last executing test programs: 5.40857248s ago: executing program 1 (id=5713): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x67}, {0xa, 0x0, 0x4, @mcast2, 0x7}, 0x0, {[0x0, 0xfffffffc, 0x0, 0x0, 0x89f, 0x2, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000014c0)={@ifindex, 0xffffffffffffffff, 0x31, 0x202c, 0x0, @void, @void, @value=0xffffffffffffffff}, 0x20) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000005280)=""/4105, 0x1009}, {&(0x7f00000003c0)=""/242, 0xf2}], 0x2}}, {{0x0, 0x0, 0x0}, 0x98fd}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/65, 0x41}, {&(0x7f0000002640)=""/254, 0xfe}], 0x3}, 0x101}, {{0x0, 0x0, 0x0}, 0x8000}], 0x4, 0x20, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) listen(r2, 0x3) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={r1}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r10, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 4.876347865s ago: executing program 1 (id=5721): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/98, 0x62}], 0x1, &(0x7f0000001640)=""/106, 0x6a}, 0x100}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001900)=""/206, 0xce}], 0x1}, 0x7}], 0x2, 0x12300, 0x0) close(r1) write$cgroup_devices(r0, &(0x7f0000000040)={'a', ' *:* ', 'rm\x00'}, 0x9) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000380)={0x0, 0x6, 0x3, 0x3, 0x2, 0x0, [{0x9, 0x0, 0x7, '\x00', 0x5000}, {0xffffffffffffffa6, 0x100000000, 0xeb, '\x00', 0xbcf1896a7129f4d4}]}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {0xffff, 0x3}, {0xe, 0xc}, {0x0, 0xffe0}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x0, 0x7, 0x4, 0x2, 0x2cf, 0x8d2}}, {0x4}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x34008098) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.640285922s ago: executing program 1 (id=5724): epoll_create1(0x80000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000100180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$tipc(0x1e, 0x5, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)=0x7ffd) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7a}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.085495422s ago: executing program 3 (id=5731): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa00000000000000008cf4a453096f5ae800000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x12) 4.003688964s ago: executing program 2 (id=5733): select(0x300, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000009e40)=@ipv6_newrule={0x38, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x80}, [@FRA_DST={0x14, 0x1, @private0}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0x7}]}, 0x38}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) read$alg(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0xf4}, 0x1, 0x0, 0x0, 0x4004004}, 0x10) 3.930128377s ago: executing program 3 (id=5734): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b004e"], 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x1) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES16=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x70}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xda01}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x4) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x2, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r9, {0xffe0, 0xfff3}, {0xffff, 0xd}, {0x10, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0xffffffffffffff49}, 0x1, 0x0, 0x0, 0x40000041}, 0x200088d0) socket$inet6(0xa, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x63, &(0x7f00000001c0)={'ah\x00'}, &(0x7f0000000200)=0x1e) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)=@newtfilter={0x2784, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2750, 0x2, [@TCA_MATCHALL_ACT={0x274c, 0x2, [@m_csum={0x1a0, 0x4, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x10000000, 0x2}, 0x70}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0x5, 0x20000001, 0x9, 0xfff}, 0x64}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x8da, 0x4, 0x6dfa}, 0x29}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x1ff, 0x4, 0xfffffffe}, 0x5e}}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_police={0x235c, 0x1d, 0x0, 0x0, {{0xb}, {0x2240, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffa}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x10000000, 0x5, 0x4, 0xfffffc8e, {0x0, 0x1, 0x5, 0x1, 0x2, 0x5b3}, {0x7, 0x1, 0x4, 0x1, 0xf0, 0x1}, 0x6, 0xfffffffa, 0x2}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x200}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7f}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x4, 0x40, 0x80000000, 0x77c273c7, 0xfffffffc, 0x7, 0xa62, 0x2, 0x2a9, 0x1, 0xc1d7, 0x0, 0x3, 0x1, 0x4, 0x9, 0x0, 0x7, 0x3, 0x2, 0x1fe, 0x8, 0x440, 0x3, 0x0, 0x2, 0x8, 0x3, 0x4, 0x8, 0x2, 0x21a7, 0x6, 0x5, 0x1a2b, 0x4, 0x289210d3, 0x8, 0x2, 0x0, 0x3, 0x9, 0x6, 0x3ff, 0x2, 0x8001, 0x2, 0x375b, 0x5, 0x8ce5, 0x8001, 0x7, 0x7, 0x7, 0x2, 0x3, 0x5, 0x8, 0xa, 0x404000, 0x7, 0x7, 0x3, 0xe, 0x5b7, 0x6, 0x4, 0xffffffff, 0xfffffff7, 0x8, 0xc88, 0x3, 0x8, 0x2, 0xffffffff, 0x8, 0x6, 0x8, 0x5, 0x8, 0x10000, 0x7, 0x1, 0xc4, 0x6, 0x5, 0x7fff, 0x3, 0x2, 0x4, 0x0, 0xfffffffe, 0x0, 0x6, 0x4, 0x3, 0xff, 0x3, 0x9, 0xc, 0xffffffff, 0xc51, 0x6, 0x37ee, 0x0, 0xfffffffd, 0x9, 0x6, 0xe659, 0x4, 0x567b, 0x5, 0x2, 0x0, 0x2, 0x1, 0x8001, 0x3, 0xe43b, 0x8001, 0x5717, 0x80000000, 0xd81, 0x1da, 0x5, 0x4, 0x200, 0x6df, 0xfffff0fc, 0x9, 0x6, 0x8, 0x401, 0x4, 0x5, 0x6, 0x4, 0xdee, 0xfffffffe, 0x8001, 0x7, 0x4, 0x40, 0x1, 0x2, 0x2, 0x9, 0x8, 0xfffffffa, 0x400, 0x8, 0x6, 0x3, 0x9, 0x8001, 0x5, 0x5, 0x101, 0x1, 0xcb3, 0xda, 0x8, 0x1, 0x0, 0x21, 0xb, 0xbbb, 0x80, 0x3, 0x9, 0x57ac, 0x401, 0x6, 0xa, 0x4, 0x1ff, 0x4, 0xe9b, 0x4, 0x9cb0, 0x1, 0x7fff, 0x0, 0x2, 0x1000, 0x8, 0x2000, 0x28b9b46c, 0x5, 0x7f, 0x5, 0x3, 0x1, 0x9, 0xd, 0xfff, 0x1, 0x1, 0x101, 0x8, 0x8, 0x7, 0xffffffff, 0x4, 0xfffffffc, 0x2, 0x80000001, 0x7, 0x9, 0xe, 0x7f, 0x4, 0xeb, 0x7, 0xc6, 0x2, 0x6, 0x4, 0xe1e8, 0x4, 0x9, 0xf, 0x209, 0xc, 0x400, 0x0, 0x0, 0x2b5, 0x4, 0xe2, 0x80000001, 0x7a46, 0x2, 0x8, 0x8b2, 0x1, 0x101, 0x2, 0x307a4828, 0xaf, 0xffffaa7a, 0x3, 0x6, 0xfff, 0x10000, 0x80, 0x2, 0x6, 0x101, 0x8, 0xc5, 0x5, 0x9, 0x26, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40, 0x7, 0x33, 0x2f, 0x7, 0x6, 0x400, 0x8000, 0x5, 0x3, 0x0, 0x9, 0x2, 0xb, 0x69fb, 0x2, 0xd5c, 0xa06, 0x5bc9a2ad, 0xe9, 0x8, 0x0, 0x9, 0x5, 0x7, 0x8, 0x80, 0x7, 0xa, 0x2, 0x7, 0x8, 0x4, 0x9, 0x386f, 0x2, 0x3, 0x5, 0x8, 0x1, 0x43f9, 0x3ff, 0x4, 0x10, 0x7, 0x1ff, 0x6, 0x2, 0x3, 0xfbe, 0x7f, 0x7, 0x0, 0x7f15af60, 0xffffffff, 0x1f7d, 0x5, 0xfffffff1, 0x0, 0x6, 0x4, 0x3, 0x0, 0x3, 0x1, 0x9, 0xfff, 0x9, 0xb5, 0x9, 0x7, 0x200, 0x8, 0xc, 0x2, 0x10, 0xca, 0x1, 0xfffffff8, 0x0, 0x0, 0xf1, 0xb, 0x7, 0xd, 0x3ff, 0x8, 0x5, 0xa, 0x7, 0x2, 0x9, 0x1, 0x10000, 0x4, 0x7ff, 0xe, 0xc11, 0x5322, 0xfffffff9, 0x1, 0x8, 0xd, 0x7fff, 0x8, 0x5, 0x700, 0x0, 0x82, 0x80000001, 0x3, 0xfffffff8, 0x824, 0x58388bc5, 0xff, 0x5, 0x32b31c51, 0xc18, 0x68ba7d93, 0x1c0, 0x0, 0x4f82, 0x8, 0x10000, 0x3, 0xfde1, 0x101, 0x36a, 0xfffffffd, 0x7, 0xc424, 0x1, 0x5, 0x4, 0x8, 0x80000001, 0x2, 0x8, 0x1, 0xc0000000, 0x5, 0x4, 0x4, 0x2, 0x2, 0x4, 0x540, 0x5, 0x9, 0xc, 0xe6d, 0xa, 0x3ff, 0x2, 0x5, 0x1, 0x80, 0x8c9, 0x10, 0x9, 0xa, 0xe0, 0x7d7, 0x401, 0x0, 0x2, 0x3, 0xf4d1, 0x14, 0x4, 0x5, 0x8, 0x3, 0xcc9, 0x100, 0x7, 0x1, 0x5, 0xffff, 0x7, 0x4, 0x5, 0xfffffffe, 0x80, 0x1, 0xd3, 0x0, 0x1000, 0x9, 0xc3, 0x0, 0x0, 0x4, 0x0, 0x296, 0x7, 0x4, 0x0, 0x100, 0x7fffffff, 0x3, 0x4, 0x0, 0x24000000, 0x8f, 0x3, 0x0, 0x1, 0x0, 0x9, 0x4, 0x9, 0x0, 0x9, 0x7fff, 0x3, 0x56, 0x40, 0xb2, 0x9, 0x2ebc, 0x6, 0x1, 0x81, 0x1, 0x3, 0x81, 0x7f, 0x2981, 0x400, 0x800, 0xffff, 0x3, 0xfffffffa, 0x8001, 0xac1e, 0x1, 0x80000000, 0x7, 0x9, 0x7, 0x5, 0x8, 0x48000000, 0x1, 0x8cb, 0xb, 0xfffffbff, 0xf, 0x0, 0xfffffffc, 0x1, 0x6, 0x9f51, 0x80000000, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff9, 0x800, 0x9, 0x1, 0xffff8928, 0x2, 0x0, 0x3, 0x0, 0x9, 0xffff, 0x7, 0x10000, 0x100, 0x7, 0xc0000, 0xfffffff8, 0x6, 0x8c, 0x0, 0x4, 0x401, 0x929f613, 0x1, 0x6, 0xfffffffd, 0x6, 0x6, 0xb97, 0x1ff, 0x7, 0x3, 0xfff, 0xffffffff, 0x8b, 0x0, 0xfdc5, 0xffff3bdf, 0xffffe000, 0x71, 0x2, 0x7, 0x3, 0x6, 0x81, 0x4, 0x3, 0x6, 0x7fffffff, 0xa, 0x7f, 0x7f, 0x40, 0x6, 0x0, 0x5, 0x1, 0x9, 0xaf, 0x6, 0x7d5f, 0x5, 0x5, 0x8, 0x549, 0x3, 0x800, 0x7, 0xa9, 0x9, 0x1, 0x82f1, 0x4, 0x7, 0x8000, 0x8, 0xfdb, 0x9, 0x101, 0xffff, 0x6, 0x1, 0x3, 0x2fe, 0x7, 0x1, 0x1, 0x1, 0x10000, 0x1000, 0x6, 0x1, 0x3, 0x7e, 0x4, 0xfffffffa, 0x3, 0x0, 0xd, 0xffffffff, 0x7, 0x777, 0x6, 0xf, 0x8001, 0x5, 0x1, 0x2, 0x2, 0xf, 0x7ff, 0x80, 0x200, 0x6, 0x4, 0x3, 0x80000000, 0x8, 0x0, 0x2, 0xeafc, 0x1f19, 0x1, 0x7, 0x2, 0xf2b, 0x6, 0xffffa084, 0x7ab1, 0x5, 0xfd, 0x3, 0x0, 0x400, 0x3, 0x8, 0x7, 0x9, 0x8, 0x2, 0x7, 0x7f, 0x100, 0x2, 0x4, 0x4, 0x80, 0x4, 0x3, 0x2, 0x6, 0x5, 0xf, 0x3, 0x0, 0x1, 0x9, 0x5, 0x3, 0xb, 0x80a5, 0x8, 0xb5b, 0x9, 0x0, 0xfd5e, 0x9, 0x1, 0xb, 0xf, 0xd, 0x8, 0x3a6c, 0x6, 0x0, 0x3, 0x81, 0x7, 0x0, 0x5, 0x5, 0x8, 0x3, 0x1, 0x3, 0x40, 0x401, 0x8, 0x0, 0xffffffff, 0x0, 0x1, 0xb4, 0xd4, 0x181b267b, 0xfffffff7, 0x8, 0x69, 0xdf6, 0x8, 0x3, 0x5, 0x1, 0x2, 0x7fffffff, 0xa, 0x3ff, 0x7fffffff, 0x2a, 0x81, 0xfffffff8, 0x6, 0x2, 0x8, 0xfffff801, 0xc, 0xf, 0x1, 0x6, 0x6, 0xf, 0x3, 0x6, 0x8000, 0x1, 0x4, 0x315, 0x4, 0x8, 0x9, 0x4, 0xb8c, 0x5ba76b7c, 0x0, 0x81, 0x8, 0x5, 0x6, 0x1f800000, 0x6, 0x0, 0x6, 0xff, 0x3, 0x5, 0x4, 0x3, 0x4, 0x6, 0x9, 0x4, 0xdc, 0x2, 0x1, 0x0, 0x7ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x5, 0x8, 0x3865, 0x0, 0x1, 0x0, 0x9, 0x3ff, 0x7, 0x8000, 0x2, 0xd565, 0x3, 0x2, 0x5, 0x9, 0x4, 0xd, 0x219, 0x10000, 0x7, 0xff, 0xfffffff7, 0x405, 0x8, 0x1, 0x0, 0x5, 0x9, 0x8000, 0x5, 0xc, 0x39b, 0x9, 0x9, 0xa, 0x9a, 0x4, 0xffffffff, 0xaa1, 0x9, 0xc, 0x7, 0x7, 0x6, 0x7, 0x90, 0xffffff97, 0xa0, 0x7fffffff, 0xadc, 0x1, 0x10000, 0x6, 0x2, 0x9, 0x7, 0x5, 0x3, 0x5, 0x2, 0x0, 0x1, 0xc5, 0x1, 0x6, 0x5, 0x0, 0xee, 0x4, 0x4, 0x7, 0x59, 0x81, 0x5, 0x8, 0x1, 0x2, 0x3, 0xffff, 0x0, 0x101, 0xffff8000, 0x5, 0x0, 0x7, 0x10, 0x4, 0x2, 0x9, 0xa62b, 0x10001, 0x5, 0x2, 0x81, 0x5, 0x7, 0x4, 0x2, 0x6, 0x80000000, 0x2, 0xf2e7, 0x7, 0x7, 0x7, 0x539, 0x3, 0xe1, 0x80000001, 0x3, 0x200, 0xff, 0x3e840512, 0x400, 0xf, 0x1, 0x10000, 0xd24, 0x0, 0x4, 0x3c91, 0x81, 0x7, 0x20000000, 0x7f, 0x0, 0xe4bb, 0x7, 0x0, 0x9, 0xad, 0x1ff, 0x27, 0x1f6, 0xfffffffc, 0xd, 0x0, 0x2, 0x10, 0x6, 0x5, 0x6, 0x5, 0xb6, 0x4, 0x6, 0x9, 0x80000001, 0x9, 0x76, 0x100, 0x1000, 0x8001, 0x9, 0x9, 0xfffffff8, 0xff, 0x8, 0x1693057, 0x3, 0xffff, 0x9, 0x71ed, 0xffff, 0x8001, 0x800, 0x8, 0x2, 0x6, 0xa, 0xf, 0x6, 0x4, 0x5, 0x8001, 0x3266ad70, 0x7, 0x8, 0x80, 0x6, 0x5, 0x1, 0x2, 0x7ff, 0x6, 0x5, 0x0, 0x6, 0x9, 0x1, 0xa, 0x3, 0x9, 0x200, 0x81, 0x2, 0x7, 0xff, 0x5, 0x9, 0x1, 0x100, 0x788, 0x101, 0x42, 0xc, 0x5, 0x8, 0xce0, 0xb0c00000, 0x8000, 0x3, 0x6, 0x1fd, 0x9, 0x8, 0x44, 0x6, 0x1, 0x1, 0xffffffff, 0x7, 0xfffffff8, 0x7ff, 0x8, 0x1, 0x6, 0x7ff, 0xd36, 0xff, 0x2, 0xd, 0xe, 0x7, 0x6, 0x4, 0x7ff, 0xd9, 0x10000, 0x6, 0x6, 0xd, 0x3, 0x10000, 0x7, 0x6e, 0x8, 0xa2, 0xfff, 0x4, 0x45, 0x9, 0x7, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x5e, 0x4, 0x200, 0x200, 0xc, 0x4, 0x1, 0x3, 0xfffffffa, 0x1c2cf3cc, 0xe13a, 0xfffffffd, 0x79d, 0x3, 0x4, 0x1000, 0x3, 0x5, 0x9, 0x7, 0x0, 0xffff, 0x6, 0x69, 0x3, 0x0, 0x111, 0x5, 0x6, 0x1, 0x6, 0x62, 0x9, 0xfff, 0xffffffff, 0xed, 0x2f9c, 0x100, 0x1, 0x8248, 0x4, 0x2, 0x5, 0x200, 0x0, 0x200000, 0x1, 0x4c5, 0x7, 0x10000, 0x0, 0x3, 0x5, 0x6, 0x8, 0x9, 0x7, 0x7, 0x2, 0x6, 0x8, 0x7, 0xb553, 0x10001, 0x4, 0x6, 0x7ff, 0x8, 0x10000, 0x1, 0x7, 0x5, 0x2, 0x493, 0x639, 0xa1, 0x3, 0x4, 0xb67, 0x1a6000, 0x0, 0x4, 0x8, 0x9, 0xf, 0x2, 0x7, 0x2b71, 0x4f, 0xe9, 0x4, 0xfffff800, 0x9, 0x10000, 0xc0000000, 0xd93e, 0x6, 0x21, 0x9, 0x4, 0x5, 0x3, 0x4, 0x380, 0x6, 0x800, 0x0, 0x1, 0x8, 0x0, 0x7d2, 0x4, 0x3, 0x1, 0x9, 0x6, 0x9, 0x7, 0xd, 0x5, 0x5, 0xe, 0x1, 0xff, 0x10000, 0x3, 0x1, 0x0, 0x4, 0x100, 0x80, 0xc, 0x5e5, 0x3, 0x9, 0x5, 0xc8c, 0x106d378f, 0x5, 0x6, 0x13, 0x6, 0x80000001, 0x5, 0x63e0000, 0x80, 0x60a8, 0x10000, 0x5, 0xe, 0xf0000000, 0x8, 0x1ff, 0x7, 0x5, 0xa, 0x800000, 0x1, 0x3741, 0x9, 0x9, 0x3, 0x4, 0x4, 0x8, 0x7, 0x87, 0x0, 0x80000000, 0x2, 0xff, 0x7ff, 0x200, 0x3, 0x10000, 0x480c9c54, 0x2, 0xfffffff9, 0x5ab, 0x20, 0xa, 0x7, 0x7, 0xc, 0x10, 0x4, 0x0, 0xc, 0x6, 0x7, 0x9, 0x6, 0x6, 0x3, 0x1, 0x2, 0x0, 0x4, 0x2, 0x9, 0x2, 0x8, 0x1, 0x9, 0x1, 0x6, 0x152, 0xffffffff, 0xffff, 0x4, 0xe592, 0x7, 0x414, 0x8, 0x3, 0xfffffff7, 0x7, 0x0, 0x1, 0x9, 0x3, 0x340, 0x6, 0x5, 0xd740, 0x1, 0x400, 0x0, 0xffffffff, 0x4, 0x8, 0x3, 0x3, 0x1, 0x3, 0xfffffffd, 0x2, 0xfff, 0xad, 0x7, 0x2, 0x498d, 0x1, 0x8, 0x5, 0x4, 0x4, 0x4, 0x2a36, 0x9, 0x8001, 0xdec2, 0x5, 0xffff0000, 0xfffffffe]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xec7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffe}, @TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0x8, 0x7, 0xb, 0x80000001, {0x7a, 0x0, 0x0, 0x1, 0x6, 0x3}, {0x84, 0x1, 0x0, 0x9, 0x6, 0x93}, 0x3957, 0x4bb, 0x6}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x6, 0x6, 0x3, 0x272004c3, {0x6, 0x0, 0x9, 0xfff7, 0x5, 0xf}, {0x8, 0x2, 0xffff, 0x2, 0x101, 0xc}, 0x7, 0x270d, 0x7}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x20000000, 0x8, 0x9, 0xfffffffc, {0x2, 0x1, 0x0, 0x5, 0x9, 0xc0}, {0x57, 0x2, 0x8, 0x8, 0x0, 0x8}, 0x101, 0x6, 0x6d5}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400, 0x2, 0x80000001, 0x5, 0x8, 0x2, 0xc, 0xb, 0xffffffff, 0x7, 0x2, 0x8, 0x1, 0x6, 0x3, 0x7f, 0x3ea7, 0x1, 0x22, 0x9, 0x5, 0x6, 0x7, 0xc1, 0x9, 0xc, 0x80, 0x4, 0x9, 0x8001, 0x9, 0x5, 0x8, 0xfe21, 0x9, 0xc5, 0x4e, 0x3, 0x4, 0x5, 0x6, 0xffffff6e, 0x6d, 0x3, 0xb, 0x3, 0x3, 0x51, 0xb00, 0x6, 0x4, 0x9, 0xa, 0xc90, 0x9, 0x3, 0x8, 0x3, 0x6, 0xea, 0x2, 0x2, 0x1, 0xcd7d, 0x100, 0x3, 0x6, 0xfffff523, 0xa, 0x10000, 0x8001, 0xa0b0, 0x3, 0x6, 0xa, 0x3385, 0x100, 0x5, 0xb, 0x1000, 0xd37e, 0x7a2, 0x5, 0x9, 0x9, 0x5, 0x1, 0x4, 0x1, 0x3, 0x2, 0x400, 0x1, 0xe1e, 0x3, 0x400, 0x6, 0x4, 0x3, 0x6, 0x8, 0x7fffffff, 0x0, 0x4, 0x2, 0x2, 0x0, 0x7ff, 0xbea4, 0xf7b41fe, 0x2, 0x46, 0x99, 0x2, 0x5, 0xfffffffc, 0x1, 0xf1, 0x8, 0x9, 0x800, 0xfffffffb, 0x5, 0x30, 0x8, 0x10, 0x10000, 0x6, 0x8001, 0x2, 0x10000, 0x100, 0x9, 0xdc, 0x8, 0xfffffffd, 0x3, 0x6, 0x5, 0x40, 0x101, 0x43c8, 0x3, 0x2, 0x2, 0x4, 0x9, 0xbe22, 0x141e, 0x9, 0xfff, 0x0, 0x5, 0x9, 0x5, 0x4, 0x8, 0x10001, 0x6, 0x604, 0x57d8d48f, 0xb, 0x6, 0x6, 0x0, 0x8, 0x9, 0x5, 0x8, 0x10, 0x8, 0x4, 0x81, 0xd50b, 0x8, 0x0, 0x2, 0xffff7d14, 0x1, 0x200, 0x81, 0x10000, 0x3, 0x55a, 0x0, 0x8, 0xffffffff, 0x80000000, 0x92, 0x4, 0x2, 0x4, 0x3, 0x1, 0x1ba, 0x9, 0x180000, 0x2, 0x84c, 0xfffffff4, 0x10be5a79, 0x0, 0x8, 0x9, 0x3, 0x6c062249, 0x5, 0x4, 0x9, 0x7, 0xc1, 0x0, 0x4811bf2b, 0xdb0, 0x5, 0x3, 0x6, 0x43, 0x50, 0xcd, 0x1ff, 0xa, 0x0, 0x4, 0x4, 0x40, 0x3, 0x1, 0xb, 0x8000, 0x1, 0x9, 0xf, 0xfffffff8, 0x3, 0x652e9a39, 0x80, 0x1, 0x5, 0x8, 0x6, 0x1, 0x5, 0x64, 0x6, 0x401, 0xfffffffc, 0x3, 0x400, 0x5, 0x10001, 0x9, 0x4, 0xb86f, 0x7, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9302}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x9, 0x3, 0x6, 0x10000, 0x3, 0x81, 0x7, 0x1, 0x5, 0x4, 0xff, 0xc, 0x7, 0x0, 0xb, 0x6c7c, 0xfff, 0x4, 0x4, 0x80, 0x0, 0x3, 0x401, 0x9, 0x1, 0x0, 0xcb, 0x651, 0x7, 0x5a9, 0x0, 0x3, 0x1, 0x1, 0x81, 0x10001, 0x5, 0x9, 0x9, 0x6, 0x1ff, 0x1, 0x400, 0x6, 0x4, 0x100, 0x9, 0x8, 0xffffffff, 0x1ff0000, 0x5, 0x7, 0x7, 0xfffffffb, 0x10000, 0x9, 0x4, 0x3, 0x2, 0x2, 0x0, 0x0, 0x9, 0xac, 0x2, 0x2, 0x81, 0xe, 0x5, 0x0, 0x7f, 0x11, 0x6, 0x7, 0x7ff, 0xfffffff5, 0x7, 0xffffffff, 0x0, 0x6, 0x3c7, 0x9, 0x10001, 0x5, 0xd646, 0x507, 0x3, 0x4, 0x1ff, 0x100, 0x4, 0x8000004, 0x3, 0x4, 0x8aed, 0x6, 0x10001, 0x2, 0x0, 0x1, 0x260, 0x0, 0x75, 0xf05, 0xfffffffc, 0x8000, 0x830, 0xe6c, 0x3, 0x40, 0x1, 0x2, 0x0, 0xfffffffd, 0x612, 0x6, 0x3, 0x3, 0x3dd, 0x401, 0x1, 0x7, 0x200, 0x80, 0x8, 0x6, 0xc, 0xb, 0x7, 0x800, 0x180000, 0x6, 0x4d1, 0x61d0fd2e, 0x5, 0x8, 0x1, 0x9, 0xffff9e39, 0x2, 0x858, 0xffff0000, 0x2, 0xb, 0xc3, 0x0, 0xfffffffe, 0xd11, 0x1, 0x8833, 0x3595, 0xfffffff9, 0xfffffffa, 0x2, 0xbee5, 0xe, 0x7, 0x4, 0x9, 0x8, 0x4e79, 0x3, 0x101, 0x7, 0x101, 0x80000000, 0x4, 0x2, 0x6, 0x49db, 0x3, 0x3, 0x5, 0x2, 0x60, 0xff, 0x3, 0x0, 0x4ef3, 0x1, 0x6, 0x9, 0x400, 0x1, 0xd, 0x81, 0x3, 0x1, 0x80000000, 0xfffffffe, 0x81, 0x737, 0x0, 0x8000, 0xca3, 0x8001, 0xfe1f, 0x2, 0xb2, 0x3ff, 0x4, 0x6, 0x9, 0x8, 0x7f, 0x1, 0x2, 0x8001, 0x7f8000, 0xb, 0x8, 0xdfc5, 0x4f01, 0xd, 0x9, 0xffff, 0x3, 0x5, 0x7ff, 0x8, 0x9, 0x3, 0x101, 0x0, 0x3, 0x1, 0x80, 0x80000001, 0x7, 0xffff, 0x6, 0x0, 0x5, 0x1, 0x2, 0x1, 0x3, 0x2, 0x5, 0x3, 0x5, 0x3, 0x3, 0x7f, 0x57, 0x9, 0x5e80000, 0xfffffffa, 0x3, 0x0, 0x4, 0x401, 0x4, 0x1ff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3ff}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x484012ef, 0x7ff, 0x7, 0x9, 0xfffffffc, 0x8, 0x81, 0x6, 0xda7, 0xffff, 0x7fffffff, 0x0, 0x4, 0xc53, 0x8000, 0x1, 0x8, 0x0, 0x80000000, 0x800, 0x8001, 0xa, 0xf8a2, 0x3b, 0x8, 0x1, 0xfff, 0xd17, 0xff, 0x8, 0xc89, 0x7f, 0x2, 0x327, 0xfe4, 0x4, 0x6, 0xff, 0x1, 0x4, 0x5, 0x3ff, 0x4, 0x8, 0x7, 0x0, 0x80, 0xfffffffa, 0x45, 0x8, 0x8, 0x4, 0x5, 0x0, 0x2, 0x9, 0x7, 0x7, 0x5, 0x0, 0xff, 0x4, 0x8, 0x9, 0x81, 0x5, 0x0, 0x3ff, 0x1, 0x2, 0x3, 0x400, 0x0, 0x5, 0x6, 0x6cc5, 0x4e97bba9, 0x5, 0x5, 0x4, 0x800, 0x5, 0x1, 0x1, 0x5, 0xdc, 0x317, 0xb158, 0x1, 0x8, 0x4, 0x1, 0x1ff, 0x1, 0x99cf, 0x4, 0x6, 0x2, 0x81, 0x3, 0x1, 0x4, 0x200, 0x1, 0x11c, 0xffff, 0x5, 0x7, 0xfffffff5, 0x2, 0x2, 0x9, 0x3, 0x8001, 0xa, 0x2, 0x401, 0x47, 0x5, 0x40, 0xffffffff, 0x5, 0x1ff, 0x2, 0x7, 0xb, 0x2, 0x6, 0x401, 0x4, 0x7f, 0xfffffff7, 0x80000000, 0x7, 0x9, 0x6, 0x6, 0x705, 0x7, 0x401, 0x5, 0x3, 0x8001, 0xfffffff0, 0x0, 0x0, 0x5, 0x47bfe047, 0x4, 0x5, 0x1, 0x6, 0x1, 0x8, 0x1, 0x4, 0x9, 0x80, 0x8, 0xfffffff1, 0xc, 0xa0a, 0x4, 0x4, 0x5, 0x9f95, 0x6, 0x1, 0x4, 0x400, 0xfffffffe, 0xbb28, 0x8, 0x1, 0xd436, 0xffff, 0x1, 0x10, 0x7, 0xb, 0x6, 0x3, 0x7, 0x80000001, 0x443f6d21, 0x3, 0x11e, 0x3, 0x0, 0x80, 0x2, 0x0, 0xfff, 0x6, 0x7, 0xd, 0x101, 0x2, 0x4, 0x100, 0x8, 0x4, 0x64, 0x0, 0x1d1, 0x6, 0x3f8, 0x9, 0x1, 0xffffffff, 0x31800, 0xa, 0x6, 0x6, 0xe08e, 0xe6, 0x3, 0x8, 0x6, 0x100, 0x4, 0x6, 0x1, 0xff, 0x0, 0x0, 0x5, 0xb, 0xffffffff, 0x80000001, 0x4, 0x6, 0x9, 0x3c, 0x80000001, 0x5, 0x6, 0x1d4b, 0x3, 0x9, 0x101, 0x5f1b, 0xfff, 0x5, 0xb32, 0x7, 0xca4, 0x89, 0x10000, 0x58a2, 0x7f, 0x2, 0x1, 0x6, 0x9, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x5, 0x3fc0000, 0x3, 0x400, {0x2, 0x0, 0x8, 0x9ea2, 0x8, 0x6}, {0xf5, 0x2, 0x8929, 0x0, 0x200, 0x400}, 0x6, 0x526, 0x5}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x2, 0x4, 0x5, {0xf, 0x2, 0x3, 0x9, 0xdb, 0x7}, {0xb, 0x1, 0x6, 0x6, 0x108, 0x1000}, 0x100, 0x9ee}}]]}, {0xf4, 0x6, "95d48875c01a311e1837209bcef6d2022f125e861618b96d16310efe4032b78223e8ce2e888b760cb52fe650d610a5908d575c43d7ca28647d8504dce0951c2099b5ccd4f7f2a98efb14be6fda64d467cdb07a0ce9e7c72519243739b877586d6c0b6970fd48c822f25b548f041832787cd1da062a59b52e0d7f41895815ad7893b765a51a39ee04671819c5cfefa582ceb08f1f60dd1a67facdcd46eca7bbbb5d3f5a4b2f0ef1e5a0a9ef042f0395f99ff0c596e9405d71ee3286d74f25540f114eb1744e4809f2e375026e917def34ddb6ed6169280e64038b2e55b8463ae9d80d50bd220f1442e82474ba910d2611"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x114, 0x4, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8864}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8809}, @TCA_MPLS_PROTO={0x6, 0x4, 0x806}]}, {0xc0, 0x6, "7aa4864804b95f1dc445502a3af22b72bd36a7a1f52060352b43ab3a317d36eaa4c6e1382b2c31f76c41a4d9ba5a557fbd69444686f1383cf94424cdf0a448b3686c1b5b7db3c4f18d8c6baf1e8ca6c31b43d529c3491b159c5efd5bd271ee932ad320f0bc3f73f0bb93c678acab06e8ab0c8e0476aec9c022f18e46ffa8f3d7a4252cb118e8f6228bc297e5b192301d282dc90a24f6b4bbb7dfc6aa497cad14d85c776f06b2ea6e99a8efac54021c5b8234bb547fd0f68790e24a8f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0x138, 0x12, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x143d}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x8, 0x3, 0x4, 0xf}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x120d, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x12c0}}]}, {0xce, 0x6, "50a068a5bbcdac31ee70f83b13cfe48b43593fa7113634bf30014504281d82e24cd80944ba3813ad4e0a59a83497e05cc6fc3776f57328da06611d088fe1423df4cc9571595d21e42367b6092e956fb643273cffea80358541478fda139b378a676ee50b2797150ea62abd5bae6ea6cbd8023bdb62f402fb2c24bf838365f02780a8e079cf19517f05214f2e89d021e82a096ca9dc07050a726e76f2d593a0a2e900b2b2b26b8d32607c2fe97b493aa7a70a2293df34380136302cabec82067308b4502f9cbe0e84c5c5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x2784}, 0x1, 0x0, 0x0, 0x10}, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r13) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$unix(0x1, 0x2, 0x0) 3.802297577s ago: executing program 2 (id=5736): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b000100746172676574000058000280400003009b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a619b2ffcd000000000000000000000001000000000000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x111, 0x4b4, 0x0, 0x700, 0x2d8, 0x278, 0x278, 0x2d8, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x84, 0x0, 0x0, 0x4}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @common=@unspec=@connmark={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x5, 'snmp\x00', 'syz0\x00'}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0x0, 0xff, 0xff000000], [], 'geneve1\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x2, 0x80000000}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x800}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x28, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20048000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000b40)={'wpan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000e40)={0x38, r7, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008894}, 0x44010) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x58, r7, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x6}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_OPT={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040080}, 0x4800) clock_gettime(0x0, 0x0) 3.67409854s ago: executing program 3 (id=5740): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001140)=[@rdma_args={0x48, 0x114, 0x1, {{0x48, 0x3}, {&(0x7f0000001200)=""/157, 0x9d}, &(0x7f0000001080)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1, 0x4, 0x2}}, @rdma_args={0x48, 0x114, 0x1, {{0x0, 0x7}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90, 0x4000}, 0x0) (async, rerun: 32) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) r3 = socket$kcm(0xa, 0x1, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000f00e8ffffff0500c400000000", @ANYRES16=r3], 0x48) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r5}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r4}) (async, rerun: 32) r6 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 32) sendmmsg$inet6(r6, &(0x7f0000001680)=[{{&(0x7f0000000e80)={0xa, 0x4e21, 0x5, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000001400)=[@dstopts={{0x18, 0x29, 0x37, {0x89}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}], 0x60}}], 0x1, 0x4) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000000101040000000000000000020000002400018014000180080001"], 0x80}}, 0x0) (rerun: 32) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x4000010, r7, 0x15e45000) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01e3170000000000000008ebcfee4e0168e5"], &(0x7f0000001f80)=""/212, 0x32, 0xd4, 0xa, 0x2}, 0x28) (async, rerun: 64) socket$netlink(0x10, 0x3, 0xc) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x4000010d02, 0x5) readv(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) (rerun: 64) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xffffffffffffffaf}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @loopback}}}], 0x20}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000001040)={0x1, 'nr0\x00', {}, 0xcf}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$SIOCPNDELRESOURCE(r9, 0x89ef, &(0x7f0000001000)=0x800) 3.515463035s ago: executing program 2 (id=5742): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000001c0)=0x201454, 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) pselect6(0x40, &(0x7f00000000c0)={0xa, 0x80000001, 0x2, 0x10000000000006, 0xe, 0x7b91, 0x4252, 0x20000003}, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x14, 0x1, 0x0, 0x0, {0x1}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "000000000000a5c3e0bf000000"}]}, 0x28}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x94, 0x0, 0x0, 0xffffff81}, {0x6}]}, 0x10) 3.438805292s ago: executing program 3 (id=5743): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) syz_emit_ethernet(0x56, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{}, {}, {0xe, 0x1, "24fcaa8fc05a"}]}}}}}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYRES64=r1, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xdf, &(0x7f0000001400)=""/223, 0x40f00, 0x3, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffeb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r2}, &(0x7f0000000040), &(0x7f0000000b80)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x10000008ebc, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, r4, 0x3, 0x3, 0x1}, 0x50) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x7800}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x518) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0xe}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x33, 0x0, @rand_addr=' \x01\x00', @local, {[@routing={0x84, 0x2, 0x2, 0x1, 0x0, [@mcast2]}]}}}}}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000340)='GPL\x00', 0xb, 0xb9, &(0x7f0000000380)=""/185, 0x41100, 0x20, '\x00', r8, 0x0, r4, 0x8, &(0x7f0000000480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0xc, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r5, r5, r9, r4, r5], 0x0, 0x10, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1c, 0x2, &(0x7f00000000c0)=@raw=[@map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}], 0x0, 0xcbc6, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r11 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_opts(r11, 0x29, 0x48, &(0x7f0000000000)=@srh={0x3a, 0x8, 0x4, 0x4, 0xf7, 0x40, 0x4, [@private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote]}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a80)={&(0x7f0000000a40)='rpcgss_svc_seqno_low\x00', r5, 0x0, 0x8}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4) unshare(0x600) r12 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r12, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r13) 3.304454212s ago: executing program 1 (id=5744): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0x0, 0x0, 0x8, 0x6, 0x0, @remote, @local}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8000, 0x0, 0xfffc}}}}}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000100000022bf"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f00000002c0), 0xffffd6c0, r2}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) sendto$inet6(r6, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x3f0, 0x2a0, 0x700001b, 0x148, 0x2a0, 0x148, 0x358, 0x206, 0x240, 0x358, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x280, 0x2a0, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'nr0\x00', {0x5, 0xff9, 0x69, 0x17, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@unspec=@string={{0xc0}, {0xf5, 0x8, 'kmp\x00', "9c7433923e8af806c7a21e5441a3a7794060bf608e69163e4ce230b366a4b4c37f15d90ba54c7234f19985f0cb67f0b40ca8ef2ec82d3dbbf81238fa075649764eb1600da7e7b703d2e1d23df317058a582d2bbf82de04509515836e70cb2b5bc51d53d01124e133ebd3bde08554b5da2a74f6e0b55e5888cd620b4179c4739e", 0x7d, 0x1, {0x9}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8000, 0x1000, 0x2, 'syz0\x00', {0x2000000000000009}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) read(r3, &(0x7f0000001bc0)=""/55, 0x37) socket$nl_netfilter(0x10, 0x3, 0xc) 2.750058047s ago: executing program 0 (id=5746): syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r0, 0x215, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x819) (async) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r0, 0x215, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x819) r1 = socket$inet_smc(0x2b, 0x1, 0x0) socket(0x1d, 0x80000, 0x200) (async) r2 = socket(0x1d, 0x80000, 0x200) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x138, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TESTDATA={0xb1, 0x45, "7b5f2f91ffac4058b01b9f69a0720b7a95407b66d2b6fded041c247f4e5882904e7d276897d9a2dbce28cb250f475660b70052025eee1b8890c9d6496d52ecd68ea11c185ef1fe496adccbf93e0140ae150eceff20eff18c0717b85869d8ff472ab4fdaae14bc4440182fb6c69b5817bf0c1de5f94c9fe10a65921f306bfaafcce1a9d9ff298e42bd4e4580ea1cfcbb5608591990a821df31adcfaf58615a519aaa8889c4838f2a9b6636428bb"}, @NL80211_ATTR_TESTDATA={0x65, 0x45, "fce915ea8f425d2795ce832509451c069f383f753ef55b1ee8f4a169aa44650beccb0297a75117e6b3121911e4bc9f09ac68e0486d7fd06367f748f083653f22957449fa3db9801a0a226481670e3fb0664d87d48da04c2c2fe319f12623fa0359"}]}, 0x138}, 0x1, 0x0, 0x0, 0x8000}, 0x80) syz_genetlink_get_family_id$gtp(&(0x7f0000000400), r2) (async) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), r2) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/mnt\x00') sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r4, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @GTPA_VERSION={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDR6={0x14, 0xc, @local}]}, 0x78}, 0x1, 0x0, 0x0, 0x81}, 0x4050) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000780)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='memory.events\x00', 0x0, 0x0) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0x54, 0x18}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0x1, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)}, 0x20) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a40)=@o_path={&(0x7f0000000a00)='./file0\x00', 0x0, 0x4008, r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x13, &(0x7f0000000580)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xa0}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @alu={0x4, 0x1, 0x4, 0x3, 0x1, 0x20, 0x8}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, @generic={0x0, 0x0, 0x8, 0x17d6, 0x1}, @exit], &(0x7f0000000640)='GPL\x00', 0x100, 0xf4, &(0x7f0000000680)=""/244, 0x40f00, 0x7, '\x00', r6, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x2, 0x7, 0x4, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[r8, 0x1, r9, r10, r11], 0x0, 0x10, 0x1}, 0x94) bind$bt_hci(r2, &(0x7f0000000b80)={0x1f, 0x4, 0x4}, 0x6) connect$inet6(r7, &(0x7f0000000bc0)={0xa, 0x4e23, 0xd8cf, @rand_addr=' \x01\x00', 0xa4f5}, 0x1c) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000c00)={@local, 0x3, 0x0, 0x2, 0x2, 0x80, 0xe90}, &(0x7f0000000c40)=0x20) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r13, &(0x7f0000000f00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x1e8, 0x0, 0xb00, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xfc, 0xc, 0x0, 0x1, [{0x4}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb812}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc49f630}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7811}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f865255}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3040}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c71cb69}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x428e6524}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5b61}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7caa}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f320b8e}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcbb8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd7b9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x881a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x693bf97b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e479016}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x453bd3e1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x42d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x26c4}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9686}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc43f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fd3e5b0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34e3e0b8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x31c5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd9d1}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b88e036}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec7e}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd0, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d94503c}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4831c007}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3698f61}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e63b09e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65c1f2ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa5291e4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3dcbfc9a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a5bc386}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x127080ac}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x184ca8af}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40004880}, 0x11) (async) sendmsg$NLBL_CIPSOV4_C_REMOVE(r13, &(0x7f0000000f00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x1e8, 0x0, 0xb00, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xfc, 0xc, 0x0, 0x1, [{0x4}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb812}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc49f630}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7811}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f865255}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3040}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c71cb69}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x428e6524}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5b61}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7caa}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f320b8e}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcbb8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd7b9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x881a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x693bf97b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e479016}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x453bd3e1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x42d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x26c4}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9686}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc43f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fd3e5b0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34e3e0b8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x31c5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd9d1}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b88e036}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec7e}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd0, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d94503c}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4831c007}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3698f61}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e63b09e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65c1f2ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa5291e4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3dcbfc9a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a5bc386}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x127080ac}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x184ca8af}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40004880}, 0x11) getsockopt$XDP_MMAP_OFFSETS(r7, 0x11b, 0x1, &(0x7f0000000f40), &(0x7f0000000fc0)=0x80) (async) getsockopt$XDP_MMAP_OFFSETS(r7, 0x11b, 0x1, &(0x7f0000000f40), &(0x7f0000000fc0)=0x80) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x50, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9e}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xd}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xf6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x80a0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x50, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9e}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xd}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xf6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x80a0) bind$alg(r7, &(0x7f0000001140)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(xchacha12-arm,sha3-256-generic)\x00'}, 0x58) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f00000012c0)={'veth0_macvtap\x00', &(0x7f00000011c0)=@ethtool_rxnfc={0x32, 0xe, 0x5, {0x7, @hdata="77467b867d55f2e35e67b2a777273f0508860de2067bbd482c99b12788a7ccb98e86d1067d1ccd802acc63809552f567e2ff6718", {0x0, @empty, 0x7, 0x6, [0x1, 0xffff]}, @sctp_ip4_spec={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x4e22, 0x1}, {0x0, @random="21c8fb1308bd", 0x6, 0x1933, [0x6, 0xf0a]}, 0x0, 0x1ff}, 0x6, [0xdfb, 0xfc, 0x0, 0x0, 0x7, 0x1c6]}}) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x10400802}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x20, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x800) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000001440), r7) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, r14, 0x204, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x44800) 2.482515151s ago: executing program 0 (id=5748): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x801, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa042, 0x41d2b}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0xffffffffffffff65, 0x1, {0x8, @multicast}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x1, 0x6c, 0x3, 0x5, 0x2, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x93}, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) pselect6(0x40, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x800, 0x0, 0x20840010100000}, 0x0, &(0x7f00000000c0)={0x1c, 0x40002, 0x1da, 0xfffffffffffffffc, 0x0, 0xeb, 0x6a9}, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 2.432093245s ago: executing program 3 (id=5749): socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f0000000000)={0x400, 0x8, 0x0, 0x4, 0x0, 0x2, 0x7fffffff, 0x5}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x80000) setsockopt(r5, 0x84, 0x7f, &(0x7f00000001c0), 0x0) recvmmsg(r5, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x19, 0x4, 0x1, 0x1, 0x64, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2e}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @ssrr={0x89, 0x13, 0x3e, [@loopback, @empty, @dev={0xac, 0x14, 0x14, 0x3e}, @loopback]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @ra={0x94, 0x4}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000796f7b8af8ff0000001bbfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095824ff3b23c78fc8d1decde22c9444484fc8d242aaa2147db9cbc50b8f6d379ca1b122136ef21fd5a7278dae89f261c4d52d5d74c2b182c1a99d7b4a9231763bfe13f20aa3305b0912dd066c5f3270c2f58bb305cf3a04ba8b92f4fba440b57276f62f00d22c0f3faadd2fc3a50ad420046357bbeff17a1961f426caddb07f12c569553cfa14167856d05d17e4acc3587c8d3516f96af0dcc3945f954be6e0e1121568215cf314844"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r6}, 0x18) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 2.315940502s ago: executing program 4 (id=5750): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {@in=@dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {0x0, 0x0, 0x6}, {}, 0x0, 0x3502, 0xa}, [@offload={0xc, 0x1c, {r3, 0x6}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x148}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f00000000c0)=@newchain={0x24, 0x64, 0x100, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0x2}, {0x8, 0x8}, {0xe, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xffff}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_user\x00', 0x275a, 0x0) pwrite64(r6, 0x0, 0x0, 0x40008001) (async) pwrite64(r6, 0x0, 0x0, 0x40008001) sendmsg$alg(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)=[@iv={0x108, 0x117, 0x2, 0xf3, "60789c744fc0cc787f1b03c8f2c947edcf96fd4957b422e524cf8df452941cf1479dc931a73b30f8d140c15076f1ba1ca1b6e4cc9a7558924465d58e9e0eb0f6f7a417aae0bf7392b147e6f961b454b8786ad66a0b89e60dee2cee083d9da87ba600465ecfa82b024cff6c25eed30ec7f82628d4c0734b6ee189430a62143c7f00c2fab856ebd9698a1982af3d27c9c4f6cb9acdb3c1d4aa4eb3ce6bb82ba9e91ed7b3f9be5a5548a1ad56c86c9d48273c281ae276ae0d789121a9b9bb2903c36a12d5f886e91a0af17e0922ca8e168216b02685ebc60573128faf7745fb64f3268c5939470b696992b34270d330b96fe9625a"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x1b0, 0x40}, 0x40000c4) (async) sendmsg$alg(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)=[@iv={0x108, 0x117, 0x2, 0xf3, "60789c744fc0cc787f1b03c8f2c947edcf96fd4957b422e524cf8df452941cf1479dc931a73b30f8d140c15076f1ba1ca1b6e4cc9a7558924465d58e9e0eb0f6f7a417aae0bf7392b147e6f961b454b8786ad66a0b89e60dee2cee083d9da87ba600465ecfa82b024cff6c25eed30ec7f82628d4c0734b6ee189430a62143c7f00c2fab856ebd9698a1982af3d27c9c4f6cb9acdb3c1d4aa4eb3ce6bb82ba9e91ed7b3f9be5a5548a1ad56c86c9d48273c281ae276ae0d789121a9b9bb2903c36a12d5f886e91a0af17e0922ca8e168216b02685ebc60573128faf7745fb64f3268c5939470b696992b34270d330b96fe9625a"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x1b0, 0x40}, 0x40000c4) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 2.130748094s ago: executing program 1 (id=5751): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x2, 0x844d, "1a0bd6", 0x0, 0xff}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@multicast1, @loopback, 0x0}, &(0x7f0000000240)=0xc) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x6c, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000800}, 0x2c004000) 1.985276919s ago: executing program 4 (id=5752): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x33) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r0}, &(0x7f0000000500), &(0x7f00000000c0)='%ps \x00'}, 0x20) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYRESHEX=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r1, 0x8082}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYRES8], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r3}, 0x18) socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0xc0002}], 0x1, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) sendmmsg$inet(r5, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0xfffffdef}, {{&(0x7f00000003c0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000540)="d548d8cca49e24bd39fb287f2c04b9a58d11f073175e7b5b0b65f885df5808adb48272aeaa093b05f9aad3edd9ad3289ca257de937e80daee7654a210e9069b791b4d4c2216703c0716032645ef63c10ffb277f35852617aa1aba8250a05c75ff1b7049e7838744229a86e694e8889069714e0765101c3de1e5bcb679b1581", 0x7f}, {&(0x7f00000007c0)="57f77c5850d71fdfc33e3281240eceaf3fdb42972872a0eeb7b6d6c86e5791bb192bbe330e39a2f4e707071b9ce6b9b3b6c835b1890d55944d8dd8394b945f93b8fa04c66322ed8ee63e89d60ba7328ca853f2c1de0aa24e61036c2392042879ab109dde8a10762a617ab16edfc9bd0b560640b3b836ebf7d9d03b462cd01fecd2c5f9babf52bb57eabbc659c9d5f98fbcdec982398597a7cdfd4f5a641ecd011d1e6cd05ed613ca6d085bcd0751ed6a1cb46cc38013332b104cdda39de3d0fd4ed1e3cc488ac54e", 0xc8}, {&(0x7f00000008c0)="8ef4a257d3fa96ec486e8f766ca9972cafb7de13f846711fbd24a1a97934d77917e9830fead963a818ccc1a94ce654cc477cc82658a67db9fb08fc47619a45f2d2ad9beb92ae9e76c3c06c231f7ea421b6c5313f81d15df8618e3d22735217ba0eccf5179487793913fb7b319059679c22c595b2ac65e64171ff3f4d418c163683843edeb28f24e23840815a255cfd50df6d0d0b9dbdf8d6172bdd57176f708b36c2409217e1c0bbc380850fccaa46ece06837a78b36b8e21ec7a461760b036c4ad5d385e41c30", 0xc7}, {&(0x7f0000000a00)="734c7c6f92444f8f2dea07d57f44eb28e43e8a2fb8684293c149c504c7ecb468a7746451946315899661809f66e8ab0c34e4d893589226be97e057cecbd7298a0086bf64e306140ecaeb2fa09e351006a78b9eecd59ce65545f0036c5ecf9a193007a2ff133082c59e068198846ce41dc56c7c39c001fed046eea442de66c6a9f0619283a9d65c8a3e4fbf55d0057a8331cc5584dc9a5ec7c4e3b7742aaf5a", 0x9f}, {&(0x7f0000000bc0)="cb985c1d826ebdac1c3200b1ae5524239ffaa8f026295daa9223b6e705501e9b19a9282cb71b160736a90c7d330f5f601d648e7f74ee3bbd4a78ff8ffe8acccb0ecd4538f98d54fcac429ff3cafd237af6d3b26189c621eb5d546c6a6c2b1c38af04e33db7df35663edf20f65f7d8c0132baf9694ff7c1ba935bc84122f5cb329f8e9bdbfb46bb3af4d6a1a676c5dfd2d6df020243de47a2b786df19a1e2f82bbda8ce9ebff6de83b31dc885967b4557707b2b3ccfe90859a80e69206e959d4e589b3c2f000422460d22d82e2d712cfa74aa5ae138d4b20922360548ecf750f17cc816649ee1a143", 0xe8}], 0x5, &(0x7f0000000d40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x32}, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x991}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x58}}], 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket(0x8000000010, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x308, 0xffffffff, 0x0, 0x0, 0x168, 0xffffffff, 0xffffffff, 0x270, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x4, 0x0, 0x1, 0x1, 0x4], 0x1, 0x5}, {0x4, [0x5, 0x4, 0x2, 0x2, 0x1, 0x3], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x0, 0x2, 0x4, 0x5, 0x1], 0x1, 0x2}, {0x2, [0x0, 0x7, 0x0, 0x0, 0x2, 0x1]}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xd, 0xf, [0x33, 0x3e, 0x25, 0x23, 0x25, 0x2b, 0xb, 0x21, 0x12, 0x15, 0x1c, 0x8, 0x16, 0x37, 0x3b, 0x3a], 0x1, 0x9044, 0xff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d75b4cd362581725c7", "fa00", "d5a1d50399459b68"}, 0x28) recvfrom$inet6(r7, &(0x7f0000000600)=""/248, 0xf8, 0x122, 0x0, 0x0) shutdown(r7, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) 1.856307402s ago: executing program 2 (id=5753): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x80, 0x20, 0xfffffffd, 0xd40d, {{0x9, 0x4, 0x0, 0x1b, 0x24, 0x65, 0x0, 0x8b, 0x4, 0x0, @rand_addr=0x64010102, @remote, {[@lsrr={0x83, 0xf, 0xb5, [@remote, @rand_addr=0x64010102, @local]}, @end]}}}}}) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x48, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_FAMILY={0x5}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008001}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000fc0)="5a046aede137e03e5c4c6eb98451", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.812835249s ago: executing program 4 (id=5754): socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) socket(0x11, 