732] gretap0: entered allmulticast mode [ 392.224158][T18732] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 392.515560][T18733] rdma_rxe: rxe_newlink: failed to add syz_tun [ 392.593676][T18741] __nla_validate_parse: 6 callbacks suppressed [ 392.593697][T18741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3508'. [ 392.611295][T18741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3508'. [ 393.253069][T18778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3521'. [ 393.259384][T18779] netlink: 'syz.1.3523': attribute type 2 has an invalid length. [ 393.275314][T18779] netlink: 119 bytes leftover after parsing attributes in process `syz.1.3523'. [ 393.328639][T18785] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3525'. [ 393.333650][T18783] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3523'. [ 393.582156][T18781] vxcan1 speed is unknown, defaulting to 1000 [ 393.589705][T18775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3521'. [ 393.927008][T18799] netlink: 208 bytes leftover after parsing attributes in process `syz.3.3528'. [ 393.961746][T18803] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3529'. [ 394.014303][T18803] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3529'. [ 394.259480][T18809] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 396.287963][T18877] netlink: 'syz.3.3547': attribute type 21 has an invalid length. [ 396.415609][T18883] : entered promiscuous mode [ 396.536199][T18891] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 396.543596][T18891] IPv6: NLM_F_CREATE should be set when creating new route [ 396.550918][T18891] IPv6: NLM_F_CREATE should be set when creating new route [ 396.625657][T18894] tipc: Started in network mode [ 396.651585][T18894] tipc: Node identity 12b6ffcc2a8d, cluster identity 4711 [ 396.658945][T18894] tipc: Enabled bearer , priority 0 [ 396.817759][T18898] syzkaller0: entered promiscuous mode [ 396.838146][T18898] syzkaller0: entered allmulticast mode [ 396.856763][T18898] tipc: Resetting bearer [ 396.875335][T18899] syzkaller0: entered allmulticast mode [ 396.919066][T18897] syzkaller0 (unregistering): left allmulticast mode [ 396.963872][T18893] tipc: Resetting bearer [ 398.667837][T18893] tipc: Disabling bearer [ 398.679775][T11380] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.704265][T11853] tipc: Node number set to 943456204 [ 398.771509][T18919] vxcan1 speed is unknown, defaulting to 1000 [ 398.856093][T18937] __nla_validate_parse: 7 callbacks suppressed [ 398.856114][T18937] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3564'. [ 398.922531][T18940] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3566'. [ 398.964854][T18938] netlink: 'syz.0.3565': attribute type 9 has an invalid length. [ 399.152940][T18952] netlink: 23321 bytes leftover after parsing attributes in process `syz.4.3570'. [ 399.298192][T18955] netlink: 'syz.4.3573': attribute type 1 has an invalid length. [ 399.336245][T18959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.358106][T18957] netlink: 'syz.1.3572': attribute type 9 has an invalid length. [ 399.527040][T18964] netlink: 'syz.4.3575': attribute type 2 has an invalid length. [ 399.536021][T18964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3575'. [ 399.930226][ T9] IPVS: starting estimator thread 0... [ 399.946780][T18985] vxcan1 speed is unknown, defaulting to 1000 [ 400.014915][T18978] netlink: 'syz.4.3579': attribute type 1 has an invalid length. [ 400.041812][T18990] IPVS: using max 24 ests per chain, 57600 per kthread [ 400.043006][T18978] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3579'. [ 400.055092][T18996] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3585'. [ 400.843424][T19036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3592'. [ 400.879206][T19043] IPVS: ip_vs_edit_dest(): server weight less than zero [ 400.887819][T11851] IPVS: starting estimator thread 0... [ 400.904170][T19043] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3596'. [ 400.941312][T19040] vxcan1 speed is unknown, defaulting to 1000 [ 400.990929][T19044] IPVS: using max 25 ests per chain, 60000 per kthread [ 401.133848][T19050] netlink: 'syz.0.3598': attribute type 1 has an invalid length. [ 401.272682][T19050] 8021q: adding VLAN 0 to HW filter on device bond1 [ 401.389792][T19053] bond1: (slave geneve2): making interface the new active one [ 401.399202][T19053] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 401.523456][T19055] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3599'. [ 401.545988][T19055] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3599'. [ 401.756372][T19062] netlink: 'syz.2.3602': attribute type 21 has an invalid length. [ 402.043438][T19080] veth1_macvtap: left promiscuous mode [ 402.462410][T19094] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 402.486606][T19094] team0: Device macvlan2 is already an upper device of the team interface [ 402.553433][T19101] vxcan1 speed is unknown, defaulting to 1000 [ 402.846514][T19109] netlink: 'syz.2.3615': attribute type 1 has an invalid length. [ 402.909364][T19109] bond2: (slave veth5): Enslaving as an active interface with a down link [ 402.923413][T19109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 403.019222][T19112] sctp: [Deprecated]: syz.2.3616 (pid 19112) Use of struct sctp_assoc_value in delayed_ack socket option. [ 403.019222][T19112] Use struct sctp_sack_info instead [ 403.116686][T19113] vlan0: entered promiscuous mode [ 404.903466][T19072] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 405.409383][T19145] ip6gre0: Master is either lo or non-ether device [ 405.425614][T19146] __nla_validate_parse: 1 callbacks suppressed [ 405.425635][T19146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3629'. [ 405.479688][T19150] openvswitch: netlink: IP tunnel TTL not specified. [ 405.514533][T19150] netlink: 'syz.4.3632': attribute type 28 has an invalid length. [ 405.522949][T19150] netlink: 'syz.4.3632': attribute type 3 has an invalid length. [ 405.534663][T19150] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3632'. [ 405.606364][T19157] macsec1: entered allmulticast mode [ 405.614619][T19157] openvswitch: netlink: IP tunnel TTL not specified. [ 405.636432][T19159] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3633'. [ 405.788636][T19170] vxcan1 speed is unknown, defaulting to 1000 [ 405.819156][T19172] FAULT_INJECTION: forcing a failure. [ 405.819156][T19172] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 405.856378][T19172] CPU: 0 UID: 0 PID: 19172 Comm: syz.2.3638 Not tainted syzkaller #0 PREEMPT(full) [ 405.856408][T19172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 405.856421][T19172] Call Trace: [ 405.856429][T19172] [ 405.856437][T19172] dump_stack_lvl+0xe8/0x150 [ 405.856474][T19172] should_fail_ex+0x412/0x560 [ 405.856511][T19172] _copy_from_user+0x2d/0xb0 [ 405.856536][T19172] __copy_msghdr+0x3c5/0x5b0 [ 405.856567][T19172] ___sys_sendmsg+0x213/0x360 [ 405.856599][T19172] ? __pfx____sys_sendmsg+0x10/0x10 [ 405.856664][T19172] ? __fget_files+0x2a/0x420 [ 405.856695][T19172] ? __fget_files+0x3a0/0x420 [ 405.856736][T19172] __x64_sys_sendmsg+0x1bd/0x2a0 [ 405.856764][T19172] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 405.856801][T19172] ? __pfx_ksys_write+0x10/0x10 [ 405.856837][T19172] do_syscall_64+0x14d/0xf80 [ 405.856861][T19172] ? trace_irq_disable+0x3b/0x150 [ 405.856880][T19172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.856901][T19172] ? clear_bhb_loop+0x40/0x90 [ 405.856927][T19172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.856948][T19172] RIP: 0033:0x7f65d419c819 [ 405.856969][T19172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.856987][T19172] RSP: 002b:00007f65d500c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.857011][T19172] RAX: ffffffffffffffda RBX: 00007f65d4416090 RCX: 00007f65d419c819 [ 405.857026][T19172] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005 [ 405.857040][T19172] RBP: 00007f65d500c090 R08: 0000000000000000 R09: 0000000000000000 [ 405.857053][T19172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.857066][T19172] R13: 00007f65d4416128 R14: 00007f65d4416090 R15: 00007fffdeb6c478 [ 405.857109][T19172] [ 406.349112][T19187] xt_CT: You must specify a L4 protocol and not use inversions on it [ 406.789290][T19212] xt_hashlimit: size too large, truncated to 1048576 [ 406.806908][T19212] netlink: 'syz.1.3648': attribute type 21 has an invalid length. [ 406.835404][T19212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3648'. [ 406.846268][T19212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3648'. [ 406.861991][T19212] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.883697][T19212] bridge_slave_0 (unregistering): left allmulticast mode [ 406.897366][T19212] bridge_slave_0 (unregistering): left promiscuous mode [ 406.904983][T19212] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.169194][T19221] syzkaller0: entered promiscuous mode [ 407.180630][T19221] syzkaller0: entered allmulticast mode [ 407.219198][T19221] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 407.226719][T19221] IPv6: NLM_F_CREATE should be set when creating new route [ 407.294583][T19231] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3653'. [ 407.367469][T19231] openvswitch: netlink: Flow key attr not present in new flow. [ 407.593098][T19245] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3660'. [ 407.602531][T19245] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3660'. [ 407.641719][T19249] netlink: 'syz.4.3659': attribute type 2 has an invalid length. [ 407.643771][T19250] lo speed is unknown, defaulting to 1000 [ 407.695183][T19250] lo speed is unknown, defaulting to 1000 [ 407.714951][T19256] netlink: 'syz.0.3662': attribute type 1 has an invalid length. [ 407.717537][T19250] lo speed is unknown, defaulting to 1000 [ 407.736658][T19256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3662'. [ 407.758644][T19260] netlink: 'syz.1.3663': attribute type 3 has an invalid length. [ 407.767087][T19256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3662'. [ 407.792845][T19250] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 407.853453][T19250] lo speed is unknown, defaulting to 1000 [ 407.868778][T19250] lo speed is unknown, defaulting to 1000 [ 407.878411][T19250] lo speed is unknown, defaulting to 1000 [ 407.886671][T19250] lo speed is unknown, defaulting to 1000 [ 407.897326][T19250] lo speed is unknown, defaulting to 1000 [ 407.905605][T19250] lo speed is unknown, defaulting to 1000 [ 407.952295][T19261] geneve3: entered promiscuous mode [ 407.966662][ T1095] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 59589 - 0 [ 407.978367][ T1095] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 59589 - 0 [ 408.174674][ T1095] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 59589 - 0 [ 408.174683][T19250] lo speed is unknown, defaulting to 1000 [ 408.207112][ T1095] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 59589 - 0 [ 408.230486][T19250] lo speed is unknown, defaulting to 1000 [ 408.259611][T19268] vxcan1 speed is unknown, defaulting to 1000 [ 408.287880][T19250] lo speed is unknown, defaulting to 1000 [ 