last executing test programs: 3.387626701s ago: executing program 1 (id=5368): syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff0000000000313ddd3fac847bf8221956ca592df90086dd601e1907000c2f00fe8004000010000000009c1dc48e6cfed0264692000000000000bbff020000000000000000000000000001000065be000c907801000000"], 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8000) 2.877398116s ago: executing program 2 (id=5372): socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x2006, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0x6, 0xffff}, {0x7}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$sock_timeval(r3, 0x1, 0x31, &(0x7f0000000280)={0x0, 0xea60}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}}, @NFT_MSG_DELSETELEM={0x4e8, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4d4, 0x3, 0x0, 0x1, [{0x4d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4cc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4c8, 0x1, "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"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x524}, 0x1, 0x0, 0x0, 0x804}, 0x20000010) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r6) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x14) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000005c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r7, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000884}, 0x20004800) 2.867901799s ago: executing program 1 (id=5374): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x2a, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x18000000}, 0x48) 2.460638776s ago: executing program 1 (id=5380): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x20000000000001e5, &(0x7f00000000c0)}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES64=r1], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400a0}, 0x20048840) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) close(r2) recvmmsg(r4, 0x0, 0x0, 0x10021, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000200)={r2, 0x4, 0xae1, 0x5b}) accept$packet(0xffffffffffffffff, 0x0, 0x0) socketpair(0x25, 0x1, 0x0, 0x0) sendmsg$xdp(r2, 0x0, 0x8000) sendmmsg$sock(r1, 0x0, 0x0, 0x80) r5 = socket(0xa, 0x3, 0x3a) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0x2, r7, 0x9}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) 2.236993127s ago: executing program 1 (id=5383): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2687edc815ffa8ba27", 0x9}], 0x1}, 0x4048081) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet(r0, &(0x7f00000009c0)=[{{&(0x7f0000000280)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000480)="7211f32220b0ebc533ae9bccc9d4df745fc556a737748b128b67bffbe2ff495875aac5a5150e0e045a4780c9cf4cdf83c22125eabdb9d7399a36a34c4b091d1e696abaca2dd1f928422dc9dec16f562d675a0d4b0628ee704caf9df8f3cbc356458ddece776cb481c2fbaabf61", 0x6d}, {&(0x7f0000000500)="e28d85a086db05921b14137e680e64e792", 0x11}, {&(0x7f0000000540)="9821a39d8a4b98f2503ce9fdcde7d15a20a81f6d6d7929f1f29b65441175f88fff7b7ca16c7885c6bf0c86c6a505f33f6b404cbc4c1cf170ff14c08126aac9e2fcbb7f08e2ad03602c4dea8a5ff9e82287617059a49f43d0e3b5cf2dd1be461c318ae2fb3ee05bb10be059a6fbeb14c5301a55c932a1b585c9dee93a3da5119f705167d2bcd719af4cf0c5577bc28b1610841a6e66", 0x95}, {&(0x7f0000000600)="898af548afb9430e9bc40a5a0383742449bdd28f60b8fadeac80b6c4ffb42fa6f5e18cf9d98ae0113e9d5f8506e8b4d7729a3858be19437b3b926d", 0x3b}, {&(0x7f0000000640)="de3ab045908544bc00ea992ec12598aa5fce2b735a5a313db32c65231709cd0c0c8a2167d43b2b4dbdf3847c5f6e7e1b68ec9b6944825f60ff4e347903acf3259863c9b53d6a994d7395a32d374b9533bc72a569cf6e06a1ba2f7516f0b670bb1ed3552d04f0f786e8ba89f2aa91d0ca77f76474a426db569d2814b4f6ef929276c688f0754cd3df81303060e0339c04c01e7452e496c4b3d83c165146c0bdd13b79", 0xa2}, {&(0x7f0000000740)="21a9d8a8b32446c54924888258a826a86cbab8027dee09864b9186a73133467862e77bb5f9c3a85260c8507cd9ab8b6467a3f82951797d5b0804f4b4cce05ac56cfcf40c1dc6b77d79c59428eb40d227e829351d7d89683c7234d669db034e07ab6ab13b632c2658a1111e6ea80f8fb9f04b9b6437", 0x75}, {&(0x7f00000007c0)="4d8d57a541ce74cbd004f6e2c83a732771514dd6dbd600ea965d50377aad5cb6faa52268b4f6b888aeed192a2c202da146dabc0459d21fe2a4c5a6987abd919d", 0x40}], 0x7, &(0x7f0000000880)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x18}}, {{&(0x7f00000008c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000900)="e77e7d276f958f84c5a6e449df05c85c36ffa0eb364ab851803b2a84c70372ed4233a539a2d850cd4eadc6f6b3b9da96f50bbd43d8b893f3b3384297fa850e", 0x3f}], 0x1, &(0x7f0000000980)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @broadcast}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x38}}], 0x2, 0x40004) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000180)=""/230, &(0x7f0000000000)=0xffffffffffffffe3) 2.093699744s ago: executing program 2 (id=5385): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000020c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000048000000000000000300000085000000270000100095000000d00000"], &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x48, 0x0, &(0x7f0000000380)="e0b90438225a9434129c800175ea39e452c4f9adea0121dec27b57546f2e881530e3fe4dae7ba24e2ad188e8ed572ea1d1719069b1a49f9cbccbc6ed2f0ea9444fd68d49d14bcb66", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r1, 0x453, 0x1, 0x82b7}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r4, 0x20, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0}}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000001800ffff00000000000000000a00000000000008000000004300088075beb17499f4c77d25c09b7e6a0c7ee83e2bcde945b68ba2f5a11eb404d2052b41ec9376fe8cb2e5e50c2a82b25c8b3105226033fbe2826d079e26b99f73dd00"], 0x60}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000340)=0x9) pselect6(0x40, &(0x7f0000000040)={0x0, 0xfffffffffffffffc, 0x5, 0x0, 0xffffffc, 0x1, 0x0, 0xfffffffffffffffa}, &(0x7f0000000000)={0x18, 0x8, 0x1ff, 0x0, 0x7ff, 0x400000, 0x0, 0x92}, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x40}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000540)={0xe3, 0x40, 0x8002, 0x5, 0x40, 0xfffffff6, 0xf, 0x9, r7}, &(0x7f0000000600)=0x20) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e26, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.929186414s ago: executing program 4 (id=5386): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xec) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x50, r3, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1000}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040015}, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000680)="451a67771f25a3", 0x7}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x12, 0x17}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) 1.819967797s ago: executing program 4 (id=5388): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) sendto$inet6(r1, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x92, @rand_addr=' \x01\x00', 0x511}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x33, 0x0, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1.694581358s ago: executing program 3 (id=5391): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (rerun: 32) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000005c0)) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x34}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r1, @ANYRES32=r3, @ANYRESDEC=r1], 0x20}}, 0x4000000) (rerun: 64) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) (async, rerun: 32) r5 = socket(0x2a, 0x1, 0x4) (rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x20040000}, 0x10000000) (async, rerun: 64) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000006c0)={0x2, 0x0, @private=0xa010102}, 0x10) (async) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) (async) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) r8 = socket(0xa, 0x6, 0x9) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x6a, 0x1, 0x0, &(0x7f0000000640)) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000004c0)={0x0, 0x28, "27a89e4a6bee4b88cb3139a954c940139f6917b0d4975b5944d7b96a2d838cddf3e71440dbb28fab"}, &(0x7f0000000500)=0x30) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000540)={r9, 0xb7d, 0x20}, &(0x7f0000000580)=0xc) (async) setsockopt$inet_mreq(r6, 0x0, 0x20, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x13}}, 0x8) (async, rerun: 32) socket$packet(0x11, 0x2, 0x300) (rerun: 32) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) r11 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) getsockopt$sock_buf(r11, 0x1, 0x3, &(0x7f0000000000)=""/163, &(0x7f00000000c0)=0xa3) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x100, 0x13, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {}, {0x0, 0xf}}}, 0x24}}, 0x20004050) getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) (async) getpeername$llc(r8, &(0x7f0000000800)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000840)=0x10) 1.551678842s ago: executing program 0 (id=5393): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24008090}, 0x40000) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a1c0)=ANY=[], 0x3bfc}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) recvmsg$can_raw(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/35, 0x23}], 0x1}, 0x1021) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0x34, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x268, 0x0, 0x5, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [{{0x254, 0x1, {{0x2, 0x100}, 0x81, 0xf9, 0x1, 0x5, 0x1b, 'syz0\x00', "18ba9db2b3879714b1fe560b6336b2fd29b36f75e62375c64ce977d391eba1ae", "7cbf13aa289ea6ac4fd8ad97d5a07accdf7bc2f325b57bf6c41df17e3bfe7222", [{0x9, 0x1000, {0x3}}, {0x8, 0x0, {0x3, 0x9}}, {0x4, 0x6}, {0x2, 0x8001, {0x1, 0x3ff}}, {0xb93, 0x2, {0x3}}, {0x8, 0x3, {0x1, 0x6}}, {0x4, 0x80, {0x3, 0x1}}, {0x6, 0x8, {0x0, 0x6}}, {0x4, 0xb, {0x3, 0x1000}}, {0x9, 0xffff, {0x0, 0x7}}, {0x1, 0x0, {0x3, 0x5}}, {0x7, 0x800, {0x0, 0x9a8}}, {0x9, 0x0, {0x3, 0x3}}, {0x4, 0x80, {0x3}}, {0x2, 0xa5, {0x2, 0xb68}}, {0x401, 0x80, {0x1, 0xb7}}, {0x2, 0x101, {0x2, 0xc2}}, {0x7, 0x5, {0x0, 0xfff}}, {0x9, 0x3, {0x2, 0x40}}, {0xffff, 0x3, {0x0, 0xea}}, {0x81, 0x80, {0x0, 0xfffff000}}, {0x18, 0x9, {0x0, 0x10001}}, {0x4, 0x2, {0x3, 0x5}}, {0x6, 0x5, {0x1, 0x1}}, {0x2, 0xffff, {0x2, 0x47cf}}, {0x4, 0x2f, {0x0, 0x8}}, {0x8, 0x200, {0x1, 0x2}}, {0x3ff, 0x7}, {0xb74a, 0x5, {0x1}}, {0xf6, 0x1, {0x3, 0x4}}, {0xfffa, 0x73, {0x1, 0x40}}, {0x3, 0x8, {0x1, 0xffb0}}, {0x7, 0x8001, {0x3, 0x6}}, {0xd, 0x5, {0x2, 0x80000000}}, {0x9, 0x2, {0x3, 0x5}}, {0xf, 0x9, {0x1, 0x6}}, {0x4, 0x8000, {0x1, 0x2}}, {0xff7f, 0x6, {0x2, 0x8001}}, {0x14c2, 0x1, {0x3, 0x4}}, {0x67, 0x3, {0x3, 0xffffffff}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20008095}, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=@base={0x19, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x4}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000003f00090000000000040000000400000000000000080008"], 0x20}}, 0x4004080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.475614949s ago: executing program 0 (id=5394): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x20}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000004a00012227bd7000fcdbdf1f0a"], 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x34}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000004740)={0x0, @in6={{0xa, 0x4e23, 0xcc7, @remote, 0x13b9}}}, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}]}, &(0x7f0000000180)=0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x270bd24, 0x25dfdbf8, {0xf}}, 0x14}}, 0x4000000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000003c0)={r4}, &(0x7f0000000340)=0x8) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x1cc, 0x15, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_OBJ_USERDATA={0x88, 0x8, "d83841cced722dfb5e2bab00161821f2680af5ee357b8d444229e6dbfb9fb9028cfca2a614535bb87e03b82f1c833ac2dc730c82ebc5bbfca1788b9dddd70b48ee284e9c51b2f418e2d8527d46b694a2f1936b56ed0cf6f2606fde94ce59099d6d4922eba6444fdeaf8e241315953f58295c3523316075a3f3d0c3a792f1e5fa1d8aa276"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0xf9, 0x8, "b9feb9afa75ed10eff53515eec164eb7803a32724fa15c54448c472ed1c5a67653cb29eb17f2cd13215417a72e56c2ab8e666c28cb6dd606f2137679cd56e5ce6f2e50e065083ef7e036a7c61c997e804e9a10b055cd97b802cba89babd63b4b4237c7a982809734981d35667f9d23598d54211aa368b68b40edbaee0f7086696f2bf9b37ad77eda17818ef993df90701a3c545a1c88961fdda62f28214a0abf1af9a2b196f38cc38a82d35e28f7fa634502f684bcf42eec6ba1af0c87d87e1aeaf2ea15b7a4b2bd53e9f7bf147a4fff79297574b6518c5a9883f9f026baf91d4424611cec6e8d8edfc3d15f8c53f6a7a7b6a712b1"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) 1.373104627s ago: executing program 3 (id=5395): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r0, 0x0, 0x8000, 0x3}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="09ac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'gretap0\x00', 0x600}) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0x7, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000780)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000c0000001c000380180003001400018005000200000000000800010001000000180001801400020076657468300000"], 0x48}}, 0x10) r8 = accept4(r1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000002580)={0x1, 0x7fffffffffffffff, @status={[0x3, 0xaa, 0x4710, 0x9, 0x200, 0x7c]}, [0x5, 0xb000000000000000, 0x76, 0x4, 0x2, 0x5, 0x9, 0x7, 0x100000001, 0x5, 0x2, 0x0, 0x1, 0x10, 0x20, 0x4, 0x4, 0x6, 0x2, 0xcd91, 0x5a26, 0xb, 0x5, 0x80000000, 0x3, 0x3ff, 0x401, 0x2b, 0xe, 0x0, 0x1000, 0x7fff, 0x9, 0x5, 0x8000000000000000, 0xffff, 0x8000000000000001, 0xffffffff, 0x8, 0x49b6fb31, 0x7ff, 0xa, 0xffb2, 0x7b8bac73, 0x3, 0xfffffffffffffff9, 0x62b, 0x5, 0x9, 0x1, 0x3, 0x1800000, 0xb, 0x4, 0xffffffff00000001, 0x682, 0x9, 0x680, 0x7ff, 0x1, 0x0, 0x4, 0x6, 0x10001]}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001042cbd700001dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="0380000010e3040008000500", @ANYRES32=r11, @ANYBLOB="240012800b0001006970766c616e0000140002800600010002000000e0bf8f2d3c47b4b2"], 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x40) setsockopt$inet6_tcp_buf(r9, 0x6, 0x1f, &(0x7f0000000000)="0083", 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000002fc0)) setsockopt$inet6_tcp_int(r9, 0x6, 0x3, &(0x7f0000000040)=0x100a, 0x4) sendmmsg$alg(r8, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000003100)="89b16730c26c82afa7d06ebb83943667020d3df6845464707ccd7104dc6a994cd42dbeedd2f8cfa86ebba9b00b8aeb8021638931ac11b11721147fe993f32534b3dda59178daf9635d74", 0x4a}, {&(0x7f0000000200)="ca8a42ca0c7565f05d5a7908d131dca97c57014d6e19176bea715b6ec66271c45cd540238c3c127a3666c0939aff745a4cc444292ced2d4ca775981e558cd320b6511ac7a42a1671e545225263ffc3c5c0dc0ec073e713fa2c", 0x59}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000080)="3b2f42080c8d49d7238ba3cf091b433f28cd60c2c3e3917151156fbf2711", 