0x2, 0xfffffffe) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000003, 0x8010, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x0, 0x48081) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x10000000) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x1b, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000030000000000000009000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a5000000182a0000", @ANYRES32=0x1, @ANYBLOB="00000000080000005047100010000000007701000000000085200000010000004bb90001fcffffff181100005149ff2ab0a7b5e9e38b0cca742e514e89505032bc5e8312658a2146c16e4d31a329fa67873c9efbc6474aec01598f1590ee8023a957ae45e2a26e6cc6766b876b7cbf3669120bb3424c8ac50b94e877ef9af08ff01c9f63519620598a0e57b59a8bda3448a01cf0ed101581eacd04f06c08133094e1ba67dc7cda4b", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000085200000010000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fff}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{0x1, 0x2, 0x2, 0x9}], 0x10, 0x1}, 0x94) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x9f, 0x0, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0xc, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket(0x10, 0x803, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x7d8, 0x308, 0x220, 0x0, 0x308, 0x4d8, 0x708, 0x708, 0x708, 0x708, 0x708, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x118, 0x140, 0x0, {0x7a00000010000000}, [@common=@hl={{0x28}, {0x3, 0x4}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0x0, 0xffffffff, 0xff000000], 0x4e20, 0x2f, 0x6, 0x4e22, 0x20, 0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @dev, [0xff000000], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x20}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x3, 0x5, 0x2, 0x8000, 0xc, 0x4]}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xcb, 'system_u:object_r:kmsg_device_t:s0\x00'}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @private1, @private1, @empty, @private2={0xfc, 0x2, '\x00', 0x2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x838) 1.62397178s ago: executing program 1 (id=5755): unshare(0x22020600) unshare(0x42000400) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x8, &(0x7f0000002480)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a50000000f79ca7866548e178a12833a70306060a0b0400000000000000000200000024000480200001800700010063740000140002800800024000000014fdffffff0000000f0900010073797a30000000000900020073797a3200000000140000001100"], 0x78}}, 0x40) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000001000079100000000000007a00e0ff0000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@abs={0x1, 0x0, 0x404e21}, 0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000017c0)='blkio.bfq.sectors\x00', 0x7a05, 0x1700) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f00000054c0)=[{{&(0x7f0000000680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f00000003c0)=""/52, 0x34}, {&(0x7f00000007c0)=""/241, 0xf1}, {&(0x7f0000000700)=""/127, 0x7f}, {&(0x7f00000008c0)=""/127, 0x7f}, {&(0x7f0000000940)=""/119, 0x77}, {&(0x7f0000000580)=""/2, 0x2}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/157, 0x9d}, {&(0x7f0000000a80)=""/140, 0x8c}, {&(0x7f0000000b40)=""/75, 0x4b}], 0xa, &(0x7f0000000c80)=""/49, 0x31}, 0x8000}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000002800)=""/4096, 0x1000}], 0x1, &(0x7f0000000d00)=""/223, 0xdf}, 0x10001}, {{&(0x7f0000000e00)=@phonet, 0x80, &(0x7f0000001040)=[{&(0x7f0000000e80)=""/44, 0x2c}, {&(0x7f0000000ec0)=""/91, 0x5b}, {&(0x7f0000000f40)=""/208, 0xd0}], 0x3, &(0x7f0000003800)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000001080)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001100)=""/245, 0xf5}, {&(0x7f0000001200)=""/94, 0x5e}, {&(0x7f0000001280)=""/156, 0x9c}, {&(0x7f0000001340)=""/125, 0x7d}, {&(0x7f00000013c0)=""/179, 0xb3}], 0x5}, 0x7}, {{&(0x7f0000001500)=@nfc_llcp, 0x80, &(0x7f0000001580)}, 0x10}, {{&(0x7f00000015c0)=@un=@abs, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001640)=""/106, 0x6a}], 0x1}, 0x7ef7}, {{&(0x7f0000001700)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000004ac0)=[{&(0x7f0000004800)=""/178, 0xb2}, {&(0x7f0000001780)=""/20, 0x14}, {&(0x7f00000048c0)=""/166, 0xa6}, {&(0x7f0000004980)=""/182, 0xb6}, {&(0x7f0000004a40)=""/65, 0x41}], 0x5, &(0x7f0000004b40)}, 0x9}, {{0x0, 0x0, &(0x7f0000004d40)=[{&(0x7f0000004b80)=""/234, 0xea}, {&(0x7f0000004c80)=""/170, 0xaa}], 0x2, &(0x7f0000004d80)=""/170, 0xaa}, 0x100}, {{&(0x7f0000004e40)=@can, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004ec0)=""/110, 0x6e}, {&(0x7f0000004f40)=""/4, 0x4}, {&(0x7f0000004f80)=""/43, 0x2b}, {&(0x7f0000004fc0)=""/177, 0xb1}, {&(0x7f0000005080)=""/209, 0xd1}, {&(0x7f0000005180)=""/31, 0x1f}], 0x6}, 0xfffffffe}, {{&(0x7f0000005240)=@un=@abs, 0x80, &(0x7f00000053c0)=[{&(0x7f00000052c0)=""/217, 0xd9}], 0x1, &(0x7f0000005400)=""/180, 0xb4}, 0xfffffffb}], 0xa, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000380)=@req3={0x1000, 0x80, 0x1000, 0x3a, 0x9, 0x4, 0x4}, 0x1c) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000005740)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=r4, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000002afbff2900000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000070000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.606701371s ago: executing program 2 (id=5756): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0xd0, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8d08}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff8000}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x17}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4008012}, 0x44) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000002c0)=0xffffffffffffffdf) sendmsg$netlink(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)={0x10, 0x26, 0x100, 0x70bd28, 0x25dfdbfe}, 0x10}], 0x1, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xee00, 0xee01}}}], 0x20, 0x40801}, 0x40) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000006800010004001000fdffff7f00000000000000000c000200010000001500000014000c80080002002108000008000800050000000600030001"], 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x18, 0x2e, 0x300, 0x70bd27, 0x25dfdbfd, {0x9}, [@nested={0x4, 0xc4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20042805}, 0x0) 1.484604052s ago: executing program 2 (id=5757): unshare(0x6a040000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000640)}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095", @ANYRESDEC=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="020ae8050200000025bd7000fddbdf253e54bfc58eb9544decbe8e8109101db9ab263e4840a44fb8b425a83a4d51d86e87ea5f814dc4fcab01386497f86fe1c813198d695d675d9173c65a2575c1bcf7ff1fc5d3864ae61b69424f0fcd95ec3114ee03269f5a82eb66dca207c44f8d634181de2a49a374878b87318c6967e9fb167279ce30a48a28b8fb1e58cda9d498e1c4d8197a6f9f2706f6b71a5818a01521a9afc6f01aa5a1bda217e69b0505a7874b065fc15475d6c3e8aba148a07baa9685f98c0859c51a0a600c7d098eafb2a7"], 0x10}}, 0x810) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'geneve0\x00', 0x4000}) write$tun(r6, &(0x7f00000002c0)=ANY=[], 0xfdef) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0x424f, 0x3}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000fcdbdf009900ffffffff620000000500ee0010000000000000000000"], 0x28}}, 0x4000080) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.416249341s ago: executing program 0 (id=5758): socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000300009e00008500000007000000770ef8e6dd7f19e709000100002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b78300000000a5df851000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r0}, 0x10) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x4800, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f00000002c0)=@l2tp6, 0xffffffffffffff61, &(0x7f0000000340), 0x0, &(0x7f00000005c0)=""/242, 0xf2}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000006c0)) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYRESDEC=r0], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740), 0xffffffffffffff40}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) poll(&(0x7f0000000400)=[{r12, 0x201}], 0x1, 0x4) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x2) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r13], 0x4) 1.14798682s ago: executing program 3 (id=5759): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c01000063002701feffffff00000100017c0000040042800c00018006000600800a00000800028004000b80d4200fa3c8ac84b1314b219878e7ce1527256ccefcf3da1fec462cdf0800a887bcfb7444fb63a2d1f1bf395b9e8657233288ed94992498a700c24d3e60c971ba2cb46ed0d80ca23333a80c0e20f959ad3a4a0a4da21a479d54dd3d585734e0bef21f0f2b63bd24d034af44d7fe71f6"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) unshare(0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000004, 0x32, r1, 0x97369000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x5, 0x4000010, r4, 0x7ff000) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000002500000004000000da41000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100800400009500000000000000bf91000000000000b7020000030000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0xb, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "9b3617b3cd853281", "9b6eddc9036f4f67093a150a9672dbcd", "6abd95b6", "3e143666f6d64065"}, 0x28) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shutdown(r6, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) 706.96714ms ago: executing program 4 (id=5760): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626ff96430000000001700000000d5001400010076657468305f746f5f7465616d00"], 0xec}}, 0x0) syz_emit_ethernet(0x68, &(0x7f0000000380)={@broadcast, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x10, [], "7f1a"}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}}}, {0x8, 0x22eb, 0xfffffffc, {{}, 0x2, {0x8}}}}}}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) 579.770304ms ago: executing program 4 (id=5761): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e26}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x1c, r4, 0x200, 0xfffffffe, 0x0, {{}, {@val={0xfffffffffffffe5e, 0x3, r5}, @val={0x0, 0x99, {0x5, 0x3f}}}}}, 0x1c}}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r11}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r13}, 0x10) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0xe, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"/2566, @ANYRES16=r0, @ANYRESDEC=r10, @ANYRESHEX=r12], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r14, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0x0, 0x32}, 0x1e) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000540)={0x20, r15, 0xf21, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0xd6, 0x7b}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000015}, 0x4080) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x64, r15, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xec}, @NL80211_ATTR_REG_RULES={0x2c, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}]}, {0x4}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'virt_wifi0\x00'}) r16 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000003ed0000000000000000000000950b000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r16, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c0001800602"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) 546.919776ms ago: executing program 0 (id=5762): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x884) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xfffffffd, 0x0, 0x7ff}, 0x1c) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) (async) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x64, r6, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x68, 0x0, 0x8, 0x0, 0xfffffffd, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}]}, 0x68}}, 0x80) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000480006803c00040067636d286165732900000000000000000000000000000000000000000000000014001b00e3de3d7b4cd07ec3ee777de774fc7987cca4198908"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 326.768215ms ago: executing program 4 (id=5763): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x2, 0x4) unshare(0x22020400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000003040)) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001b80)={'veth1_macvtap\x00', &(0x7f0000001b40)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f705e, 0x3}, {0x200}]}}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12812, r6, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r7, 0x6, 0x5, 0x0, &(0x7f0000000040)=0x1) 172.385695ms ago: executing program 0 (id=5764): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000a00)={0x0, 0x4, 0xfffc}, 0x8) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}]}}}]}, 0x44}}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x200440d4}, 0x8000) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0xc040) 0s ago: executing program 0 (id=5765): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b000100746172676574000058000280400003009b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a619b2ffcd000000000000000000000001000000000000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000), 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x6, 0x10}, 0xc) kernel console output (not intermixed with test programs): gth. [ 469.402004][T21433] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4031'. [ 469.419358][T21420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.430648][T21420] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 469.444951][T21432] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4034'. [ 469.457674][T21433] batadv0: entered promiscuous mode [ 469.464121][T21433] batadv0: entered allmulticast mode [ 469.475188][T21432] sctp: [Deprecated]: syz.2.4034 (pid 21432) Use of int in max_burst socket option. [ 469.475188][T21432] Use struct sctp_assoc_value instead [ 469.495310][T21433] bond0: (slave batadv0): Releasing backup interface [ 469.511346][T21433] bridge0: port 1(batadv0) entered blocking state [ 469.523919][T21433] bridge0: port 1(batadv0) entered disabled state [ 469.571335][T21434] tun0: tun_chr_ioctl cmd 1074025675 [ 469.582242][T21434] tun0: persist disabled [ 469.589068][T21432] tun0: tun_chr_ioctl cmd 1074025675 [ 469.601986][T21432] tun0: persist enabled [ 469.613754][T21439] netlink: 'syz.4.4037': attribute type 13 has an invalid length. [ 469.777664][ T8034] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 469.787387][ T8034] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 469.861390][T21456] Cannot find add_set index 1 as target [ 469.942231][T21458] bridge0: port 2(batadv1) entered blocking state [ 469.977865][T21458] bridge0: port 2(batadv1) entered disabled state [ 469.984571][T21458] batadv1: entered allmulticast mode [ 469.994713][T21458] batadv1: entered promiscuous mode [ 470.102082][T21471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.235647][T21462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.334702][T21464] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4046'. [ 470.355286][T21469] vlan2: entered promiscuous mode [ 470.411021][T21483] xt_l2tp: missing protocol rule (udp|l2tpip) [ 470.418003][T14181] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.437463][ T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 470.447037][ T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 470.460106][T14181] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.471658][T14181] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.524807][T14181] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.591714][T21487] tipc: Enabled bearer , priority 0 [ 470.601019][T21487] mac80211_hwsim hwsim39 syzkaller0: Caught tx_queue_len zero misconfig [ 470.649648][T21494] mac80211_hwsim hwsim37 syzkaller0: left promiscuous mode [ 470.685792][T21494] mac80211_hwsim hwsim37 syzkaller0: left allmulticast mode [ 470.706462][T21494] tipc: Resetting bearer [ 470.990982][T21527] C: renamed from lo [ 471.039095][T21527] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 471.116536][T21534] netlink: 'syz.3.4066': attribute type 4 has an invalid length. [ 471.142737][T21534] netlink: 'syz.3.4066': attribute type 4 has an invalid length. [ 471.160143][T21536] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20001 [ 471.298765][T14181] batman_adv: batadv0: Removing interface: ip6gretap1 [ 471.330122][T21551] netlink: 'syz.0.4069': attribute type 1 has an invalid length. [ 471.402861][T14181] erspan0 (unregistering): left promiscuous mode [ 471.465266][T14181] dvmrp0 (unregistering): left allmulticast mode [ 471.586945][ T5896] tipc: Node number set to 2641987549 [ 471.853547][T14181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.863518][T14181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.873203][T14181] bond0 (unregistering): Released all slaves [ 471.988628][T14181] bond1 (unregistering): Released all slaves [ 472.011315][T14181] bond2 (unregistering): Released all slaves [ 472.032450][T14181] bond3 (unregistering): Released all slaves [ 472.063261][T14181] bond4 (unregistering): Released all slaves [ 472.181927][T14181] bond5 (unregistering): (slave vcan0): Releasing backup interface [ 472.191595][T14181] bond5 (unregistering): (slave vcan1): Releasing backup interface [ 472.200559][T14181] bond5 (unregistering): Released all slaves [ 472.300424][T14181] bond6 (unregistering): Released all slaves [ 472.463673][ T5896] IPVS: starting estimator thread 0... [ 472.467927][T14181] tipc: Left network mode [ 472.490663][T21565] netlink: 'syz.4.4074': attribute type 1 has an invalid length. [ 472.553088][T14181] IPVS: stopping backup sync thread 12799 ... [ 472.616966][T21564] IPVS: using max 30 ests per chain, 72000 per kthread [ 472.731998][T21576] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 472.751545][T21576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 472.779748][T21576] hsr0: entered promiscuous mode [ 472.785990][T21576] hsr0: entered allmulticast mode [ 472.792194][T21576] hsr_slave_0: entered allmulticast mode [ 472.798717][T21576] hsr_slave_1: entered allmulticast mode [ 473.557241][T21605] netlink: 'syz.3.4082': attribute type 1 has an invalid length. [ 473.776666][T14181] dummy0: left promiscuous mode [ 473.821429][T14181] hsr_slave_0: left promiscuous mode [ 473.841468][T14181] hsr_slave_1: left promiscuous mode [ 473.857796][T14181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.909187][T14181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.937618][T14181] batman_adv: batadv0: Removing interface: macvlan2 [ 473.965482][T14181] batman_adv: batadv0: Removing interface: macsec1 [ 474.049506][T21628] __nla_validate_parse: 8 callbacks suppressed [ 474.050636][T21628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4091'. [ 474.133122][T14181] pim6reg (unregistering): left allmulticast mode [ 474.402002][T14181] team0 (unregistering): Port device veth0_virt_wifi removed [ 474.522531][T21647] netlink: 'syz.3.4093': attribute type 1 has an invalid length. [ 474.599100][T14181] team0 (unregistering): Port device team_slave_1 removed [ 474.642208][T14181] team0 (unregistering): Port device team_slave_0 removed [ 474.945572][T21622] syzkaller0: left promiscuous mode [ 474.951516][T21622] syzkaller0: left allmulticast mode [ 475.133681][T21661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.195635][T21640] ip6_vti0 speed is unknown, defaulting to 1000 [ 475.239067][T21665] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4098'. [ 475.576399][T21681] bond5 (unregistering): Released all slaves [ 475.593268][T21685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4103'. [ 475.674291][T21684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4102'. [ 475.703964][T21640] wg1 speed is unknown, defaulting to 1000 [ 475.845939][T21696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4106'. [ 475.869832][T21694] ip6_vti0 speed is unknown, defaulting to 1000 [ 476.061615][T21698] netlink: 'syz.1.4107': attribute type 12 has an invalid length. [ 476.151274][T21713] bond2: entered promiscuous mode [ 476.156558][T21713] bond2: entered allmulticast mode [ 476.164308][T21713] 8021q: adding VLAN 0 to HW filter on device bond2 [ 476.333491][T21694] wg1 speed is unknown, defaulting to 1000 [ 476.803095][T21744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4116'. [ 476.903332][T21742] smc: net device bond0 applied user defined pnetid SYZ0 [ 476.934353][T21742] smc: net device bond0 erased user defined pnetid SYZ0 [ 476.978190][T21742] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ0 [ 477.060123][T14181] IPVS: stop unused estimator thread 0... [ 477.184751][T21757] sctp: [Deprecated]: syz.1.4120 (pid 21757) Use of struct sctp_assoc_value in delayed_ack socket option. [ 477.184751][T21757] Use struct sctp_sack_info instead [ 477.243385][T21757] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4120'. [ 477.318897][T21765] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 477.412825][T21772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.850718][T21795] netlink: 'syz.2.4130': attribute type 1 has an invalid length. [ 478.071642][T21808] netlink: 'syz.2.4135': attribute type 39 has an invalid length. [ 478.154750][T21812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4136'. [ 478.178036][T21813] ip6_vti0 speed is unknown, defaulting to 1000 [ 478.402467][T21816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.461148][T21813] wg1 speed is unknown, defaulting to 1000 [ 479.492330][T21863] IPVS: Scheduler module ip_vs_sip not found [ 479.513771][T21868] IPVS: fo: FWM 3 0x00000003 - no destination available [ 479.579872][T21866] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4150'. [ 479.594314][T21871] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4151'. [ 479.753182][T21877] pim6reg: entered allmulticast mode [ 480.041975][T21892] netlink: 'syz.1.4157': attribute type 2 has an invalid length. [ 480.092011][T21892] netlink: 'syz.1.4157': attribute type 1 has an invalid length. [ 480.116937][T21892] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4157'. [ 480.140311][T21894] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4158'. [ 480.679903][T21928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4166'. [ 480.802235][T21937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4168'. [ 481.530113][T21979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4180'. [ 481.586703][T14167] bond1 (unregistering): (slave ip6gretap2): Releasing active interface [ 481.595713][T14167] bond1 (unregistering): (slave ip6gretap2): the permanent HWaddr of slave - 16:d4:3f:2e:8e:74 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 481.661195][T21959] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4174'. [ 481.678658][T21959] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4174'. [ 482.054844][T21997] rdma_rxe: rxe_newlink: failed to add lo [ 482.225021][T14167] bond0 (unregistering): Released all slaves [ 482.332768][T14167] bond1 (unregistering): (slave