408.454715][T19276] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 408.469968][ T7736] IPVS: starting estimator thread 0... [ 408.570611][T19278] IPVS: using max 31 ests per chain, 74400 per kthread [ 408.801999][T19293] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 409.114600][T19304] vxcan2: entered allmulticast mode [ 409.835733][T19357] openvswitch: netlink: Duplicate key (type 32). [ 410.148826][T19370] atomic_op ffff88803176f998 conn xmit_atomic 0000000000000000 [ 410.213485][T19375] netlink: 'syz.2.3696': attribute type 21 has an invalid length. [ 410.340186][T19376] tipc: Enabled bearer , priority 10 [ 410.362646][ T5838] block nbd1: Receive control failed (result -32) [ 410.476411][T19389] netlink: 'syz.2.3701': attribute type 10 has an invalid length. [ 410.488648][T19389] vxcan1: entered promiscuous mode [ 410.495218][T19389] vxcan1: entered allmulticast mode [ 410.501321][T19389] team0: Device vxcan1 is of different type [ 410.527228][T19393] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 410.538341][T19370] netlink: 'syz.0.3694': attribute type 1 has an invalid length. [ 410.586011][T19397] __nla_validate_parse: 6 callbacks suppressed [ 410.586041][T19397] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3703'. [ 410.861186][T19408] xt_hashlimit: size too large, truncated to 1048576 [ 410.959386][T19413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3707'. [ 411.045901][T19416] vxcan1 speed is unknown, defaulting to 1000 [ 411.238468][T19421] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3709'. [ 411.427719][T19424] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3709'. [ 411.453352][T19416] lo speed is unknown, defaulting to 1000 [ 411.483638][T19424] nbd: nbd64 already in use [ 411.729592][T19437] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3712'. [ 411.776558][T19437] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3712'. [ 411.879713][T19444] netlink: 'syz.0.3715': attribute type 2 has an invalid length. [ 412.466321][T19476] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.3724'. [ 412.500626][T19472] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.508372][T19472] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.520678][T19472] bond0: left promiscuous mode [ 412.525490][T19472] bond_slave_0: left promiscuous mode [ 412.533161][T19472] bond_slave_1: left promiscuous mode [ 412.582127][T19472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.599827][T19472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.828772][T19472] sit1: left promiscuous mode [ 412.860397][T19472] sit1: left allmulticast mode [ 412.872638][T19486] netlink: 'syz.4.3724': attribute type 1 has an invalid length. [ 412.884200][T19486] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3724'. [ 412.898867][T19472] macsec1: left allmulticast mode [ 412.928888][T19483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3725'. [ 412.975285][T19481] syzkaller0: entered promiscuous mode [ 412.981794][T19481] syzkaller0: entered allmulticast mode [ 412.993586][T11374] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.028266][T11374] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.048387][T11374] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.128799][T19504] netlink: 496 bytes leftover after parsing attributes in process `syz.0.3727'. [ 413.175116][T19504] syzkaller0: entered promiscuous mode [ 413.182229][T19504] syzkaller0: entered allmulticast mode [ 413.263341][T19507] bond0: Caught tx_queue_len zero misconfig [ 413.717132][T19544] gre1: entered promiscuous mode [ 413.724472][T19544] gre1: entered allmulticast mode [ 413.835446][T19546] vxcan1 speed is unknown, defaulting to 1000 [ 413.909680][T19552] xt_ipcomp: unknown flags 1D [ 414.097758][T19555] syzkaller1: entered promiscuous mode [ 414.112364][T19557] netlink: 'syz.3.3742': attribute type 2 has an invalid length. [ 414.130165][T19557] netlink: 'syz.3.3742': attribute type 1 has an invalid length. [ 414.133289][T19555] syzkaller1: entered allmulticast mode [ 414.237496][T19546] lo speed is unknown, defaulting to 1000 [ 414.466491][T19566] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.576446][T19566] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.619721][T19576] ip6tnl0: Caught tx_queue_len zero misconfig [ 414.680941][T19581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.691455][T19582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.762808][T19579] syzkaller0: entered promiscuous mode [ 414.768363][T19579] syzkaller0: entered allmulticast mode [ 414.793811][T19586] batadv_slave_0: Caught tx_queue_len zero misconfig [ 414.834914][T19566] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.851500][T19585] lo: Caught tx_queue_len zero misconfig [ 416.460199][T19566] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.919926][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.994492][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.020792][T19637] __nla_validate_parse: 9 callbacks suppressed [ 417.020811][T19637] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3767'. [ 417.084056][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.093723][T19627] vxcan1 speed is unknown, defaulting to 1000 [ 417.100011][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.279820][T19647] openvswitch: netlink: IP tunnel dst address not specified [ 417.287627][T19651] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3769'. [ 417.319320][T19651] nbd: illegal input index -8454144 [ 417.558256][T19627] lo speed is unknown, defaulting to 1000 [ 417.754844][T19671] netlink: 'syz.3.3776': attribute type 21 has an invalid length. [ 417.771456][T19674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3779'. [ 417.789618][T19675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3779'. [ 417.816560][T19668] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.863855][T19681] sctp: [Deprecated]: syz.1.3778 (pid 19681) Use of int in maxseg socket option. [ 417.863855][T19681] Use struct sctp_assoc_value instead [ 417.928596][T19671] netlink: 'syz.3.3776': attribute type 1 has an invalid length. [ 417.967982][T19668] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.076007][T19687] netlink: 'syz.2.3783': attribute type 1 has an invalid length. [ 418.132147][T19690] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3783'. [ 418.156886][T19687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3783'. [ 418.175545][T19668] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.386209][T19668] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.511814][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.528049][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.556789][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.593554][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.644415][T19705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3788'. [ 418.666174][T19705] macsec2: entered promiscuous mode [ 418.674866][T19705] bridge0: entered promiscuous mode [ 418.681479][T19705] macsec2: entered allmulticast mode [ 418.691613][T19705] bridge0: entered allmulticast mode [ 418.769224][T19709] vxcan1 speed is unknown, defaulting to 1000 [ 418.963395][T19719] block nbd4: not configured, cannot reconfigure [ 418.972218][T19719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3794'. [ 419.202552][T19709] lo speed is unknown, defaulting to 1000 [ 419.216695][T19731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3798'. [ 419.245685][T19731] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 419.261621][ T7732] lo speed is unknown, defaulting to 1000 [ 419.364458][T19733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.434938][T19739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3801'. [ 419.728048][T19747] syzkaller0: entered promiscuous mode [ 419.739692][T19747] syzkaller0: entered allmulticast mode [ 422.452700][T19773] __nla_validate_parse: 4 callbacks suppressed [ 422.452723][T19773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3808'. [ 422.468404][T19773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3808'. [ 422.478688][T19773] netlink: 'syz.2.3808': attribute type 4 has an invalid length. [ 422.501730][T19776] ip6erspan0: entered allmulticast mode [ 422.589394][T19781] veth7: entered promiscuous mode [ 422.726504][T19792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3814'. [ 422.750626][T19792] ksmbd: Unknown IPC event: 0, ignore. [ 423.047663][T19814] netlink: 184020 bytes leftover after parsing attributes in process `syz.1.3821'. [ 423.237838][T19825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3823'. [ 423.575156][T19839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3825'. [ 423.579460][T19840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3825'. [ 423.910051][T19851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3827'. [ 424.355218][T19872] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3831'. [ 424.364562][T19874] openvswitch: netlink: IP tunnel TTL not specified. [ 424.408718][T19872] syzkaller0: entered promiscuous mode [ 424.440553][T19872] syzkaller0: entered allmulticast mode [ 424.453080][T19872] tc action pedit offset must be on 32 bit boundaries [ 424.460200][T19872] tc action pedit offset must be on 32 bit boundaries [ 424.467076][T19872] tc action pedit offset must be on 32 bit boundaries [ 424.473922][T19872] tc action pedit offset must be on 32 bit boundaries [ 424.474432][T19880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3836'. [ 424.480768][T19872] tc action pedit offset must be on 32 bit boundaries [ 424.480802][T19872] tc action pedit offset must be on 32 bit boundaries [ 424.480814][T19872] tc action pedit offset must be on 32 bit boundaries [ 424.480826][T19872] tc action pedit offset must be on 32 bit boundaries [ 424.480837][T19872] tc action pedit offset must be on 32 bit boundaries [ 424.480847][T19872] tc action pedit offset must be on 32 bit boundaries [ 424.480875][T19872] 0: reclassify loop, rule prio 0, protocol 800 [ 424.719376][T19878] netlink: zone id is out of range [ 424.734936][T19878] netlink: zone id is out of range [ 424.740189][T19878] netlink: zone id is out of range [ 424.773882][T19878] netlink: zone id is out of range [ 424.785237][T19878] netlink: zone id is out of range [ 424.804921][T19878] netlink: zone id is out of range [ 424.821162][T19878] netlink: zone id is out of range [ 424.843581][T19878] netlink: zone id is out of range [ 425.151892][T19920] netlink: 'syz.3.3845': attribute type 1 has an invalid length. [ 425.197468][T19915] bond2 (unregistering): Released all slaves [ 425.575776][T19945] Cannot find set identified by id 0 to match [ 425.793581][T19957] nbd: must specify at least one socket [ 425.813818][T19958] nbd: must specify at least one socket [ 426.096588][T19973] xt_hashlimit: invalid rate [ 426.541356][T19990] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 426.590094][T19990] team0: Failed to send port change of device batadv2 via netlink (err -105) [ 426.615926][T19990] team0: Failed to send options change via netlink (err -105) [ 426.628940][T19990] team0: Port device batadv2 added [ 426.829804][T20009] ip6gre0: Master is either lo or non-ether device [ 