0x1e}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000000280)="6b48097632ab2cafe08f68909786d76d1be8d7363ac13a68e892c85470c382d6c2be0da17364752643883792b50b95ff3461cadb5ff282471e30d4fab85909d7c1b04a28c26e6256ff6c75ca8d5200d239f187830c755a267aaf7af49921be2f882f26d9f74c850b65d6ef250bca001e70a2cd8d523c0b71a7377d598b494cccd68e3d4bf378bfd9df0d8ea28923b63184449c78031d6c736e638fda62ad7971b583", 0xa2}, {&(0x7f0000000340)="ef648434b9034870d043039407c3b1b07a75ee0c550bd64654c7ada40f6f6ef6a5c5fb8345f32b0f549a8fbf85264caff0b839dd748fec4b052c4f0d152c80c700f4b86de88dbd046b838f2b659c890e0ab56fc3a92f74e42caf85cd7267fabeef72599a6b73c56939d9c5c1116d39ce0df9ee4b355f89b9fc2b651d28e2c961aa12e584ee3b", 0x86}, {&(0x7f0000000400)="03802e32b59b4735cde66da12d219704f9cef1779ad81d7e8d8c6ac93f0f9b1a42c0feb9fa792769f390914ff6423a6c2fbca23a925d3529297d8ef23611cd1abaeb17ad9edbec0a8e62da3d21578d2f0197bfdd390f53eba02169162b4c0224b679c5e15f9ccbdc15ca8f05d54d6c73cf7d40a11e3156b3feeea4a98c7a199b2b14ca13920d7b0109372c18ffaf4d894cea0cdec047fa82f801acc706a02a57fc7c468a2cd9847cdee0875e59446f1fe4", 0xb1}], 0x8, 0x0, 0x0, 0x8800}], 0x1, 0x20004014) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xaa, 0x0, 0x0) r12 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x41, 0x0, 0x0) sendmmsg$inet6(r12, &(0x7f0000001f80)=[{{&(0x7f0000000000)={0xa, 0x4e25, 0x97, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x4, @remote, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000001900)=[@dstopts={{0x18, 0x29, 0x37, {0x1d}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x6}}}], 0x30}}], 0x2, 0x4004800) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000030c0)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003080)={&(0x7f0000003040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000fcdbdf25090000000500350008fffffffd163b000900000008002b0001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000044}, 0x4000) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.371302119s ago: executing program 1 (id=5396): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000001c0)={0x2, 0x1, 0x10, 0x9, 0xf, 0x0, 0x4, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e24, 0xfffffffd, @remote, 0x7fffffff}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x40000000}, @sadb_address={0x5, 0x5, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @mcast1, 0x7ff}}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x78}}, 0x4000000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x2e0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f008004000000ec3021100630277", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x118, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dvmrp1\x00'}}]}, @TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x14}, 0x2d6}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x78}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb3}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)={0x1b4, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NODE_ID={0xdb, 0x3, "54daa828cf402be26c5ad8344d927fe24f0366e6bc1f157078382e05cf95d75bbe47acbf8132b4d5ab4cce34ba0911772427c8673ce3eabe368c833f4334c9ccbc497f992de2482237bca2e21d35f4b09ef1d337d66ec77502acecbd1b85008244872a68d64c66dc95d7f6848ecc45b1063b53348f2bd6c05ec91553edf6b43b3db30d5aad3fef9d3302ba674d0acbb9d3785192d9fbab39bd794d3e04054f9c43b5655cb4d826dda686d2d74bfc90031e0d50c96586e36721345b7c512a22261288d90f817a226c0df22fd02ebbde825ef7b4b32d9a0a"}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd3f5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4004010}, 0x4) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000003c0)='GPL\x00', 0xb, 0x10a, &(0x7f0000000800)=""/266, 0xb6df4c32c1d5c814, 0x4a}, 0x94) 1.111057912s ago: executing program 1 (id=5397): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="40000000100039040000000000000000000003e4", @ANYRES32=r6, @ANYBLOB="000000000000000020001280080001007369740014000280080014000f00000008000100d4"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r7 = socket(0xa, 0x3, 0xff) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x2b, 0x1, 0x0) unshare(0x2c020400) listen(r9, 0x0) ppoll(&(0x7f0000000280)=[{r9, 0xa0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="50c7000000000000140012800b00010067656e6576650000040002800484bb7babef5f5a34b5a8ebb7f2f7e45cceb76609b6f7ae70ee2d3e9134f00647a6eeb6b5c8c3a7674d07be65cf8fd05015a01cca4d5ce4f1bfee83d2a055630eeb8b7eebc7f450d0864041d5589e0f6b97d07bd0742b34"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10040880) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @loopback, 0x6}, 0x1c) 1.100545537s ago: executing program 2 (id=5398): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000004c0)={0x117, {{0xa, 0x4e21, 0x2, @mcast1, 0x35}}}, 0x88) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x20002880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = epoll_create(0x7) r1 = epoll_create(0x27) r2 = epoll_create1(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x4, 0x0, 0x1a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1e}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, 0x1, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x1008}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6164000000000200000000000000000000000000000000c43b2a722c1d036604"], &(0x7f0000000080)=0x2c) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00'}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r8, 0x2) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) 1.037293449s ago: executing program 3 (id=5399): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xec, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7, {}, [@action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8a8}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x90, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0xfffffffffffffdd2, 0x3, 0x2}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x4b1}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbf}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}]}, 0xec}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6(0xa, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0x5, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xb, 0xffff8001, 0x29, 0xff0, 0x6, 0x24000000, 0x7243b5af, 0x95, 0x6}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0xfffff000, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x608, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r10, 0x84, 0x3, &(0x7f0000000400), &(0x7f0000000440)=0x4) syz_open_procfs$namespace(0x0, 0x0) r11 = socket$inet6(0xa, 0x3, 0x4) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r12, 0x0) ioctl$sock_ifreq(r11, 0x8937, &(0x7f00000000c0)={'ip6gre0\x00', @ifru_addrs=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7}}) 894.616126ms ago: executing program 2 (id=5400): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x7, &(0x7f0000000440)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000140)=0x30) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000480)={0x0, 0x2}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000500)={r5, @in={{0x2, 0x4e23, @local}}, 0x6, 0x7, 0xfffffff6, 0x3, 0xa, 0x87000000, 0x6}, &(0x7f00000005c0)=0x9c) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000400)) syz_emit_ethernet(0x7e, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) 793.809465ms ago: executing program 3 (id=5401): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r0, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x20000400) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x26}, 0x4}, 0x300) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000004180)=0x3, 0x4) 720.409664ms ago: executing program 4 (id=5402): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000680)) syz_emit_ethernet(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x161880, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000001}, 0x20008000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000001ac0)={0x0, 0x0, "889ad2", 0x5, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x1b75000}, [@generic={0x71, 0x0, 0x1, 0x75}]}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x107}, 0x94) 651.308067ms ago: executing program 4 (id=5403): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) read(r0, &(0x7f0000000000)=""/160, 0xa0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x1, [@bcast, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default]}) 555.668864ms ago: executing program 4 (id=5404): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="a8030000", @ANYRES16, @ANYBLOB="00082abd7000fcdbdf2517000000f000308005000200f40000000c0001800800010003000000240003005baef51a6784fdd46ab50cb8027b5ffe12f8557c8fc22016ed94a76c4489050f140004003c6394e997f0342b28f4a453a0e37e1b2800018005000200010000000c00050009000000000000000800010003000000080001000000000014000400237fc5237cf96345e0d4f41750fadf1124000300156c2cd9111a5bf1f770395e2e9f86c36de885db47a25f91a6389012b51b693e24000300be12ef0ba3b2332a9f1bd3a09b11ce2400c4e015336e5062687ff9ae41cd36b705000200f70000001400040061e395453e5444606c4c6104b1"], 0x3a8}, 0x1, 0x0, 0x0, 0x60}, 0x20004801) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000000340), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r3, &(0x7f0000000a80), 0x0}, 0x20) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x2c, r7, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x10, 0x17, {0xe, 0x6, @l2={'ib', 0x3a, '\x00'}}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc9f1, 0x4, 0x10000005, 0x40, 0x7fffffff}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}]}, 0x90}}, 0x24000040) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r8, 0x103, 0x2, &(0x7f0000000100)=0x3ff, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 509.277847ms ago: executing program 0 (id=5405): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000880)={0x2, 0x4e1d, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2800000000000000000000000700000083070400000000070f09"], 0x28}, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a80)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}}, 0x45}, 0x1, 0x0, 0x0, 0x4040}, 0xe97b44310876ac03) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYBLOB="400100001000010028bd7000ffdbdf25ac1414aa000000000000000000000000000000000000000000000000000000004e23000020008000000020000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000000000000206c000000e0000001000000000000000000000000feffffffffffffff000000000000000000000000000000000100000000000008c80200000000010006000000000000f2ff000000000004000000000000000000ffffffffff1f0000080000000000000000000000000000000400000000000000000000000900000000000000000000000000000002000100030000000000000008001f0004000000480003"], 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="10004d18", @ANYRES16=r5, @ANYBLOB="010025bd7000fddbdf250100000004000780"], 0x18}, 0x1, 0x0, 0x0, 0x8841}, 0x40040) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000f40)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@fadd={0x58, 0x114, 0x6, {{}, 0xfffffffffffffffe, 0x0}}], 0x58}, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x94, r7, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x24000004}, 0x20004000) r8 = accept4$x25(r2, &(0x7f00000004c0), &(0x7f0000000500)=0x12, 0x800) readv(r8, &(0x7f0000000980)=[{&(0x7f0000000540)=""/230, 0xe6}, {&(0x7f0000000640)=""/245, 0xf5}, {&(0x7f0000000740)=""/238, 0xee}, {&(0x7f0000000840)=""/132, 0x84}], 0x4) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRESDEC], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) 376.261735ms ago: executing program 0 (id=5406): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010800000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000980100002800c000180080001400000018014"], 0x78}, 0x1, 0x0, 0x0, 0x2000c045}, 0x40) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000010000100000000001b0000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a300000000048000480440001800b000100657874686472000034000280080001400000000b080004400000001908000340000000f905000200830000000800064000000002"], 0xf8}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000480)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x2, '\x00', {0x7, 0x6, "0f0d29", 0x7, 0x33, 0x0, @private1, @empty, [@dstopts={0xff, 0x0, '\x00', [@padn, @enc_lim={0x4, 0x1, 0x7}, @padn]}]}}}}}}}, 0x0) 332.920903ms ago: executing program 3 (id=5407): setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000100)={@pptp={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {&(0x7f0000000000)=""/138, 0x8a}, &(0x7f00000000c0), 0x2}, 0xa0) r0 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={0xffffffffffffffff}, 0x4) r2 = accept4$llc(0xffffffffffffffff, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000002c0)=0x10, 0x80800) splice(r1, &(0x7f0000000240)=0xffffffff, r2, &(0x7f0000000300)=0x4, 0x800, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x36}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x88c0) syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb0, 0x4, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_USERDATA={0x7a, 0xc, "a2afe69e49def0c71a3330727f70c6a9015a542a89a871f75a6b9e776c32897de2651d505a1d6d536c43fc13e6bc2eb5d05ebf1432b2e47fe659f90304e1a97b76b2ad3589fb6a4ecfc67fe614b73a34fcbd92db17767d873b6ab75f9b17815c1e1fa8222f961530f90d32a7e2b611b2538031ad6ca5"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20048810}, 0x8100) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x16c, 0x15, 0x8, 0x70bd25, 0x25dfdbfc, {0x21, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x8b, 0x1, "67a052cd272566cee9b8542788052dd533135f4f034b27471700b0b40621674b7d05217c422f6a25f6612a643929b40c93a6f91aafc79ccab6e92280eb0ace1fc3cf5467e0911767ba00c73fd0a2b85cedd8fef95da24b6330db7de886aff9cb0cb87d3517e8123d404c23ede0fc04fb84d0f8bcd15b44da51871eb12280b381df6e935c806bda"}, @INET_DIAG_REQ_BYTECODE={0x89, 0x1, "ff509881bc15755aecbbd2fca909aa127696592bf09f3af7eeb4c902bfb728d986ae7d60b08bbea4cb2431397ce3804e9ef6b661e88992b0c8b9fce72ac27ebc74947d046f726cf2244cbb7aad2f678431c22c045ea98723a02928ef4770a54287113ed4e643ebded234212d057ee1444c11302fe2fa828449ed91fd87352fc42c98f1074f"}, @INET_DIAG_REQ_BYTECODE={0x3f, 0x1, "638a522afc147ffa8e74395a7fa8adbbfabf5ebfa6c7c235b08cb5eea407ae9d7335dc72b517a293cf0d809410dbc2c20afe2436923a8d0560bc59"}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4}, 0x800) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r6, 0x8905, &(0x7f0000000880)) bpf$ENABLE_STATS(0x20, &(0x7f00000008c0), 0x4) syz_genetlink_get_family_id$team(&(0x7f0000000900), r3) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffffffffffff8000}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008005}, 0x814) r7 = accept(r4, &(0x7f0000000a40)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000ac0)=0x80) recvfrom$unix(r7, &(0x7f0000000b00)=""/35, 0x23, 0x120, 