veth5): Releasing active interface [ 482.342654][T14167] bond1 (unregistering): Released all slaves [ 482.436142][T14167] bond2 (unregistering): Released all slaves [ 482.531072][T14167] bond3 (unregistering): Released all slaves [ 482.630210][T14167] bond4 (unregistering): (slave bond5): Releasing backup interface [ 482.638719][T14167] bond5 (unregistering): left promiscuous mode [ 482.644884][T14167] bond5 (unregistering): left allmulticast mode [ 482.652054][T14167] bond4 (unregistering): Released all slaves [ 482.759723][T14167] bond5 (unregistering): Released all slaves [ 482.812682][T21976] ip6_vti0 speed is unknown, defaulting to 1000 [ 482.891830][T14167] : left promiscuous mode [ 482.994820][T22005] syzkaller1: entered promiscuous mode [ 483.026159][T22005] syzkaller1: entered allmulticast mode [ 483.032869][T22006] nbd0: detected capacity change from 0 to 127 [ 483.043710][T22008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4187'. [ 483.048869][T14167] tipc: Disabling bearer [ 483.088090][T22010] xt_CT: You must specify a L4 protocol and not use inversions on it [ 483.123205][T14167] tipc: Left network mode [ 483.185456][ T5828] block nbd0: Receive control failed (result -32) [ 483.477201][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 483.499234][T22021] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 483.594281][T21976] wg1 speed is unknown, defaulting to 1000 [ 483.850579][T22035] veth2: entered promiscuous mode [ 483.899572][T22045] netlink: 'syz.2.4196': attribute type 3 has an invalid length. [ 483.980021][T22048] tipc: Resetting bearer [ 484.480865][T22065] netlink: 'syz.1.4202': attribute type 16 has an invalid length. [ 484.637699][T22068] netlink: 'syz.1.4203': attribute type 2 has an invalid length. [ 484.677957][T22071] netlink: 'syz.4.4205': attribute type 1 has an invalid length. [ 484.725830][T22071] 8021q: adding VLAN 0 to HW filter on device bond5 [ 484.733807][T22069] sctp: [Deprecated]: syz.2.4204 (pid 22069) Use of struct sctp_assoc_value in delayed_ack socket option. [ 484.733807][T22069] Use struct sctp_sack_info instead [ 484.802532][T14167] hsr_slave_0: left promiscuous mode [ 484.810443][T22079] __nla_validate_parse: 2 callbacks suppressed [ 484.810461][T22079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4206'. [ 484.826194][T14167] hsr_slave_1: left promiscuous mode [ 484.877801][T14167] pimreg (unregistering): left allmulticast mode [ 486.005395][T22090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4208'. [ 486.137465][T22074] bond5: (slave ip6erspan0): making interface the new active one [ 486.146667][T22074] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 486.234432][T22085] ip6_vti0 speed is unknown, defaulting to 1000 [ 486.486132][T22104] netlink: 296 bytes leftover after parsing attributes in process `syz.2.4212'. [ 486.613584][T22085] wg1 speed is unknown, defaulting to 1000 [ 486.802808][T14167] IPVS: stop unused estimator thread 0... [ 486.844972][T22124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4216'. [ 486.939703][T22124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4216'. [ 487.231034][ T49] tipc: Resetting bearer [ 487.459052][T22146] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4222'. [ 487.507443][T22146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4222'. [ 488.119264][T22192] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4235'. [ 488.537507][T22223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4243'. [ 488.577453][T22223] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 488.606959][ T5828] Bluetooth: hci5: command 0x0406 tx timeout [ 488.811357][T22235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4246'. [ 488.829281][T22235] gretap2: entered allmulticast mode [ 489.076151][T22253] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 489.358619][T22264] syzkaller1: entered promiscuous mode [ 489.375721][T22264] syzkaller1: entered allmulticast mode [ 489.884982][T22291] __nla_validate_parse: 1 callbacks suppressed [ 489.885002][T22291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4259'. [ 489.919107][T22291] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4259'. [ 490.204001][T22297] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4260'. [ 490.352956][T22307] pim6reg1: entered promiscuous mode [ 490.363555][T22307] pim6reg1: entered allmulticast mode [ 490.374444][T22311] dummy0: mtu less than device minimum [ 490.455424][T22310] ip6_vti0 speed is unknown, defaulting to 1000 [ 490.696646][T22339] netlink: 928 bytes leftover after parsing attributes in process `syz.0.4271'. [ 490.925661][T22348] netlink: 'syz.1.4274': attribute type 31 has an invalid length. [ 490.986522][T22310] wg1 speed is unknown, defaulting to 1000 [ 490.990475][T22339] ip6_vti0 speed is unknown, defaulting to 1000 [ 491.528354][T22339] wg1 speed is unknown, defaulting to 1000 [ 491.585067][ T5845] Bluetooth: hci2: link tx timeout [ 491.594060][ T5845] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 491.606526][ T5845] Bluetooth: hci2: link tx timeout [ 491.611799][ T5845] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 491.791290][T22374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4282'. [ 491.990944][T22382] netlink: 'syz.3.4285': attribute type 39 has an invalid length. [ 492.589239][T22405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4291'. [ 492.650338][T22399] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4289'. [ 492.788471][T22411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4293'. [ 492.819932][T22412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4293'. [ 492.850751][T22411] syzkaller0: entered promiscuous mode [ 492.896549][T22411] syzkaller0: entered allmulticast mode [ 492.980820][T22416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4293'. [ 493.055206][T22424] Cannot find set identified by id 65534 to match [ 493.252949][T22430] ip6_vti0 speed is unknown, defaulting to 1000 [ 493.331290][T22440] netlink: 'syz.2.4302': attribute type 21 has an invalid length. [ 493.350016][T22440] netlink: 'syz.2.4302': attribute type 4 has an invalid length. [ 493.367811][T22440] netlink: 'syz.2.4302': attribute type 3 has an invalid length. [ 493.628126][ T5845] Bluetooth: hci2: command 0x0405 tx timeout [ 493.640859][T22430] wg1 speed is unknown, defaulting to 1000 [ 493.670102][T22456] netlink: 'syz.1.4306': attribute type 1 has an invalid length. [ 493.770194][T22456] 8021q: adding VLAN 0 to HW filter on device bond3 [ 493.796349][T22458] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 493.808671][T22458] bond3: (slave batadv1): making interface the new active one [ 493.818340][T22458] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 493.848188][T22462] tipc: Enabling of bearer rejected, already enabled [ 493.892855][T22462] syzkaller0: entered promiscuous mode [ 493.931318][T22462] syzkaller0: entered allmulticast mode [ 494.166423][T22465] tipc: Resetting bearer [ 494.181690][T22461] syzkaller1: entered promiscuous mode [ 494.187967][T22461] syzkaller1: entered allmulticast mode [ 494.799588][T22490] ip6_vti0 speed is unknown, defaulting to 1000 [ 494.947291][T22501] x_tables: duplicate underflow at hook 1 [ 495.287650][T22490] wg1 speed is unknown, defaulting to 1000 [ 495.885628][T22540] __nla_validate_parse: 16 callbacks suppressed [ 495.885649][T22540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4326'. [ 496.033134][T22541] tipc: Enabling of bearer rejected, already enabled [ 496.831571][T22585] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4338'. [ 496.870064][T22583] ip6_vti0 speed is unknown, defaulting to 1000 [ 497.049313][T22583] wg1 speed is unknown, defaulting to 1000 [ 497.171423][T22591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4340'. [ 497.209505][T22588] tipc: Enabling of bearer rejected, already enabled [ 497.651977][T22611] netlink: 'syz.4.4348': attribute type 2 has an invalid length. [ 497.661714][T22611] netlink: 'syz.4.4348': attribute type 2 has an invalid length. [ 497.682027][T22611] netlink: 'syz.4.4348': attribute type 1 has an invalid length. [ 497.697475][T22611] netlink: 'syz.4.4348': attribute type 1 has an invalid length. [ 497.728320][T22611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4348'. [ 497.823526][T22621] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 498.151402][T22642] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4358'. [ 498.161477][T22642] nbd: illegal input index 65508 [ 498.396049][T22658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4362'. [ 498.464242][T22663] netlink: 'syz.2.4363': attribute type 5 has an invalid length. [ 499.707614][ T5845] Bluetooth: hci2: command 0x0405 tx timeout [ 500.067819][T22665] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 500.068522][T22671] wg1 speed is unknown, defaulting to 1000 [ 500.121517][T22671] wg1 speed is unknown, defaulting to 1000 [ 500.146678][T22671] wg1 speed is unknown, defaulting to 1000 [ 500.181404][T22671] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 500.285207][T22671] wg1 speed is unknown, defaulting to 1000 [ 500.286265][T22684] ip6_vti0 speed is unknown, defaulting to 1000 [ 500.305139][T22671] wg1 speed is unknown, defaulting to 1000 [ 500.327820][T22671] wg1 speed is unknown, defaulting to 1000 [ 500.333626][T22686] vti0: entered promiscuous mode [ 500.345497][T22671] wg1 speed is unknown, defaulting to 1000 [ 500.426658][T22671] wg1 speed is unknown, defaulting to 1000 [ 500.446282][T22671] wg1 speed is unknown, defaulting to 1000 [ 500.601905][T22684] wg1 speed is unknown, defaulting to 1000 [ 500.614983][T22684] wg1 speed is unknown, defaulting to 1000 [ 501.379993][T22715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4380'. [ 501.422303][T22713] ip6_vti0 speed is unknown, defaulting to 1000 [ 501.601304][T22722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4381'. [ 501.642543][T22722] batadv1: left allmulticast mode [ 501.670840][T22722] batadv1: left promiscuous mode [ 501.676049][T22722] bridge0: port 2(batadv1) entered disabled state [ 501.701289][T22727] netlink: 'syz.4.4383': attribute type 21 has an invalid length. [ 501.740662][T22727] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4383'. [ 501.753041][T22722] bridge0: port 1(batadv0) entered disabled state [ 501.905218][T22731] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4385'. [ 501.993624][T22713] wg1 speed is unknown, defaulting to 1000 [ 502.002578][T22713] wg1 speed is unknown, defaulting to 1000 [ 502.440397][T22759] netlink: 212304 bytes leftover after parsing attributes in process `syz.2.4393'. [ 502.464438][T22759] openvswitch: netlink: Message has 6 unknown bytes. [ 502.932675][T22782] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4396'. [ 503.304153][T22793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4400'. [ 503.324577][T22793] openvswitch: netlink: Flow actions attr not present in new flow. [ 503.359184][T22798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4402'. [ 503.377430][T22798] openvswitch: netlink: Missing key (keys=40, expected=80) [ 503.708599][T22823] ip6tnl2: entered allmulticast mode [ 503.761537][T22823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4409'. [ 504.088401][T22842] netlink: 312 bytes leftover after parsing attributes in process `syz.1.4414'. [ 504.139469][T22844] openvswitch: netlink: Missing key (keys=40, expected=80) [ 504.249915][T22854] syzkaller0: left promiscuous mode [ 504.267845][T22854] syzkaller0: left allmulticast mode [ 504.893173][T22884] tipc: Enabled bearer , priority 10 [ 505.071886][T22892] kthread_run failed with err -4 [ 505.664576][T22913] netlink: 'syz.1.4431': attribute type 4 has an invalid length. [ 506.026938][ T982] tipc: Node number set to 1823102164 [ 506.094547][T22948] netlink: 'syz.1.4438': attribute type 1 has an invalid length. [ 506.105390][T22948] netlink: 'syz.1.4438': attribute type 2 has an invalid length. [ 506.315836][T22964] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 506.319029][T22971] syzkaller0: entered promiscuous mode [ 506.326075][T22969] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 506.333014][T22971] syzkaller0: entered allmulticast mode [ 506.505645][T22981] __nla_validate_parse: 6 callbacks suppressed [ 506.505662][T22981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4444'. [ 506.751562][T23000] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4448'. [ 506.769095][T23000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4448'. [ 506.798229][T22989] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 507.195030][T23031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4456'. [ 507.205829][T23033] netlink: 288 bytes leftover after parsing attributes in process `syz.1.4457'. [ 507.219308][T23033] ipt_ECN: cannot use operation on non-tcp rule [ 507.233175][T23031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4456'. [ 507.250896][T23031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4456'. [ 507.271463][T23031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4456'. [ 507.304481][T23031] geneve4: entered promiscuous mode [ 507.452536][T23048] netlink: 'syz.2.4458': attribute type 30 has an invalid length. [ 507.671407][T23062] netlink: 23 bytes leftover after parsing attributes in process `syz.4.4465'. [ 507.688754][T23058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4463'. [ 507.711273][T23058] syz_tun: refused to change device tx_queue_len [ 507.899547][T23083] netlink: 'syz.0.4470': attribute type 10 has an invalid length. [ 508.015614][T23087] ip6_vti0 speed is unknown, defaulting to 1000 [ 508.213517][T23102] "syz.0.4473" (23102) uses obsolete ecb(arc4) skcipher [ 508.427613][T23080] ip6_vti0 speed is unknown, defaulting to 1000 [ 508.432854][T23087] wg1 speed is unknown, defaulting to 1000 [ 508.442642][T23087] wg1 speed is unknown, defaulting to 1000 [ 508.713270][T23080] wg1 speed is unknown, defaulting to 1000 [ 508.741849][T23080] wg1 speed is unknown, defaulting to 1000 [ 508.875829][T23122] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 508.894553][ T8475] wg1 speed is unknown, defaulting to 1000 [ 509.419788][T23141] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 509.443298][T23141] bond5 (unregistering): Released all slaves [ 509.606379][T23150] netlink: 'syz.0.4486': attribute type 3 has an invalid length. [ 509.729590][T23153] tc_dump_action: action bad kind [ 510.246519][T23182] netlink: 'syz.3.4497': attribute type 1 has an invalid length. [ 510.476601][T23195] ip6_vti0 speed is unknown, defaulting to 1000 [ 510.734595][T23195] wg1 speed is unknown, defaulting to 1000 [ 510.742875][T23195] wg1 speed is unknown, defaulting to 1000 [ 511.153273][T23231] netlink: 'syz.2.4508': attribute type 5 has an invalid length. [ 511.173097][T23231] xfrm0: entered promiscuous mode [ 511.185007][T23231] xfrm0: entered allmulticast mode [ 511.548591][T23247] __nla_validate_parse: 14 callbacks suppressed [ 511.548610][T23247] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4513'. [ 511.587978][T23247] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4513'. [ 511.675726][T23246] tipc: Resetting bearer [ 511.966245][T23246] tipc: Resetting bearer [ 512.279192][T23283] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 512.294054][T23282] ip6erspan0: entered promiscuous mode [ 512.703015][T23272] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 512.838501][T23295] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4525'. [ 512.848985][T23295] netem: unknown loss type 4 [ 512.854062][T23295] netem: change failed [ 513.006464][T23305] ip6_vti0 speed is unknown, defaulting to 1000 [ 513.391491][T23321] xt_bpf: check failed: parse error [ 513.689454][T23305] wg1 speed is unknown, defaulting to 1000 [ 513.745785][T23305] wg1 speed is unknown, defaulting to 1000 [ 513.803667][T23336] ip6_vti0 speed is unknown, defaulting to 1000 [ 513.984425][T23340] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4538'. [ 513.998009][T23340] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4538'. [ 514.008328][T23340] netlink: 'syz.0.4538': attribute type 6 has an invalid length. [ 514.071685][T23347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4538'. [ 514.315480][T23336] wg1 speed is unknown, defaulting to 1000 [ 514.330217][T23346] ip6_vti0 speed is unknown, defaulting to 1000 [ 514.331198][T23336] wg1 speed is unknown, defaulting to 1000 [ 514.711733][T23371] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4547'. [ 514.757191][T23371] sctp: [Deprecated]: syz.0.4547 (pid 23371) Use of int in max_burst socket option. [ 514.757191][T23371] Use struct sctp_assoc_value instead [ 514.848838][T23346] wg1 speed is unknown, defaulting to 1000 [ 514.854813][T23360] ip6_vti0 speed is unknown, defaulting to 1000 [ 514.893641][T23346] wg1 speed is unknown, defaulting to 1000 [ 515.046459][T23382] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4544'. [ 515.071303][T23364] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4544'. [ 515.143691][T23364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4544'. [ 515.315658][T23386] dummy0: left allmulticast mode [ 515.323235][T23386] dummy0: left promiscuous mode [ 515.328951][T23386] bridge0: port 3(dummy0) entered disabled state [ 515.345408][T23386] bridge_slave_1: left allmulticast mode [ 515.351797][T23386] bridge_slave_1: left promiscuous mode [ 515.360248][T23386] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.370632][T23386] bridge_slave_0: left allmulticast mode [ 515.376354][T23386] bridge_slave_0: left promiscuous mode [ 515.382884][T23386] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.509853][T23378] ip6_vti0 speed is unknown, defaulting to 1000 [ 515.859899][T23393] netlink: 'syz.2.4554': attribute type 13 has an invalid length. [ 515.872681][T23393] netlink: 'syz.2.4554': attribute type 17 has an invalid length. [ 516.021202][T23393] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.036077][T23393] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 516.055065][T23360] wg1 speed is unknown, defaulting to 1000 [ 516.055078][ T8475] ip6_vti0 speed is unknown, defaulting to 1000 [ 516.080952][ T8475] syz2: Port: 1 Link ACTIVE [ 516.089770][ T10] ip6_vti0 speed is unknown, defaulting to 1000 [ 516.107969][T23360] wg1 speed is unknown, defaulting to 1000 [ 516.108524][T23378] wg1 speed is unknown, defaulting to 1000 [ 516.202618][T23378] wg1 speed is unknown, defaulting to 1000 [ 516.514635][T23418] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 516.614208][T23422] __nla_validate_parse: 1 callbacks suppressed [ 516.614225][T23422] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4561'. [ 516.703051][T23424] netlink: 'syz.2.4562': attribute type 13 has an invalid length. [ 516.750995][T23418] ip6_vti0 speed is unknown, defaulting to 1000 [ 516.847647][T23429] netlink: 'syz.2.4563': attribute type 1 has an invalid length. [ 516.915771][T23429] 8021q: adding VLAN 0 to HW filter on device bond5 [ 516.987312][T23431] bond5: (slave ip6gretap3): making interface the new active one [ 517.003133][T23431] bond5: (slave ip6gretap3): Enslaving as an active interface with an up link [ 517.034633][T23433] netlink: 'syz.4.4564': attribute type 1 has an invalid length. [ 517.044769][T23433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4564'. [ 517.059059][T23429] veth5: entered promiscuous mode [ 517.069214][T23429] bond5: (slave veth5): Enslaving as an active interface with a down link [ 517.081494][T22934] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 517.091761][T23431] erspan0: entered allmulticast mode [ 517.120255][T23431] bond5: (slave erspan0): Enslaving as an active interface with an up link [ 517.132244][T23433] Àÿ: renamed from team_slave_1 [ 517.146127][T23418] wg1 speed is unknown, defaulting to 1000 [ 517.176211][T23429] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 517.234322][T23418] wg1 speed is unknown, defaulting to 1000 [ 517.268600][T23437] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4565'. [ 517.375815][T23437] syzkaller1: entered promiscuous mode [ 517.429749][T23437] syzkaller1: entered allmulticast mode [ 517.912271][T23461] ip6_vti0 speed is unknown, defaulting to 1000 [ 518.103876][T23466] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4571'. [ 518.618885][T23476] xt_CT: You must specify a L4 protocol and not use inversions on it [ 518.801182][T23475] ip6_vti0 speed is unknown, defaulting to 1000 [ 518.805725][T23461] wg1 speed is unknown, defaulting to 1000 [ 518.844150][T23461] wg1 speed is unknown, defaulting to 1000 [ 519.073749][T23475] wg1 speed is unknown, defaulting to 1000 [ 519.116405][T23475] wg1 speed is unknown, defaulting to 1000 [ 519.424918][T23516] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 519.468358][T23516] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 519.550538][T23523] Cannot find add_set index 4 as target [ 519.569778][T23523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4585'. [ 519.833067][T23537] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4592'. [ 519.848662][T23538] xt_cgroup: xt_cgroup: no path or classid specified [ 519.877202][T23532] tipc: Enabled bearer , priority 0 [ 519.884615][T23532] syzkaller0: entered promiscuous mode [ 519.884695][T23539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.891859][T23532] syzkaller0: entered allmulticast mode [ 519.992301][T23532] tipc: Resetting bearer [ 520.070010][T23532] tipc: Resetting bearer [ 520.129051][T23532] tipc: Disabling bearer [ 520.399809][T23564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4597'. [ 520.460714][T23566] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 520.550379][T23566] tipc: Enabled bearer , priority 10 [ 520.721143][T23582] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4599'. [ 520.826968][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 520.900562][T23592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4604'. [ 520.976723][T23587] ip6_vti0 speed is unknown, defaulting to 1000 [ 521.278118][T23599] netlink: 'syz.2.4607': attribute type 3 has an invalid length. [ 521.420176][T23587] wg1 speed is unknown, defaulting to 1000 [ 521.448306][T23587] wg1 speed is unknown, defaulting to 1000 [ 521.593277][T23607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4609'. [ 521.668515][ T982] tipc: Node number set to 3758096385 [ 521.921805][T23614] macsec1: entered promiscuous mode [ 521.951287][T23614] macsec1: entered allmulticast mode [ 522.704316][T23660] pim6reg: left allmulticast mode [ 522.741459][T23655] tipc: Enabling of bearer rejected, already enabled [ 522.983584][T23679] netlink: 'syz.2.4627': attribute type 1 has an invalid length. [ 522.996888][T23680] netlink: 'syz.2.4627': attribute type 1 has an invalid length. [ 523.059648][T23684] netlink: 'syz.1.4629': attribute type 39 has an invalid length. [ 523.109243][T23690] bond0: Caught tx_queue_len zero misconfig [ 523.112504][T23691] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4629'. [ 523.116591][T23690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4628'. [ 