427.303462][T20037] IPv6: sit2: Disabled Multicast RS [ 427.568683][T20057] __nla_validate_parse: 13 callbacks suppressed [ 427.568705][T20057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3879'. [ 427.754039][T20063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3882'. [ 427.960195][T20068] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.3884'. [ 428.019281][T20075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3886'. [ 428.373285][T20095] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3892'. [ 428.448128][T20098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3893'. [ 428.457742][T20098] netlink: 'syz.0.3893': attribute type 7 has an invalid length. [ 428.466915][T20098] netlink: 'syz.0.3893': attribute type 8 has an invalid length. [ 428.475663][T20098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3893'. [ 428.645454][T20105] wireguard0: entered promiscuous mode [ 428.654599][T20105] wireguard0: entered allmulticast mode [ 428.664653][T20105] team0: Device wireguard0 is of different type [ 428.706063][T20116] netlink: 'syz.0.3898': attribute type 1 has an invalid length. [ 428.747900][T20116] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 428.947910][T20129] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 428.972722][T20129] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 428.981768][T20129] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 429.016569][T20134] sctp: [Deprecated]: syz.0.3902 (pid 20134) Use of int in max_burst socket option. [ 429.016569][T20134] Use struct sctp_assoc_value instead [ 429.029951][T20136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3904'. [ 429.212215][T20145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3907'. [ 429.415598][T20157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3910'. [ 429.581260][T20167] netlink: 'syz.3.3914': attribute type 1 has an invalid length. [ 429.624767][T20167] 8021q: adding VLAN 0 to HW filter on device bond2 [ 429.853279][T20186] syzkaller0: entered promiscuous mode [ 429.858995][T20186] syzkaller0: entered allmulticast mode [ 430.125479][T20198] 8021q: VLANs not supported on nlmon0 [ 432.672664][T20171] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 432.853574][T20224] netlink: 'syz.3.3931': attribute type 13 has an invalid length. [ 432.858293][T20228] net_ratelimit: 46 callbacks suppressed [ 432.858313][T20228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.881139][T20224] veth0_macvtap: left promiscuous mode [ 432.900095][T20224] macvtap0: entered allmulticast mode [ 433.494345][T20262] __nla_validate_parse: 4 callbacks suppressed [ 433.494360][T20262] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3941'. [ 433.686234][T20228] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 433.696587][T20253] netlink: 'syz.2.3939': attribute type 11 has an invalid length. [ 433.707965][T20253] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.3939'. [ 433.843461][T20266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3944'. [ 433.884709][T20270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3946'. [ 434.150959][T20285] netlink: 'syz.1.3951': attribute type 10 has an invalid length. [ 434.184905][T20285] team0: Device vxcan1 is of different type [ 434.240115][T20287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3953'. [ 434.261705][T20287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3953'. [ 434.298083][T20289] netlink: 'syz.0.3952': attribute type 1 has an invalid length. [ 434.366941][T20289] 8021q: adding VLAN 0 to HW filter on device bond2 [ 434.422979][T20295] 8021q: adding VLAN 0 to HW filter on device bond2 [ 434.427310][T20298] Cannot find add_set index 2 as target [ 434.433949][T20295] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 434.448746][T20295] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 434.468620][T20298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3956'. [ 434.551217][T20298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3956'. [ 434.576742][T20298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3956'. [ 434.588982][T20289] veth5: entered promiscuous mode [ 434.617798][T20289] bond2: (slave veth5): Enslaving as an active interface with a down link [ 434.642266][T20303] vlan2: entered allmulticast mode [ 434.647626][T20303] bond2: entered allmulticast mode [ 435.056193][T20340] bond0: entered promiscuous mode [ 435.111531][T20340] bond_slave_0: entered promiscuous mode [ 435.126693][T20340] bond_slave_1: entered promiscuous mode [ 435.143907][T20340] bond0: left promiscuous mode [ 435.148976][T20340] bond_slave_0: left promiscuous mode [ 435.161280][T20340] bond_slave_1: left promiscuous mode [ 435.285621][T20349] tipc: Started in network mode [ 435.298299][T20349] tipc: Node identity 9afc6bcb1e0a, cluster identity 4711 [ 435.318423][T20349] tipc: Enabled bearer , priority 0 [ 435.402819][T20361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3969'. [ 435.423213][T20349] syzkaller0: entered promiscuous mode [ 435.428761][T20349] syzkaller0: entered allmulticast mode [ 435.436643][T20349] tipc: Resetting bearer [ 435.484048][ T13] tipc: Resetting bearer [ 435.504779][T20362] : renamed from xfrm0 (while UP) [ 435.533054][T20347] tipc: Resetting bearer [ 437.044102][T20347] tipc: Disabling bearer [ 437.113891][ T9] tipc: Node number set to 2230741963 [ 437.326051][T20399] PKCS7: Unknown OID: [4] (bad) [ 437.344151][T20399] PKCS7: Only support pkcs7_signedData type [ 437.760193][T20431] Cannot find add_set index 65532 as target [ 437.784405][T20429] netlink: 'syz.1.3993': attribute type 11 has an invalid length. [ 437.962610][T20440] syzkaller0: entered promiscuous mode [ 437.971830][T20440] syzkaller0: entered allmulticast mode [ 438.270815][T20457] xt_policy: output policy not valid in PREROUTING and INPUT [ 438.293722][T20457] siw: device registration error -23 [ 438.535799][T20472] __nla_validate_parse: 8 callbacks suppressed [ 438.535851][T20472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4006'. [ 438.720152][T20484] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4009'. [ 438.763405][T20484] netlink: 'syz.4.4009': attribute type 10 has an invalid length. [ 438.807435][T20484] batman_adv: batadv0: Adding interface: netdevsim0 [ 438.846814][T20484] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.911056][T20484] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 439.365565][T20510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4014'. [ 439.468608][T20510] bond3: entered promiscuous mode [ 439.497201][T20510] 8021q: adding VLAN 0 to HW filter on device bond3 [ 439.573355][T20515] bridge4: entered promiscuous mode [ 439.599621][T20515] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 439.671063][T20516] bridge5: entered promiscuous mode [ 439.681372][T20516] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 439.854530][T20537] tunl0: entered promiscuous mode [ 439.879574][T20537] netlink: 'syz.3.4022': attribute type 3 has an invalid length. [ 439.897758][T20537] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4022'. [ 439.961459][T20542] netlink: 'syz.4.4024': attribute type 10 has an invalid length. [ 439.982255][T20542] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.034837][T20542] bridge_slave_1: left allmulticast mode [ 440.071400][T20542] bridge_slave_1: left promiscuous mode [ 440.078235][T20542] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.245112][T20542] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 440.522938][T20571] netlink: 'syz.4.4026': attribute type 33 has an invalid length. [ 440.558268][T20575] netlink: 'syz.1.4027': attribute type 2 has an invalid length. [ 440.611054][T20578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4029'. [ 440.673314][T20578] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 440.836895][T20593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4033'. [ 440.870539][T20591] nbd: must specify an index to disconnect [ 440.881871][T20593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4033'. [ 440.908130][T20598] nbd: nbd1 already in use [ 440.928092][T20596] sctp: [Deprecated]: syz.2.4034 (pid 20596) Use of int in max_burst socket option. [ 440.928092][T20596] Use struct sctp_assoc_value instead [ 440.952572][T20593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4033'. [ 440.979965][T20607] netlink: 632 bytes leftover after parsing attributes in process `syz.1.4035'. [ 441.032787][T20607] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 443.781580][T20594] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 443.791066][T20607] nbd: must specify an index to disconnect [ 443.802922][T20611] netlink: 'syz.0.4036': attribute type 1 has an invalid length. [ 443.811131][T20611] netlink: 'syz.0.4036': attribute type 3 has an invalid length. [ 443.821972][T20611] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4036'. [ 443.832448][T20611] NCSI netlink: No device for ifindex 813332851 [ 443.936527][T20683] netlink: 'syz.0.4043': attribute type 1 has an invalid length. [ 443.945058][T20680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4042'. [ 443.954532][T20683] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4043'. [ 443.992325][T20680] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4042'. [ 444.007886][T20690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4043'. [ 444.053662][T20680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4042'. [ 444.057909][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.063105][T20680] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4042'. [ 444.120553][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.143570][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.155591][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.372110][T20706] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4052'. [ 444.550830][T20724] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 444.720905][T20736] netlink: 'syz.4.4058': attribute type 61 has an invalid length. [ 444.806298][ T30] audit: type=1107 audit(1775085853.952:10): pid=20735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='jGl1RCxgsIOd_#vPntp󛚭yO$`[N&:sP#ave fv8' [ 444.885411][T20744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4061'. [ 444.899847][T20744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4061'. [ 444.987387][T20750] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 445.060874][T20756] veth0: entered promiscuous mode [ 445.079303][T20756] veth0: left promiscuous mode [ 445.266034][T20766] netlink: 'syz.4.4063': attribute type 16 has an invalid length. [ 445.312441][T20766] netlink: 'syz.4.4063': attribute type 17 has an invalid length. [ 445.437340][T20766] gretap0: left promiscuous mode [ 445.510417][T20766] gretap0: left allmulticast mode [ 445.596812][T20766] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 445.633251][T20783] netlink: 'syz.0.4069': attribute type 10 has an invalid length. [ 445.666466][T20783] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 445.708051][T20781] syzkaller0: entered promiscuous mode [ 445.728562][T20781] syzkaller0: entered allmulticast mode [ 445.835600][ T7741] IPVS: starting estimator thread 0... [ 445.838491][T20786] vxcan1 