0x0, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r7) sendmsg$NL80211_CMD_UPDATE_FT_IES(r7, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x60, r9, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_IE={0x3a, 0x2a, [@link_id={0x65, 0x12, {@initial, @broadcast}}, @chsw_timing={0x68, 0x4, {0x1, 0x2}}, @ht={0x2d, 0x1a, {0x0, 0x0, 0x5, 0x0, {0x101, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x800, 0xfffffff7, 0x6}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xfffd}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000043}, 0x4000000) getsockopt$packet_buf(r7, 0x107, 0x4, &(0x7f0000000cc0)=""/140, &(0x7f0000000d80)=0x8c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000dc0), 0x8001, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e00)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000e80), &(0x7f0000000ec0)=r1}, 0x20) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000001340)={{r4, &(0x7f0000001180)='\'#\'%,}[))#\x00', 0x20100, &(0x7f00000011c0)={@_ha_fsid={[0x36568f00, 0xac]}, {0x5, 0x40, 0x200, 0xfff}}, 0xe48f24e3, &(0x7f0000001200)={@_ha_fsid}, &(0x7f0000001240)=0x9}, {[0x1ff, 0x5, 0x80000000, 0x2]}, 0x5, 0xb5, &(0x7f0000001280)=""/181}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x18, 0x25, &(0x7f0000000f40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @ldst={0x0, 0x1, 0x6, 0x3, 0x7, 0x18, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001080)='syzkaller\x00', 0x5, 0xad, &(0x7f00000010c0)=""/173, 0x41100, 0x43, '\x00', r8, 0x0, r12, 0x8, &(0x7f00000013c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000001400)={0x0, 0x0, 0xf1}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001440), 0x10, 0x80000001}, 0x94) sendmsg$OSF_MSG_ADD(r7, &(0x7f0000001840)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x806032}, 0xc, &(0x7f0000001800)={&(0x7f0000001580)={0x268, 0x0, 0x5, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [{{0x254, 0x1, {{}, 0xff, 0xa2, 0x8, 0x7fff, 0xf, 'syz1\x00', "2a16884c72a04d085b384223715271e8b57febf1050821febaaff6e9e405ec53", "bcbad3e9f2373618e95166069b454a09658f4a551eaec0f6b923995b63f806f2", [{0x0, 0x7fff, {0x0, 0x1}}, {0x7, 0xfbec, {0x0, 0xfffffff5}}, {0xfffe, 0x6, {0x2, 0xffffffff}}, {0x961, 0xcd2a, {0x1, 0x8}}, {0x9, 0x7ff, {0x1, 0x6}}, {0xfffa, 0x9, {0x3, 0xac}}, {0x6, 0xd2, {0x3, 0x58b}}, {0x2, 0x0, {0x0, 0xc2}}, {0x8, 0x6, {0x2, 0x40000}}, {0xd8, 0x8, {0x3}}, {0x5e1, 0x6, {0x3, 0xc00000}}, {0x55c, 0x7e4, {0x3, 0x7}}, {0xd99, 0x72a, {0x0, 0x5}}, {0x4, 0x10, {0x3, 0x4}}, {0x5, 0x101, {0x1, 0xffff}}, {0x6, 0x1, {0x2, 0x8}}, {0xef02, 0xc, {0x0, 0xd738}}, {0xc, 0x3, {0x1, 0x3}}, {0x1, 0x4, {0x0, 0x2}}, {0xd7, 0x3ff, {0x0, 0x41}}, {0x2, 0x7ff, {0x3, 0x80000001}}, {0x51e7, 0xfffe}, {0xfff9, 0x81, {0x2, 0x5}}, {0x3, 0x3, {0x2, 0x4}}, {0x0, 0xb, {0x1, 0x4}}, {0xb, 0x6591, {0x1, 0x4}}, {0x0, 0x9, {0x1, 0x6}}, {0x7, 0x4, {0x2, 0x6}}, {0xfe00, 0x3, {0x1, 0x5}}, {0x7, 0x4, {0x0, 0x3}}, {0xf283, 0x9, {0x3, 0x401}}, {0x800, 0x1ff, {0x1, 0x8}}, {0xba1, 0x4d7, {0x0, 0x1}}, {0xfff, 0x28, {0x2, 0x8}}, {0xfa, 0x4, {0x0, 0x4}}, {0x2, 0x9f8d, {0x2, 0x41d9}}, {0x7, 0x3, {0x3, 0x400}}, {0x8, 0x7, {0x0, 0x4}}, {0x9, 0x7, {0x2, 0xffff}}, {0x8, 0xfffa, {0x0, 0xffff0000}}]}}}]}, 0x268}}, 0x1) 325.672272ms ago: executing program 2 (id=5408): socket$netlink(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x20000}, @isdn={0x22, 0x2, 0x7, 0x2, 0x9}, 0xa55c, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='ip6_vti0\x00', 0x7, 0x4, 0x3}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x1, 0x0, 0xd}, 0xffffffffffffff19) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000080000009700000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080000002d1501000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000003000000160302000ee60060bf350000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154baa8e51489a614e69722bac30000000000000000000000000000a006b178438e930b2494db1bf624a70a19a45b8b71869afb13cb2ac1d2f3ec0d93a3e4fd0ad076c7d826f218aa6ba8ec5e58b7c64dc8616127087901dc65418a4b25bfa7ae8b5ad9642815f319230425e8bd89c6983d816d97d81a739917eecd26f9a3aecaf0acdaf6cffab38eae3b10b122b4bf521a46bf01a0c136f745113b589459fbe1666087a7c554a55e2b42ab7e405a77f405a348a64e356b7fb61e48ea9c87bf13f97052c51fdd49f3dbccf9874cf61807ae4b1665ccdd026d4580a068395e8cb851eeadb1da6d1009513ca73a685c66fb15f27eb74a7a4eb5966e3ef4be3ca8ba81b2d17d797265390ce616c3d7b566fe956fb93c6a43f4dc6bfc194daeb7b998d550773bc14aca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) unshare(0x20000400) (async) r3 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r4, 0x0, &(0x7f0000000300), 0x80800) (async) r5 = accept4(r3, 0x0, 0x0, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x20, 0x5, &(0x7f0000000500)=ANY=[@ANYRES8=r4], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44054}, 0x8010) poll(&(0x7f0000000380)=[{r5, 0x414e}], 0x1, 0x6) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) 145.365952ms ago: executing program 0 (id=5409): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a5f5fde31abc816a3c47e25a6d0cbe49ba8f9f869f35d1f710db6bfcbc49ec9533ac8127d4fda8164789e9e388271e9c36391f21fff45c1d1f7f6ce7ee817fc1c55153f68f7fc70c5f8a08ec61fefba9683096e59c0d4d7ccc0db823b9dc38069c2336e1630f16e835b390646094d13a13b8257228c34b6c665ca1b31f383239f4b6fe1ab766ca4c337128614dd8f3b5e70283111c2f17fa6a8e67b6453b8fc7f84f3ce1e943219521e80cf60612b3431725290910629c1614aa6e13b92374763bb2d2318166f12e1b0340defc05"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000080000000003500000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000940000000c62cdcd440000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 140.583542ms ago: executing program 3 (id=5410): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x4, &(0x7f00000007c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x24}, 0x94) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x8004b709, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none, 0x1}, 0xa) poll(&(0x7f0000002000)=[{r2, 0x93d4}], 0x1, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x40, 0x10, 0x4}, [@NDA_LLADDR={0xa, 0x2, @remote}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, &(0x7f0000000000)=0x8) getsockopt$bt_hci(r7, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1d}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x30}]}, 0x24}, 0x1, 0x0, 0x0, 0x8005}, 0x20000081) 115.044319ms ago: executing program 4 (id=5411): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000580)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={r2, 0x7, 0x10, 0x0, 0x8}, &(0x7f0000000100)=0x18) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r2, 0x64}, &(0x7f00000001c0)=0x8) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x0) (rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) (async) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r4, @ANYBLOB="8300050000000000700002800b000100677265756170007b0c00028008000700ac1414aa"], 0x3c}}, 0x0) (async) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}, {{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @local}}}], 0x20}}], 0x2, 0x4880) 377.669µs ago: executing program 0 (id=5412): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003300)=@deltfilter={0x25bc, 0x2d, 0x100, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x3, 0x6}, {0x6, 0x10}, {0xb, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x10, 0xb4}}, @TCA_CHAIN={0x8, 0xb, 0x7ff}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @TCA_RATE={0x6, 0x5, {0x4, 0x7f}}, @filter_kind_options=@f_basic={{0xa}, {0x2508, 0x2, [@TCA_BASIC_POLICE={0xc, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]}, @TCA_BASIC_EMATCHES={0xc4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x3}, {{0x1, 0x1}, {0x4, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x5, 0x8, 0x3}, {0x0, 0x6, 0x3}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x4, 0x3, 0x1}, {0x7fffffff, 0x6, 0x2, 0x1}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x2, 0x1, 0x7}, {0xfffffffa, 0x1, 0xcb7c, 0x6, 0x6, 0x0, 0x2}}}, @TCF_EM_IPT={0x28, 0x3, 0x0, 0x0, {{0x3, 0x9, 0x2ed0}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x1ff, 0x3, 0x200}, {0x7ff, 0xfffffff8, 0x0, 0x5}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x7ea6, 0x8, 0x6}, {0xffffffffffffffff, 0x2, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf2}}]}, @TCA_BASIC_POLICE={0x146c, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x4, 0x7, 0x5, 0xfffffff3, 0xb, 0x2, 0x8, 0x8001, 0x66, 0x8000, 0x3, 0x2, 0x603909d, 0x20, 0x2f, 0x4, 0xd8a0, 0x9, 0x200, 0x4, 0x4, 0x3, 0x8, 0x1ff, 0x9, 0x29, 0x6, 0x0, 0x4, 0x1, 0x0, 0x8, 0x8, 0x2, 0x1ff, 0x5, 0x3, 0x101, 0x8, 0xfffffffc, 0x39fd, 0x4, 0x5, 0x0, 0x4, 0x8, 0xcb, 0x7b62, 0x0, 0x3, 0x6, 0x3, 0x6, 0x4f84, 0x5, 0x101, 0x7, 0x2c, 0x3, 0x7fffffff, 0x2, 0xd, 0x7f, 0xfff, 0x81, 0x8001, 0x9, 0x7, 0x5, 0x2, 0x3, 0x3, 0x2, 0x0, 0x0, 0x3, 0x100, 0x2, 0x1, 0xe7c, 0x9, 0x4, 0x4, 0x1, 0x7ff, 0x2, 0x0, 0x4, 0x1000, 0x6, 0x24b, 0x6307, 0x3, 0x6, 0x0, 0x2, 0x1ff, 0xfffffffb, 0x78a, 0x4d5, 0x7f, 0xd8, 0x6c, 0x3, 0x3, 0x6, 0x2b6, 0xb, 0xfffffffc, 0x1, 0xc, 0x4, 0x7a, 0x10000, 0x3, 0x80000000, 0xc, 0x101, 0x5, 0x8, 0x0, 0x5, 0x5, 0x401, 0x8, 0x6, 0xa, 0x8000, 0xffffffff, 0x1, 0x9, 0x80000000, 0x22888297, 0x4, 0xff, 0x9, 0x0, 0x8, 0x10000, 0x4, 0x5, 0x7, 0x6, 0x4, 0xfffffffe, 0x938c, 0x6, 0x3, 0x3, 0x4, 0x7fffffff, 0x5, 0x2, 0x7, 0x4, 0x3, 0x4, 0x1, 0x2f8, 0x7845, 0x8, 0x5, 0x8000, 0xe, 0xc94, 0x8, 0x2, 0x7, 0x1, 0x2400, 0x10001, 0xd, 0x7, 0x1ff, 0x8, 0x1, 0xfffffffb, 0x8, 0x6, 0x5, 0xe0f, 0x10, 0x0, 0xe5, 0x1ff, 0x7, 0x7fffffff, 0x7, 0x5, 0x8, 0x9, 0x3, 0x8, 0x3, 0xfa, 0x5, 0x3, 0x4, 0x5, 0x10, 0xfff, 0xffffffff, 0xffffffde, 0x8, 0x61, 0xea3e, 0x1, 0x4, 0xfffffffc, 0x9, 0xbe, 0xfffffffc, 0x3, 0x9, 0x9, 0x800, 0x8, 0x74b, 0x80, 0x5, 0x9, 0xa, 0xa22f, 0x80000001, 0x2, 0x5, 0x8, 0x0, 0x8, 0x401, 0x7fffffff, 0x1a, 0x8, 0x0, 0x3, 0x1, 0x8, 0x400, 0x200, 0x6, 0x3, 0x7, 0x0, 0x1, 0x82e, 0x7f, 0x0, 0x80, 0x35, 0x0, 0x9, 0x9, 0x6, 0x40]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x81, 0x5, 0x2, 0xf49, 0xfffffffa, 0x6, 0xce9, 0x5, 0x3, 0x124508ae, 0x9, 0x6, 0x2, 0xfffffff9, 0x1, 0x6, 0x6, 0xa0, 0x48a2d228, 0xfffffa5a, 0x800, 0xfdc, 0x6, 0x5, 0x4, 0x2, 0x80000001, 0x400, 0x3ff, 0x0, 0xcbb0, 0x2, 0x80000001, 0x4, 0x7, 0x8, 0x0, 0x862, 0x1, 0x6, 0x9db, 0x6, 0x1000, 0x5, 0x61, 0x7, 0x1, 0x3, 0x1, 0xffffff00, 0xd, 0x513, 0x3, 0x7, 0x7ff, 0x40, 0x8, 0xfffffffa, 0x10, 0x9, 0x550, 0x8b, 0x5, 0x17, 0x200, 0x6, 0x2, 0x6, 0x10000, 0x9, 0x6, 0x3, 0x3, 0x5, 0x101, 0x6, 0x4, 0x0, 0xa, 0x10001, 0x800, 0x50000000, 0x4, 0x1, 0x6, 0x10001, 0x2, 0x1, 0x4, 0x8, 0x3, 0x8, 0x74, 0x1, 0x101, 0x7, 0x8, 0x72cf, 0x1, 0x8, 0x5f41, 0x7cf, 0x0, 0x5, 0x7, 0x6, 0x401, 0x5, 0x7fff, 0x8, 0x7fffffff, 0x485, 0x9, 0x8, 0x7, 0xfffffff5, 0x7, 0x8, 0x3fec, 0x8, 0xab, 0xd9, 0x1, 0x1, 0x26, 0x3, 0x2, 0xb, 0x1ff, 0x0, 0x7, 0x5913a7bc, 0x80000001, 0x44e, 0x7, 0x1, 0xd9c, 0x3, 0x9, 0x8, 0x7, 0xfffff7a6, 0x3, 0x1ff, 0x2, 0x1bf, 0x2, 0x0, 0x1, 0x400, 0x9, 0x1000, 0xa79, 0x29f, 0x7fec, 0xfffff565, 0x5, 0x7ff, 0xfffffff9, 0x8, 0x342, 0x7, 0x7, 0x6, 0x2, 0x8, 0x4ea0e732, 0xaa6, 0x9a, 0x4, 0x9, 0x4e6, 0xfffffff9, 0x1, 0x0, 0x51b, 0xd, 0x3, 0x4, 0x9, 0xfffffff9, 0x220a, 0xa, 0xfffffff5, 0x8, 0x6, 0x5, 0x1, 0x80, 0x7, 0x5, 0xffffffff, 0x5, 0x1ff, 0x3, 0x2, 0x4, 0x8001, 0x200, 0x4, 0x7ac, 0xac, 0x6, 0x0, 0xf7, 0xe3d2, 0x0, 0x6, 0x1, 0x5, 0xfffffffe, 0x4, 0x7, 0xfffffb83, 0xe, 0x4f3edc34, 0x5, 0xe, 0xd3, 0x1, 0xffff0001, 0x4, 0x2, 0x7f, 0x9, 0x1fe, 0x1, 0x8000, 0x80, 0x5, 0x80000000, 0x0, 0x4, 0x4d5a, 0x80000001, 0x4, 0x3, 0x4, 0x10, 0x9, 0xcea, 0x3, 0xfffffe01, 0xffff, 0x80000001, 0x8, 0xdc5d63b, 0x400, 0xfffffff7, 0xffffffff, 0x5, 0x5, 0x1, 0x9, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xfff, 0x0, 0x1, 0x9, 0x5894, 0x8, 0x10000, 0x3fa, 0x2, 0xb32, 0x4, 0x2, 0x8, 0x3, 0xe8c8, 0x7, 0x4, 0x3, 0x6, 0x0, 0x8, 0x0, 0x4000000, 0x101, 0x7, 0xc0000000, 0x400, 0x101, 0x10000, 0x8, 0x7fff, 0x80, 0x3f, 0xfffffff5, 0x0, 0x9, 0xb, 0x3, 0x8ac, 0x7, 0x2a, 0x10001, 0x5, 0x9, 0x9, 0x100020, 0xfb9, 0x62, 0x9, 0xe, 0x4, 0x5, 0x1, 0x4, 0x100, 0x1, 0x5, 0x8000, 0x7ff, 0x200, 0x8, 0x0, 0x0, 0x2, 0x81, 0x8, 0xfffff801, 0x1000, 0x8, 0x5, 0x6, 0x0, 0x9, 0x8001, 0x22, 0x5c, 0xfa, 0xd7d7, 0x55f, 0x3, 0xfffffffe, 0x7, 0xd, 0x4b4, 0x52, 0x2, 0x6ef7, 0x5, 0x2, 0x5, 0x1, 0xffff, 0x6, 0xfff, 0x8, 0xe5c, 0x3, 0x2, 0x4, 0x10001, 0x1, 0xfff, 0x7, 0x67c, 0x1, 0x81, 0x7, 0x7, 0x2, 0x5, 0x3, 0x936, 0x2, 0x710, 0x4, 0xffff, 0x100, 0x1, 0x3e4eeab5, 0xcb, 0x3, 0x6, 0x27db, 0x4, 0xcf, 0x101, 0x5, 0x0, 0xfffffff5, 0x68, 0x6, 0x645, 0x9, 0x100, 0x3, 0x3, 0x10, 0x9, 0x0, 0x7, 0x1000, 0xfffffff3, 0x5, 0x2, 0x6, 0x9, 0x8, 0x1, 0x101, 0x40e5, 0x1, 0x4, 0xfff, 0x92, 0x80000000, 0xcc35, 0x4, 0x14000, 0xabd, 0x1, 0x2, 0x3b41, 0x200, 0x2, 0xfffffffa, 0xf, 0x1000, 0x6, 0x6785, 0xfffffffe, 0x1, 0xfffffff8, 0x9, 0x3, 0x1, 0x5, 0x5, 0xfff, 0x6, 0x0, 0xac, 0x4, 0x8, 0x4, 0x6, 0xfffffff8, 0xfffffff2, 0x4, 0x2, 0xb6, 0x22, 0x7, 0x6, 0x10, 0x9, 0x3, 0x5716, 0x80000001, 0x2, 0x100, 0x3, 0x4000, 0x7, 0x9, 0x5, 0x77, 0x3ff, 0x1, 0x5, 0xcf, 0x1, 0x61, 0xbd, 0x74d89358, 0x8, 0x7, 0x6, 0xff38, 0x53e, 0x5, 0x1, 0x5, 0x3, 0x2000, 0x2, 0xc, 0x0, 0x382, 0x1, 0x5, 0x4eb, 0x1, 0x7, 0x5, 0xe4d7, 0x5, 0x63, 0x6, 0x81, 0x3, 0xf, 0x137f, 0x2, 0x0, 0x4, 0xaf, 0x3, 0x1, 0x80000000, 0x9, 0x4000000, 0x437c, 0x5, 0x9, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x7, 0x3, 0x0, 0x6, {0x79, 0x2, 0x4, 0xfff, 0x92, 0x10000}, {0xb, 0x1, 0xe, 0x7ff, 0x2, 0x8}, 0x1, 0x7ff, 0xa04}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0x400, 0x5737, 0x5, 0xffffffff, 0xfffffff8, 0x2, 0x9, 0x80000000, 0x7, 0x3ff, 0x1000, 0x3, 0x9f8, 0x7ff, 0x3, 0x5, 0x9, 0x9, 0xe, 0x6, 0x7ff, 0x88d, 0x6, 0xa12, 0xc0, 0x7, 0x2, 0xbdc, 0x211, 0x8, 0x7fffffff, 0x4, 0x603d, 0x2, 0x7, 0x401, 0x9cd, 0xf, 0x2, 0x6, 0x10001, 0x0, 0x0, 0x6a, 0x6, 0x1, 0x400, 0x9, 0x8001, 0x3, 0x1, 0xe, 0xd4bd3c, 0x0, 0x1, 0x7fff, 0x2, 0x0, 0x9, 0x7, 0x3, 0x0, 0x8316, 0x86, 0xfffffffe, 0xbc1, 0x3d, 0xb764, 0xffff8001, 0x6, 0xb, 0x7, 0x8, 0xff, 0x96b7, 0x0, 0x7f, 0x3, 0x671a, 0x4, 0x7, 0x7ff, 0x6, 0x10, 0x6, 0xae6, 0x9, 0x4, 0x3, 0x7ff, 0xc, 0x2, 0x1, 0x7f, 0x0, 0x180, 0xdcb, 0x0, 0x7ff, 0x9, 0x4, 0xb6, 0x1000, 0xe47, 0x209, 0x8, 0x1, 0x200, 0x3, 0x4, 0x87, 0x0, 0x8000, 0x3, 0x6, 0x2, 0x4, 0x60b6, 0x7, 0x2, 0x7, 0x5, 0x4, 0x6, 0x1, 0x1000, 0x8, 0x8, 0x6, 0x9, 0x7, 0x9, 0x7, 0x9, 0x6, 0x4, 0x5, 0xffffffcf, 0x3ff, 0xf9, 0x8, 0x0, 0xfffffff8, 0xfffffffb, 0x3, 0xfffff001, 0x10000, 0xe02, 0x10000, 0x0, 0x9, 0x9, 0x6, 0x7f, 0x9, 0x6, 0x2, 0x1, 0x6, 0x0, 0x3, 0x100, 0x3, 0x4, 0x7fffffff, 0x6, 0x44, 0x4, 0x1, 0x4, 0x9, 0x3ff, 0x5, 0x3, 0x1ff, 0xff, 0x20, 0x9, 0x4, 0xc, 0x2, 0x1000, 0xc30, 0x7, 0x80000001, 0x3, 0x1, 0xde, 0xffffffff, 0x2, 0x7fff, 0x9, 0x8f9b, 0x3ff, 0x3f, 0x0, 0xf, 0x401, 0x1ff, 0x0, 0x2, 0x1000, 0x0, 0x3, 0x5, 0x3, 0x4, 0x5, 0x7, 0x3, 0x0, 0x800, 0xffffffff, 0x8aab, 0xffff, 0x80000000, 0x7, 0x6, 0x2, 0x5, 0x5, 0xe74f, 0x7, 0xfff, 0x80000000, 0x5, 0x8, 0x4, 0x8b9, 0xfffffff9, 0x33c4d95, 0xb, 0x19c7, 0x7, 0x1000, 0x3, 