523.128085][T23691] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4629'. [ 523.144244][T23690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4628'. [ 523.155842][T23691] netlink: 'syz.1.4629': attribute type 5 has an invalid length. [ 523.182845][T23691] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4629'. [ 523.267872][T23695] vlan2: entered allmulticast mode [ 523.374439][T23702] netlink: 'syz.0.4633': attribute type 83 has an invalid length. [ 523.415125][T23702] netlink: 'syz.0.4633': attribute type 83 has an invalid length. [ 523.898589][T23712] ip6_vti0 speed is unknown, defaulting to 1000 [ 524.103885][T23729] netlink: 'syz.0.4638': attribute type 4 has an invalid length. [ 524.421733][T23710] ip6_vti0 speed is unknown, defaulting to 1000 [ 524.430752][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 524.438798][T23712] wg1 speed is unknown, defaulting to 1000 [ 524.462500][T23712] wg1 speed is unknown, defaulting to 1000 [ 524.939707][T23710] wg1 speed is unknown, defaulting to 1000 [ 524.939737][T23738] ip6_vti0 speed is unknown, defaulting to 1000 [ 524.949516][T23710] wg1 speed is unknown, defaulting to 1000 [ 525.244024][T23768] xt_TPROXY: Can be used only with -p tcp or -p udp [ 525.266833][T23760] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 525.274111][T23760] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 525.281398][T23760] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 525.288761][T23760] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 525.296008][T23760] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 525.303279][T23760] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 525.310582][T23760] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 525.317862][T23760] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 525.325105][T23760] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 525.332453][T23760] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 525.474016][T23738] wg1 speed is unknown, defaulting to 1000 [ 525.493690][T23738] wg1 speed is unknown, defaulting to 1000 [ 525.493767][T23763] ip6_vti0 speed is unknown, defaulting to 1000 [ 526.217535][T23763] wg1 speed is unknown, defaulting to 1000 [ 526.236145][T23763] wg1 speed is unknown, defaulting to 1000 [ 527.128576][T23805] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 527.136403][T23805] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 527.173120][T23800] ip6_vti0 speed is unknown, defaulting to 1000 [ 527.184834][T23803] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4656'. [ 527.415972][T23813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4657'. [ 527.651472][T23819] tipc: Enabled bearer , priority 0 [ 527.662163][T23819] syzkaller0: entered promiscuous mode [ 527.668776][T23819] syzkaller0: entered allmulticast mode [ 527.688864][T23800] wg1 speed is unknown, defaulting to 1000 [ 527.689955][T23808] ip6_vti0 speed is unknown, defaulting to 1000 [ 527.697653][T23800] wg1 speed is unknown, defaulting to 1000 [ 527.772627][T23818] tipc: Resetting bearer [ 527.796051][T23818] tipc: Disabling bearer [ 527.969701][T23816] ip6_vti0 speed is unknown, defaulting to 1000 [ 528.108960][T23823] netlink: 'syz.3.4660': attribute type 1 has an invalid length. [ 528.118186][T23823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4660'. [ 528.163943][T23808] wg1 speed is unknown, defaulting to 1000 [ 528.179548][T23808] wg1 speed is unknown, defaulting to 1000 [ 528.186509][T23816] wg1 speed is unknown, defaulting to 1000 [ 528.220928][T23816] wg1 speed is unknown, defaulting to 1000 [ 528.630309][T23845] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4664'. [ 528.642435][T23847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4664'. [ 528.670039][T23838] tipc: Resetting bearer [ 528.747007][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 528.821174][ T982] wg1 speed is unknown, defaulting to 1000 [ 528.822439][T14183] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.827749][ T982] syz0: Port: 1 Link DOWN [ 528.887503][T14183] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.919447][T14183] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.928900][T14183] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.975196][T23849] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 529.149111][T23856] netlink: 'syz.3.4667': attribute type 1 has an invalid length. [ 529.329810][T23861] bond5: (slave bridge0): making interface the new active one [ 529.348745][T23861] bond5: (slave bridge0): Enslaving as an active interface with an up link [ 529.358496][T23872] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4668'. [ 529.448920][T23858] ip6_vti0 speed is unknown, defaulting to 1000 [ 529.491881][T23870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4668'. [ 530.002468][T23895] syzkaller1: entered promiscuous mode [ 530.028729][T23895] syzkaller1: entered allmulticast mode [ 530.042630][T23858] wg1 speed is unknown, defaulting to 1000 [ 530.074969][T23858] wg1 speed is unknown, defaulting to 1000 [ 530.167347][T23900] netlink: 'syz.2.4678': attribute type 5 has an invalid length. [ 530.352631][T23905] No such timeout policy "syz1" [ 530.672325][T23913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4683'. [ 530.792607][T23913] ip6_vti0 speed is unknown, defaulting to 1000 [ 531.277653][T23913] wg1 speed is unknown, defaulting to 1000 [ 531.285216][T23913] wg1 speed is unknown, defaulting to 1000 [ 531.478345][T23930] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4684'. [ 531.826553][T23936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4686'. [ 531.858540][T23938] bond0: left promiscuous mode [ 531.864563][T23938] net_ratelimit: 3255 callbacks suppressed [ 531.864579][T23938] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 531.974776][T23936] 8021q: adding VLAN 0 to HW filter on device bond4 [ 532.000395][T23939] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 532.009999][T23939] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 532.085734][T23942] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4687'. [ 532.306565][T23947] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4689'. [ 532.344842][T23945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.792969][T23959] netlink: 'syz.4.4691': attribute type 49 has an invalid length. [ 532.819602][T23965] netlink: 'syz.4.4691': attribute type 49 has an invalid length. [ 533.094598][T23970] mac80211_hwsim hwsim39 syzkaller0: left promiscuous mode [ 533.103728][T23970] mac80211_hwsim hwsim39 syzkaller0: left allmulticast mode [ 533.118834][T23972] tipc: Enabling of bearer rejected, already enabled [ 533.161063][T23972] tipc: Resetting bearer [ 533.241827][T23975] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 533.324738][T23975] team0: Failed to send options change via netlink (err -105) [ 533.332850][T23975] team0: Mode changed to "loadbalance" [ 533.434187][T23987] __nla_validate_parse: 3 callbacks suppressed [ 533.434206][T23987] netlink: 182 bytes leftover after parsing attributes in process `syz.0.4702'. [ 533.469181][T23990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4704'. [ 533.500539][T23987] tipc: Enabled bearer , priority 0 [ 533.508133][T23996] ip6_vti0 speed is unknown, defaulting to 1000 [ 533.515324][T23987] syzkaller0: entered promiscuous mode [ 533.525480][T23987] syzkaller0: entered allmulticast mode [ 533.545515][T23987] netlink: 'syz.0.4702': attribute type 1 has an invalid length. [ 533.554132][T23987] netlink: 204 bytes leftover after parsing attributes in process `syz.0.4702'. [ 533.641741][T23997] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 533.658511][T23987] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4702'. [ 533.721000][T23987] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 533.759799][T23987] tipc: Resetting bearer [ 533.777648][T23986] tipc: Resetting bearer [ 533.820459][T23986] tipc: Disabling bearer [ 534.043961][T24015] syzkaller1: entered promiscuous mode [ 534.062973][T24015] syzkaller1: entered allmulticast mode [ 534.096002][T24015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4708'. [ 534.109266][T24021] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4709'. [ 534.304363][T23996] wg1 speed is unknown, defaulting to 1000 [ 534.362969][T23996] wg1 speed is unknown, defaulting to 1000 [ 534.758828][T24042] tipc: Enabling of bearer rejected, already enabled [ 534.778079][T24042] syzkaller0: entered promiscuous mode [ 534.783580][T24042] syzkaller0: entered allmulticast mode [ 535.133924][T24050] ip6_vti0 speed is unknown, defaulting to 1000 [ 535.588445][T24079] tipc: Invalid UDP bearer configuration [ 535.588503][T24079] tipc: Enabling of bearer rejected, failed to enable media [ 535.781456][T24050] wg1 speed is unknown, defaulting to 1000 [ 535.804734][T24050] wg1 speed is unknown, defaulting to 1000 [ 535.915684][T24092] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10 [ 536.774316][T24111] bond0: (slave rose0): Error: Device can not be enslaved while up [ 537.590193][T24139] netlink: 'syz.0.4741': attribute type 1 has an invalid length. [ 537.830357][T24162] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4743'. [ 537.864102][T24162] ip6_vti0 speed is unknown, defaulting to 1000 [ 538.089025][T24162] wg1 speed is unknown, defaulting to 1000 [ 538.096825][T24162] wg1 speed is unknown, defaulting to 1000 [ 538.190144][T24171] batadv2: entered promiscuous mode [ 538.241254][T24179] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4750'. [ 538.268277][T24179] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4750'. [ 538.358411][T24188] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4754'. [ 538.454649][T24171] ip6_vti0 speed is unknown, defaulting to 1000 [ 538.610341][T24196] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 538.745259][T24200] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4760'. [ 538.812976][T24196] batadv_slave_0: entered promiscuous mode [ 538.837381][T24196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4758'. [ 538.859779][T24196] netlink: 428 bytes leftover after parsing attributes in process `syz.2.4758'. [ 538.875636][T24196] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4758'. [ 538.893149][T24171] wg1 speed is unknown, defaulting to 1000 [ 538.917534][T24171] wg1 speed is unknown, defaulting to 1000 [ 539.196605][T24212] ip6_vti0 speed is unknown, defaulting to 1000 [ 539.466379][T24231] netlink: 'syz.1.4768': attribute type 12 has an invalid length. [ 539.516211][T24235] syzkaller0: left promiscuous mode [ 539.527416][T24235] syzkaller0: left allmulticast mode [ 539.634171][T24211] ip6_vti0 speed is unknown, defaulting to 1000 [ 539.820154][T24244] bond5: Removing last arp target with arp_interval on [ 540.029280][T24211] wg1 speed is unknown, defaulting to 1000 [ 540.045359][T24211] wg1 speed is unknown, defaulting to 1000 [ 540.061629][T24212] wg1 speed is unknown, defaulting to 1000 [ 540.259764][T24212] wg1 speed is unknown, defaulting to 1000 [ 540.371581][T24262] netlink: 'syz.1.4776': attribute type 1 has an invalid length. [ 540.509859][T24271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4779'. [ 540.936941][T24284] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4782'. [ 540.956347][T24284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4782'. [ 540.977332][T24284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4782'. [ 540.986307][T24284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4782'. [ 541.007955][T24277] ip6_vti0 speed is unknown, defaulting to 1000 [ 541.037626][T24284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4782'. [ 541.538367][T24302] 8021q: VLANs not supported on ip_vti0 [ 541.624453][T24277] wg1 speed is unknown, defaulting to 1000 [ 541.645703][T24277] wg1 speed is unknown, defaulting to 1000 [ 541.731420][T24310] x_tables: duplicate underflow at hook 2 [ 541.949093][T24325] mac80211_hwsim hwsim40 wlan1: entered allmulticast mode [ 543.467016][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 556.416978][T24348] __nla_validate_parse: 4 callbacks suppressed [ 556.416997][T24348] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4796'. [ 556.439920][T24356] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4797'. [ 556.456955][T24356] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4797'. [ 556.469581][T24357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4799'. [ 556.515707][T24360] ip6_vti0 speed is unknown, defaulting to 1000 [ 556.702694][T24364] sit0: entered promiscuous mode [ 556.743498][T24364] netlink: 'syz.2.4800': attribute type 1 has an invalid length. [ 556.789692][T24364] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4800'. [ 556.806533][T24378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4800'. [ 556.847235][T24374] syzkaller1: entered promiscuous mode [ 556.852732][T24374] syzkaller1: entered allmulticast mode [ 556.888982][T24364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4800'. [ 557.344374][T24360] wg1 speed is unknown, defaulting to 1000 [ 557.416647][T24384] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 557.444599][T24360] wg1 speed is unknown, defaulting to 1000 [ 557.589856][T24392] netlink: 'syz.1.4806': attribute type 1 has an invalid length. [ 557.693771][T24392] 8021q: adding VLAN 0 to HW filter on device bond6 [ 557.759669][T24398] bond6: (slave geneve3): making interface the new active one [ 557.780035][T24398] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 557.947057][T24402] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4808'. [ 557.980763][ T1147] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.996290][ T1147] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.025447][ T1147] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.044111][ T1147] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.221426][T24411] tls_set_device_offload: netdev not found [ 558.504635][T24422] ip6erspan0: entered promiscuous mode [ 558.566486][T24425] ip6erspan0: entered promiscuous mode [ 558.752005][T24445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4820'. [ 558.828221][T24447] tipc: Enabled bearer , priority 0 [ 558.841565][T24447] syzkaller0: entered promiscuous mode [ 558.851295][T24447] syzkaller0: entered allmulticast mode [ 558.864972][T24447] tipc: Resetting bearer [ 559.237660][T24466] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4826'. [ 559.247140][T24466] tc_dump_action: action bad kind [ 559.281094][T24466] bond5: (slave bridge0): Releasing active interface [ 559.584393][T24443] tipc: Resetting bearer [ 559.631256][T24443] tipc: Disabling bearer [ 559.743284][T24491] ip6_vti0 speed is unknown, defaulting to 1000 [ 560.310224][T24523] tipc: Enabling of bearer rejected, already enabled [ 560.625731][T24489] ip6_vti0 speed is unknown, defaulting to 1000 [ 560.628270][T24491] wg1 speed is unknown, defaulting to 1000 [ 560.723766][T24541] syz_tun: entered allmulticast mode [ 560.751681][T24541] dvmrp1: entered allmulticast mode [ 560.765082][T24491] wg1 speed is unknown, defaulting to 1000 [ 560.778157][T24540] syz_tun: left allmulticast mode [ 561.154624][T24525] ip6_vti0 speed is unknown, defaulting to 1000 [ 561.164455][T24489] wg1 speed is unknown, defaulting to 1000 [ 561.177307][T24489] wg1 speed is unknown, defaulting to 1000 [ 561.273894][T24558] tipc: Enabling of bearer rejected, already enabled [ 561.320961][T24558] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 561.333895][T24558] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 561.347500][T24557] tipc: Enabling of bearer rejected, already enabled [ 561.508357][T24525] wg1 speed is unknown, defaulting to 1000 [ 561.525478][T24525] wg1 speed is unknown, defaulting to 1000 [ 561.545739][T24555] ip6_vti0 speed is unknown, defaulting to 1000 [ 562.120391][T24590] tipc: Enabling of bearer rejected, already enabled [ 562.350578][T24555] wg1 speed is unknown, defaulting to 1000 [ 562.361225][T24555] wg1 speed is unknown, defaulting to 1000 [ 562.376230][T24603] __nla_validate_parse: 4 callbacks suppressed [ 562.376249][T24603] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4863'. [ 562.650976][T24616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4866'. [ 562.857906][T24622] 8021q: adding VLAN 0 to HW filter on device bond6 [ 562.865051][T24620] bond6: option mode: unable to set because the bond device is up [ 562.968159][T24630] netlink: 'syz.4.4868': attribute type 12 has an invalid length. [ 563.004734][T24630] netlink: 'syz.4.4868': attribute type 4 has an invalid length. [ 563.181004][T24637] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4870'. [ 563.354255][T24643] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4873'. [ 563.364650][T24643] netlink: 388 bytes leftover after parsing attributes in process `syz.2.4873'. [ 563.506249][T24658] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4875'. [ 563.524366][T24656] bond7: Removing last ns target with arp_interval on [ 563.783066][T24667] netlink: 'syz.4.4879': attribute type 1 has an invalid length. [ 563.831303][T24667] 8021q: adding VLAN 0 to HW filter on device bond6 [ 564.260482][T24694] x_tables: duplicate underflow at hook 1 [ 564.269249][T24694] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4888'. [ 564.362810][T24701] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4892'. [ 564.449568][T24709] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4892'. [ 564.507621][T24709] netlink: 34 bytes leftover after parsing attributes in process `syz.1.4892'. [ 564.742499][T24713] nbd1: detected capacity change from 0 to 127 [ 564.754223][ T5828] block nbd1: Receive control failed (result -32) [ 564.921807][T24729] ip6_vti0 speed is unknown, defaulting to 1000 [ 565.743220][T24729] wg1 speed is unknown, defaulting to 1000 [ 565.757857][T24737] ip6_vti0 speed is unknown, defaulting to 1000 [ 565.762690][T24729] wg1 speed is unknown, defaulting to 1000 [ 566.198225][T24745] ip6_vti0 speed is unknown, defaulting to 1000 [ 566.198234][T24737] wg1 speed is unknown, defaulting to 1000 [ 566.200323][T24737] wg1 speed is unknown, defaulting to 1000 [ 566.312129][T24788] sit0: left promiscuous mode [ 566.383810][T24788] batadv_slave_0: left promiscuous mode [ 566.399016][T24788] xfrm0: left promiscuous mode [ 566.424569][T24788] hsr0: left promiscuous mode [ 566.463310][T24788] macsec0: left promiscuous mode [ 566.475421][T24788] ip6tnl1: left promiscuous mode [ 566.485350][T24788] tipc: Resetting bearer [ 566.499109][T24788] bond4: left promiscuous mode [ 566.504018][T24788] ip6gretap1: left promiscuous mode [ 566.518401][T24788] ip6erspan0: left promiscuous mode [ 566.548158][T24788] veth5: left promiscuous mode [ 566.553563][T24788] macsec1: left promiscuous mode [ 566.586269][T14183] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.586323][ T5896] ip6_vti0 speed is unknown, defaulting to 1000 [ 566.603788][ T5896] syz2: Port: 1 Link DOWN [ 566.609451][T14183] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.646489][T24749] ip6_vti0 speed is unknown, defaulting to 1000 [ 566.646509][T14183] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.661725][ T5896] ip6_vti0 speed is unknown, defaulting to 1000 [ 566.668260][T14183] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.783636][T24772] ip6_vti0 speed is unknown, defaulting to 1000 [ 567.006081][T24745] wg1 speed is unknown, defaulting to 1000 [ 567.042731][T24749] wg1 speed is unknown, defaulting to 1000 [ 567.065440][T24799] ip6_vti0 speed is unknown, defaulting to 1000 [ 567.068449][T24749] wg1 speed is unknown, defaulting to 1000 [ 567.139867][T24772] wg1 speed is unknown, defaulting to 1000 [ 567.201688][T24745] wg1 speed is unknown, defaulting to 1000 [ 567.294943][T24772] wg1 speed is unknown, defaulting to 1000 [ 567.506196][T24799] wg1 speed is unknown, defaulting to 1000 [ 567.600609][T24799] wg1 speed is unknown, defaulting to 1000 [ 568.008771][T24831] xt_hashlimit: max too large, truncated to 1048576 [ 568.262223][T24833] macsec2: entered promiscuous mode [ 568.277246][T24833] macsec2: entered allmulticast mode [ 568.695398][T24847] __nla_validate_parse: 2 callbacks suppressed [ 568.695416][T24847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4931'. [ 568.831476][T22934] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 568.865195][T24847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4931'. [ 568.881944][T24847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4931'. [ 568.899021][T24847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4931'. [ 568.913930][T24847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4931'. [ 568.926607][T24847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4931'. [ 569.013921][T24859] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4934'. [ 569.053929][T24859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4934'. [ 569.055688][T24861] tipc: Enabling of bearer rejected, failed to enable media [ 569.453389][T24890] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4941'. [ 569.481606][T24896] syzkaller0: entered promiscuous mode [ 569.490974][T24896] syzkaller0: entered allmulticast mode [ 569.491054][T24888] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4941'. [ 570.547910][T24958] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.631352][T24967] bond8 (unregistering): Released all slaves [ 570.693453][T24958] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.765651][T24958] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.888385][T24958] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.041546][T22934] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.080950][T22934] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.095696][T24993] syzkaller0: entered promiscuous mode [ 571.102427][T24993] syzkaller0: entered allmulticast mode [ 571.242004][ T8028] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.263353][ T8028] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.305376][T25006] netlink: 'syz.2.4972': attribute type 2 has an invalid length. [ 571.515642][T25023] debugfs: 'netdev:nicvf0' already exists in 'phy31' [ 571.567909][T25026] syzkaller1: entered promiscuous mode [ 571.573427][T25026] syzkaller1: entered allmulticast mode [ 571.928187][T25035] tc_dump_action: action bad kind [ 571.938777][T25035] tipc: Enabling of bearer rejected, failed to enable media [ 572.618091][T25062] ip6_vti0 speed is unknown, defaulting to 1000 [ 572.786180][ T8028] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 573.153117][T25062] wg1 speed is unknown, defaulting to 1000 [ 573.161037][T25062] wg1 speed is unknown, defaulting to 1000 [ 573.901414][T25114] netlink: 'syz.2.5002': attribute type 3 has an invalid length. [ 573.917108][T25117] __nla_validate_parse: 7 callbacks suppressed [ 573.917125][T25117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5000'. [ 573.934230][T25114] netlink: 'syz.2.5002': attribute type 1 has an invalid length. [ 573.955828][T25114] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.5002'. [ 