speed is unknown, defaulting to 1000 [ 445.863870][T20791] IPVS: sh: FWM 3 0x00000003 - no destination available [ 445.931293][T20792] IPVS: using max 25 ests per chain, 60000 per kthread [ 446.364508][T20814] xt_time: unknown flags 0xf4 [ 446.373042][T20810] bond4 (unregistering): Released all slaves [ 446.494823][T20786] lo speed is unknown, defaulting to 1000 [ 446.621460][T20828] netlink: 'syz.4.4083': attribute type 15 has an invalid length. [ 446.629672][T20824] netlink: 'syz.4.4083': attribute type 15 has an invalid length. [ 446.726556][T20830] openvswitch: netlink: Invalid VLAN frame [ 446.798706][T20821] vxcan1 speed is unknown, defaulting to 1000 [ 446.993742][T20842] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 447.002413][T20842] bond4: option packets_per_slave: allowed values 0 - 65535 [ 447.014892][T20842] bond4 (unregistering): Released all slaves [ 447.049605][T20844] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 447.217489][T20821] lo speed is unknown, defaulting to 1000 [ 447.611495][ T5838] Bluetooth: hci0: command 0x0405 tx timeout [ 448.305166][T20890] syzkaller0: entered promiscuous mode [ 448.327635][T20890] syzkaller0: entered allmulticast mode [ 448.623435][T20906] vxcan1 speed is unknown, defaulting to 1000 [ 448.695851][T20910] netlink: 'syz.1.4103': attribute type 3 has an invalid length. [ 448.806047][T20917] IPVS: set_ctl: invalid protocol: 117 10.1.1.2:20003 [ 448.930677][T20925] __nla_validate_parse: 10 callbacks suppressed [ 448.930704][T20925] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4107'. [ 449.015579][T20925] nbd: socks must be embedded in a SOCK_ITEM attr [ 449.026937][T20931] x9: renamed from bridge_slave_0 (while UP) [ 449.143569][T20939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4113'. [ 449.162199][T20906] lo speed is unknown, defaulting to 1000 [ 449.201574][T20943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4113'. [ 449.272148][T20946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4115'. [ 449.356035][T20941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4114'. [ 449.436803][T20952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4116'. [ 449.512082][T20961] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 449.906573][T20981] tipc: Started in network mode [ 449.950470][T20981] tipc: Node identity e0000001, cluster identity 4711 [ 449.957353][T20981] tipc: Enabling of bearer rejected, failed to enable media [ 450.085766][T20989] bridge0: port 3(syz_tun) entered blocking state [ 450.104266][T20989] bridge0: port 3(syz_tun) entered disabled state [ 450.111291][T20994] netlink: 45 bytes leftover after parsing attributes in process `syz.2.4127'. [ 450.136078][T20989] syz_tun: entered allmulticast mode [ 450.151598][T20989] syz_tun: entered promiscuous mode [ 450.242882][T20987] vxcan1 speed is unknown, defaulting to 1000 [ 450.267691][T21000] validate_nla: 1 callbacks suppressed [ 450.267712][T21000] netlink: 'syz.3.4129': attribute type 4 has an invalid length. [ 450.487394][T21016] xt_hashlimit: size too large, truncated to 1048576 [ 450.803095][T21022] netlink: 'syz.2.4134': attribute type 1 has an invalid length. [ 450.857560][T21031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4138'. [ 450.942285][T21031] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 450.969940][T21031] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 450.981306][T21031] gretap1: entered promiscuous mode [ 450.986585][T21031] gretap1: entered allmulticast mode [ 451.001479][T20987] lo speed is unknown, defaulting to 1000 [ 451.642663][T21061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4147'. [ 451.692863][T21060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4147'. [ 451.711196][T21061] bond0: entered promiscuous mode [ 451.730493][T21061] bond_slave_0: entered promiscuous mode [ 451.736412][T21061] bond_slave_1: entered promiscuous mode [ 451.754680][T21060] netlink: 'syz.2.4147': attribute type 4 has an invalid length. [ 452.063732][T21080] netlink: 'syz.2.4152': attribute type 1 has an invalid length. [ 452.556291][T21115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.635004][T21115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.819784][T21133] netlink: 'syz.2.4171': attribute type 2 has an invalid length. [ 453.346830][T21134] bridge0: port 1(1x9) entered disabled state [ 453.850075][T21134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.890701][T21134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.094750][T21134] macvlan0: left promiscuous mode [ 454.279757][T21134] veth7: left promiscuous mode [ 454.321944][T21134] gretap1: left promiscuous mode [ 454.327176][T21134] gretap1: left allmulticast mode [ 454.335762][T11851] lo speed is unknown, defaulting to 1000 [ 454.342450][T11851] syz0: Port: 1 Link DOWN [ 454.440434][T21158] __nla_validate_parse: 7 callbacks suppressed [ 454.440455][T21158] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4179'. [ 454.520488][T11379] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.549876][T21173] netlink: 'syz.2.4181': attribute type 21 has an invalid length. [ 454.551991][T11379] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.571805][T21173] IPv6: NLM_F_CREATE should be specified when creating new route [ 454.579737][T21173] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 454.587221][T21173] IPv6: NLM_F_CREATE should be set when creating new route [ 454.594522][T21173] IPv6: NLM_F_CREATE should be set when creating new route [ 454.601822][T21173] IPv6: NLM_F_CREATE should be set when creating new route [ 454.621493][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.640916][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.847549][T21192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4186'. [ 454.871081][T21194] netlink: zone id is out of range [ 454.885677][T21194] netlink: zone id is out of range [ 454.892065][T21194] netlink: zone id is out of range [ 454.899288][T21194] netlink: zone id is out of range [ 454.906423][T21194] netlink: zone id is out of range [ 454.912032][T21194] netlink: zone id is out of range [ 454.918144][T21194] netlink: zone id is out of range [ 454.923984][T21205] netlink: zone id is out of range [ 454.924661][T21194] netlink: zone id is out of range [ 454.934461][T21194] netlink: zone id is out of range [ 455.204582][T21228] netlink: 'syz.1.4196': attribute type 10 has an invalid length. [ 455.258059][T21228] team0 (unregistering): Port device team_slave_0 removed [ 455.298152][T21228] team0 (unregistering): Port device team_slave_1 removed [ 455.336754][T21237] Cannot find add_set index 4 as target [ 455.421897][T21239] netlink: 'syz.3.4197': attribute type 1 has an invalid length. [ 455.526091][T21245] bond1: entered promiscuous mode [ 455.533438][T21245] bond1: entered allmulticast mode [ 455.539310][T21245] 8021q: adding VLAN 0 to HW filter on device bond1 [ 455.618578][T21253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4203'. [ 455.736815][T21258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4202'. [ 455.846973][T21263] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4206'. [ 455.919398][T21268] xt_ipcomp: unknown flags 1D [ 456.000037][T21270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4210'. [ 456.136779][T21275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4211'. [ 456.566886][T21302] netlink: 'syz.1.4220': attribute type 4 has an invalid length. [ 456.581588][T21302] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4220'. [ 456.646800][T21308] netlink: 'syz.1.4220': attribute type 1 has an invalid length. [ 456.670942][T21308] netlink: 'syz.1.4220': attribute type 2 has an invalid length. [ 456.681654][T21309] macvtap1: entered promiscuous mode [ 456.687206][T21309] macvtap1: entered allmulticast mode [ 456.693553][T21308] netlink: 'syz.1.4220': attribute type 1 has an invalid length. [ 456.703179][T21309] veth1_vlan: entered allmulticast mode [ 456.713971][T21308] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.4220'. [ 456.737819][T21309] macvtap2: entered promiscuous mode [ 456.743520][T21309] macvtap2: entered allmulticast mode [ 456.757217][T21312] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4223'. [ 457.194566][T21347] debugfs: 'netdev:bond_slave_1' already exists in 'phy37' [ 458.590717][T21440] xt_CONNSECMARK: invalid mode: 0 [ 458.597833][T21441] xt_CONNSECMARK: invalid mode: 0 [ 458.725309][T21448] 8021q: adding VLAN 0 to HW filter on device bond2 [ 458.751385][T21454] bridge0: port 4(veth0_to_bridge) entered blocking state [ 458.803654][T21454] bridge0: port 4(veth0_to_bridge) entered disabled state [ 458.851730][T21454] veth0_to_bridge: entered allmulticast mode [ 458.864935][T21454] veth0_to_bridge: entered promiscuous mode [ 458.871489][T21454] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 458.885283][T21454] bridge0: port 4(veth0_to_bridge) entered blocking state [ 458.892591][T21454] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 458.965350][T21471] hsr_slave_0: left promiscuous mode [ 458.981198][T21471] hsr_slave_1: left promiscuous mode [ 459.007317][T21473] netlink: 'syz.3.4265': attribute type 32 has an invalid length. [ 459.031046][T21467] syzkaller0: entered promiscuous mode [ 459.045950][T21467] syzkaller0: entered allmulticast mode [ 459.266892][T21485] bridge0: port 4(veth0_to_bridge) entered disabled state [ 459.274423][T21485] bridge0: port 3(team0) entered disabled state [ 459.281158][T21485] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.288858][T21485] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.338029][T21485] bond0: left promiscuous mode [ 459.354364][T21485] bond_slave_0: left promiscuous mode [ 459.370230][T21485] bond_slave_1: left promiscuous mode [ 459.587011][T21485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.659972][T21485] vlan0: left promiscuous mode [ 459.813639][T21485] bond1: left promiscuous mode [ 459.841068][T21485] geneve3: left promiscuous mode [ 459.853578][T21485] gre1: left promiscuous mode [ 459.858438][T21485] gre1: left allmulticast mode [ 460.013103][T11374] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.023078][T11374] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 59589 - 0 [ 460.032792][T11374] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.042325][T11374] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 59589 - 0 [ 460.053797][T11374] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.081407][T11374] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 59589 - 0 [ 460.103196][T11374] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.123152][T11374] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 59589 - 0 [ 460.189580][T21532] __nla_validate_parse: 9 callbacks suppressed [ 460.189603][T21532] netlink: 192 bytes leftover after parsing attributes in process `syz.1.4276'. [ 460.404251][T21543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4279'. [ 460.450065][T21543] hsr_slave_0 (unregistering): left promiscuous mode [ 460.464566][T21546] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4280'. [ 460.473834][T21550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4279'. [ 460.484120][T21546] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4280'. [ 