0x9, 0x3c3a, 0x9, 0xb4, 0x0, 0x8, 0x9, 0x80, 0x1, 0x200, 0xff, 0x5, 0x773b, 0xd4c6, 0x9, 0x10001, 0xe38, 0x8, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x8, 0xb, 0x81, 0x9, 0x0, 0x8, 0x1, 0x4, 0x5, 0x8e, 0x5, 0x2, 0xffe0000, 0x9, 0x5, 0x4, 0x0, 0x4, 0x40, 0x0, 0x2, 0x1, 0xff, 0x8000, 0xa, 0x0, 0xfffffff9, 0x8, 0x800, 0x2, 0x5, 0x7, 0x0, 0x2f, 0x9, 0x29e0, 0x7, 0xffffffff, 0x2, 0x696f88c3, 0x9, 0x5, 0xffff, 0x4000, 0xfffffffd, 0x7, 0x6, 0x0, 0x59, 0x2, 0x8, 0x0, 0x8, 0x13f80, 0x3a6, 0x4, 0xe9, 0x1000, 0x4, 0x8, 0x2b0, 0xffff, 0x5, 0xf, 0x7, 0xe, 0x5, 0x1, 0x7fffffff, 0x7, 0xedc4, 0x5, 0xf, 0x1000, 0xff, 0x8, 0x2, 0x8, 0xff, 0x1, 0x10000, 0x6, 0x862, 0x1925, 0x80, 0xe, 0x7, 0x87, 0x8, 0x514f5d8c, 0x7, 0x8, 0x9, 0x200, 0x2, 0x3, 0x3000, 0x9, 0x2f5d0611, 0x4, 0x5, 0x2, 0x5, 0x2, 0x42, 0xcd90, 0x5, 0x7, 0x9, 0x9, 0xffff0000, 0x4, 0x4, 0x1, 0x0, 0xfffffff8, 0x1a, 0xfffffffe, 0x0, 0x7ff2cf29, 0x5, 0x6, 0xee, 0x9, 0xffff, 0xb2a9, 0x8, 0x80000001, 0x443, 0xd9, 0x80000000, 0x2af4, 0x2, 0x62c0, 0x677e, 0xff, 0x5, 0x0, 0x9, 0x5, 0x6, 0x1, 0x3, 0x8000, 0x40, 0x8, 0x7fe, 0x6, 0xdc, 0x7fffffff, 0x98, 0xf, 0x6, 0x5, 0x1, 0x5, 0x80, 0x3, 0x8, 0x3, 0x800, 0x5, 0x3ff, 0x0, 0x1, 0x6, 0x9, 0xea, 0xffffffff, 0xaa91, 0x6, 0x0, 0x3, 0x2, 0xff, 0x7, 0x3, 0xc10, 0x4, 0x3, 0x100, 0x101, 0x4, 0x8, 0x1000, 0xf0000000, 0x5, 0x6, 0x3, 0x7f, 0x57, 0x4, 0x9, 0xe, 0x7, 0xf, 0x5, 0x9, 0x1, 0xf, 0x7ff, 0x7, 0x82, 0x81, 0x7ff, 0xe54, 0x0, 0x5, 0x5, 0x1ffc, 0x1, 0x6, 0x2, 0x1, 0x9, 0x6, 0x6, 0x4037, 0x933, 0x2, 0x1, 0x1000, 0xfffffff8, 0x6e, 0x200, 0x3, 0x9, 0x8, 0x2, 0x2, 0x3, 0xfffffff9, 0x40, 0x0, 0x8, 0xd, 0x5, 0x1, 0x9, 0x77, 0x3, 0x8000, 0x6, 0x40, 0x793d, 0x1000000, 0x3, 0xfffffb52, 0x5, 0x400, 0x4, 0x1, 0x7, 0x7ff, 0x10]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]}, @TCA_BASIC_ACT={0x13c, 0x3, [@m_ife={0x138, 0x18, 0x0, 0x0, {{0x8}, {0xe0, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x442c0bb3, 0x47d, 0x6, 0x3, 0x7}}}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_PRIO={0x8}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x200}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xcd}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x800}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x6}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x9, 0x5, 0x40, 0x4}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @random="4a846ceb0dc4"}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x6b7}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x101, 0x6, 0x1, 0xfe}, 0x1}}]}, {0x33, 0x6, "dcf4f844397a6490978e9e5a31cbd143717c7a0a9856cb9398d828b7ee26b804d8e18ae096ccf742a2510958a7cb7e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3}}, @TCA_BASIC_ACT={0xe84, 0x3, [@m_mpls={0x138, 0xf, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x8, 0x10000000, 0xffffffc6, 0x5}, 0x2}}]}, {0xe5, 0x6, "9db1272ce49440d75cd2bc2c0489156faec681db26d7925122971327b74d51dc3ec1e2bf9bf205e42cc754a7e8773852a869f98bd88e642278677dd063841f7dbc11e8d3efa2ad43d2e7a3bbb3f1ebdc4ced3f2d27761edcc27cd32e2876223bf963e7cc2d88471b89c5075c24949237cdcb4fce1448c252696a73a1b0d25a65d0baf224bd9fa1e7e6cbd364e1da4f45e8224e768db22b5d90fa55e1a8859fd31990122942a6cff3779bec5b608a6cd1ebf89099b5bdd4dea5afa4b6579e52dcd0311059a9ca9136cd3de9cef857c96656b11a2e89d6864d50e88135583c0a5067"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_police={0xd48, 0x14, 0x0, 0x0, {{0xb}, {0xc44, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x0, 0x1, 0x1ff, 0x1000, 0x2, 0xffffffff, 0x6, 0x10001, 0x9, 0xd, 0x9, 0x8001, 0x6, 0x5, 0x10, 0xdd7c, 0x6, 0x400, 0x6, 0x0, 0x3, 0x101, 0x7, 0x5, 0xc, 0x3, 0x200, 0x7, 0x8, 0xf1eb33f, 0x4, 0xfff, 0xfff, 0x0, 0x6, 0x4, 0x7fff, 0xf42, 0x29, 0xfff, 0xd, 0xff, 0x8000, 0xffff, 0x800, 0x8, 0x686e, 0x80, 0x6, 0xffff8001, 0x0, 0x5, 0x80003ff, 0x5, 0x800, 0xf, 0x1, 0x6, 0x1, 0x8ba, 0x5, 0x33a, 0x6, 0x3f8b, 0x2, 0x10, 0x7fff, 0x2, 0x3, 0xfffffffd, 0x0, 0x80, 0x7, 0x4, 0xdf09, 0x800, 0x6, 0xfffffffc, 0x8001, 0x6, 0x1, 0x24d, 0x0, 0xcb17, 0x3, 0x4, 0x8, 0x1, 0xff, 0x7f, 0xc, 0x7, 0x1, 0x6, 0x9f7, 0x19e, 0x9, 0x7fff, 0x8001, 0x39, 0x0, 0x8, 0x3, 0x3, 0x3, 0x1, 0x1ff, 0x5, 0x8, 0x4, 0xad6f, 0x2, 0x3, 0x5, 0x401, 0x1, 0x4, 0x1, 0x8, 0x2, 0x3, 0x6, 0x4, 0x8, 0x8, 0xaeb7, 0x7, 0x8, 0x3, 0x4, 0x5289, 0x2, 0x5, 0x2, 0x8, 0x7ee, 0x200, 0x40, 0x2000000, 0x6, 0x401, 0x9, 0x80000000, 0x7, 0x8, 0x9, 0x6, 0x0, 0x0, 0x720a, 0xfffffff5, 0x6, 0x9, 0x7, 0x7, 0xa68, 0x3, 0xe, 0x6, 0x6, 0x6, 0x101, 0x6, 0x4582, 0xb, 0x10, 0x7f, 0x5b8b, 0x81, 0xffff, 0x0, 0x5, 0x1, 0x9, 0x1000, 0x1000000, 0x7, 0xfffffff1, 0x0, 0x1ff, 0x4, 0xa15, 0x3, 0x1, 0x7f, 0x59, 0x401, 0xfffffffd, 0xd6, 0x8, 0x8, 0x8001, 0x1, 0x3, 0x3, 0x3, 0x12b, 0x5, 0x2, 0xffffffff, 0x7, 0x4, 0x6d, 0x400, 0x4500, 0x1, 0x8, 0x9, 0x9, 0x5, 0x7, 0x642, 0x1, 0xc5a2, 0x5, 0xf, 0xfffffffe, 0x5dc, 0x95, 0x3b, 0x0, 0x7fff, 0x100, 0x6, 0x8, 0x7, 0x10000, 0x1, 0x3, 0xffff0001, 0x1b81, 0x10, 0xb4b, 0x7, 0x8, 0x5, 0x7fff, 0x8, 0x1643, 0x4, 0x5e0, 0x4, 0x1, 0x0, 0x400, 0x9, 0x6, 0x3, 0x4, 0x9, 0x5, 0x4, 0x1, 0x4, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100000001}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x3, 0x9, 0x9c, 0x1, 0x9, 0xb, 0x80000000, 0x6, 0x7, 0x7, 0x80000001, 0x5, 0xa, 0xffffffff, 0x8263, 0x4, 0x2, 0x5, 0x2, 0x8, 0x6, 0xd, 0x4, 0x3, 0x2, 0x5, 0x4, 0x7, 0x1, 0x3, 0x9, 0xd, 0x81, 0x8, 0x0, 0xf8d9, 0x8, 0x80000001, 0xd7f, 0x7ff, 0x65190, 0x7, 0x8, 0x7, 0x8d3, 0x2, 0xa, 0x5, 0x4, 0x10000, 0x9, 0x5, 0x4, 0xbe6, 0x9, 0xfad3, 0xee, 0xd9a, 0x6, 0x80, 0x7, 0x0, 0x8, 0x6, 0x27677175, 0x74be8e42, 0x3, 0x401, 0x9, 0x6, 0x6, 0x0, 0xd6, 0x0, 0x1, 0x4, 0x4, 0x2, 0x10001, 0x2, 0x1a8b, 0x2, 0xf5f0, 0x8000, 0x80, 0x10001, 0x0, 0x610a, 0x6, 0xff, 0x4, 0x1, 0xf, 0x8, 0x7, 0x10, 0xffffffff, 0x4d83, 0x6bf, 0x6, 0x3, 0x7, 0x6, 0x9, 0xe, 0xff, 0x200, 0xfffffffa, 0x2, 0x6, 0x3, 0x4, 0x3, 0x7, 0x9, 0x7, 0xffffffc3, 0x800, 0x0, 0x4, 0x2, 0x800, 0x100, 0xa, 0x2, 0x0, 0x0, 0x1, 0xb, 0x9, 0x7, 0xdf, 0x4, 0xc9c1, 0x8, 0x5, 0xd, 0xc, 0xfffffffa, 0x5, 0x4, 0x8, 0x2, 0x9806, 0xc, 0xd, 0x5, 0xa, 0x5d2e, 0x101, 0x0, 0x7f, 0x8000, 0x0, 0x5, 0x3, 0xf31, 0x101, 0x6, 0x5, 0xba4c, 0x5, 0x5, 0x5, 0xfffffff7, 0x800, 0x2, 0x3, 0x171, 0x2, 0x267c, 0x6, 0x661c, 0x2, 0x0, 0x4, 0x102b8d6c, 0x4, 0x0, 0x800, 0x9, 0x6, 0x8020000, 0x7, 0x3, 0xe1, 0x4d3e, 0x7, 0x1, 0x8, 0x3, 0x0, 0x846, 0xe8, 0x2, 0x800, 0x0, 0xff, 0x2, 0x5, 0x200, 0x80, 0xfffffff9, 0x7fffffff, 0x221, 0xa6e2, 0x1, 0x3, 0x9, 0x4, 0x1, 0x4, 0x7f, 0xc, 0xa8c, 0x4, 0x8, 0x6, 0x80000000, 0x3, 0xffff0000, 0x7f, 0x6, 0x9, 0xff31, 0x4e79, 0x2, 0x8, 0x8000, 0x8, 0x538aa58b, 0x1, 0x80000000, 0x401, 0x7, 0xffffffff, 0x5, 0x10001, 0xef0c, 0x6, 0x8, 0x6, 0x5, 0x0, 0x9, 0xe44, 0x1, 0x6, 0x9, 0x8, 0x401, 0x1, 0x7, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x7, 0x271, 0x1000, 0x7, 0x7, 0x0, 0x5, 0x3, 0x6, 0xfffffff8, 0xfe20, 0x0, 0x0, 0xffffffff, 0x9, 0x9, 0x2, 0xb68, 0x6, 0x80000000, 0x7f, 0x6, 0x3, 0x8, 0x14, 0x5, 0x3, 0x1, 0x80000001, 0x4, 0x6, 0x9, 0x1, 0x10001, 0x5, 0x80, 0x1, 0x200, 0x4, 0x3, 0x5, 0x8, 0x9, 0x289, 0x9, 0x1, 0xfffffffd, 0xdfe, 0x8, 0x1000, 0x9, 0x6, 0x7, 0x400, 0x16, 0x26b, 0x400, 0xfffffffc, 0x5, 0x101, 0x75, 0xa191, 0x5, 0x200, 0x5, 0x925f, 0xbb9, 0x3, 0x8, 0x3, 0x682, 0x8, 0x1, 0x32b, 0x6, 0x6, 0x9, 0x9, 0x3, 0x34d, 0x7, 0x1, 0x1, 0x6, 0xc147, 0x10001, 0x3, 0xbcd, 0x81, 0x733, 0x1, 0xe0b, 0x7, 0x2, 0x8, 0x0, 0xfffffffe, 0x2, 0x0, 0x3, 0xc, 0x8, 0x8c0c, 0xf, 0x8, 0x1, 0xffffffff, 0x7, 0xfffffff8, 0x8, 0xad0b, 0x8000, 0xc, 0x8, 0x3, 0x6, 0x8, 0x81, 0x7, 0x6, 0x22c5, 0x8, 0x10, 0xffffe574, 0x40c, 0xf, 0x2, 0xffff, 0x1000, 0x1, 0x2, 0x18, 0x1, 0x7, 0x590d, 0x6, 0xf, 0x3, 0x8001, 0x8001, 0x78ac, 0x5, 0xa, 0x8b52, 0x6, 0x9, 0x7, 0x40, 0x7, 0x4, 0x3, 0xa0, 0x10001, 0xfff, 0x2, 0x0, 0x80000000, 0x0, 0x6, 0x2, 0x1000, 0x137c, 0x0, 0x4, 0x9, 0x7f, 0xfffffff9, 0xe, 0x3, 0x10, 0xffff8001, 0xffffffc0, 0x80000000, 0x5, 0xfffffff7, 0x9, 0xfffff37e, 0xb, 0xb4, 0x5, 0x6, 0xcad, 0x8, 0x6, 0x3ff, 0x1178, 0x9, 0x40, 0x2, 0x6, 0x3826, 0x7f, 0xffff, 0x0, 0xffffd108, 0x4, 0x5, 0x8, 0x10001, 0x8, 0x80, 0x2, 0x8, 0x7ff, 0x3, 0x3, 0x4, 0x1, 0x1000, 0x6, 0x70d8, 0xf3f, 0x5, 0x6, 0x5, 0x0, 0x4, 0x800, 0x3ff, 0x2, 0x0, 0x6, 0x3, 0x8fd3, 0x1, 0xe, 0x49c044a1, 0x2, 0x1, 0x8000, 0x9f1, 0x4, 0x7ff, 0x4, 0xe7e, 0x7, 0x0, 0x2, 0x2, 0x80000000, 0xa, 0x3, 0x1, 0x3, 0x7, 0x0, 0x8, 0x5, 0x38e, 0x9cd5, 0x650, 0x8, 0x2, 0x7f, 0x10001]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}]]}, {0xda, 0x6, "fb458235f93805bfa5088ddf727060b3ac3237bbe68796de14a2787ba828cb21827bd8947c18fe35b3f706347206fc9fd0d4bf8fbb894034bfd302b128abd5acc3e5abf2f3c7a34ed68880b6d73d5b08125201e8982bf99203370702427e6fd8a2fdca85b0d791d4221edc57abd2f3a900696a622d53baf6c092e7e0d98bc2b02efebfd7a4d7bca6c668349090b80bdccc54640caf1e248f49e3d6ef89f81eb1041cc114c0ef3b4e4e691bbf12f0eaedf928f99a87a91b5d34d159896bd1e7158446c7466ac28ece0bb1520975a0e94d38c704c591a6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x2, 0xfff1}}, @TCA_U32_FLAGS={0x8, 0xb, 0x8}, @TCA_U32_INDEV={0x14, 0x8, 'netdevsim0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0xf3}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x25bc}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f", 0x7d}], 0x1}}], 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r7, 0x4003e}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)="a2", 0x5dc}], 0x1}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xe8}}, 0x0) close(0x3) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) close(0x3) recvmsg(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)=""/178, 0xb2}, {&(0x7f00000007c0)=""/235, 0xeb}], 0x2}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000240)={0x1, 0x4, 0x2, 0x0, 0x3, 0x7f, 0xa8, 0x9, 0x6, 0x8, 0x7, 0xa5, 0x3, 0xfa}, 0xe) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r0, &(0x7f00000007c0), 0x0, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000071123500000000009500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 0s ago: executing program 2 (id=5413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x8, &(0x7f0000000a00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x10c, &(0x7f0000000cc0)=""/268, 0x729c10b274fd1a11, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024001000000080001400000000014000000110001"], 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03000000000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001006d61630400633000000000000000000014000000110001"], 0x80}}, 0x0) close(r0) kernel console output (not intermixed with test programs): th2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.706784][T14105] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.721085][T20561] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20004 [ 467.739252][T20561] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3527'. [ 467.748294][T20557] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 467.775507][T20561] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3527'. [ 468.249665][T20589] mac80211_hwsim hwsim42 syzkaller0: entered promiscuous mode [ 468.260354][T20592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3535'. [ 468.291877][T20589] mac80211_hwsim hwsim42 syzkaller0: entered allmulticast mode [ 468.311443][T20592] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 468.326599][T20592] team0: Port device batadv1 added [ 468.332670][T20593] mac80211_hwsim hwsim42 syzkaller0: Caught tx_queue_len zero misconfig [ 468.476233][T20608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.989241][T20573] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 471.404766][T20640] vlan0: entered promiscuous mode [ 471.409863][T20640] geneve1: entered promiscuous mode [ 471.434792][T20640] vlan0: entered allmulticast mode [ 471.457879][T20640] geneve1: entered allmulticast mode [ 471.487310][T20646] __nla_validate_parse: 2 callbacks suppressed [ 471.487330][T20646] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3551'. [ 471.620546][T20651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3554'. [ 471.648194][T20657] netlink: 'syz.3.3556': attribute type 32 has an invalid length. [ 471.665492][T20657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3556'. [ 471.710857][T20657] bond2: option coupled_control: invalid value (170) [ 471.765140][T20657] bond2 (unregistering): Released all slaves [ 472.218831][T20678] netlink: 'syz.4.3561': attribute type 20 has an invalid length. [ 472.249455][T20682] netlink: 'syz.1.3562': attribute type 2 has an invalid length. [ 472.266665][T20682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3562'. [ 472.310356][T20682] tipc: Started in network mode [ 472.328744][T20682] tipc: Node identity 7ebd6643fdbc, cluster identity 4711 [ 472.348011][T20682] tipc: Enabled bearer , priority 0 [ 472.375664][T20687] syzkaller0: entered promiscuous mode [ 472.383941][T20687] syzkaller0: entered allmulticast mode [ 472.404013][T20684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3564'. [ 472.457653][T20682] tipc: Resetting bearer [ 472.475353][T20684] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3564'. [ 472.507960][T20681] tipc: Resetting bearer [ 472.567787][T20681] tipc: Disabling bearer [ 472.763038][T18208] Bluetooth: hci3: command 0x0405 tx timeout [ 472.803410][T20703] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3571'. [ 473.118455][T20725] netlink: 'syz.1.3577': attribute type 8 has an invalid length. [ 473.119027][T20726] netlink: 'syz.1.3577': attribute type 8 has an invalid length. [ 473.233434][T20731] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 473.579753][T20739] netlink: 'syz.2.3580': attribute type 10 has an invalid length. [ 473.602791][T20739] team0: Device bond0 is already an upper device of the team interface [ 473.681303][T20744] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 473.769162][T20747] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3583'. [ 473.906144][T20750] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3584'. [ 473.997289][T20759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3587'. [ 474.162311][T20774] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.374045][T20774] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.461196][T20774] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.522413][T20774] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.537396][ T51] block nbd5: Receive control failed (result -32) [ 474.934179][ T1102] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.015008][ T58] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.074094][ T58] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.095915][ T58] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.154668][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 476.926907][T20887] __nla_validate_parse: 6 callbacks suppressed [ 476.926923][T20887] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3621'. [ 477.435636][T20906] syzkaller1: entered promiscuous mode [ 477.441176][T20906] syzkaller1: entered allmulticast mode [ 477.480773][T20909] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 477.672286][T20914] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3626'. [ 477.699614][T20914] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3626'. [ 477.821749][T20926] netlink: 'syz.4.3630': attribute type 4 has an invalid length. [ 477.829809][T20926] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3630'. [ 477.839625][T20924] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 477.855652][T20926] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3630'. [ 477.880345][T20926] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 477.982987][T20928] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3630'. [ 477.994149][T20928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3630'. [ 478.254085][T20950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3633'. [ 478.468057][T20962] syzkaller0: entered promiscuous mode [ 478.481362][T20962] syzkaller0: entered allmulticast mode [ 478.615820][T20968] ip6erspan0: entered promiscuous mode [ 478.750081][T20977] netlink: 'syz.3.3637': attribute type 4 has an invalid length. [ 478.770371][T20977] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3637'. [ 478.795791][T20977] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 479.335536][T21002] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3646'. [ 479.387399][T21017] netlink: zone id is out of range [ 479.427630][T21017] netlink: zone id is out of range [ 479.432822][T21017] netlink: zone id is out of range [ 479.469504][T21017] netlink: zone id is out of range [ 479.501136][T21017] netlink: zone id is out of range [ 479.541012][T21017] netlink: zone id is out of range [ 479.578760][T16574] hid-generic 0005:0006:5508.0001: item fetching failed at offset 3/4 [ 479.586101][T21017] netlink: zone id is out of range [ 479.604879][T16574] hid-generic 0005:0006:5508.0001: probe with driver hid-generic failed with error -22 [ 479.612743][T21017] netlink: zone id is out of range [ 479.648116][T21024] tipc: Started in network mode [ 479.653063][T21024] tipc: Node identity 86080dca919d, cluster identity 4711 [ 479.672977][T21017] netlink: zone id is out of range [ 479.688711][T21024] tipc: Enabled bearer , priority 10 [ 479.697637][T21024] syzkaller0: entered promiscuous mode [ 479.703129][T21024] syzkaller0: entered allmulticast mode [ 479.778502][T21024] tipc: Resetting bearer [ 479.824269][T21028] netlink: 'syz.2.3653': attribute type 4 has an invalid length. [ 479.845907][T21023] tipc: Resetting bearer [ 479.892676][T21023] tipc: Disabling bearer [ 481.736929][T21093] Unsupported ieee802154 address type: 0 [ 482.018941][T21133] __nla_validate_parse: 6 callbacks suppressed [ 482.018958][T21133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3681'. [ 482.191059][T21145] netlink: 'syz.3.3683': attribute type 1 has an invalid length. [ 482.200845][T21145] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3683'. [ 482.332198][T21147] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 482.841697][T21180] netlink: 'syz.0.3692': attribute type 16 has an invalid length. [ 482.866708][T21180] netlink: 'syz.0.3692': attribute type 17 has an invalid length. [ 482.949486][T21185] netlink: 'syz.3.3693': attribute type 2 has an invalid length. [ 482.967778][T21185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3693'. [ 482.986094][T21180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.003784][T21180] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.148515][T21192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3695'. [ 483.825424][T21223] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3704'. [ 483.995454][T21231] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3707'. [ 484.117053][T21233] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 484.521051][ T30] audit: type=1804 audit(1771443187.004:17): pid=21255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3712" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=707 res=1 errno=0 [ 484.572518][ T30] audit: type=1800 audit(1771443187.004:18): pid=21255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3712" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=707 res=0 errno=0 [ 484.608844][T21252] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3711'. [ 484.631821][T21252] block nbd6: Unsupported socket: should be TCP or UNIX. [ 484.656235][T21252] xt_hashlimit: size too large, truncated to 1048576 [ 484.725996][T21256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3711'. [ 484.823706][T21256] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.866952][T21256] bridge_slave_0 (unregistering): left allmulticast mode [ 484.895413][T21256] bridge_slave_0 (unregistering): left promiscuous mode [ 484.902491][T21256] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.041250][T21266] netlink: 'syz.1.3715': attribute type 3 has an invalid length. [ 485.246529][T21284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3719'. [ 485.256152][T21284] net_ratelimit: 240 callbacks suppressed [ 485.256173][T21284] openvswitch: netlink: Key type 1052 is out of range max 32 [ 485.277625][T21278] tipc: Resetting bearer [ 485.322870][T21281] netlink: 'syz.1.3718': attribute type 1 has an invalid length. [ 485.347715][T21267] syzkaller0: entered promiscuous mode [ 485.358935][T21267] syzkaller0: entered allmulticast mode [ 485.372190][T21281] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3718'. [ 485.424302][T21278] tipc: Resetting bearer [ 485.539126][T21298] Cannot find del_set index 1 as target [ 485.978682][T21314] lo speed is unknown, defaulting to 1000 [ 486.162111][T21314] lo speed is unknown, defaulting to 1000 [ 486.190580][T21335] netlink: 'syz.1.3727': attribute type 20 has an invalid length. [ 486.249869][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.305798][T21314] lo speed is unknown, defaulting to 1000 [ 486.308569][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.344246][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.385775][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.795620][T13126] IPVS: starting estimator thread 0... [ 486.905412][T21365] IPVS: using max 38 ests per chain, 91200 per kthread [ 487.082422][T21378] __nla_validate_parse: 4 callbacks suppressed [ 487.082444][T21378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3735'. [ 487.217057][T21314] infiniband sqz0: set down [ 487.221830][T21314] infiniband sqz0: added lo [ 487.246799][ T5907] lo speed is unknown, defaulting to 1000 [ 487.300010][T21314] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 487.311087][T21314] infiniband sqz0: Couldn't open port 1 [ 487.480240][T21314] RDS/IB: sqz0: added [ 487.500417][T21314] smc: adding ib device sqz0 with port count 1 [ 487.517989][T21314] smc: ib device sqz0 port 1 has no pnetid [ 487.533759][ T5907] lo speed is unknown, defaulting to 1000 [ 487.548839][T21314] lo speed is unknown, defaulting to 1000 [ 487.637926][T21407] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3741'. [ 488.234155][T21434] netlink: 'syz.3.3746': attribute type 1 has an invalid length. [ 488.238001][T21436] netlink: 'syz.3.3746': attribute type 1 has an invalid length. [ 488.386152][T21406] lo speed is unknown, defaulting to 1000 [ 488.539964][T21447] netlink: 'syz.3.3747': attribute type 83 has an invalid length. [ 488.624234][T21447] Cannot find add_set index 1 as target [ 488.809271][T21455] batman_adv: batadv0: Adding interface: ipvlan0 [ 488.816249][T21455] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.863692][T21455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.876298][T21455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.889985][T21455] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active [ 488.909641][T21314] lo speed is unknown, defaulting to 1000 [ 489.075230][T21462] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3750'. [ 489.114948][T21464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3751'. [ 489.332420][T21471] geneve2: entered promiscuous mode [ 489.367214][T21471] bridge_slave_1: left allmulticast mode [ 489.372923][T21471] bridge_slave_1: left promiscuous mode [ 489.379039][T21471] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.390213][T21471] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 489.422854][T21314] lo speed is unknown, defaulting to 1000 [ 489.423371][T21475] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3755'. [ 489.441089][T21475] ..0{X: renamed from gretap0 (while UP) [ 489.455298][T21475] ..0{X: entered allmulticast mode [ 489.461548][T21475] A link change request failed with some changes committed already. Interface ..0{X may have been left with an inconsistent configuration, please check. [ 489.713353][T21487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3759'. [ 489.725443][T21487] bond0: option arp_all_targets: invalid value (16777215) [ 489.969405][T21314] lo speed is unknown, defaulting to 1000 [ 490.121605][T21517] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3766'. [ 490.153807][T21519] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3767'. [ 490.402899][T21314] lo speed is unknown, defaulting to 1000 [ 490.420272][T21539] tipc: Failed to remove unknown binding: 66,0,0/0:3278708628/3278708630 [ 490.431575][T21539] tipc: Failed to remove unknown binding: 66,0,0/0:3278708628/3278708629 [ 490.515029][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 490.661346][T21548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3776'. [ 490.720906][T21550] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3777'. [ 490.892659][T21556] xt_hashlimit: max too large, truncated to 1048576 [ 490.908694][T21556] xt_bpf: check failed: parse error [ 490.941530][T21555] syzkaller1: entered promiscuous mode [ 490.956085][T21555] syzkaller1: entered allmulticast mode [ 490.973978][T21314] lo speed is unknown, defaulting to 1000 [ 491.376710][T21564] netem: change failed [ 491.491989][T21566] netlink: 'syz.2.3782': attribute type 11 has an invalid length. [ 491.750401][T21584] lo speed is unknown, defaulting to 1000 [ 491.989322][T21598] netlink: 'syz.0.3792': attribute type 9 has an invalid length. [ 492.054753][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.067506][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.172562][T21604] __nla_validate_parse: 5 callbacks suppressed [ 492.172582][T21604] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3794'. [ 492.236219][T21602] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.249855][T21602] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.285228][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.312104][T21613] dvmrp6: entered allmulticast mode [ 492.385659][T21602] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.396910][T21602] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.442341][T21609] syzkaller1: entered promiscuous mode [ 492.449368][T21609] syzkaller1: entered allmulticast mode [ 492.522011][T21611] netlink: 'syz.3.3795': attribute type 21 has an invalid length. [ 492.567728][T21602] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.582638][T21602] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.614812][T21611] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3795'. [ 492.753435][T21602] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.767504][T21626] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3800'. [ 492.785096][T21602] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.111157][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.136802][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.162027][T21637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3804'. [ 493.176369][T21634] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 493.207398][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.225220][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.296815][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.306464][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.337743][ T1102] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.365555][ T1102] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.535814][T21645] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 493.640800][T21648] netlink: 'syz.4.3807': attribute type 16 has an invalid length. [ 494.045282][T21675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3814'. [ 494.054410][T21675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3814'. [ 494.072594][T21675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3814'. [ 494.134143][T21679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3815'. [ 494.308545][T21686] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3817'. [ 494.465685][T21695] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3819'. [ 494.594756][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 494.794031][T21719] lo speed is unknown, defaulting to 1000 [ 494.915961][T21728] netlink: 'syz.4.3830': attribute type 11 has an invalid length. [ 494.999983][T21734] netlink: 'syz.2.3829': attribute type 3 has an invalid length. [ 495.203579][T21746] bond_slave_0: entered promiscuous mode [ 495.209748][T21746] bond_slave_1: entered promiscuous mode [ 495.228668][T21745] bond_slave_0: left promiscuous mode [ 495.234436][T21745] bond_slave_1: left promiscuous mode [ 495.635793][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 495.781349][T21782] netlink: 'syz.2.3839': attribute type 12 has an invalid length. [ 496.831266][T21774] tap0: tun_chr_ioctl cmd 2147767507 [ 496.837076][T21782] bond0: option primary_reselect: invalid value (8) [ 496.925066][T21785] netlink: 'syz.2.3840': attribute type 14 has an invalid length. [ 497.083617][T21798] tap0: tun_chr_ioctl cmd 1074025676 [ 497.089362][T21798] tap0: owner set to 0 [ 497.105226][T21794] netlink: 'syz.1.3843': attribute type 13 has an invalid length. [ 497.253910][T21794] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 497.271650][T21794] syzkaller0: entered promiscuous mode [ 497.278765][T21794] syzkaller0: entered allmulticast mode [ 497.347975][T21808] netlink: 'syz.3.3848': attribute type 3 has an invalid length. [ 497.385085][T21808] netlink: 'syz.3.3848': attribute type 1 has an invalid length. [ 497.404969][T21808] __nla_validate_parse: 2 callbacks suppressed [ 497.404984][T21808] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.3848'. [ 497.437683][T21813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3849'. [ 497.447481][T21813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3849'. [ 497.457845][T21815] netlink: 'syz.3.3848': attribute type 1 has an invalid length. [ 497.477152][T21808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3848'. [ 497.486635][T21808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.512849][T21808] batman_adv: batadv0: Removing interface: ipvlan0 [ 