574.060549][T25126] x_tables: unsorted entry at hook 3 [ 574.097349][T25128] syz_tun: entered allmulticast mode [ 574.114354][T25128] pimreg: entered allmulticast mode [ 574.135589][T25129] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode [ 574.161922][T25127] syz_tun: left allmulticast mode [ 574.388100][T25144] netlink: 'syz.2.5008': attribute type 1 has an invalid length. [ 574.450383][T25143] x_tables: duplicate underflow at hook 1 [ 574.461327][T25147] x_tables: duplicate underflow at hook 1 [ 574.648953][T25150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.768579][T25144] 8021q: adding VLAN 0 to HW filter on device bond8 [ 574.806478][T25135] mac80211_hwsim hwsim30 wlan0: left allmulticast mode [ 574.862391][T25135] bond8: (slave wlan0): Opening slave failed [ 574.956572][T25158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5015'. [ 574.979686][T25159] tipc: Enabling of bearer rejected, already enabled [ 574.988195][T25158] netlink: 'syz.1.5015': attribute type 1 has an invalid length. [ 575.006039][T25158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5015'. [ 575.181388][T25167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5019'. [ 575.253199][T25167] macvtap1: entered promiscuous mode [ 575.372532][T25175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5021'. [ 575.568387][T25193] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5027'. [ 575.579966][T25193] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5027'. [ 575.596541][T25193] IPv6: sit4: Disabled Multicast RS [ 575.982228][T25217] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5033'. [ 577.076964][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 577.328448][T25282] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5049'. [ 578.449625][T25336] ip6_vti0 speed is unknown, defaulting to 1000 [ 578.532120][T25346] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20004 [ 578.649206][T25355] pim6reg1: entered promiscuous mode [ 578.654555][T25355] pim6reg1: entered allmulticast mode [ 579.006440][T25370] __nla_validate_parse: 10 callbacks suppressed [ 579.006458][T25370] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5074'. [ 579.009390][T25336] wg1 speed is unknown, defaulting to 1000 [ 579.013975][T25335] ip6_vti0 speed is unknown, defaulting to 1000 [ 579.057712][T25336] wg1 speed is unknown, defaulting to 1000 [ 579.074881][T25370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5074'. [ 579.095009][ T43] IPVS: starting estimator thread 0... [ 579.187610][T25377] IPVS: using max 28 ests per chain, 67200 per kthread [ 579.404654][T25383] bond0: entered promiscuous mode [ 579.430652][T25383] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 579.459835][T25383] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 579.492924][T25383] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 579.503187][T25383] bond0: left promiscuous mode [ 579.619293][T25348] ip6_vti0 speed is unknown, defaulting to 1000 [ 579.922618][T25378] ip6_vti0 speed is unknown, defaulting to 1000 [ 580.048584][T25378] wg1 speed is unknown, defaulting to 1000 [ 580.056508][T25348] wg1 speed is unknown, defaulting to 1000 [ 580.057427][T25378] wg1 speed is unknown, defaulting to 1000 [ 580.072859][T25402] ip6_vti0 speed is unknown, defaulting to 1000 [ 580.090812][T25335] wg1 speed is unknown, defaulting to 1000 [ 580.090826][T25348] wg1 speed is unknown, defaulting to 1000 [ 580.158502][T25335] wg1 speed is unknown, defaulting to 1000 [ 580.473807][T25402] wg1 speed is unknown, defaulting to 1000 [ 580.498901][T25402] wg1 speed is unknown, defaulting to 1000 [ 580.925359][T25413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5085'. [ 581.258932][T25421] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 581.392783][T25422] pim6reg1: entered promiscuous mode [ 581.418230][T25422] pim6reg1: entered allmulticast mode [ 581.634378][T25439] netlink: 'syz.2.5093': attribute type 1 has an invalid length. [ 581.677141][T25439] 8021q: adding VLAN 0 to HW filter on device bond9 [ 581.828275][T25456] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 581.890205][T25458] dvmrp8: entered allmulticast mode [ 581.976556][T25459] ip6_vti0 speed is unknown, defaulting to 1000 [ 582.023040][T25451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 582.062273][T25474] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5101'. [ 582.275393][T25459] wg1 speed is unknown, defaulting to 1000 [ 582.283852][T25459] wg1 speed is unknown, defaulting to 1000 [ 582.363833][T25482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5105'. [ 582.453557][T25484] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5106'. [ 582.622771][T25491] macvtap2: entered allmulticast mode [ 582.631549][T25491] mac80211_hwsim hwsim37 wlan0: entered allmulticast mode [ 582.671177][T25491] mac80211_hwsim hwsim37 wlan0: left allmulticast mode [ 582.932375][T25515] macsec1: entered promiscuous mode [ 582.937834][T25515] macsec1: entered allmulticast mode [ 582.943640][T25459] dvmrp8: left allmulticast mode [ 583.295432][T25544] ip6_vti0 speed is unknown, defaulting to 1000 [ 583.563936][T25559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5125'. [ 583.689025][T25562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 583.690416][T25556] ip6_vti0 speed is unknown, defaulting to 1000 [ 583.699769][T25544] wg1 speed is unknown, defaulting to 1000 [ 583.713247][T25544] wg1 speed is unknown, defaulting to 1000 [ 583.721273][T25562] netlink: 'syz.1.5126': attribute type 21 has an invalid length. [ 583.730183][T25562] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5126'. [ 583.741195][T25562] netlink: 'syz.1.5126': attribute type 1 has an invalid length. [ 583.753176][T25562] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5126'. [ 583.914170][T25569] xt_TCPMSS: Only works on TCP SYN packets [ 584.045835][T25575] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5130'. [ 584.073709][T25575] syzkaller0: entered promiscuous mode [ 584.085250][T25575] syzkaller0: entered allmulticast mode [ 584.204644][T25581] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 584.233621][T25572] xt_TCPMSS: Only works on TCP SYN packets [ 584.244737][T25556] wg1 speed is unknown, defaulting to 1000 [ 584.259372][T25556] wg1 speed is unknown, defaulting to 1000 [ 584.269251][T25580] siw: device registration error -23 [ 584.355869][T25593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5133'. [ 584.807639][T25607] bridge0: port 1(batadv1) entered blocking state [ 584.850488][T25607] bridge0: port 1(batadv1) entered disabled state [ 584.858947][T25607] batadv1: entered allmulticast mode [ 584.917894][T25607] batadv1: entered promiscuous mode [ 584.954700][T25607] bridge0: port 2(batadv2) entered blocking state [ 584.962106][T25607] bridge0: port 2(batadv2) entered disabled state [ 584.969501][T25607] batadv2: entered allmulticast mode [ 584.995519][T25607] batadv2: entered promiscuous mode [ 585.013161][T25607] bridge0: port 3(batadv3) entered blocking state [ 585.021281][T25607] bridge0: port 3(batadv3) entered disabled state [ 585.029710][T25607] batadv3: entered allmulticast mode [ 585.040481][T25607] batadv3: entered promiscuous mode [ 585.060256][T25607] bridge0: port 4(batadv4) entered blocking state [ 585.067755][T25607] bridge0: port 4(batadv4) entered disabled state [ 585.074446][T25607] batadv4: entered allmulticast mode [ 585.082510][T25607] batadv4: entered promiscuous mode [ 585.100103][T25613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5139'. [ 585.135905][T25607] bridge0: port 5(batadv5) entered blocking state [ 585.143219][T25607] bridge0: port 5(batadv5) entered disabled state [ 585.153349][T25607] batadv5: entered allmulticast mode [ 585.161471][T25607] batadv5: entered promiscuous mode [ 585.179248][T25607] bridge0: port 6(batadv6) entered blocking state [ 585.186215][T25607] bridge0: port 6(batadv6) entered disabled state [ 585.193540][T25607] batadv6: entered allmulticast mode [ 585.201503][T25607] batadv6: entered promiscuous mode [ 585.215860][T25607] bridge0: port 7(batadv7) entered blocking state [ 585.224166][T25607] bridge0: port 7(batadv7) entered disabled state [ 585.237806][T25607] batadv7: entered allmulticast mode [ 585.249751][T25607] batadv7: entered promiscuous mode [ 585.277133][ T1147] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 585.286506][ T1147] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 585.304504][T25607] bridge0: port 8(batadv8) entered blocking state [ 585.325141][T25607] bridge0: port 8(batadv8) entered disabled state [ 585.333711][T25607] batadv8: entered allmulticast mode [ 585.340967][T25607] batadv8: entered promiscuous mode [ 585.361021][T25607] bridge0: port 9(batadv9) entered blocking state [ 585.374399][T25607] bridge0: port 9(batadv9) entered disabled state [ 585.387731][T25607] batadv9: entered allmulticast mode [ 585.398070][T25607] batadv9: entered promiscuous mode [ 585.399934][T25625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5144'. [ 585.414855][T25625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5144'. [ 585.422838][T25620] tipc: Enabled bearer , priority 0 [ 585.424455][T25625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5144'. [ 585.443679][T25607] bridge0: port 10(batadv10) entered blocking state [ 585.455746][T25607] bridge0: port 10(batadv10) entered disabled state [ 585.457472][ T1147] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 585.468087][T25607] batadv10: entered allmulticast mode [ 585.472232][ T1147] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 585.479614][T25607] batadv10: entered promiscuous mode [ 585.516348][T25620] syzkaller0: entered promiscuous mode [ 585.522430][T25620] syzkaller0: entered allmulticast mode [ 585.536625][T25622] ip6_vti0 speed is unknown, defaulting to 1000 [ 585.537486][ T1147] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 585.552796][ T1147] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 585.561997][T25623] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 585.604452][T25607] bridge0: port 11(batadv11) entered blocking state [ 585.621865][T25607] bridge0: port 11(batadv11) entered disabled state [ 585.624254][ T1147] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 585.639821][T25607] batadv11: entered allmulticast mode [ 585.645252][ T1147] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 585.648766][T25607] batadv11: entered promiscuous mode [ 585.706947][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 585.717538][ T1147] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled [ 585.727334][ T1147] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled [ 585.759027][T25633] tipc: Resetting bearer [ 585.765444][ T1147] batman_adv: batadv6: No IGMP Querier present - multicast optimizations disabled [ 585.775299][ T1147] batman_adv: batadv6: No MLD Querier present - multicast optimizations disabled [ 585.796461][T25619] tipc: Resetting bearer [ 585.801073][ T1147] batman_adv: batadv7: No IGMP Querier present - multicast optimizations disabled [ 585.811760][ T1147] batman_adv: batadv7: No MLD Querier present - multicast optimizations disabled [ 585.827617][ T1147] batman_adv: batadv8: No IGMP Querier present - multicast optimizations disabled [ 585.837376][ T1147] batman_adv: batadv8: No MLD Querier present - multicast optimizations disabled [ 585.858503][ T1147] batman_adv: batadv9: No IGMP Querier present - multicast optimizations disabled [ 585.868731][ T1147] batman_adv: batadv9: No MLD Querier present - multicast optimizations disabled [ 585.937409][T22934] batman_adv: batadv10: No IGMP Querier present - multicast optimizations disabled [ 585.947345][T22934] batman_adv: batadv10: No MLD Querier present - multicast optimizations disabled [ 586.119694][ T8028] batman_adv: batadv11: No IGMP Querier present - multicast optimizations disabled [ 586.129699][ T8028] batman_adv: batadv11: No MLD Querier present - multicast optimizations disabled [ 588.602558][T25619] tipc: Disabling bearer [ 588.622673][T25638] veth6: entered allmulticast mode [ 588.647305][T25622] wg1 speed is unknown, defaulting to 1000 [ 588.682202][T25622] wg1 speed is unknown, defaulting to 1000 [ 589.044640][T25664] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.152091][T25671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5155'. [ 589.183185][T25670] can: request_module (can-proto-0) failed. [ 589.847009][ T30] audit: type=1800 audit(1762802045.023:19): pid=25689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5161" name="memory.events" dev="tmpfs" ino=2710 res=0 errno=0 [ 589.893499][ T30] audit: type=1804 audit(1762802045.023:20): pid=25689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.5161" name="memory.events" dev="tmpfs" ino=2710 res=1 errno=0 [ 590.172109][T25713] netlink: 'syz.1.5167': attribute type 1 has an invalid length. [ 590.265750][T25709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5165'. [ 590.486513][T25729] sch_tbf: burst 1447 is lower than device veth0_to_hsr mtu (1514) ! [ 590.750740][T25757] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 590.867378][T25747] ip6_vti0 speed is unknown, defaulting to 1000 [ 591.167253][T25747] wg1 speed is unknown, defaulting to 1000 [ 591.175300][T25747] wg1 speed is unknown, defaulting to 1000 [ 591.250652][T25783] netlink: 'syz.3.5184': attribute type 11 has an invalid length. [ 591.272301][T25783] netlink: 'syz.3.5184': attribute type 11 has an invalid length. [ 591.281531][T25783] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5184'. [ 591.305654][T25790] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 591.323056][T25790] bond0: (slave gre0): Error -95 calling set_mac_address [ 591.337451][T25790] netlink: 'syz.1.5186': attribute type 39 has an invalid length. [ 591.354437][T25788] ip6_vti0 speed is unknown, defaulting to 1000 [ 591.356155][T25782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.006638][T25788] wg1 speed is unknown, defaulting to 1000 [ 592.041110][T25788] wg1 speed is unknown, defaulting to 1000 [ 592.076565][T25823] netlink: 'syz.3.5193': attribute type 1 has an invalid length. [ 592.158264][T25827] 8021q: VLANs not supported on ip6_vti0 [ 592.803843][T25845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5199'. [ 593.142718][T25876] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 593.168461][T25877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5209'. [ 593.185897][T25877] ip6gretap2: entered promiscuous mode [ 593.194728][T25877] ip6gretap2: entered allmulticast mode [ 593.288432][T25888] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 593.301645][T25890] netlink: 'syz.3.5211': attribute type 1 has an invalid length. [ 593.347045][T25890] 8021q: adding VLAN 0 to HW filter on device bond6 [ 593.366546][T25890] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 593.379514][T25890] bond6: (slave batadv2): making interface the new active one [ 593.389443][T25890] bond6: (slave batadv2): Enslaving as an active interface with an up link [ 593.402990][T25890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5211'. [ 593.714511][T25890] bond6 (unregistering): (slave batadv2): Releasing active interface [ 593.787040][T25902] IPVS: Scheduler module ip_vs_sip not found [ 593.796322][T25890] bond6 (unregistering): Released all slaves [ 593.857484][T25902] IPVS: length: 141 != 8 [ 593.862488][T25902] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20003 [ 593.909357][T25906] ip6_vti0 speed is unknown, defaulting to 1000 [ 593.946578][T25909] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5215'. [ 594.017412][T25909] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5215'. [ 594.105546][T25920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5219'. [ 594.263377][T25929] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5221'. [ 594.363667][T25934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5224'. [ 594.397518][T25934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5224'. [ 594.412432][T25906] wg1 speed is unknown, defaulting to 1000 [ 594.423048][T25906] wg1 speed is unknown, defaulting to 1000 [ 594.646134][T25946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 594.793822][T25948] vlan1: entered promiscuous mode [ 594.800786][T25948] team0: entered promiscuous mode [ 594.828363][T25951] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 594.995737][T25953] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 595.025162][T25957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5230'. [ 595.224182][T25960] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address [ 595.235658][T25960] bond8: (slave vxcan5): Error -95 calling set_mac_address [ 595.305325][T25964] macvlan3: entered promiscuous mode [ 595.319783][T25964] macvlan3: entered allmulticast mode [ 595.326452][T25964] bond8: (slave macvlan3): Error -98 calling set_mac_address [ 595.451792][T25975] netlink: 'syz.4.5232': attribute type 10 has an invalid length. [ 595.461171][T25975] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5232'. [ 595.481166][T25975] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 595.564672][T25981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5236'. [ 595.606029][T25981] blkio.reset_stats is deprecated [ 595.625250][T25984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.635024][T25984] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.645269][T25984] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 595.915207][T25988] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5238'. [ 595.942610][T25988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5238'. [ 597.089250][T26037] netlink: 'syz.0.5249': attribute type 10 has an invalid length. [ 597.150940][T26042] netlink: 'syz.0.5249': attribute type 10 has an invalid length. [ 597.160550][T26042] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5249'. [ 597.174929][T26037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.191116][T26037] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 597.219384][T26042] batadv0: entered promiscuous mode [ 597.227760][T26042] batadv0: entered allmulticast mode [ 597.246988][T26042] bond0: (slave batadv0): Releasing backup interface [ 597.258966][T26042] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 597.295762][T26045] pim6reg1: entered promiscuous mode [ 597.301563][T26045] pim6reg1: entered allmulticast mode [ 597.377645][T26056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5254'. [ 597.419911][T26056] netlink: 'syz.4.5254': attribute type 21 has an invalid length. [ 597.558448][T26067] ip6_vti0 speed is unknown, defaulting to 1000 [ 597.859217][T26067] wg1 speed is unknown, defaulting to 1000 [ 597.868077][T26067] wg1 speed is unknown, defaulting to 1000 [ 598.260781][T26114] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 598.315325][T26121] netlink: 'syz.2.5270': attribute type 1 has an invalid length. [ 598.382105][T26120] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 598.551489][T26111] ip6_vti0 speed is unknown, defaulting to 1000 [ 598.551546][T26136] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 598.982838][T26143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 599.048045][T26140] ip6_vti0 speed is unknown, defaulting to 1000 [ 599.049396][T26111] wg1 speed is unknown, defaulting to 1000 [ 599.065196][T26111] wg1 speed is unknown, defaulting to 1000 [ 599.399496][T26167] __nla_validate_parse: 7 callbacks suppressed [ 599.399516][T26167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5281'. [ 599.457311][T26172] netlink: 'syz.0.5281': attribute type 1 has an invalid length. [ 599.491515][T26167] : entered promiscuous mode [ 599.528904][T26140] wg1 speed is unknown, defaulting to 1000 [ 599.531142][T26175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5281'. [ 599.558748][T26174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5284'. [ 599.588864][T26167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5281'. [ 599.597838][T26172] bond1: entered promiscuous mode [ 599.598230][T26172] 8021q: adding VLAN 0 to HW filter on device bond1 [ 599.612230][T26140] wg1 speed is unknown, defaulting to 1000 [ 599.789304][T26193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5287'. [ 599.960286][T26193] 8021q: adding VLAN 0 to HW filter on device bond7 [ 599.985640][T26180] ip6_vti0 speed is unknown, defaulting to 1000 [ 600.067586][T26205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5289'. [ 600.130525][T26196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.153302][T26196] bond7: (slave bond0): Enslaving as an active interface with an up link [ 600.231810][T26209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5290'. [ 600.243311][T26209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5290'. [ 600.352345][T26213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5291'. [ 600.374709][T26213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5291'. [ 600.400360][T26180] wg1 speed is unknown, defaulting to 1000 [ 600.406331][T14171] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.416678][T14171] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.428499][T14171] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.437886][T26180] wg1 speed is unknown, defaulting to 1000 [ 600.443812][T14171] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.559432][T26217] 8021q: VLANs not supported on nlmon0 [ 600.565727][T26218] 8021q: VLANs not supported on nlmon0 [ 601.375084][T26255] ip6_vti0 speed is unknown, defaulting to 1000 [ 601.474502][T26261] tipc: Enabled bearer , priority 0 [ 601.482198][T26261] syzkaller0: entered promiscuous mode [ 601.487846][T26261] syzkaller0: entered allmulticast mode [ 601.531610][T26271] netlink: 'syz.1.5307': attribute type 1 has an invalid length. [ 601.611651][T26261] tipc: Resetting bearer [ 601.662250][T26261] tipc: Disabling bearer [ 601.687243][T26255] wg1 speed is unknown, defaulting to 1000 [ 601.698229][T26255] wg1 speed is unknown, defaulting to 1000 [ 602.012434][ T5828] Bluetooth: hci2: link tx timeout [ 602.018677][ T5828] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 602.026666][ T5845] Bluetooth: hci2: link tx timeout [ 602.033955][ T5845] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 603.240531][T26372] netlink: 'syz.4.5332': attribute type 7 has an invalid length. [ 603.248416][T26372] netlink: 'syz.4.5332': attribute type 8 has an invalid length. [ 603.338257][T26372] SET target dimension over the limit! [ 603.344091][T26381] netlink: zone id is out of range [ 603.354010][T26381] netlink: zone id is out of range [ 603.364128][T26381] netlink: zone id is out of range [ 603.376550][T26381] netlink: zone id is out of range [ 603.417010][T26381] netlink: zone id is out of range [ 603.436919][T26381] netlink: zone id is out of range [ 603.537508][T26381] netlink: zone id is out of range [ 603.561393][T26381] netlink: zone id is out of range [ 603.583151][T26381] netlink: zone id is out of range [ 603.611690][T26381] netlink: zone id is out of range [ 603.626973][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 