460.502812][T21546] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4280'. [ 460.511835][T21550] bond4: entered promiscuous mode [ 460.511863][T21550] bond4: entered allmulticast mode [ 460.512404][T21550] 8021q: adding VLAN 0 to HW filter on device bond4 [ 460.591468][T21547] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4280'. [ 460.653810][T21547] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4280'. [ 460.693580][T21547] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4280'. [ 460.713893][T21567] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4284'. [ 460.914664][T21581] net_ratelimit: 112 callbacks suppressed [ 460.914686][T21581] openvswitch: netlink: Flow actions attr not present in new flow. [ 461.361462][T21608] vxcan1 speed is unknown, defaulting to 1000 [ 461.604109][T21629] netlink: 'syz.1.4300': attribute type 7 has an invalid length. [ 461.612818][T21629] netlink: 'syz.1.4300': attribute type 8 has an invalid length. [ 461.626754][T21629] syz_tun: entered promiscuous mode [ 461.652883][T21629] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 461.671724][T21636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.683365][T21629] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network [ 461.746848][T21638] nbd: must specify an index to disconnect [ 461.951908][T21608] lo speed is unknown, defaulting to 1000 [ 462.754620][T21692] netlink: 'syz.4.4315': attribute type 18 has an invalid length. [ 462.834901][T11377] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.864503][T11377] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.909618][T11377] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.948928][T11377] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.255730][T21715] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 463.521606][T21727] netlink: 'syz.2.4326': attribute type 10 has an invalid length. [ 463.551005][T21727] bridge_slave_1: left allmulticast mode [ 463.572785][T21727] bridge_slave_1: left promiscuous mode [ 463.578656][T21727] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.589750][T21730] Unsupported ieee802154 address type: 0 [ 463.626764][T21727] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 463.731552][T21740] netlink: 'syz.0.4329': attribute type 51 has an invalid length. [ 463.773417][T21740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.791977][T21740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.106431][T21753] syzkaller0: entered promiscuous mode [ 464.112236][T21753] syzkaller0: entered allmulticast mode [ 464.122365][T21759] tipc: Started in network mode [ 464.134815][T21759] tipc: Node identity , cluster identity 4711 [ 464.146804][T21759] tipc: Failed to obtain node identity [ 464.152545][T21759] tipc: Enabling of bearer rejected, failed to enable media [ 464.287117][T21775] netlink: 'syz.4.4341': attribute type 4 has an invalid length. [ 465.966792][T21797] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 466.011300][T21797] __nla_validate_parse: 22 callbacks suppressed [ 466.011345][T21797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4349'. [ 466.047350][T21797] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4349'. [ 466.065635][T21800] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 466.076072][T21809] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4351'. [ 466.124143][T21797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4349'. [ 466.133604][T21797] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4349'. [ 466.158396][T11380] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.184837][T11380] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.214249][T11380] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.244433][T11380] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.278448][T21820] sch_tbf: burst 32852 is lower than device lo mtu (65550) ! [ 466.420035][T21831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4358'. [ 466.441377][T21831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4358'. [ 466.466046][T21831] syzkaller0: entered promiscuous mode [ 466.566064][T21845] netlink: 'syz.0.4361': attribute type 51 has an invalid length. [ 466.747919][T21858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.787480][T21862] netlink: 'syz.2.4366': attribute type 26 has an invalid length. [ 466.813939][T21862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4366'. [ 466.862804][T21862] netlink: 'syz.2.4366': attribute type 26 has an invalid length. [ 466.875845][T21860] syzkaller1: entered promiscuous mode [ 466.885405][T21860] syzkaller1: entered allmulticast mode [ 466.930424][T21862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4366'. [ 467.117814][T21872] netlink: 'syz.3.4369': attribute type 1 has an invalid length. [ 467.167116][T21872] netlink: 2108 bytes leftover after parsing attributes in process `syz.3.4369'. [ 467.387450][T21895] x_tables: duplicate underflow at hook 2 [ 467.418063][T21892] bond3 (unregistering): Released all slaves [ 467.625628][T21902] vxcan1 speed is unknown, defaulting to 1000 [ 467.724443][T11380] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.743767][T11380] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.758077][T11380] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.777274][T11380] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.937015][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 468.036152][T21922] netlink: 'syz.4.4382': attribute type 13 has an invalid length. [ 468.045831][T21922] gretap0: refused to change device tx_queue_len [ 468.052665][T21922] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 468.213500][T21932] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 468.226519][T21939] sctp: [Deprecated]: syz.1.4383 (pid 21939) Use of struct sctp_assoc_value in delayed_ack socket option. [ 468.226519][T21939] Use struct sctp_sack_info instead [ 468.294831][T21902] lo speed is unknown, defaulting to 1000 [ 468.537685][T21952] netlink: 'syz.2.4388': attribute type 2 has an invalid length. [ 468.686900][T21956] lo: left promiscuous mode [ 468.693189][T21956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 468.790971][T21962] tunl0: left promiscuous mode [ 468.972398][T21962] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.980228][T21962] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.214298][T21962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.237137][T21962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.312099][T21962] macvtap0: left allmulticast mode [ 469.369311][T21962] bond3: left promiscuous mode [ 469.382338][T21962] bridge4: left promiscuous mode [ 469.387612][T21962] bridge5: left promiscuous mode [ 469.404842][T21962] bond4: left promiscuous mode [ 469.409677][T21962] bond4: left allmulticast mode [ 469.475205][T21981] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 469.487608][T21981] bond3 (unregistering): Released all slaves [ 469.525268][T11379] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.534123][T11379] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.581612][T11379] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.606749][T11379] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.625642][T11379] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.643620][T11379] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.684159][T21967] vxcan1 speed is unknown, defaulting to 1000 [ 469.696890][T21995] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 469.705673][T21993] netlink: 'syz.3.4398': attribute type 1 has an invalid length. [ 469.714335][T11379] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.733761][T11379] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.776384][T21995] dvmrp0: entered allmulticast mode [ 469.977306][T21997] bond3: entered promiscuous mode [ 469.995248][T21997] bond3: entered allmulticast mode [ 470.019329][T21997] 8021q: adding VLAN 0 to HW filter on device bond3 [ 470.077820][T21967] lo speed is unknown, defaulting to 1000 [ 470.751326][T22041] netlink: 'syz.3.4412': attribute type 1 has an invalid length. [ 470.823254][T22041] bond5: (slave bridge9): making interface the new active one [ 470.835770][T22041] bond5: (slave bridge9): Enslaving as an active interface with an up link [ 471.073818][T22060] vxcan1 speed is unknown, defaulting to 1000 [ 471.110689][T22064] netlink: 'syz.2.4419': attribute type 7 has an invalid length. [ 471.243943][T22067] bond3: Removing last arp target with arp_interval on [ 471.324998][T22074] xt_ecn: cannot match TCP bits for non-tcp packets [ 471.451135][T22060] lo speed is unknown, defaulting to 1000 [ 472.003055][T22093] bridge_slave_0: left allmulticast mode [ 472.023377][T22093] bridge_slave_0: left promiscuous mode [ 472.057071][T22093] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.096761][T22093] bridge_slave_1: left allmulticast mode [ 472.105137][T22093] bridge_slave_1: left promiscuous mode [ 472.121456][T22093] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.134925][T22093] bond0: (slave bond_slave_0): Releasing backup interface [ 472.148228][T22093] bond0: (slave bond_slave_1): Releasing backup interface [ 472.160004][T22093] team0: Port device team_slave_0 removed [ 472.172268][T22093] team0: Port device team_slave_1 removed [ 472.178516][T22093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.186901][T22093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.194973][T22093] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 472.304117][T22109] __nla_validate_parse: 15 callbacks suppressed [ 472.304139][T22109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4433'. [ 473.065934][T22147] netlink: 'syz.0.4442': attribute type 1 has an invalid length. [ 473.084493][T22147] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4442'. [ 473.111824][T22147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4442'. [ 473.484975][T22170] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4448'. [ 474.015869][T22200] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 474.189583][T22217] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20004 [ 474.242899][T22219] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 474.278691][T22223] netlink: 'syz.4.4457': attribute type 10 has an invalid length. [ 474.310619][T22223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4457'. [ 474.422119][T22234] netlink: 'syz.0.4460': attribute type 1 has an invalid length. [ 474.434482][T22234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4460'. [ 474.478957][T22234] 8021q: adding VLAN 0 to HW filter on device bond4 [ 474.749144][T22249] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4464'. [ 475.271054][T22263] netlink: 'syz.3.4469': attribute type 1 has an invalid length. [ 475.329909][T22263] bond6: entered promiscuous mode [ 475.336360][T22263] 8021q: adding VLAN 0 to HW filter on device bond6 [ 475.399354][T22263] xt_socket: unknown flags 0xe4 [ 475.428590][T22265] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4470'. [ 475.502176][T22263] bond6: (slave bridge10): making interface the new active one [ 475.516323][T22263] bridge10: entered promiscuous mode [ 475.551414][T22263] bond6: (slave