497.534128][T21808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.246420][T21873] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3863'. [ 498.294095][T21871] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3862'. [ 498.311028][T21871] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3862'. [ 498.446340][T21889] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3866'. [ 498.781441][T21912] nbd: must specify a size in bytes for the device [ 499.036267][T21924] lo speed is unknown, defaulting to 1000 [ 499.058263][T21931] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3873'. [ 499.116298][T21936] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3876'. [ 499.421210][T21952] netlink: 'syz.1.3880': attribute type 13 has an invalid length. [ 499.606058][T21964] batadv_slave_0: entered promiscuous mode [ 499.613273][T21963] batadv_slave_0: left promiscuous mode [ 500.332016][T21982] netlink: 'syz.4.3889': attribute type 1 has an invalid length. [ 500.374405][T21982] bond2: (slave ip6erspan0): making interface the new active one [ 500.383087][T21982] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 501.375707][T21993] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 501.399445][ T1295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.410480][T21993] bond3: Unable to set down delay as MII monitoring is disabled [ 501.419568][T21993] bond3 (unregistering): Released all slaves [ 501.448939][T21995] lo speed is unknown, defaulting to 1000 [ 501.514780][T21993] netlink: set zone limit has 4 unknown bytes [ 502.146394][T21941] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 502.722796][T22032] lo speed is unknown, defaulting to 1000 [ 502.792447][T22040] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.875699][T22043] __nla_validate_parse: 2 callbacks suppressed [ 502.875715][T22043] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3906'. [ 503.053659][T22040] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.069691][T22046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3907'. [ 503.107215][T22046] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 503.189150][T22040] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.535690][T22072] ip6tnl0: Caught tx_queue_len zero misconfig [ 503.657272][T14106] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.724553][T13338] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.769254][T22083] netlink: 'syz.4.3913': attribute type 13 has an invalid length. [ 504.396773][T13338] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.406083][ T1091] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.526358][T22098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3920'. [ 504.544659][T22098] netlink: 'syz.0.3920': attribute type 30 has an invalid length. [ 504.820759][T22117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3925'. [ 504.879042][T22114] ip6gretap0: left promiscuous mode [ 504.884302][T22114] ip6gretap0: left allmulticast mode [ 504.891548][T22114] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.985218][T22114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.058140][T22114] gretap1: left allmulticast mode [ 505.071794][T22114] ip6erspan0: left promiscuous mode [ 505.109196][T14106] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.120307][T14106] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.148311][T14106] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.171476][T14106] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.681914][T22155] sctp: [Deprecated]: syz.3.3929 (pid 22155) Use of struct sctp_assoc_value in delayed_ack socket option. [ 505.681914][T22155] Use struct sctp_sack_info instead [ 505.912010][T22174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.018358][T22182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3937'. [ 506.023975][T22186] mac80211_hwsim hwsim41 ;: renamed from wlan0 [ 506.078079][T22189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3940'. [ 506.243197][T22183] lo speed is unknown, defaulting to 1000 [ 506.251312][T22198] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3942'. [ 506.288220][T22198] netlink: 'syz.0.3942': attribute type 30 has an invalid length. [ 506.438080][T22215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3945'. [ 506.459162][T22215] vlan1: entered promiscuous mode [ 506.464525][T22215] bond0: entered promiscuous mode [ 506.469825][T22215] bond_slave_0: entered promiscuous mode [ 506.476542][T22215] bond_slave_1: entered promiscuous mode [ 506.491245][T22215] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 506.700365][T22220] vlan0: entered promiscuous mode [ 506.715314][T22220] bridge0: entered promiscuous mode [ 507.226947][T22245] IPVS: length: 132 != 8 [ 507.268421][T22245] syz_tun: entered allmulticast mode [ 507.307753][T22245] syz_tun: left allmulticast mode [ 507.333638][T22234] lo speed is unknown, defaulting to 1000 [ 507.407126][T22251] geneve2: entered promiscuous mode [ 507.427750][T22251] geneve2: entered allmulticast mode [ 507.463569][T22253] tipc: Enabling of bearer rejected, already enabled [ 507.525973][T22227] netlink: 'syz.3.3950': attribute type 3 has an invalid length. [ 507.533960][T22227] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3950'. [ 507.672978][T22246] lo speed is unknown, defaulting to 1000 [ 507.850145][T22262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3954'. [ 507.927533][T22250] lo speed is unknown, defaulting to 1000 [ 508.111856][T22268] tipc: Failed to remove unknown binding: 66,1,1/0:396079012/396079014 [ 508.238094][T22276] veth4: entered allmulticast mode [ 508.865981][T22290] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3962'. [ 509.238675][T22302] lo speed is unknown, defaulting to 1000 [ 509.374704][T22318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3967'. [ 509.445639][T22327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3967'. [ 509.484855][T22317] geneve2: entered promiscuous mode [ 509.511249][T22317] geneve2: entered allmulticast mode [ 509.573388][T22331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3972'. [ 509.663786][T22327] bond2: option broadcast_neighbor: invalid value (30) [ 509.674269][T22327] bond2 (unregistering): Released all slaves [ 509.924250][T22344] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3975'. [ 509.989144][T22344] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 510.061453][T22352] xt_TPROXY: Can be used only with -p tcp or -p udp [ 510.120654][T22355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.142543][T22355] IPv6: Can't replace route, no match found [ 511.052337][T22411] lo speed is unknown, defaulting to 1000 [ 511.330235][T22426] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3993'. [ 511.336998][T22428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3992'. [ 511.358501][T22428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3992'. [ 511.383810][T22428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3992'. [ 511.409989][T22428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3992'. [ 511.411779][T22426] Bluetooth: MGMT ver 1.23 [ 511.444981][T22426] xt_limit: Overflow, try lower: 31324/2147483648 [ 512.018667][T22457] block nbd3: NBD_DISCONNECT [ 512.023593][T22457] block nbd3: Send disconnect failed -32 [ 512.032247][T22457] block nbd3: shutting down sockets [ 512.076346][T22447] lo speed is unknown, defaulting to 1000 [ 512.310964][T22449] lo speed is unknown, defaulting to 1000 [ 512.833425][T22492] netlink: 'syz.2.4012': attribute type 1 has an invalid length. [ 513.040998][T22492] 8021q: adding VLAN 0 to HW filter on device bond1 [ 513.122280][T22498] bond1: (slave veth7): Enslaving as an active interface with a down link [ 513.232576][T22507] 8021q: adding VLAN 0 to HW filter on device bond2 [ 513.241958][T22492] lo speed is unknown, defaulting to 1000 [ 513.365828][T22511] bond2: entered promiscuous mode [ 513.568922][T22526] netlink: 'syz.3.4020': attribute type 13 has an invalid length. [ 514.097867][T22535] lo speed is unknown, defaulting to 1000 [ 514.459385][T22550] __nla_validate_parse: 6 callbacks suppressed [ 514.459414][T22550] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4027'. [ 514.770542][T22565] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4031'. [ 514.839046][T22567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4032'. [ 514.848503][T22567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4032'. [ 515.173184][T22593] sctp: [Deprecated]: syz.2.4038 (pid 22593) Use of int in maxseg socket option. [ 515.173184][T22593] Use struct sctp_assoc_value instead [ 515.231480][T22592] lo: Caught tx_queue_len zero misconfig [ 515.321116][T22599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4039'. [ 515.368962][T22599] bond3: entered promiscuous mode [ 515.375481][T22599] 8021q: adding VLAN 0 to HW filter on device bond3 [ 515.445051][T22599] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 515.452385][T22599] IPv6: NLM_F_CREATE should be set when creating new route [ 515.459661][T22599] IPv6: NLM_F_CREATE should be set when creating new route [ 515.468312][T22599] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 515.478673][T22605] 8021q: adding VLAN 0 to HW filter on device bond3 [ 515.503845][T22605] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 515.538292][T22605] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 515.578355][T22599] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 515.590161][T22599] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 515.665125][T22620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4045'. [ 515.782017][T22627] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4046'. [ 515.857955][T22632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4049'. [ 516.012187][T22645] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4051'. [ 516.025428][T22645] ..0{X: renamed from gretap0 [ 516.040615][T22643] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4053'. [ 516.052006][T22645] ..0{X: left promiscuous mode [ 516.059943][T22645] ..0{X: entered allmulticast mode [ 516.069901][T22645] A link change request failed with some changes committed already. Interface ..0{X may have been left with an inconsistent configuration, please check. [ 516.112609][T22645] syzkaller1: entered promiscuous mode [ 516.127699][T22645] syzkaller1: entered allmulticast mode [ 516.185804][T22643] lo speed is unknown, defaulting to 1000 [ 516.206582][T22652] geneve4: entered promiscuous mode [ 516.371327][T22663] netlink: 'syz.0.4058': attribute type 1 has an invalid length. [ 516.492893][T14106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.504380][T14106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.529841][T14106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.616634][T22663] 8021q: adding VLAN 0 to HW filter on device bond5 [ 516.677868][T22667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.724791][T22667] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 516.761707][T14106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.818721][T14106] bond0: (slave team0): link status definitely down, disabling slave [ 516.839570][T14106] bond0: now running without any active interface! [ 516.859550][ T5946] lo speed is unknown, defaulting to 1000 [ 516.872490][ T5946] sqz0: Port: 1 Link ACTIVE [ 516.911778][ T794] lo speed is unknown, defaulting to 1000 [ 516.965556][T22693] xt_bpf: check failed: parse error [ 518.043277][T22756] 8021q: adding VLAN 0 to HW filter on device bond4 [ 518.067003][T22748] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 518.268610][T22768] lo speed is unknown, defaulting to 1000 [ 519.071362][T22810] ip6tnl0: Caught tx_queue_len zero misconfig [ 519.097870][T22817] netlink: 'syz.0.4094': attribute type 40 has an invalid length. [ 519.314663][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 519.381580][T22832] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 519.500200][T22836] syzkaller0: entered promiscuous mode [ 519.506159][T22836] syzkaller0: entered allmulticast mode [ 520.001221][T22871] vlan1: entered allmulticast mode [ 520.010359][T22871] bond0: entered allmulticast mode [ 520.016839][T22871] bond_slave_0: entered allmulticast mode [ 520.029438][T22871] bond_slave_1: entered allmulticast mode [ 520.781049][T22923] __nla_validate_parse: 6 callbacks suppressed [ 520.781065][T22923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4120'. [ 520.840293][T22930] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 520.847588][T22930] IPv6: NLM_F_CREATE should be set when creating new route [ 520.880031][T22923] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 520.887337][T22923] IPv6: NLM_F_CREATE should be set when creating new route [ 520.957853][T22933] tipc: Enabling of bearer rejected, already enabled [ 521.003721][T22933] tipc: Resetting bearer [ 521.865467][T22991] x_tables: duplicate underflow at hook 1 [ 521.920765][T22998] netlink: 340 bytes leftover after parsing attributes in process `syz.0.4137'. [ 521.934146][T22998] netlink: 'syz.0.4137': attribute type 6 has an invalid length. [ 522.230852][T23021] lo speed is unknown, defaulting to 1000 [ 522.408472][T23030] netlink: 464 bytes leftover after parsing attributes in process `syz.1.4142'. [ 522.420601][T23030] netlink: 464 bytes leftover after parsing attributes in process `syz.1.4142'. [ 523.955153][T18208] Bluetooth: hci1: command 0x0406 tx timeout [ 524.313924][T23112] netlink: 'syz.2.4154': attribute type 14 has an invalid length. [ 524.534118][T23121] xt_CONNSECMARK: invalid mode: 0 [ 525.082569][T23024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 525.150739][T23130] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4160'. [ 525.237942][T23135] x9: renamed from bridge_slave_0 [ 525.267656][T23137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4161'. [ 525.273800][T23144] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4164'. [ 525.278173][T23143] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 525.287788][T23144] netlink: 'syz.0.4164': attribute type 1 has an invalid length. [ 525.524158][T23159] netlink: 4436 bytes leftover after parsing attributes in process `syz.4.4168'. [ 525.534353][T23162] tunl0: Caught tx_queue_len zero misconfig [ 525.541331][T23162] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4167'. [ 525.557363][T23159] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 525.697592][T23165] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4170'. [ 525.994543][T23181] netlink: 'syz.4.4173': attribute type 39 has an invalid length. [ 526.143470][T23188] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4174'. [ 526.256528][T23181] lo speed is unknown, defaulting to 1000 [ 526.402205][T23196] netlink: 'syz.0.4176': attribute type 1 has an invalid length. [ 526.568454][T23206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4178'. [ 