603.829190][T26399] netlink: 'syz.2.5339': attribute type 1 has an invalid length. [ 603.867618][T26401] netlink: 'syz.2.5339': attribute type 1 has an invalid length. [ 604.084227][T26407] ip6_vti0 speed is unknown, defaulting to 1000 [ 604.107263][ T5845] Bluetooth: hci2: command 0x0405 tx timeout [ 604.681637][T26407] wg1 speed is unknown, defaulting to 1000 [ 604.689686][T26407] wg1 speed is unknown, defaulting to 1000 [ 605.152175][T26437] ip6_vti0 speed is unknown, defaulting to 1000 [ 605.670502][T26460] geneve3: entered promiscuous mode [ 605.675968][T26460] geneve3: entered allmulticast mode [ 605.708154][T26437] wg1 speed is unknown, defaulting to 1000 [ 605.745209][T26437] wg1 speed is unknown, defaulting to 1000 [ 605.843943][T26475] syzkaller1: entered promiscuous mode [ 605.863168][T26475] syzkaller1: entered allmulticast mode [ 606.137113][T26490] __nla_validate_parse: 10 callbacks suppressed [ 606.137130][T26490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5358'. [ 606.154722][T26494] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5359'. [ 606.166974][T26490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5358'. [ 606.187925][T26494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5359'. [ 606.197008][T26490] netlink: 'syz.1.5358': attribute type 13 has an invalid length. [ 606.251122][T26494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5359'. [ 606.314556][T26494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5359'. [ 606.324043][T26503] netlink: 'syz.2.5362': attribute type 1 has an invalid length. [ 606.338760][T26503] netlink: 'syz.2.5362': attribute type 7 has an invalid length. [ 606.358793][T26503] netlink: 'syz.2.5362': attribute type 8 has an invalid length. [ 606.366557][T26503] netlink: 208 bytes leftover after parsing attributes in process `syz.2.5362'. [ 606.407273][T26503] NCSI netlink: No device for ifindex 65584 [ 606.439309][T26505] syzkaller0: entered promiscuous mode [ 606.473046][T26505] syzkaller0: entered allmulticast mode [ 606.823146][T26522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5366'. [ 606.879815][T26522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5366'. [ 606.923423][T26525] netlink: 'syz.0.5367': attribute type 39 has an invalid length. [ 606.982797][T26525] hsr_slave_1 (unregistering): left promiscuous mode [ 607.064208][T26529] ip6gre2: entered promiscuous mode [ 607.067360][T26419] Bluetooth: hci2: command 0x0405 tx timeout [ 607.086451][T26529] ip6gre2: entered allmulticast mode [ 607.198225][T26531] tipc: Enabling of bearer rejected, already enabled [ 607.229142][T26531] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5368'. [ 608.116252][T26570] bond8: option broadcast_neighbor: invalid value (5) [ 608.140731][T26570] bond8 (unregistering): Released all slaves [ 608.290723][T26577] geneve2: entered promiscuous mode [ 608.296144][T26577] geneve2: entered allmulticast mode [ 608.311206][ T1147] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 608.320865][ T1147] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 608.350205][T26586] netlink: 'syz.3.5379': attribute type 2 has an invalid length. [ 608.358436][ T1147] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 608.388235][ T1147] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 608.698714][T26587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.919095][T26606] netlink: 'syz.0.5387': attribute type 1 has an invalid length. [ 608.980400][T26606] 8021q: adding VLAN 0 to HW filter on device bond2 [ 609.031349][T26606] bond2: (slave gretap1): making interface the new active one [ 609.041383][T26606] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 609.168206][T26611] 8021q: adding VLAN 0 to HW filter on device bond11 [ 609.360264][T26628] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 609.526442][T26625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.575219][T26634] tipc: Enabling of bearer rejected, already enabled [ 609.907444][T26641] syzkaller1: entered promiscuous mode [ 609.913988][T26641] syzkaller1: entered allmulticast mode [ 610.073401][T26656] ip6_vti0 speed is unknown, defaulting to 1000 [ 610.903489][T26658] ip6_vti0 speed is unknown, defaulting to 1000 [ 610.913368][T26656] wg1 speed is unknown, defaulting to 1000 [ 610.946548][T26656] wg1 speed is unknown, defaulting to 1000 [ 611.288337][T26708] __nla_validate_parse: 7 callbacks suppressed [ 611.288355][T26708] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5413'. [ 611.446645][T26658] wg1 speed is unknown, defaulting to 1000 [ 611.458285][T26711] bond0: (slave bond_slave_0): Releasing backup interface [ 611.459421][T26703] ip6_vti0 speed is unknown, defaulting to 1000 [ 611.476044][T26711] bond0: (slave bond_slave_1): Releasing backup interface [ 611.513256][T26711] team0: Port device C removed [ 611.532480][T26711] team0: Port device team_slave_1 removed [ 611.538886][T26711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.568592][T26711] net_ratelimit: 8 callbacks suppressed [ 611.568611][T26711] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 611.620199][T26658] wg1 speed is unknown, defaulting to 1000 [ 611.641990][T26724] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 611.653220][T26724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 611.731330][T26729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5417'. [ 611.830018][T26703] wg1 speed is unknown, defaulting to 1000 [ 611.854678][T26703] wg1 speed is unknown, defaulting to 1000 [ 612.080258][T26738] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 612.090126][T26738] netlink: 'syz.1.5418': attribute type 58 has an invalid length. [ 612.098104][T26738] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5418'. [ 612.582320][T26749] ip6_vti0 speed is unknown, defaulting to 1000 [ 612.587306][T26754] netlink: 'syz.0.5420': attribute type 4 has an invalid length. [ 612.603415][T26754] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5420'. [ 612.609763][T26755] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5422'. [ 612.668097][T26755] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5422'. [ 612.738229][T26755] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5422'. [ 612.925255][T26767] tipc: Enabled bearer , priority 0 [ 612.949866][T26767] syzkaller0: entered promiscuous mode [ 612.963100][T26767] syzkaller0: entered allmulticast mode [ 613.044618][T26767] tipc: Resetting bearer [ 613.143698][T26763] ip6_vti0 speed is unknown, defaulting to 1000 [ 613.154725][T26749] wg1 speed is unknown, defaulting to 1000 [ 613.178480][T26749] wg1 speed is unknown, defaulting to 1000 [ 613.478187][T26780] netlink: 'syz.1.5427': attribute type 6 has an invalid length. [ 613.540639][T26760] tipc: Resetting bearer [ 613.565442][T26760] tipc: Disabling bearer [ 613.616582][T26763] wg1 speed is unknown, defaulting to 1000 [ 613.692130][T26763] wg1 speed is unknown, defaulting to 1000 [ 614.297821][T26795] xt_hashlimit: max too large, truncated to 1048576 [ 614.924061][T26822] netlink: 'syz.0.5436': attribute type 2 has an invalid length. [ 614.949927][T26820] netlink: 1033 bytes leftover after parsing attributes in process `syz.0.5436'. [ 615.009051][T26836] netlink: 'syz.2.5443': attribute type 3 has an invalid length. [ 615.040173][T26836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5443'. [ 615.073223][T26836] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5443'. [ 615.642239][T26870] netlink: 'syz.3.5453': attribute type 12 has an invalid length. [ 616.002837][T26886] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 616.167084][T26888] pim6reg: entered allmulticast mode [ 616.184840][T26889] pim6reg: left allmulticast mode [ 616.236855][T26893] netlink: 'syz.2.5459': attribute type 6 has an invalid length. [ 616.383373][T26900] __nla_validate_parse: 2 callbacks suppressed [ 616.383390][T26900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5461'. [ 616.418134][T26902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5460'. [ 616.625416][T26907] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 616.641502][T26911] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5464'. [ 616.661163][T26915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5462'. [ 616.987461][T26942] netlink: 'syz.0.5470': attribute type 1 has an invalid length. [ 617.005589][T26942] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5470'. [ 617.114246][T26950] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5472'. [ 617.129516][T26950] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5472'. [ 617.248494][T26959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5474'. [ 617.286408][T26959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5474'. [ 617.309847][T26965] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5477'. [ 617.321959][T26966] syzkaller1: entered promiscuous mode [ 617.329319][T26966] syzkaller1: entered allmulticast mode [ 617.526627][T26977] syzkaller0: entered promiscuous mode [ 617.540658][T26977] syzkaller0: entered allmulticast mode [ 617.555027][T26976] tipc: Enabling of bearer rejected, already enabled [ 617.804542][T26988] ip6t_REJECT: ECHOREPLY is not supported [ 617.833920][T26984] ip6_vti0 speed is unknown, defaulting to 1000 [ 618.311090][T26997] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.465147][T26997] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.520830][T27004] syzkaller0: left promiscuous mode [ 618.529394][T27004] syzkaller0: left allmulticast mode [ 618.626635][T26997] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.667526][T26984] wg1 speed is unknown, defaulting to 1000 [ 618.688627][T26984] wg1 speed is unknown, defaulting to 1000 [ 618.784505][T27016] chnl_net:caif_netlink_parms(): no params data found [ 618.847906][T26997] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.958704][T27022] ip6_vti0 speed is unknown, defaulting to 1000 [ 619.409721][ T1147] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.453103][T27022] wg1 speed is unknown, defaulting to 1000 [ 619.491377][T27022] wg1 speed is unknown, defaulting to 1000 [ 619.491400][ T8028] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.617769][ T8028] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.694127][ T8028] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.893173][T27046] netlink: 'syz.1.5493': attribute type 2 has an invalid length. [ 620.201128][T27058] syzkaller1: entered promiscuous mode [ 620.221164][T27058] syzkaller1: entered allmulticast mode [ 620.535204][T27080] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20003 [ 620.604975][T27084] syzkaller0: entered promiscuous mode [ 620.611992][T27084] syzkaller0: entered allmulticast mode [ 620.819406][T27094] ip6_vti0 speed is unknown, defaulting to 1000 [ 621.067301][T27094] wg1 speed is unknown, defaulting to 1000 [ 621.075933][T27094] wg1 speed is unknown, defaulting to 1000 [ 621.101478][T27095] netlink: 'syz.3.5507': attribute type 17 has an invalid length. [ 621.122748][T27095] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 621.525015][T27120] __nla_validate_parse: 14 callbacks suppressed [ 621.525034][T27120] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5513'. [ 621.645999][T27121] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.673665][T27121] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.685348][T27121] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 53414 - 0 [ 621.699840][T27121] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 40374 - 0 [ 621.738218][T27122] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5513'. [ 621.749129][T27126] syzkaller0: entered promiscuous mode [ 621.754648][T27126] syzkaller0: entered allmulticast mode [ 621.858640][T27121] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.871087][T27121] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.883668][T27121] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 53414 - 0 [ 621.894972][T27121] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 40374 - 0 [ 622.022552][T27121] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.033617][T27121] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.044866][T27121] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 53414 - 0 [ 622.059849][T27121] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 40374 - 0 [ 622.181223][T27121] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.227454][T27121] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.258702][T27121] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 53414 - 0 [ 622.296300][T27121] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 40374 - 0 [ 622.362172][T27162] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5521'. [ 622.417364][T27160] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 622.571348][T27121] Failed to register nexthop notifier [ 622.655457][T27168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5524'. [ 622.685168][T27172] tipc: Enabled bearer , priority 0 [ 622.717473][T27172] syzkaller0: entered promiscuous mode [ 622.723059][T27172] syzkaller0: entered allmulticast mode [ 622.732937][T27172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5526'. [ 622.864633][T27178] tipc: Resetting bearer [ 622.875018][T27176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5527'. [ 622.892245][T27176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5527'. [ 622.902746][T27179] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5528'. [ 623.030702][T27183] netlink: 'syz.4.5530': attribute type 83 has an invalid length. [ 623.115097][T27186] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5529'. [ 623.120339][T27171] tipc: Resetting bearer [ 623.200413][T27171] tipc: Disabling bearer [ 623.225580][T27192] netlink: 'syz.2.5532': attribute type 1 has an invalid length. [ 623.355161][T27198] team0: Caught tx_queue_len zero misconfig [ 623.410816][T27205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5535'. [ 623.523097][T27205] bond12: entered promiscuous mode [ 623.537704][T27205] 8021q: adding VLAN 0 to HW filter on device bond12 [ 623.645835][T27214] 8021q: adding VLAN 0 to HW filter on device bond13 [ 623.675296][T27214] bond13: entered promiscuous mode [ 623.702318][T27214] bond12: (slave bond13): Enslaving as an active interface with an up link [ 624.173841][T27253] netlink: 'syz.0.5545': attribute type 11 has an invalid length. [ 624.212340][T27258] netlink: 'syz.4.5547': attribute type 8 has an invalid length. [ 624.219406][T27253] netlink: 'syz.0.5545': attribute type 11 has an invalid length. [ 624.888716][T27274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 624.971182][T26419] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 624.983147][T26419] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 625.006026][T26419] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 625.009370][T27274] ip6_vti0 speed is unknown, defaulting to 1000 [ 625.031728][T26419] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 625.041835][T26419] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 625.550786][T27289] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 625.610550][T27289] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 625.891042][T27276] ip6_vti0 speed is unknown, defaulting to 1000 [ 625.907817][T27274] wg1 speed is unknown, defaulting to 1000 [ 625.925869][T27274] wg1 speed is unknown, defaulting to 1000 [ 626.186093][T27304] delete_channel: no stack [ 626.265670][T27305] ip6tnl0: Caught tx_queue_len zero misconfig [ 626.315362][T27276] wg1 speed is unknown, defaulting to 1000 [ 626.393649][T27276] wg1 speed is unknown, defaulting to 1000 [ 626.395554][T27312] openvswitch: netlink: Flow actions attr not present in new flow. [ 626.418660][T27316] netlink: 'syz.3.5563': attribute type 1 has an invalid length. [ 626.473194][T27311] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 626.495293][T27316] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 626.816304][T27337] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 626.995739][T27276] chnl_net:caif_netlink_parms(): no params data found [ 627.066913][ T5828] Bluetooth: hci3: command tx timeout [ 627.203704][T27346] veth1_to_hsr: entered promiscuous mode [ 627.210999][T27346] macvtap0: entered promiscuous mode [ 627.224529][T27346] macvtap0: entered allmulticast mode [ 627.241224][T27346] veth1_to_hsr: entered allmulticast mode [ 627.555742][T27357] __nla_validate_parse: 4 callbacks suppressed [ 627.555759][T27357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5574'. [ 627.569541][T27355] ip6_vti0: Caught tx_queue_len zero misconfig [ 627.595496][T27276] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.605245][T27276] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.622187][T27276] bridge_slave_0: entered allmulticast mode [ 627.640222][T27276] bridge_slave_0: entered promiscuous mode [ 627.665133][T27357] xfrm1: entered promiscuous mode [ 627.676989][T27357] xfrm1: entered allmulticast mode [ 627.682996][T27357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5574'. [ 627.683033][T27276] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.707052][T27276] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.724627][T27276] bridge_slave_1: entered allmulticast mode [ 627.736361][T27276] bridge_slave_1: entered promiscuous mode [ 627.844804][T27276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.872813][T27276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.895877][T27370] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 627.964999][T27371] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5575'. [ 627.965217][T27370] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 628.083855][T27370] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 628.126257][T27377] xt_nat: multiple ranges no longer supported [ 628.178799][T27370] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 628.240382][T27276] team0: Port device team_slave_0 added [ 628.275622][T27276] team0: Port device team_slave_1 added [ 628.381727][T27276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.388885][T27276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.418767][T27276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.432408][T27276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.440364][T27276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.466547][T27276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.520088][ T49] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 628.604808][T27276] hsr_slave_0: entered promiscuous mode [ 628.622482][T27276] hsr_slave_1: entered promiscuous mode [ 628.658459][T27391] netlink: 'syz.3.5580': attribute type 10 has an invalid length. [ 628.686233][ T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 628.723885][T27391] dummy0: entered promiscuous mode [ 628.733587][T27395] netlink: 'syz.3.5580': attribute type 10 has an invalid length. [ 628.743780][T27391] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 628.753490][T27391] team0: Failed to send options change via netlink (err -105) [ 628.762020][T27391] team0: Port device dummy0 added [ 628.782066][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 628.793470][T27396] netlink: 'syz.1.5581': attribute type 2 has an invalid length. [ 628.802518][T27395] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 628.814815][T27395] team0: Failed to send options change via netlink (err -105) [ 628.823584][T27395] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 628.834779][T27395] team0: Port device dummy0 removed [ 628.845254][T27395] dummy0: left promiscuous mode [ 628.853034][T27395] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 628.867966][T27399] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5581'. [ 628.884875][ T1147] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 628.899445][T27399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5581'. [ 628.967661][T27399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5581'. [ 629.146950][ T5828] Bluetooth: hci3: command tx timeout [ 629.182672][T27414] syzkaller1: entered promiscuous mode [ 629.236923][T27414] syzkaller1: entered allmulticast mode [ 629.671244][T27434] netlink: 'syz.1.5592': attribute type 1 has an invalid length. [ 629.772684][T27447] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5593'. [ 629.801789][T27434] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5592'. [ 629.806345][T27445] bond14: (slave vxcan5): The slave device specified does not support setting the MAC address [ 629.823067][T27445] bond14: (slave vxcan5): Error -95 calling set_mac_address [ 629.881913][T27452] xt_l2tp: invalid flags combination: 0 [ 629.905768][T27452] bond14: (slave gretap2): making interface the new active one [ 629.916328][T27452] bond14: (slave gretap2): Enslaving as an active interface with an up link [ 629.992927][T27276] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 630.017901][T27448] ip6_vti0 speed is unknown, defaulting to 1000 [ 630.024562][T27276] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 630.050790][T27276] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 630.194193][T27456] netlink: 'syz.1.5594': attribute type 10 has an invalid length. [ 630.215222][T27276] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 630.233852][T27456] dummy0: left promiscuous mode [ 630.254497][T27458] netlink: 'syz.1.5594': attribute type 10 has an invalid length. [ 630.266614][T27460] netlink: 'syz.1.5594': attribute type 10 has an invalid length. [ 630.268889][T27456] dummy0: entered promiscuous mode [ 630.281883][T27456] team0: Failed to send options change via netlink (err -105) [ 630.290456][T27456] team0: Port device dummy0 added [ 630.320701][T27448] wg1 speed is unknown, defaulting to 1000 [ 630.333788][T27458] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 630.356557][T27458] dummy0: left promiscuous mode [ 630.364395][T27458] team0: Failed to send options change via netlink (err -105) [ 630.372526][T27458] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 630.381993][T27458] team0: Port device dummy0 removed [ 630.392662][T27458] dummy0: entered promiscuous mode [ 630.400985][T27458] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 630.409948][ T1147] bond0: (slave dummy0): interface is now down [ 630.416436][ T1147] bond0: no route to arp_ip_target 25.0.0.0 and arp_validate is set [ 630.448688][ T1147] bond0: now running without any active interface! [ 630.468666][T27448] wg1 speed is unknown, defaulting to 1000 [ 630.526074][T27468] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5596'. [ 630.536390][T27454] ip6_vti0 speed is unknown, defaulting to 1000 [ 630.651294][T27468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5596'. [ 630.870451][T27454] wg1 speed is unknown, defaulting to 1000 [ 630.891145][T27454] wg1 speed is unknown, defaulting to 1000 [ 630.948835][T27472] ip6_vti0 speed is unknown, defaulting to 1000 [ 630.965575][T27276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.133973][T27276] 8021q: adding VLAN 0 to HW filter on device team0 [ 631.160815][ T6057] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.168040][ T6057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.234293][ T5828] Bluetooth: hci3: command tx timeout [ 631.248225][ T8028] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.255410][ T8028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.340550][T27276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 631.485526][T27487] ip6_vti0 speed is unknown, defaulting to 1000 [ 631.488009][T27472] wg1 speed is unknown, defaulting to 1000 [ 631.524033][T27472] wg1 speed is unknown, defaulting to 1000 [ 631.688641][T27495] sctp: [Deprecated]: syz.3.5600 (pid 27495) Use of int in max_burst socket option. [ 631.688641][T27495] Use struct sctp_assoc_value instead [ 631.805039][T27276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.085411][T27487] wg1 speed is unknown, defaulting to 1000 [ 632.086996][T27276] veth0_vlan: entered promiscuous mode [ 632.097405][T27487] wg1 speed is unknown, defaulting to 1000 [ 632.104439][T27276] veth1_vlan: entered promiscuous mode [ 632.395764][T27276] veth0_macvtap: entered promiscuous mode [ 632.414153][T27276] veth1_macvtap: entered promiscuous mode [ 632.462328][T27276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 632.492264][T27276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.535800][ T6057] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.575596][ T6057] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.625021][ T6057] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.651817][ T6057] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.823993][T22930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.846913][T22930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.897667][T22930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.916061][T22930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.118978][T27526] __nla_validate_parse: 1 callbacks suppressed [ 633.118997][T27526] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5549'. [ 633.140102][T27526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5549'. [ 633.264051][T27535] netlink: 'syz.3.5612': attribute type 2 has an invalid length. [ 633.278665][T27535] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5612'. [ 633.307357][ T5828] Bluetooth: hci3: command tx timeout [ 633.395373][T27533] ip6_vti0 speed is unknown, defaulting to 1000 [ 633.485365][T27540] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5614'. [ 633.605544][T27533] wg1 speed is unknown, defaulting to 1000 [ 633.619334][T27533] wg1 speed is unknown, defaulting to 1000 [ 633.665353][T27546] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5615'. [ 633.675118][T27546] openvswitch: netlink: Flow key attr not present in new flow. [ 633.916673][T27552] syzkaller1: entered promiscuous mode [ 633.923595][T27552] syzkaller1: entered allmulticast mode [ 634.323146][T27570] batadv3: entered promiscuous mode [ 634.435274][T27578] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5623'. [ 634.529695][T27570] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5623'. [ 634.608698][T27583] macvtap1: entered promiscuous mode [ 634.615937][T27583] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 634.724906][T27570] ip6_vti0 speed is unknown, defaulting to 1000 [ 634.789680][T27588] netlink: 'syz.1.5629': attribute type 1 has an invalid length. [ 634.853225][T27591] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5629'. [ 635.116173][T27570] wg1 speed is unknown, defaulting to 1000 [ 635.117265][T27594] ip6_vti0 speed is unknown, defaulting to 1000 [ 635.128599][T27570] wg1 speed is unknown, defaulting to 1000 [ 635.446010][T27610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5635'. [ 635.474743][T27598] netlink: 'syz.0.5631': attribute type 13 has an invalid length. [ 635.512937][T27598] netlink: 'syz.0.5631': attribute type 17 has an invalid length. [ 635.559375][T27614] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 635.572669][T27614] syzkaller1: linktype set to 778 [ 635.593490][T27617] netlink: 'syz.3.5637': attribute type 12 has an invalid length. [ 635.696809][T27594] wg1 speed is unknown, defaulting to 1000 [ 635.704969][T27612] ip6_vti0 speed is unknown, defaulting to 1000 [ 635.707908][T27594] wg1 speed is unknown, defaulting to 1000 [ 635.828669][T27629] netlink: 'syz.3.5639': attribute type 1 has an invalid length. [ 635.921164][T27629] 8021q: adding VLAN 0 to HW filter on device bond6 [ 636.014999][T27637] bond6: (slave syz_tun): making interface the new active one [ 636.047843][T27637] bond6: (slave syz_tun): Enslaving as an active interface with an up link [ 636.321926][T27654] netlink: 'syz.4.5648': attribute type 1 has an invalid length. [ 636.512597][T27654] 8021q: adding VLAN 0 to HW filter on device bond8 [ 636.600054][T27660] bond8: (slave ip6gretap2): making interface the new active one [ 636.609453][T27660] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link [ 636.619406][T27612] wg1 speed is unknown, defaulting to 1000 [ 636.683878][T27662] veth9: entered promiscuous mode [ 636.705912][T27663] v: renamed from veth1_vlan (while UP) [ 636.754340][T27664] erspan0: entered allmulticast mode [ 636.784281][T27665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5649'. [ 636.799123][T27612] wg1 speed is unknown, defaulting to 1000 [ 637.251223][T27683] netlink: 'syz.1.5653': attribute type 13 has an invalid length. [ 637.303224][T27684] netlink: 'syz.1.5653': attribute type 13 has an invalid length. [ 637.363653][T27689] netlink: 'syz.2.5655': attribute type 21 has an invalid length. [ 637.447353][T27688] tipc: Resetting bearer [ 637.664976][T27706] tap0: tun_chr_ioctl cmd 1074025677 [ 637.691573][T27706] tap0: linktype set to 15 [ 637.773389][T27707] pim6reg1: entered promiscuous mode [ 637.811138][T27707] pim6reg1: entered allmulticast mode [ 638.187080][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 638.558482][T27740] ip6_vti0 speed is unknown, defaulting to 1000 [ 639.098962][T27740] wg1 speed is unknown, defaulting to 1000 [ 639.107550][T27740] wg1 speed is unknown, defaulting to 1000 [ 639.285578][T27770] __nla_validate_parse: 5 callbacks suppressed [ 639.285595][T27770] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5675'. [ 639.714065][T27788] Cannot find set identified by id 3 to match [ 639.767120][T27788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5680'. [ 639.861586][T27776] syzkaller1: entered promiscuous mode [ 639.868953][T27776] syzkaller1: entered allmulticast mode [ 640.118437][T27805] validate_nla: 2 callbacks suppressed [ 640.118456][T27805] netlink: 'syz.2.5685': attribute type 1 has an invalid length. [ 640.490319][T27821] bond6: (slave syz_tun): Releasing active interface [ 640.569689][T27821] bond0: (slave dummy0): Releasing backup interface [ 640.905555][T27821] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 641.009681][T27837] bond16: (slave bond_slave_1): Device is not our slave [ 641.016669][T27837] bond16: option active_slave: invalid value (bond_slave_1) [ 641.025586][T27837] bond16 (unregistering): Released all slaves [ 641.047779][T27825] ip6_vti0 speed is unknown, defaulting to 1000 [ 641.093314][T27842] 8021q: adding VLAN 0 to HW filter on device bond1 [ 641.140974][T27843] bond_slave_0: entered promiscuous mode [ 641.147106][T27843] bond_slave_1: entered promiscuous mode [ 641.193900][T27843] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 641.229452][T27843] bond1: (slave macvlan3): making interface the new active one [ 641.258497][T27843] bond1: (slave macvlan3): Enslaving as an active interface with an up link [ 641.281624][T27845] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 641.301531][T27848] tipc: Enabling of bearer rejected, already enabled [ 641.309489][T27853] xt_TCPMSS: Only works on TCP SYN packets [ 641.320910][T27825] wg1 speed is unknown, defaulting to 1000 [ 641.333332][T27825] wg1 speed is unknown, defaulting to 1000 [ 642.701197][T27909] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5709'. [ 642.768560][T27912] netlink: 'syz.0.5710': attribute type 3 has an invalid length. [ 642.779973][T27908] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5709'. [ 642.963080][T27919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5712'. [ 642.978168][T27923] netlink: 'syz.0.5714': attribute type 13 has an invalid length. [ 643.100420][T27919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 643.125025][T27919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 643.133291][T27919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 643.141225][T27919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.169880][ T60] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 643.178905][ T60] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 643.211932][ T60] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 643.329206][ T60] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 643.358274][T27938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5718'. [ 643.544213][T27952] can: request_module (can-proto-3) failed. [ 644.114762][T27986] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5729'. [ 644.124290][T27986] netem: invalid attributes len -18 [ 644.134222][T27986] netem: change failed [ 644.339691][T27993] batman_adv: batadv0: Adding interface: ipvlan2 [ 644.346081][T27993] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.374652][T27993] batman_adv: batadv0: Interface activated: ipvlan2 [ 644.440968][T27999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5734'. [ 644.789099][T22930] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.799403][T22930] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 40374 - 0 [ 644.835034][T22930] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 53414 - 0 [ 644.855706][T22930] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 644.891989][T22930] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.907490][T22930] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 40374 - 0 [ 644.946331][T22930] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 53414 - 0 [ 644.964699][T22930] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 645.005988][T22930] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.033420][T22930] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 40374 - 0 [ 645.061821][T22930] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 53414 - 0 [ 645.086124][T22930] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 645.183688][T22930] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.206094][T22930] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 40374 - 0 [ 645.223457][T22930] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 53414 - 0 [ 645.267990][T22930] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 645.856976][T28066] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5747'. [ 645.863514][T28067] batadv0: left promiscuous mode [ 645.894269][T28067] bond1: left promiscuous mode [ 645.900370][T28067] ip6gre2: left promiscuous mode [ 645.905696][T28067] geneve2: left promiscuous mode [ 645.911839][T28067] xfrm1: left promiscuous mode [ 645.917287][T28067] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 646.206201][T28081] ip6_vti0 speed is unknown, defaulting to 1000 [ 646.291618][T28085] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 646.495124][T28081] wg1 speed is unknown, defaulting to 1000 [ 646.503599][T28081] wg1 speed is unknown, defaulting to 1000 [ 646.680267][T28095] ip6_vti0 speed is unknown, defaulting to 1000 [ 646.802580][T28101] bond0: (slave rose0): Error: Device can not be enslaved while up [ 646.911638][T28103] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5758'. [ 646.988741][T28109] SET target dimension over the limit! [ 647.333546][T28106] ip6_vti0 speed is unknown, defaulting to 1000 [ 647.604225][T28122] netlink: 'syz.4.5760': attribute type 5 has an invalid length. [ 647.871344][T28128] team0: Mode changed to "activebackup" [ 647.897208][T28132] netlink: 'syz.4.5761': attribute type 54 has an invalid length. [ 648.160792][T28140] bond3: entered promiscuous mode [ 648.173157][T28140] 8021q: adding VLAN 0 to HW filter on device bond3 [ 648.219403][T28120] ip6_vti0 speed is unknown, defaulting to 1000 [ 648.219416][T28095] wg1 speed is unknown, defaulting to 1000 [ 648.221175][T28095] wg1 speed is unknown, defaulting to 1000 [ 648.250338][T28106] wg1 speed is unknown, defaulting to 1000 [ 648.306770][T28106] wg1 speed is unknown, defaulting to 1000 [ 648.356887][ T5828] Bluetooth: hci2: command 0x0405 tx timeout [ 648.438797][ C0] ================================================================== [ 648.447074][ C0] BUG: KASAN: double-free in inet_sock_destruct+0x538/0x740 [ 648.454374][ C0] Free of addr ffff8880490de0c0 by task ksoftirqd/0/15 [ 648.461233][ C0] [ 648.463677][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 648.463705][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 648.463719][ C0] Call Trace: [ 648.463728][ C0] [ 648.463737][ C0] dump_stack_lvl+0x189/0x250 [ 648.463775][ C0] ? rcu_is_watching+0x15/0xb0 [ 648.463803][ C0] ? __kasan_check_byte+0x12/0x40 [ 648.463823][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 648.463848][ C0] ? rcu_is_watching+0x15/0xb0 [ 648.463870][ C0] ? lock_release+0x4b/0x3e0 [ 648.463892][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 648.463918][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 648.463945][ C0] print_report+0xca/0x240 [ 648.463968][ C0] ? inet_sock_destruct+0x538/0x740 [ 648.463986][ C0] kasan_report_invalid_free+0xea/0x110 [ 648.464007][ C0] ? inet_sock_destruct+0x538/0x740 [ 648.464027][ C0] ? inet_sock_destruct+0x538/0x740 [ 648.464046][ C0] check_slab_allocation+0xe1/0x130 [ 648.464074][ C0] ? inet_sock_destruct+0x538/0x740 [ 648.464091][ C0] kfree+0x148/0x6d0 [ 648.464118][ C0] inet_sock_destruct+0x538/0x740 [ 648.464137][ C0] ? inet6_cleanup_sock+0x18b/0x220 [ 648.464159][ C0] ? __pfx_sctp_v6_destruct_sock+0x10/0x10 [ 648.464181][ C0] __sk_destruct+0x89/0x660 [ 648.464202][ C0] ? __pfx_sctp_endpoint_destroy_rcu+0x10/0x10 [ 648.464223][ C0] ? rcu_core+0xc37/0x1770 [ 648.464241][ C0] sctp_endpoint_destroy_rcu+0xa1/0xf0 [ 648.464264][ C0] rcu_core+0xcab/0x1770 [ 648.464282][ C0] ? __lock_acquire+0xab9/0xd20 [ 648.464309][ C0] ? __pfx_rcu_core+0x10/0x10 [ 648.464329][ C0] ? rcu_qs+0xc4/0x170 [ 648.464348][ C0] ? __pfx_rcu_qs+0x10/0x10 [ 648.464366][ C0] ? sched_clock_cpu+0x74/0x430 [ 648.464391][ C0] ? rcu_softirq_qs+0xf2/0x350 [ 648.464411][ C0] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 648.464436][ C0] handle_softirqs+0x286/0x870 [ 648.464459][ C0] ? run_ksoftirqd+0x9b/0x100 [ 648.464484][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 648.464504][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 648.464565][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 648.464584][ C0] run_ksoftirqd+0x9b/0x100 [ 648.464610][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 648.464639][ C0] smpboot_thread_fn+0x542/0xa60 [ 648.464662][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 648.464683][ C0] kthread+0x711/0x8a0 [ 648.464707][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 648.464727][ C0] ? __pfx_kthread+0x10/0x10 [ 648.464752][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 648.464779][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 648.464806][ C0] ? __pfx_kthread+0x10/0x10 [ 648.464831][ C0] ret_from_fork+0x4bc/0x870 [ 648.464852][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 648.464875][ C0] ? __switch_to_asm+0x39/0x70 [ 648.464891][ C0] ? __switch_to_asm+0x33/0x70 [ 648.464907][ C0] ? __pfx_kthread+0x10/0x10 [ 648.464931][ C0] ret_from_fork_asm+0x1a/0x30 [ 648.464957][ C0] [ 648.464965][ C0] [ 648.749843][ C0] Allocated by task 28147: [ 648.754240][ C0] kasan_save_track+0x3e/0x80 [ 648.758918][ C0] __kasan_kmalloc+0x93/0xb0 [ 648.763509][ C0] __kmalloc_noprof+0x411/0x7f0 [ 648.768352][ C0] ip_options_get+0x51/0x4c0 [ 648.772926][ C0] do_ip_setsockopt+0x1d9b/0x2d00 [ 648.777928][ C0] ip_setsockopt+0x66/0x110 [ 648.782408][ C0] do_sock_setsockopt+0x17c/0x1b0 [ 648.787415][ C0] __x64_sys_setsockopt+0x13f/0x1b0 [ 648.792629][ C0] do_syscall_64+0xfa/0xfa0 [ 648.797165][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.803044][ C0] [ 648.805354][ C0] Freed by task 15: [ 648.809142][ C0] kasan_save_track+0x3e/0x80 [ 648.813813][ C0] __kasan_save_free_info+0x46/0x50 [ 648.819123][ C0] __kasan_slab_free+0x5c/0x80 [ 648.823891][ C0] kfree+0x19a/0x6d0 [ 648.827956][ C0] inet_sock_destruct+0x538/0x740 [ 648.832971][ C0] __sk_destruct+0x89/0x660 [ 648.837562][ C0] sctp_endpoint_destroy_rcu+0xa1/0xf0 [ 648.843127][ C0] rcu_core+0xcab/0x1770 [ 648.847371][ C0] handle_softirqs+0x286/0x870 [ 648.852129][ C0] run_ksoftirqd+0x9b/0x100 [ 648.856718][ C0] smpboot_thread_fn+0x542/0xa60 [ 648.861650][ C0] kthread+0x711/0x8a0 [ 648.865704][ C0] ret_from_fork+0x4bc/0x870 [ 648.870281][ C0] ret_from_fork_asm+0x1a/0x30 [ 648.875025][ C0] [ 648.877330][ C0] The buggy address belongs to the object at ffff8880490de0c0 [ 648.877330][ C0] which belongs to the cache kmalloc-32 of size 32 [ 648.891276][ C0] The buggy address is located 0 bytes inside of [ 648.891276][ C0] 32-byte region [ffff8880490de0c0, ffff8880490de0e0) [ 648.904270][ C0] [ 648.906580][ C0] The buggy address belongs to the physical page: [ 648.912985][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x490de [ 648.921726][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 648.928835][ C0] page_type: f5(slab) [ 648.932930][ C0] raw: 00fff00000000000 ffff88801a026780 ffffea0000a46f00 dead000000000002 [ 648.941674][ C0] raw: 0000000000000000 0000000000400040 00000000f5000000 0000000000000000 [ 648.950321][ C0] page dumped because: kasan: bad access detected [ 648.956724][ C0] page_owner tracks the page as allocated [ 648.962416][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP), pid 11820, tgid 11820 (syz.0.1541), ts 222675701401, free_ts 222675542217 [ 648.980801][ C0] post_alloc_hook+0x240/0x2a0 [ 648.985560][ C0] get_page_from_freelist+0x2365/0x2440 [ 648.991091][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 648.996884][ C0] alloc_pages_mpol+0x232/0x4a0 [ 649.001718][ C0] allocate_slab+0x96/0x350 [ 649.006466][ C0] ___slab_alloc+0xe94/0x18a0 [ 649.011126][ C0] __slab_alloc+0x65/0x100 [ 649.015524][ C0] __kmalloc_cache_noprof+0x411/0x6f0 [ 649.020881][ C0] kmem_cache_free+0x16f/0x690 [ 649.025631][ C0] exit_mmap+0x537/0xb40 [ 649.029862][ C0] __mmput+0x118/0x430 [ 649.033922][ C0] exit_mm+0x1da/0x2c0 [ 649.037980][ C0] do_exit+0x648/0x2300 [ 649.042124][ C0] do_group_exit+0x21c/0x2d0 [ 649.046703][ C0] __x64_sys_exit_group+0x3f/0x40 [ 649.051720][ C0] x64_sys_call+0x21f7/0x2200 [ 649.056380][ C0] page last free pid 11820 tgid 11820 stack trace: [ 649.062859][ C0] __free_frozen_pages+0xbc4/0xd30 [ 649.067958][ C0] tlb_finish_mmu+0x112/0x1d0 [ 649.072618][ C0] exit_mmap+0x444/0xb40 [ 649.076847][ C0] __mmput+0x118/0x430 [ 649.080898][ C0] exit_mm+0x1da/0x2c0 [ 649.085037][ C0] do_exit+0x648/0x2300 [ 649.089203][ C0] do_group_exit+0x21c/0x2d0 [ 649.093778][ C0] __x64_sys_exit_group+0x3f/0x40 [ 649.098787][ C0] x64_sys_call+0x21f7/0x2200 [ 649.103444][ C0] do_syscall_64+0xfa/0xfa0 [ 649.107941][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.113823][ C0] [ 649.116127][ C0] Memory state around the buggy address: [ 649.121734][ C0] ffff8880490ddf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 649.129778][ C0] ffff8880490de000: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 649.137822][ C0] >ffff8880490de080: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 649.145866][ C0] ^ [ 649.152084][ C0] ffff8880490de100: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 649.160135][ C0] ffff8880490de180: 00 00 00 fc fc fc fc fc 00 00 00 00 fc fc fc fc [ 649.168272][ C0] ================================================================== [ 649.176581][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 649.183790][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 649.192993][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 649.203408][ C0] Call Trace: [ 649.206706][ C0] [ 649.209638][ C0] dump_stack_lvl+0x99/0x250 [ 649.214242][ C0] ? __asan_memcpy+0x40/0x70 [ 649.219106][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 649.224403][ C0] ? __pfx__printk+0x10/0x10 [ 649.229009][ C0] vpanic+0x237/0x6d0 [ 649.233003][ C0] ? __pfx_vpanic+0x10/0x10 [ 649.237523][ C0] panic+0xb9/0xc0 [ 649.241254][ C0] ? __pfx_panic+0x10/0x10 [ 649.245692][ C0] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 649.251693][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 649.257605][ C0] check_panic_on_warn+0x89/0xb0 [ 649.262558][ C0] end_report+0x78/0x160 [ 649.266818][ C0] ? inet_sock_destruct+0x538/0x740 [ 649.272020][ C0] kasan_report_invalid_free+0xfa/0x110 [ 649.277572][ C0] ? inet_sock_destruct+0x538/0x740 [ 649.282777][ C0] ? inet_sock_destruct+0x538/0x740 [ 649.287989][ C0] check_slab_allocation+0xe1/0x130 [ 649.293283][ C0] ? inet_sock_destruct+0x538/0x740 [ 649.298480][ C0] kfree+0x148/0x6d0 [ 649.302483][ C0] inet_sock_destruct+0x538/0x740 [ 649.307532][ C0] ? inet6_cleanup_sock+0x18b/0x220 [ 649.312738][ C0] ? __pfx_sctp_v6_destruct_sock+0x10/0x10 [ 649.318559][ C0] __sk_destruct+0x89/0x660 [ 649.323065][ C0] ? __pfx_sctp_endpoint_destroy_rcu+0x10/0x10 [ 649.329231][ C0] ? rcu_core+0xc37/0x1770 [ 649.333666][ C0] sctp_endpoint_destroy_rcu+0xa1/0xf0 [ 649.339130][ C0] rcu_core+0xcab/0x1770 [ 649.343563][ C0] ? __lock_acquire+0xab9/0xd20 [ 649.348602][ C0] ? __pfx_rcu_core+0x10/0x10 [ 649.353291][ C0] ? rcu_qs+0xc4/0x170 [ 649.357401][ C0] ? __pfx_rcu_qs+0x10/0x10 [ 649.362004][ C0] ? sched_clock_cpu+0x74/0x430 [ 649.366865][ C0] ? rcu_softirq_qs+0xf2/0x350 [ 649.371634][ C0] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 649.376852][ C0] handle_softirqs+0x286/0x870 [ 649.381619][ C0] ? run_ksoftirqd+0x9b/0x100 [ 649.386296][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 649.391564][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 649.396581][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 649.401588][ C0] run_ksoftirqd+0x9b/0x100 [ 649.406078][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 649.411179][ C0] smpboot_thread_fn+0x542/0xa60 [ 649.416099][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 649.421110][ C0] kthread+0x711/0x8a0 [ 649.425170][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 649.430705][ C0] ? __pfx_kthread+0x10/0x10 [ 649.435283][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 649.440474][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 649.445663][ C0] ? __pfx_kthread+0x10/0x10 [ 649.450242][ C0] ret_from_fork+0x4bc/0x870 [ 649.454913][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 649.460013][ C0] ? __switch_to_asm+0x39/0x70 [ 649.464769][ C0] ? __switch_to_asm+0x33/0x70 [ 649.469600][ C0] ? __pfx_kthread+0x10/0x10 [ 649.474182][ C0] ret_from_fork_asm+0x1a/0x30 [ 649.478934][ C0] [ 649.482078][ C0] Kernel Offset: disabled [ 649.486390][ C0] Rebooting in 86400 seconds..