bridge10): Enslaving as an active interface with an up link [ 475.756169][T22296] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4478'. [ 475.777817][T22296] 8021q: VLANs not supported on ip6gre0 [ 475.800791][T22302] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4479'. [ 476.151559][T22331] openvswitch: netlink: Message has 4 unknown bytes. [ 476.207628][T22331] syzkaller0: entered promiscuous mode [ 476.227694][T22331] syzkaller0: entered allmulticast mode [ 476.603253][T22357] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 476.623660][T22357] bond2 (unregistering): Released all slaves [ 476.867313][T22381] netlink: 'syz.1.4497': attribute type 1 has an invalid length. [ 477.007358][T22385] 8021q: adding VLAN 0 to HW filter on device bond3 [ 477.016478][T22385] bond2: (slave bond3): making interface the new active one [ 477.025111][T22385] bond2: (slave bond3): Enslaving as an active interface with an up link [ 477.044082][T22391] tipc: Enabling of bearer rejected, failed to enable media [ 477.105001][T22381] 8021q: adding VLAN 0 to HW filter on device bond2 [ 477.248827][T22406] netlink: 'syz.1.4504': attribute type 10 has an invalid length. [ 477.483595][T22425] __nla_validate_parse: 2 callbacks suppressed [ 477.483616][T22425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4510'. [ 477.534701][T22425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4510'. [ 477.661986][T22435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4512'. [ 477.678885][T22439] netlink: 'syz.2.4515': attribute type 4 has an invalid length. [ 477.803317][T22446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4519'. [ 477.819297][T22446] netlink: 'syz.3.4519': attribute type 3 has an invalid length. [ 477.991760][T22454] syzkaller1: entered promiscuous mode [ 477.997661][T22454] syzkaller1: entered allmulticast mode [ 478.420979][T22464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4522'. [ 478.578537][T22476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4526'. [ 478.602902][T22477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4524'. [ 478.613820][T22477] netlink: 'syz.0.4524': attribute type 5 has an invalid length. [ 478.622408][T22477] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4524'. [ 478.717547][T22481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4527'. [ 478.747995][T22452] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 478.752251][T22481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4527'. [ 478.966386][T22494] vxcan1 speed is unknown, defaulting to 1000 [ 479.489599][T22503] vxcan1 speed is unknown, defaulting to 1000 [ 479.498863][T22494] lo speed is unknown, defaulting to 1000 [ 479.846276][T22553] netlink: 'syz.4.4552': attribute type 2 has an invalid length. [ 479.859552][T22553] netlink: 'syz.4.4552': attribute type 8 has an invalid length. [ 479.905312][T22556] xt_hashlimit: size too large, truncated to 1048576 [ 480.238315][T22567] bond3 (unregistering): Released all slaves [ 480.354824][T22503] lo speed is unknown, defaulting to 1000 [ 481.159216][T22616] netlink: 'syz.3.4570': attribute type 1 has an invalid length. [ 481.699054][T22640] netlink: 'syz.3.4580': attribute type 18 has an invalid length. [ 481.849464][T22644] netlink: 'syz.4.4582': attribute type 32 has an invalid length. [ 481.864354][T22649] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 481.882810][T22647] sch_tbf: burst 32852 is lower than device lo mtu (65550) ! [ 482.161631][T22672] xt_l2tp: v2 doesn't support IP mode [ 482.171557][T22671] xt_l2tp: v2 doesn't support IP mode [ 482.404417][T22684] tipc: Resetting bearer [ 482.537980][T22693] netlink: 'syz.2.4593': attribute type 1 has an invalid length. [ 482.586439][T22693] bond3: entered promiscuous mode [ 482.594838][T22693] 8021q: adding VLAN 0 to HW filter on device bond3 [ 482.872728][T22712] __nla_validate_parse: 37 callbacks suppressed [ 482.872753][T22712] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4596'. [ 482.965737][T22716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4599'. [ 483.004395][T22718] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 483.018762][T22720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4600'. [ 483.142019][T22727] SET target dimension over the limit! [ 483.225708][T22684] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 483.236181][T22684] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 483.380724][T22684] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 483.389547][T22684] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 483.440090][T22740] netlink: 'syz.1.4607': attribute type 11 has an invalid length. [ 483.465735][T22740] netlink: 'syz.1.4607': attribute type 4 has an invalid length. [ 483.480237][T22740] netlink: 199768 bytes leftover after parsing attributes in process `syz.1.4607'. [ 483.706151][T22756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4609'. [ 483.813676][T22756] bridge0: entered promiscuous mode [ 483.819418][T22756] macsec1: entered promiscuous mode [ 483.853166][T22756] macsec1: entered allmulticast mode [ 483.859421][T22756] bridge0: entered allmulticast mode [ 483.884588][T22756] bridge0: port 1(macsec1) entered blocking state [ 483.902360][T22756] bridge0: port 1(macsec1) entered disabled state [ 483.944744][T22756] bridge0: left allmulticast mode [ 483.950042][T22756] bridge0: left promiscuous mode [ 484.024105][T22775] netlink: 54 bytes leftover after parsing attributes in process `syz.4.4614'. [ 484.037665][T22770] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4613'. [ 484.068042][T22775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4614'. [ 484.182820][T22784] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4616'. [ 484.211780][T22784] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4616'. [ 484.284879][T22787] can: request_module (can-proto-0) failed. [ 485.887387][T22884] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 485.919092][T22884] syzkaller1: Refused to change device type [ 485.951693][T22883] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 486.744585][T11370] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 486.780582][T11370] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 486.788433][T10501] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 486.980680][T11858] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 487.604574][T22985] netlink: 'syz.1.4664': attribute type 10 has an invalid length. [ 487.623408][T22985] openvswitch: netlink: Multiple metadata blocks provided [ 487.643881][T22987] netlink: 'syz.0.4665': attribute type 32 has an invalid length. [ 487.687906][T22990] tipc: Failed to remove unknown binding: 66,0,0/943456204:1486658469/1486658471 [ 487.708383][T22990] tipc: Failed to remove unknown binding: 66,0,0/943456204:1486658469/1486658470 [ 487.733389][T22990] tipc: Failed to remove unknown binding: 66,0,0/943456204:1486658469/1486658471 [ 487.754413][T22990] tipc: Failed to remove unknown binding: 66,0,0/943456204:1486658469/1486658470 [ 487.770702][T11858] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 487.922206][T23007] netlink: 'syz.3.4670': attribute type 3 has an invalid length. [ 487.933978][T23005] netlink: 'syz.3.4670': attribute type 1 has an invalid length. [ 488.096515][T23020] __nla_validate_parse: 5 callbacks suppressed [ 488.096536][T23020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4672'. [ 488.111336][T23019] xt_limit: Overflow, try lower: 604147548/4200216962 [ 488.123771][T23021] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4673'. [ 488.225709][T23024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.373675][T23040] netlink: 'syz.4.4678': attribute type 21 has an invalid length. [ 488.488652][T23047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4681'. [ 488.512174][T23049] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 488.521887][T23049] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4679'. [ 488.693307][T23057] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4684'. [ 488.703157][T23057] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4684'. [ 488.769538][T23059] netlink: 'syz.1.4684': attribute type 1 has an invalid length. [ 488.818375][T23059] bond4: (slave gretap1): making interface the new active one [ 488.826911][T23059] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 488.846286][T23062] netlink: 'syz.2.4685': attribute type 11 has an invalid length. [ 488.854946][T23062] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4685'. [ 489.397516][T23099] syzkaller0: entered promiscuous mode [ 489.403393][T23099] syzkaller0: entered allmulticast mode [ 489.633223][T23111] syzkaller0: entered promiscuous mode [ 489.638775][T23111] syzkaller0: entered allmulticast mode [ 489.776571][T23118] netlink: 'syz.4.4702': attribute type 1 has an invalid length. [ 489.784824][T23118] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4702'. [ 489.794229][T23118] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4702'. [ 490.101508][T23122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4703'. [ 490.589792][T23130] netlink: 'syz.0.4705': attribute type 9 has an invalid length. [ 490.974840][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 491.326096][T23137] pim6reg: entered allmulticast mode [ 491.607957][T23154] openvswitch: netlink: Message has 4 unknown bytes. [ 491.616137][T23148] bond4: Invalid ad_actor_system MAC address. [ 491.627639][T23148] bond4: option ad_actor_system: invalid value (1) [ 491.637068][T23148] bond4 (unregistering): Released all slaves [ 491.660381][T23155] tipc: Enabling of bearer rejected, failed to enable media [ 491.849975][T23164] syzkaller0: entered promiscuous mode [ 491.858610][T23164] syzkaller0: entered allmulticast mode [ 491.872991][T23167] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 491.913252][T23164] openvswitch: netlink: IP tunnel dst address not specified [ 492.055900][T23171] netlink: 'syz.0.4719': attribute type 12 has an invalid length. [ 492.382953][T23196] netlink: 'syz.0.4724': attribute type 21 has an invalid length. [ 492.627822][T23212] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 492.673397][T23221] tunl0: Caught tx_queue_len zero misconfig [ 492.791396][T23225] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 493.373281][T23246] netlink: 'syz.3.4739': attribute type 1 has an invalid length. [ 493.641045][T23254] netlink: 'syz.1.4744': attribute type 13 has an invalid length. [ 493.672728][T23254] veth0_macvtap: left promiscuous mode [ 493.704554][T23254] macvtap0: entered allmulticast mode [ 493.714959][T23254] macvtap0: refused to change device tx_queue_len [ 493.890734][T23268] xt_NFQUEUE: number of total queues is 0 [ 493.913373][T23265] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 493.952221][T23265] bond7 (unregistering): Released all slaves [ 494.077870][T23273] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 494.245989][T23284] dvmrp8: entered allmulticast mode [ 494.272583][T23291] __nla_validate_parse: 8 callbacks suppressed [ 494.272605][T23291] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4756'. [ 494.288378][T23295] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 