526.750417][ T5483] veth0_macvtap: left promiscuous mode [ 526.848343][T23217] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 526.930492][T23221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4181'. [ 527.166979][T23234] netlink: 'syz.4.4184': attribute type 1 has an invalid length. [ 527.249429][T23235] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4184'. [ 527.257621][T23241] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4184'. [ 527.369142][T23235] 8021q: adding VLAN 0 to HW filter on device bond3 [ 527.407639][T23235] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4184'. [ 527.429988][T23241] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4184'. [ 527.449878][T23241] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4184'. [ 527.481272][T23235] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4184'. [ 527.493917][T23241] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4184'. [ 527.650795][T23262] netlink: 'syz.4.4189': attribute type 1 has an invalid length. [ 527.716164][T23262] 8021q: adding VLAN 0 to HW filter on device bond4 [ 527.903471][T23282] geneve1: Caught tx_queue_len zero misconfig [ 527.968444][T23284] geneve4: entered promiscuous mode [ 527.975659][T13338] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 42488 - 0 [ 527.987627][T13338] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 42488 - 0 [ 528.005990][T13338] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 42488 - 0 [ 528.015317][T13338] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 42488 - 0 [ 528.186934][T23293] ip6erspan1: entered allmulticast mode [ 528.437679][T23313] netlink: 'syz.3.4203': attribute type 1 has an invalid length. [ 528.465484][T23313] syzkaller0: entered promiscuous mode [ 528.494754][T23313] ip6gretap1: entered allmulticast mode [ 529.090365][T23349] lo: Caught tx_queue_len zero misconfig [ 529.115459][T23349] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 529.186706][T23352] team1: entered promiscuous mode [ 529.200621][T23352] team1: entered allmulticast mode [ 529.277390][T23352] 8021q: adding VLAN 0 to HW filter on device team1 [ 529.367418][T23354] team2: entered promiscuous mode [ 529.372589][T23354] team2: entered allmulticast mode [ 529.378851][T23354] 8021q: adding VLAN 0 to HW filter on device team2 [ 529.605240][T23376] netlink: 'syz.4.4223': attribute type 2 has an invalid length. [ 529.655241][T23376] wg1 speed is unknown, defaulting to 1000 [ 529.684592][T23376] wg1 speed is unknown, defaulting to 1000 [ 529.701348][T23376] wg1 speed is unknown, defaulting to 1000 [ 529.749920][T23376] infiniband sy+: RDMA CMA: cma_listen_on_dev, error -98 [ 529.871276][T23376] wg1 speed is unknown, defaulting to 1000 [ 529.918656][T23376] wg1 speed is unknown, defaulting to 1000 [ 529.940565][T23376] wg1 speed is unknown, defaulting to 1000 [ 529.961003][T23376] wg1 speed is unknown, defaulting to 1000 [ 529.981862][T23376] wg1 speed is unknown, defaulting to 1000 [ 529.999454][T23376] wg1 speed is unknown, defaulting to 1000 [ 530.084669][T23412] netlink: 'syz.0.4232': attribute type 13 has an invalid length. [ 530.330990][T23412] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 530.359446][T23412] syzkaller0: entered promiscuous mode [ 530.366819][T23412] syzkaller0: entered allmulticast mode [ 530.506830][T23428] syzkaller0: entered promiscuous mode [ 530.512363][T23428] syzkaller0: entered allmulticast mode [ 530.717430][T23456] netlink: 'syz.0.4244': attribute type 21 has an invalid length. [ 530.818030][T23463] syzkaller0: entered promiscuous mode [ 530.823621][T23463] syzkaller0: entered allmulticast mode [ 530.841391][T23461] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 530.852436][T23461] gretap0: entered promiscuous mode [ 530.887890][T23465] macsec1: entered promiscuous mode [ 531.248382][T23483] lo speed is unknown, defaulting to 1000 [ 531.255331][T23492] tipc: Enabled bearer , priority 0 [ 531.277205][T23492] syzkaller0: entered promiscuous mode [ 531.291163][T23492] syzkaller0: entered allmulticast mode [ 531.351949][T23492] tipc: Resetting bearer [ 531.375833][T23487] tipc: Resetting bearer [ 531.442055][T23487] tipc: Disabling bearer [ 531.509150][T23496] syzkaller0: entered promiscuous mode [ 531.515743][T23496] syzkaller0: entered allmulticast mode [ 532.885878][T23483] wg1 speed is unknown, defaulting to 1000 [ 532.890614][T23490] lo speed is unknown, defaulting to 1000 [ 533.297970][T23541] __nla_validate_parse: 83 callbacks suppressed [ 533.297988][T23541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4268'. [ 533.470324][T23552] geneve3: entered promiscuous mode [ 533.488055][T23490] wg1 speed is unknown, defaulting to 1000 [ 533.490660][ T1091] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 533.528962][ T1091] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 533.587765][T23546] lo speed is unknown, defaulting to 1000 [ 533.588363][ T1091] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 533.631978][ T1091] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 533.679341][T23561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4274'. [ 533.922731][T23566] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 533.964956][T23567] netdevsim netdevsim2: Direct firmware load for - [ 533.964956][T23567] failed with error -2 [ 533.979365][T23567] netdevsim netdevsim2: Falling back to sysfs fallback for: - [ 533.979365][T23567] [ 534.071033][T23546] wg1 speed is unknown, defaulting to 1000 [ 534.737381][T23590] netlink: 'syz.2.4281': attribute type 10 has an invalid length. [ 534.790489][T23590] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4281'. [ 534.909928][T23598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4284'. [ 535.163573][T23613] ipt_ECN: cannot use operation on non-tcp rule [ 535.283792][T23626] lo speed is unknown, defaulting to 1000 [ 535.418736][T23638] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4293'. [ 535.439608][T23643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4296'. [ 535.589029][ T30] audit: type=1804 audit(1771443238.064:19): pid=23650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4300" name="/newroot/208/memory.events" dev="tmpfs" ino=1074 res=1 errno=0 [ 535.677341][ T30] audit: type=1800 audit(1771443238.064:20): pid=23650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4300" name="memory.events" dev="tmpfs" ino=1074 res=0 errno=0 [ 535.852625][T23663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4303'. [ 535.886837][T23663] 8021q: adding VLAN 0 to HW filter on device bond5 [ 535.905547][T23663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.915877][T23663] bond5: (slave bond0): Enslaving as an active interface with an up link [ 535.997625][T23626] wg1 speed is unknown, defaulting to 1000 [ 536.000941][T23647] lo speed is unknown, defaulting to 1000 [ 536.130423][T23668] FAULT_INJECTION: forcing a failure. [ 536.130423][T23668] name failslab, interval 1, probability 0, space 0, times 0 [ 536.148916][T23668] CPU: 1 UID: 0 PID: 23668 Comm: syz.2.4304 Not tainted syzkaller #0 PREEMPT(full) [ 536.148943][T23668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 536.148957][T23668] Call Trace: [ 536.148966][T23668] [ 536.148975][T23668] dump_stack_lvl+0xe8/0x150 [ 536.149008][T23668] should_fail_ex+0x412/0x560 [ 536.149045][T23668] should_failslab+0xa8/0x100 [ 536.149075][T23668] ? security_inode_alloc+0x39/0x310 [ 536.149110][T23668] kmem_cache_alloc_noprof+0x87/0x650 [ 536.149147][T23668] security_inode_alloc+0x39/0x310 [ 536.149181][T23668] inode_init_always_gfp+0x9ed/0xdc0 [ 536.149220][T23668] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 536.149244][T23668] alloc_inode+0x82/0x1b0 [ 536.149277][T23668] new_inode+0x22/0x170 [ 536.149303][T23668] __debugfs_create_file+0xb8/0x400 [ 536.149332][T23668] debugfs_create_file_full+0x3f/0x60 [ 536.149360][T23668] ref_tracker_dir_debugfs+0x197/0x360 [ 536.149392][T23668] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 536.149459][T23668] ? trace_kmalloc+0x1f/0xb0 [ 536.149481][T23668] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 536.149510][T23668] ? alloc_netdev_mqs+0xa6/0x11b0 [ 536.149551][T23668] ? __raw_spin_lock_init+0x45/0x100 [ 536.149581][T23668] alloc_netdev_mqs+0x272/0x11b0 [ 536.149607][T23668] ? __pfx_macvlan_setup+0x10/0x10 [ 536.149631][T23668] rtnl_create_link+0x31f/0xd70 [ 536.149664][T23668] rtnl_newlink_create+0x277/0xb70 [ 536.149693][T23668] ? __mutex_lock+0x5ac/0x1300 [ 536.149723][T23668] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 536.149753][T23668] ? __pfx___mutex_lock+0x10/0x10 [ 536.149788][T23668] ? full_name_hash+0xb0/0xe0 [ 536.149810][T23668] rtnl_newlink+0x1666/0x1be0 [ 536.149846][T23668] ? __pfx_rtnl_newlink+0x10/0x10 [ 536.149864][T23668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.149920][T23668] ? kasan_quarantine_put+0xbb/0x1f0 [ 536.149943][T23668] ? lockdep_hardirqs_on+0x7a/0x110 [ 536.149971][T23668] ? nlmon_xmit+0xb0/0x100 [ 536.149996][T23668] ? kmem_cache_free+0x180/0x610 [ 536.150032][T23668] ? __lock_acquire+0x6b5/0x2cf0 [ 536.150061][T23668] ? __local_bh_enable_ip+0xd0/0x130 [ 536.150083][T23668] ? lockdep_hardirqs_on+0x7a/0x110 [ 536.150106][T23668] ? __dev_queue_xmit+0x274/0x3850 [ 536.150130][T23668] ? __local_bh_enable_ip+0xd0/0x130 [ 536.150148][T23668] ? __dev_queue_xmit+0x274/0x3850 [ 536.150181][T23668] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 536.150216][T23668] ? __pfx_rtnl_newlink+0x10/0x10 [ 536.150236][T23668] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 536.150259][T23668] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 536.150278][T23668] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 536.150306][T23668] ? ref_tracker_free+0x693/0x840 [ 536.150329][T23668] ? __copy_skb_header+0xa3/0x4a0 [ 536.150354][T23668] ? __pfx_ref_tracker_free+0x10/0x10 [ 536.150390][T23668] netlink_rcv_skb+0x232/0x4b0 [ 536.150414][T23668] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 536.150435][T23668] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 536.150463][T23668] ? netlink_deliver_tap+0x2e/0x1b0 [ 536.150489][T23668] netlink_unicast+0x80f/0x9b0 [ 536.150523][T23668] ? __pfx_netlink_unicast+0x10/0x10 [ 536.150551][T23668] ? netlink_sendmsg+0x650/0xb40 [ 536.150567][T23668] ? skb_put+0x11b/0x210 [ 536.150590][T23668] netlink_sendmsg+0x813/0xb40 [ 536.150618][T23668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.150639][T23668] ? aa_sock_msg_perm+0xf1/0x1b0 [ 536.150665][T23668] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 536.150691][T23668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.150709][T23668] ____sys_sendmsg+0xa68/0xad0 [ 536.150731][T23668] ? __might_fault+0xaf/0x130 [ 536.150758][T23668] ? __pfx_____sys_sendmsg+0x10/0x10 [ 536.150789][T23668] ? import_iovec+0x73/0xa0 [ 536.150811][T23668] ___sys_sendmsg+0x2a5/0x360 [ 536.150832][T23668] ? __lock_acquire+0x6b5/0x2cf0 [ 536.150855][T23668] ? __pfx____sys_sendmsg+0x10/0x10 [ 536.150911][T23668] ? __fget_files+0x2a/0x420 [ 536.150927][T23668] ? __fget_files+0x3a0/0x420 [ 536.150954][T23668] __x64_sys_sendmsg+0x1bd/0x2a0 [ 536.150979][T23668] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 536.151012][T23668] ? __pfx_ksys_write+0x10/0x10 [ 536.151044][T23668] do_syscall_64+0x14d/0xf80 [ 536.151067][T23668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.151083][T23668] ? trace_irq_disable+0x37/0x100 [ 536.151102][T23668] ? clear_bhb_loop+0x40/0x90 [ 536.151124][T23668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.151140][T23668] RIP: 0033:0x7fe21dd9c629 [ 536.151156][T23668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.151171][T23668] RSP: 002b:00007fe21bff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.151191][T23668] RAX: ffffffffffffffda RBX: 00007fe21e015fa0 RCX: 00007fe21dd9c629 [ 536.151203][T23668] RDX: 0000000000008000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 536.151215][T23668] RBP: 00007fe21bff6090 R08: 0000000000000000 R09: 0000000000000000 [ 536.151225][T23668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.151236][T23668] R13: 00007fe21e016038 R14: 00007fe21e015fa0 R15: 00007ffd6b0b1218 [ 536.151265][T23668] [ 536.151507][T23668] debugfs: out of free dentries, can not create file 'netdev@ffff88807658a620' [ 536.808936][T23680] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4307'. [ 536.880387][T23675] syzkaller0: entered promiscuous mode [ 536.886316][T23675] syzkaller0: entered allmulticast mode [ 537.049417][ T5826] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 537.143584][ T5826] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 537.253633][T23696] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 537.597340][ T5826] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 538.306999][T23647] wg1 speed is unknown, defaulting to 1000 [ 538.443129][T23702] tipc: Enabling of bearer rejected, failed to enable media [ 538.499829][T23702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.753089][T23721] netlink: 'syz.0.4317': attribute type 2 has an invalid length. [ 539.026459][T23724] lo speed is unknown, defaulting to 1000 [ 539.451673][T23747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4323'. [ 539.483634][T23747] netlink: 'syz.2.4323': attribute type 1 has an invalid length. [ 539.503728][T23752] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4323'. [ 539.541308][T23752] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 539.672430][T23722] lo speed is unknown, defaulting to 1000 [ 539.686861][T23724] wg1 speed is unknown, defaulting to 1000 [ 539.701006][T23762] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4326'. [ 539.756252][T23762] netlink: 'syz.2.4326': attribute type 9 has an invalid length. [ 540.235579][T23785] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4330'. [ 540.270873][T23717] lo speed is unknown, defaulting to 1000 [ 540.395708][T23792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4332'. [ 540.487366][T23793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4332'. [ 540.527257][T23729] lo speed is unknown, defaulting to 1000 [ 540.736142][T23729] wg1 speed is unknown, defaulting to 1000 [ 540.745577][T23790] lo speed is unknown, defaulting to 1000 [ 540.758742][T23722] wg1 speed is unknown, defaulting to 1000 [ 540.816896][T23717] wg1 speed is unknown, defaulting to 1000 [ 541.117368][T23808] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 541.150790][T23809] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 541.328890][T23790] wg1 speed is unknown, defaulting to 1000 [ 541.684808][T23831] IPv6: addrconf: prefix option has invalid lifetime [ 541.721832][T23831] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4342'. [ 542.245756][T23847] netlink: 'syz.2.4346': attribute type 1 has an invalid length. [ 542.338655][T23847] 8021q: adding VLAN 0 to HW filter on