494.363724][T23298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4758'. [ 494.376374][T23284] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4753'. [ 494.611535][T23313] netlink: 'syz.4.4763': attribute type 1 has an invalid length. [ 494.729180][T23313] 8021q: adding VLAN 0 to HW filter on device bond4 [ 494.741987][T23326] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4767'. [ 494.874291][T23320] bond4: (slave veth9): Enslaving as an active interface with a down link [ 494.893049][T23334] ip6t_srh: unknown srh match flags 5F28 [ 494.924672][T23317] vxcan1 speed is unknown, defaulting to 1000 [ 494.932233][T23313] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 494.942295][T23320] netlink: 'syz.4.4763': attribute type 1 has an invalid length. [ 494.950059][T23320] netlink: 'syz.4.4763': attribute type 2 has an invalid length. [ 494.958496][T23282] 8021q: VLANs not supported on vcan0 [ 495.246142][T23345] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 495.259323][T23317] lo speed is unknown, defaulting to 1000 [ 495.488937][T23355] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 495.593198][T23360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4778'. [ 495.838080][T23368] netlink: 'syz.1.4780': attribute type 4 has an invalid length. [ 495.856762][T23368] netlink: 'syz.1.4780': attribute type 4 has an invalid length. [ 495.875949][T23373] xt_l2tp: unknown flags: 10 [ 495.951972][T23368] pim6reg1: entered promiscuous mode [ 495.969482][T23368] pim6reg1: entered allmulticast mode [ 496.184476][T23380] macvlan1: mtu less than device minimum [ 496.433377][T23397] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4787'. [ 496.478579][T23405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4790'. [ 496.614686][T23413] xt_ecn: cannot match TCP bits for non-tcp packets [ 496.625001][T23414] netlink: 'syz.1.4793': attribute type 39 has an invalid length. [ 496.681249][T23418] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4795'. [ 496.693381][T23414] syz_tun (unregistering): left promiscuous mode [ 496.963191][T23438] xt_cgroup: path and classid specified [ 497.093190][T23441] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.4804'. [ 497.134213][T23450] tipc: Trying to set illegal importance in message [ 497.217127][T23454] netlink: 'syz.0.4804': attribute type 1 has an invalid length. [ 497.425007][T23470] netlink: 20148 bytes leftover after parsing attributes in process `syz.2.4807'. [ 497.458241][T23469] vcan0: entered promiscuous mode [ 497.464035][T23469] vcan0: entered allmulticast mode [ 497.654198][T23487] netlink: 'syz.2.4814': attribute type 32 has an invalid length. [ 498.582248][T23551] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 498.770961][T23558] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 498.990180][T23573] netlink: 'syz.3.4839': attribute type 21 has an invalid length. [ 499.130529][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 499.147547][T23581] 8021q: VLANs not supported on ip6gre0 [ 499.294291][T23591] netlink: 'syz.4.4846': attribute type 1 has an invalid length. [ 499.305819][T23593] __nla_validate_parse: 32 callbacks suppressed [ 499.305842][T23593] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4847'. [ 499.339846][T23591] 8021q: adding VLAN 0 to HW filter on device bond5 [ 499.349261][T23596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4846'. [ 499.389115][T23596] bond5: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 499.411551][T23600] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4850'. [ 499.422796][T23596] bond5: entered allmulticast mode [ 499.434075][T23601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4850'. [ 499.443317][T23600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4850'. [ 499.452408][T23600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4850'. [ 499.461574][T23601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4850'. [ 499.471665][T23600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4850'. [ 499.499477][T23601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4850'. [ 499.569971][T23600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4850'. [ 500.026789][T23642] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 500.104252][T23649] netlink: 'syz.3.4867': attribute type 1 has an invalid length. [ 500.133668][T23649] netlink: 'syz.3.4867': attribute type 2 has an invalid length. [ 500.154404][T23649] netlink: 'syz.3.4867': attribute type 1 has an invalid length. [ 501.281872][T23737] netlink: 'syz.0.4884': attribute type 2 has an invalid length. [ 501.287723][T23733] vxcan1 speed is unknown, defaulting to 1000 [ 501.482196][T23740] vlan2: entered promiscuous mode [ 501.487306][T23740] bridge0: entered promiscuous mode [ 501.639684][T23733] lo speed is unknown, defaulting to 1000 [ 501.767150][T23748] syzkaller0: entered promiscuous mode [ 501.773291][T23748] syzkaller0: entered allmulticast mode [ 502.825761][T23788] netlink: 'syz.0.4896': attribute type 1 has an invalid length. [ 502.967539][T23788] 8021q: adding VLAN 0 to HW filter on device bond5 [ 502.988802][T23790] vlan2: entered allmulticast mode [ 502.994316][T23790] bond5: entered allmulticast mode [ 503.054932][T23791] bond5: (slave gretap2): making interface the new active one [ 503.071088][T23794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.090683][T23791] gretap2: entered allmulticast mode [ 503.106290][T23791] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 503.436816][T23799] vxcan1 speed is unknown, defaulting to 1000 [ 504.263694][T23799] lo speed is unknown, defaulting to 1000 [ 504.294651][T23860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.540982][T23871] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 504.637811][T23875] __nla_validate_parse: 17 callbacks suppressed [ 504.637834][T23875] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4914'. [ 506.199900][T23892] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4919'. [ 506.220640][T23892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4919'. [ 506.242171][T23892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.405404][T23903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4920'. [ 506.431776][T23902] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 506.436192][T23903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4920'. [ 506.788798][T23913] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4927'. [ 506.965412][T23929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4929'. [ 507.391438][T23954] netlink: 'syz.0.4937': attribute type 83 has an invalid length. [ 507.524142][T23958] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4938'. [ 507.538358][T23959] netlink: 212316 bytes leftover after parsing attributes in process `syz.0.4938'. [ 507.581776][T23962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.833707][T23983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4943'. [ 508.369964][T24004] netlink: 'syz.1.4955': attribute type 2 has an invalid length. [ 508.511227][T24017] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 508.862576][T24042] netlink: 'syz.3.4965': attribute type 1 has an invalid length. [ 509.309640][T24068] netlink: 'syz.0.4970': attribute type 1 has an invalid length. [ 509.684428][T24087] __nla_validate_parse: 20 callbacks suppressed [ 509.684452][T24087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4974'. [ 509.695606][T24088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4975'. [ 509.702840][T24087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4974'. [ 509.714183][T24084] xt_limit: Overflow, try lower: 271964/0 [ 510.021865][T24100] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4981'. [ 510.027852][T24101] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4982'. [ 510.041716][T24100] netlink: 'syz.3.4981': attribute type 2 has an invalid length. [ 510.057103][T24100] netlink: 'syz.3.4981': attribute type 1 has an invalid length. [ 510.112220][T24100] 8021q: adding VLAN 0 to HW filter on device bond7 [ 510.132896][T24107] 8021q: adding VLAN 0 to HW filter on device bond7 [ 510.140167][T24107] bond7: (slave vcan0): The slave device specified does not support setting the MAC address [ 510.151786][T24107] bond7: (slave vcan0): Error -95 calling set_mac_address [ 510.170729][T24104] syzkaller0: entered promiscuous mode [ 510.176374][T24104] syzkaller0: entered allmulticast mode [ 510.222175][T24104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4983'. [ 510.341488][T24115] netlink: 'syz.4.4985': attribute type 1 has an invalid length. [ 510.400396][T24118] netlink: 'syz.3.4987': attribute type 1 has an invalid length. [ 510.411183][T24120] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4988'. [ 510.436976][T24121] bond6: (slave gretap3): making interface the new active one [ 510.446418][T24121] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 510.513307][T24128] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4989'. [ 510.522440][T24118] 8021q: adding VLAN 0 to HW filter on device bond8 [ 510.681546][T24118] veth7: entered allmulticast mode [ 510.835651][T24118] bond8: (slave gretap1): making interface the new active one [ 510.886001][T24118] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 510.936439][T24150] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4992'. [ 511.015891][T24149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4993'. [ 511.040565][T24149] netlink: 'syz.0.4993': attribute type 1 has an invalid length. [ 511.077338][T24149] netlink: 'syz.0.4993': attribute type 1 has an invalid length. [ 511.251703][T24171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.138432][T24225] vxcan1 speed is unknown, defaulting to 1000 [ 512.577226][T24225] lo speed is unknown, defaulting to 1000 [ 513.189185][T24283] validate_nla: 4 callbacks suppressed [ 513.189209][T24283] netlink: 'syz.3.5028': attribute type 1 has an invalid length. [ 513.441890][T24283] bond9: (slave bridge11): Enslaving as a backup interface with an up link [ 513.518070][T24295] bond9: (slave bridge12): Enslaving as a backup interface with a down link [ 513.667378][T24320] veth0: entered promiscuous mode [ 513.714790][T24320] veth0: left promiscuous mode [ 513.853502][T24336] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 513.888116][T24329] openvswitch: netlink: Flow key attr not present in new flow. [ 514.099370][T24347] tipc: Enabled bearer , priority 0 [ 514.107148][T24347] syzkaller0: entered promiscuous mode [ 514.113083][T24347] syzkaller0: entered allmulticast mode [ 514.136873][T24347] tipc: Resetting bearer [ 514.186114][T24346] IPVS: set_ctl: invalid protocol: 50 172.30.0.2:20003 [ 514.262713][T24361] xt_bpf: check failed: parse error [ 514.465263][T24368] : renamed from bond0 (while UP) [ 514.862959][T24342] tipc: Resetting bearer [ 514.915203][T24342] tipc: Disabling bearer [ 514.977873][T24399] __nla_validate_parse: 17 callbacks suppressed [ 514.977896][T24399] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5059'. [ 515.009406][T24403] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5062'. [ 515.209392][T24417] netlink: 'syz.0.5066': attribute type 2 has an invalid length. [ 515.234256][T24417] netlink: 'syz.0.5066': attribute type 2 has an invalid length. [ 515.709289][T24443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5074'. [ 515.770525][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 515.859649][T24452] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 516.325647][T24461] --map-set only usable from mangle table [ 516.336384][T24461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.346624][T24461] netlink: 'syz.4.5080': attribute type 10 has an invalid length. [ 516.359333][T24461] team0: Device ipvlan1 failed to register rx_handler [ 516.449053][T24463] syzkaller0: entered promiscuous mode [ 516.454906][T24463] syzkaller0: entered allmulticast mode [ 516.572188][T24467] netlink: 'syz.4.5084': attribute type 2 has an invalid length. [ 516.703955][T24480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5088'. [ 516.728817][T24471] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.5085'. [ 516.738729][T24471] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.5085'. [ 516.868470][T24487] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5092'. [ 516.887578][T24491] netlink: 'syz.3.5090': attribute type 16 has an invalid length. [ 516.905578][T24489] dvmrp0: entered allmulticast mode [ 516.941617][T24491] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5090'. [ 517.005756][T24495] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 517.029115][T24496] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5096'. [ 517.039515][T24496] ------------[ cut here ]------------ [ 517.045428][T24496] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 517.059887][T24496] WARNING: net/sched/cls_u32.c:855 at u32_change+0x1da0/0x2720, CPU#1: syz.0.5096/24496 [ 517.070375][T24496] Modules linked in: [ 517.074660][T24496] CPU: 1 UID: 0 PID: 24496 Comm: syz.0.5096 Not tainted syzkaller #0 PREEMPT(full) [ 517.084811][T24496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 517.095736][T24496] RIP: 0010:u32_change+0x1daf/0x2720 [ 517.101200][T24496] Code: 3d 4a 2c 43 06 01 75 33 e8 0e 3b 0d f8 eb 50 e8 07 3b 0d f8 48 8d 3d 70 60 68 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 00 9b e1 8c <67> 48 0f b9 3a e9 af ee ff ff e8 e2 3a 0d f8 eb 24 e8 db 3a 0d f8 [ 517.121336][T24496] RSP: 0018:ffffc900055aefc0 EFLAGS: 00010293 [ 517.127468][T24496] RAX: ffffffff89b87369 RBX: ffff8880553afc00 RCX: 0000000000000010 [ 517.135803][T24496] RDX: ffffffff8ce19b00 RSI: 0000000000000020 RDI: ffffffff9020d3e0 [ 517.144014][T24496] RBP: ffffc900055af178 R08: 0000000000000dc0 R09: 00000000ffffffff [ 517.152141][T24496] R10: dffffc0000000000 R11: fffffbfff20237d7 R12: ffff8880553adce8 [ 517.160172][T24496] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001 [ 517.168548][T24496] FS: 00007f80ec0516c0(0000) GS:ffff88812555a000(0000) knlGS:0000000000000000 [ 517.177596][T24496] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 517.184512][T24496] CR2: 000000110c241799 CR3: 000000007b5cc000 CR4: 00000000003526f0 [ 517.192570][T24496] Call Trace: [ 517.195881][T24496] [ 517.199065][T24496] ? __pfx_u32_change+0x10/0x10 [ 517.204156][T24496] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 517.209955][T24496] tc_new_tfilter+0xff8/0x1780 [ 517.214898][T24496] ? __pfx_tc_new_tfilter+0x10/0x10 [ 517.220292][T24496] ? is_bpf_text_address+0x26/0x2b0 [ 517.225655][T24496] ? __pfx_tc_new_tfilter+0x10/0x10 [ 517.230997][T24496] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 517.236075][T24496] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 517.241517][T24496] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 517.247116][T24496] ? __lock_acquire+0x6b5/0x2cf0 [ 517.252199][T24496] netlink_rcv_skb+0x232/0x4b0 [ 517.257012][T24496] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 517.262718][T24496] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 517.268063][T24496] ? netlink_deliver_tap+0x2e/0x1b0 [ 517.273405][T24496] netlink_unicast+0x80f/0x9b0 [ 517.278226][T24496] ? __pfx_netlink_unicast+0x10/0x10 [ 517.283653][T24496] ? netlink_sendmsg+0x650/0xb40 [ 517.288629][T24496] ? skb_put+0x11b/0x210 [ 517.293036][T24496] netlink_sendmsg+0x813/0xb40 [ 517.297845][T24496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.303273][T24496] ? aa_sock_msg_perm+0xf1/0x1b0 [ 517.308339][T24496] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 517.313821][T24496] ____sys_sendmsg+0x972/0x9f0 [ 517.318637][T24496] ? __pfx_____sys_sendmsg+0x10/0x10 [ 517.324085][T24496] ? import_iovec+0x73/0xa0 [ 517.328730][T24496] ___sys_sendmsg+0x2a5/0x360 [ 517.333578][T24496] ? __pfx____sys_sendmsg+0x10/0x10 [ 517.338918][T24496] ? __pfx_futex_wake_mark+0x10/0x10 [ 517.344416][T24496] ? __fget_files+0x2a/0x420 [ 517.349065][T24496] ? __fget_files+0x3a0/0x420 [ 517.354002][T24496] __sys_sendmmsg+0x27c/0x4e0 [ 517.358868][T24496] ? __pfx___sys_sendmmsg+0x10/0x10 [ 517.364214][T24496] ? do_futex+0x333/0x420 [ 517.368654][T24496] ? __sys_bind+0x36b/0x410 [ 517.373345][T24496] ? rcu_is_watching+0x15/0xb0 [ 517.378240][T24496] __x64_sys_sendmmsg+0xa0/0xc0 [ 517.383214][T24496] do_syscall_64+0x14d/0xf80 [ 517.387848][T24496] ? trace_irq_disable+0x3b/0x150 [ 517.392999][T24496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.399103][T24496] ? clear_bhb_loop+0x40/0x90 [ 517.403923][T24496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.409871][T24496] RIP: 0033:0x7f80eb19c819 [ 517.414414][T24496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.434276][T24496] RSP: 002b:00007f80ec051028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 517.442930][T24496] RAX: ffffffffffffffda RBX: 00007f80eb416090 RCX: 00007f80eb19c819 [ 517.451427][T24496] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000009 [ 517.459443][T24496] RBP: 00007f80eb232c91 R08: 0000000000000000 R09: 0000000000000000 [ 517.467545][T24496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.475620][T24496] R13: 00007f80eb416128 R14: 00007f80eb416090 R15: 00007ffcded1ec28 [ 517.483756][T24496] [ 517.486853][T24496] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 517.494163][T24496] CPU: 1 UID: 0 PID: 24496 Comm: syz.0.5096 Not tainted syzkaller #0 PREEMPT(full) [ 517.503624][T24496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 517.513720][T24496] Call Trace: [ 517.517036][T24496] [ 517.520081][T24496] vpanic+0x56c/0xa60 [ 517.524109][T24496] ? __pfx__printk+0x10/0x10 [ 517.528815][T24496] ? __pfx_vpanic+0x10/0x10 [ 517.533356][T24496] ? is_bpf_text_address+0x292/0x2b0 [ 517.538765][T24496] ? is_bpf_text_address+0x26/0x2b0 [ 517.544004][T24496] panic+0xc5/0xd0 [ 517.547746][T24496] ? __pfx_panic+0x10/0x10 [ 517.552205][T24496] __warn+0x315/0x4f0 [ 517.556201][T24496] ? u32_change+0x1da0/0x2720 [ 517.560892][T24496] ? u32_change+0x1da0/0x2720 [ 517.565651][T24496] __report_bug+0x29a/0x540 [ 517.570166][T24496] ? ___sys_sendmsg+0x2a5/0x360 [ 517.575026][T24496] ? __sys_sendmmsg+0x27c/0x4e0 [ 517.579893][T24496] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 517.584930][T24496] ? u32_change+0x1da0/0x2720 [ 517.589712][T24496] ? __pfx___report_bug+0x10/0x10 [ 517.594761][T24496] report_bug_entry+0x19a/0x290 [ 517.599622][T24496] ? u32_change+0x1daf/0x2720 [ 517.604304][T24496] ? u32_change+0x1db4/0x2720 [ 517.608993][T24496] handle_bug+0xce/0x200 [ 517.613278][T24496] exc_invalid_op+0x1a/0x50 [ 517.617989][T24496] asm_exc_invalid_op+0x1a/0x20 [ 517.623038][T24496] RIP: 0010:u32_change+0x1daf/0x2720 [ 517.628339][T24496] Code: 3d 4a 2c 43 06 01 75 33 e8 0e 3b 0d f8 eb 50 e8 07 3b 0d f8 48 8d 3d 70 60 68 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 00 9b e1 8c <67> 48 0f b9 3a e9 af ee ff ff e8 e2 3a 0d f8 eb 24 e8 db 3a 0d f8 [ 517.647950][T24496] RSP: 0018:ffffc900055aefc0 EFLAGS: 00010293 [ 517.654028][T24496] RAX: ffffffff89b87369 RBX: ffff8880553afc00 RCX: 0000000000000010 [ 517.662008][T24496] RDX: ffffffff8ce19b00 RSI: 0000000000000020 RDI: ffffffff9020d3e0 [ 517.670084][T24496] RBP: ffffc900055af178 R08: 0000000000000dc0 R09: 00000000ffffffff [ 517.678168][T24496] R10: dffffc0000000000 R11: fffffbfff20237d7 R12: ffff8880553adce8 [ 517.686165][T24496] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001 [ 517.694164][T24496] ? u32_change+0x1d99/0x2720 [ 517.698984][T24496] ? __pfx_u32_change+0x10/0x10 [ 517.703941][T24496] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 517.709715][T24496] tc_new_tfilter+0xff8/0x1780 [ 517.714527][T24496] ? __pfx_tc_new_tfilter+0x10/0x10 [ 517.719753][T24496] ? is_bpf_text_address+0x26/0x2b0 [ 517.725011][T24496] ? __pfx_tc_new_tfilter+0x10/0x10 [ 517.730242][T24496] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 517.735211][T24496] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 517.740338][T24496] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 517.745819][T24496] ? __lock_acquire+0x6b5/0x2cf0 [ 517.750782][T24496] netlink_rcv_skb+0x232/0x4b0 [ 517.755572][T24496] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 517.761039][T24496] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 517.766353][T24496] ? netlink_deliver_tap+0x2e/0x1b0 [ 517.771583][T24496] netlink_unicast+0x80f/0x9b0 [ 517.776392][T24496] ? __pfx_netlink_unicast+0x10/0x10 [ 517.781793][T24496] ? netlink_sendmsg+0x650/0xb40 [ 517.786766][T24496] ? skb_put+0x11b/0x210 [ 517.791047][T24496] netlink_sendmsg+0x813/0xb40 [ 517.795851][T24496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.801227][T24496] ? aa_sock_msg_perm+0xf1/0x1b0 [ 517.806200][T24496] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 517.811521][T24496] ____sys_sendmsg+0x972/0x9f0 [ 517.816441][T24496] ? __pfx_____sys_sendmsg+0x10/0x10 [ 517.821784][T24496] ? import_iovec+0x73/0xa0 [ 517.826319][T24496] ___sys_sendmsg+0x2a5/0x360 [ 517.831032][T24496] ? __pfx____sys_sendmsg+0x10/0x10 [ 517.836254][T24496] ? __pfx_futex_wake_mark+0x10/0x10 [ 517.841618][T24496] ? __fget_files+0x2a/0x420 [ 517.846225][T24496] ? __fget_files+0x3a0/0x420 [ 517.850924][T24496] __sys_sendmmsg+0x27c/0x4e0 [ 517.855629][T24496] ? __pfx___sys_sendmmsg+0x10/0x10 [ 517.860864][T24496] ? do_futex+0x333/0x420 [ 517.865238][T24496] ? __sys_bind+0x36b/0x410 [ 517.869772][T24496] ? rcu_is_watching+0x15/0xb0 [ 517.874568][T24496] __x64_sys_sendmmsg+0xa0/0xc0 [ 517.879539][T24496] do_syscall_64+0x14d/0xf80 [ 517.884152][T24496] ? trace_irq_disable+0x3b/0x150 [ 517.889196][T24496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.895315][T24496] ? clear_bhb_loop+0x40/0x90 [ 517.900030][T24496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.905952][T24496] RIP: 0033:0x7f80eb19c819 [ 517.910401][T24496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.930130][T24496] RSP: 002b:00007f80ec051028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 517.938586][T24496] RAX: ffffffffffffffda RBX: 00007f80eb416090 RCX: 00007f80eb19c819 [ 517.946577][T24496] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000009 [ 517.954646][T24496] RBP: 00007f80eb232c91 R08: 0000000000000000 R09: 0000000000000000 [ 517.962631][T24496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.970633][T24496] R13: 00007f80eb416128 R14: 00007f80eb416090 R15: 00007ffcded1ec28 [ 517.978730][T24496] [ 517.982142][T24496] Kernel Offset: disabled [ 517.986618][T24496] Rebooting in 86400 seconds..