device bond2 [ 542.454949][T23859] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 542.466386][T23859] bond2: (slave batadv1): making interface the new active one [ 542.477302][T23859] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 542.604402][T23872] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4352'. [ 542.625334][T23872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4352'. [ 542.772235][T23880] netlink: 'syz.2.4354': attribute type 1 has an invalid length. [ 542.811645][T23880] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4354'. [ 542.834804][ T5826] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 543.095770][ T5945] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 543.435058][T14105] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 543.749399][T23938] netlink: 'syz.0.4370': attribute type 33 has an invalid length. [ 543.794784][T23938] `: renamed from team0 (while UP) [ 544.515033][ T49] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 544.523932][ T49] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 544.552700][T23949] sctp: [Deprecated]: syz.3.4373 (pid 23949) Use of struct sctp_assoc_value in delayed_ack socket option. [ 544.552700][T23949] Use struct sctp_sack_info instead [ 544.685601][ T5826] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 545.221962][T24014] netlink: 'syz.0.4390': attribute type 1 has an invalid length. [ 545.240792][T24014] __nla_validate_parse: 3 callbacks suppressed [ 545.240808][T24014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4390'. [ 545.266487][T24018] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 545.370579][T24014] bond6 (unregistering): Released all slaves [ 545.546276][T24036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4397'. [ 545.755100][T24043] syzkaller0: entered promiscuous mode [ 545.760635][T24043] syzkaller0: entered allmulticast mode [ 545.798711][T24047] veth1: Caught tx_queue_len zero misconfig [ 545.832006][T24040] lo speed is unknown, defaulting to 1000 [ 545.840176][T24048] netlink: 'syz.0.4402': attribute type 15 has an invalid length. [ 545.848434][T24048] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4402'. [ 545.856281][T24049] netlink: 'syz.0.4402': attribute type 15 has an invalid length. [ 545.874936][T24049] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4402'. [ 545.915683][T24057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.989296][T24049] bond0: option resend_igmp: invalid value (196616) [ 546.004935][T24049] bond0: option resend_igmp: allowed values 0 - 255 [ 546.011805][T24048] bond0: option resend_igmp: invalid value (196616) [ 546.023645][T24048] bond0: option resend_igmp: allowed values 0 - 255 [ 546.054328][ T49] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 546.084746][ T49] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 546.127244][ T49] bond0: now running without any active interface! [ 546.296894][T24076] syzkaller0: entered promiscuous mode [ 546.304530][T24076] syzkaller0: entered allmulticast mode [ 546.376353][T24079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4410'. [ 546.389872][T24081] netlink: 'syz.3.4411': attribute type 1 has an invalid length. [ 546.397673][T24040] wg1 speed is unknown, defaulting to 1000 [ 546.404974][T24081] netlink: 'syz.3.4411': attribute type 7 has an invalid length. [ 546.412861][T24081] netlink: 'syz.3.4411': attribute type 8 has an invalid length. [ 546.421318][T24081] netlink: 208 bytes leftover after parsing attributes in process `syz.3.4411'. [ 546.433317][T24081] NCSI netlink: No device for ifindex 65584 [ 546.680800][T24101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4418'. [ 546.926183][ T30] audit: type=1800 audit(1771443249.414:21): pid=24118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4417" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1626 res=0 errno=0 [ 547.386468][T24137] 8021q: adding VLAN 0 to HW filter on device bond6 [ 547.416505][T24143] bond6: (slave ip6gretap1): making interface the new active one [ 547.428123][T24143] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 547.576585][T24152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4432'. [ 547.587430][T24153] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4429'. [ 547.629088][T24152] geneve1: entered promiscuous mode [ 547.656000][T24152] macvtap0: entered promiscuous mode [ 547.681652][T24152] geneve1: left promiscuous mode [ 547.744938][T24165] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 548.016576][T24184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4439'. [ 548.245186][T24193] tipc: Failed to remove unknown binding: 66,0,0/0:3119900849/3119900851 [ 548.268458][T24193] tipc: Failed to remove unknown binding: 66,0,0/0:3119900849/3119900850 [ 548.278714][T24193] tipc: Failed to remove unknown binding: 66,0,0/0:3119900849/3119900851 [ 548.341739][T24193] tipc: Failed to remove unknown binding: 66,0,0/0:3119900849/3119900850 [ 548.402237][T24187] xt_recent: hitcount (67108870) is larger than allowed maximum (65535) [ 548.555627][T24203] bridge_slave_1: entered promiscuous mode [ 548.572390][T24203] bridge_slave_1: entered allmulticast mode [ 548.595442][T24203] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 548.833975][T24210] bond7: option ad_user_port_key: invalid value (65535) [ 548.855416][T24210] bond7: option ad_user_port_key: allowed values 0 - 1023 [ 548.880250][T24210] bond7 (unregistering): Released all slaves [ 548.994883][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 549.193376][T24222] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 549.224284][T24222] bond7 (unregistering): Released all slaves [ 549.304806][T24223] lo speed is unknown, defaulting to 1000 [ 549.556187][T24259] openvswitch: netlink: Missing key (keys=40, expected=100) [ 549.716790][T24223] wg1 speed is unknown, defaulting to 1000 [ 549.732337][T24261] lo speed is unknown, defaulting to 1000 [ 549.887510][T24274] syzkaller0: entered promiscuous mode [ 549.894991][T24274] syzkaller0: entered allmulticast mode [ 550.029994][T24261] wg1 speed is unknown, defaulting to 1000 [ 550.212877][T24284] syzkaller0: entered promiscuous mode [ 550.222331][T24284] syzkaller0: entered allmulticast mode [ 550.965374][T24335] __nla_validate_parse: 6 callbacks suppressed [ 550.965392][T24335] netlink: 156460 bytes leftover after parsing attributes in process `syz.2.4479'. [ 551.001144][T24326] lo speed is unknown, defaulting to 1000 [ 551.085438][T24341] mac80211_hwsim hwsim57 wlan0: entered promiscuous mode [ 551.103872][T24341] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4482'. [ 551.116585][T24341] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4482'. [ 551.127716][T24341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4482'. [ 551.248242][T24350] syzkaller0: entered promiscuous mode [ 551.253817][T24350] syzkaller0: entered allmulticast mode [ 551.491020][T24362] dvmrp1: entered allmulticast mode [ 551.506572][T24362] dvmrp1: left allmulticast mode [ 551.577496][T24326] wg1 speed is unknown, defaulting to 1000 [ 551.706411][T24354] openvswitch: netlink: IP tunnel dst address not specified [ 551.966496][T24378] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4490'. [ 552.009082][T24378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4490'. [ 552.085302][T24360] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4486'. [ 552.170104][T24383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4491'. [ 552.298278][T24388] netlink: 'syz.1.4492': attribute type 11 has an invalid length. [ 552.306658][T24388] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.4492'. [ 552.445677][T24393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4493'. [ 553.352051][T24378] 8021q: VLANs not supported on vxcan1 [ 553.406057][T24379] lo speed is unknown, defaulting to 1000 [ 553.602244][T24406] netlink: 'syz.2.4496': attribute type 4 has an invalid length. [ 553.813928][T24410] netlink: 'syz.0.4498': attribute type 10 has an invalid length. [ 553.894379][T24416] netlink: 'syz.0.4498': attribute type 10 has an invalid length. [ 553.897854][T24410] dummy0: entered promiscuous mode [ 553.939077][T24410] `: Port device dummy0 added [ 554.047587][T24416] `: Port device dummy0 removed [ 554.081243][T24416] dummy0: left promiscuous mode [ 554.102587][T24416] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 554.121139][T24379] wg1 speed is unknown, defaulting to 1000 [ 554.133529][T24422] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 554.138090][T24413] netlink: 'syz.3.4500': attribute type 1 has an invalid length. [ 554.234574][ T5945] lo speed is unknown, defaulting to 1000 [ 554.240377][ T5945] sqz0: Port: 1 Link DOWN [ 554.286614][ T5907] lo speed is unknown, defaulting to 1000 [ 554.526517][T24444] netlink: 'syz.2.4505': attribute type 3 has an invalid length. [ 554.848239][T24456] netlink: 'syz.0.4510': attribute type 7 has an invalid length. [ 554.961360][T24460] netlink: 'syz.1.4511': attribute type 1 has an invalid length. [ 555.091552][T24466] netlink: 'syz.1.4514': attribute type 3 has an invalid length. [ 555.220951][T24472] openvswitch: netlink: Actions may not be safe on all matching packets [ 555.260821][T24477] x_tables: duplicate underflow at hook 2 [ 555.283720][T24472] xt_CT: No such helper "snmp_trap" [ 555.296778][T24477] netlink: get zone limit has 4 unknown bytes [ 555.622404][T24493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.632168][T24493] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.668437][T24493] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 556.149991][T24524] __nla_validate_parse: 32 callbacks suppressed [ 556.150013][T24524] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4533'. [ 556.264129][T24532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4535'. [ 556.612355][T24554] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4540'. [ 556.632110][T24556] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 556.929905][T24581] bond7: option updelay: invalid value (18446744072924057285) [ 556.938044][T24581] bond7: option updelay: allowed values 0 - 2147483647 [ 556.951883][T24581] bond7 (unregistering): Released all slaves [ 556.967694][T24569] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4541'. [ 557.093197][T24597] "syz.1.4547" (24597) uses obsolete ecb(arc4) skcipher [ 557.198519][T24601] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4551'. [ 557.316383][T24607] syzkaller0: entered promiscuous mode [ 557.325151][ T5945] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 557.338138][T24607] syzkaller0: entered allmulticast mode [ 557.370599][T24607] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4553'. [ 557.448133][T24608] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4553'. [ 557.451994][T24611] geneve5: entered promiscuous mode [ 557.457677][T24608] openvswitch: netlink: Flow key attr not present in new flow. [ 557.502482][T24611] geneve5: entered allmulticast mode [ 557.512118][ T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 557.539517][ T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 557.829061][T24631] Cannot find del_set index 49151 as target [ 558.124371][ T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 558.168315][ T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 558.196815][ T5945] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 558.286564][T24637] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4561'. [ 558.309330][T24643] netlink: 'syz.0.4563': attribute type 4 has an invalid length. [ 558.321407][T24642] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 558.337126][T24644] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.4564'. [ 558.354718][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 558.521648][T24660] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4568'. [ 558.801748][T24681] netlink: 'syz.1.4575': attribute type 3 has an invalid length. [ 558.823300][T24681] nbd: nbd1 already in use [ 558.828604][T24681] nbd: must specify an index to disconnect [ 558.849578][T24681] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 559.141882][T24701] delete_channel: no stack [ 559.245123][T24709] netlink: 'syz.0.4586': attribute type 20 has an invalid length. [ 559.404264][T24719] vlan0: entered promiscuous mode [ 559.417957][T24719] geneve1: entered promiscuous mode [ 559.445051][T24719] vlan0: entered allmulticast mode [ 559.460656][T24719] geneve1: entered allmulticast mode [ 559.471364][T24720] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 559.489046][T24722] netlink: 'syz.1.4590': attribute type 3 has an invalid length. [ 559.516140][T24722] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20001 [ 559.614670][T24730] pimreg: tun_chr_ioctl cmd 1074025677 [ 559.620505][T24730] pimreg: linktype set to 1 [ 559.989643][T24750] lo speed is unknown, defaulting to 1000 [ 560.418561][T24750] wg1 speed is unknown, defaulting to 1000 [ 561.323884][T24821] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16) [ 561.343958][T24821] openvswitch: netlink: Message has 8 unknown bytes. [ 561.363931][T24826] lo: Caught tx_queue_len zero misconfig [ 561.691476][T24852] lo speed is unknown, defaulting to 1000 [ 561.722593][T24854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 561.772770][T24860] netlink: 'syz.1.4629': attribute type 1 has an invalid length. [ 561.811378][T24860] __nla_validate_parse: 15 callbacks suppressed [ 561.811397][T24860] netlink: 264 bytes leftover after parsing attributes in process `syz.1.4629'. [ 561.954669][T24852] wg1 speed is unknown, defaulting to 1000 [ 562.150840][T24887] tipc: Resetting bearer [ 562.211276][T24889] netlink: 'syz.2.4638': attribute type 1 has an invalid length. [ 562.369000][T24898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4640'. [ 562.403900][T24903] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4642'. [ 562.415326][T24903] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4642'. [ 562.728544][T24915] netlink: 'syz.3.4646': attribute type 1 has an invalid length. [ 562.841294][ T1295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.927545][T24915] bond6: entered promiscuous mode [ 562.932961][T24915] 8021q: adding VLAN 0 to HW filter on device bond6 [ 563.090663][T24935] netlink: 'syz.0.4649': attribute type 2 has an invalid length. [ 563.197377][T24935] !9: entered promiscuous mode [ 563.246496][T24944] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4652'. [ 563.290837][T24942] netlink: 'syz.0.4649': attribute type 2 has an invalid length. [ 563.312119][T24937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 563.332210][T24942] !9: left promiscuous mode [ 563.417209][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.440144][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.475313][T24950] lo speed is unknown, defaulting to 1000 [ 563.583720][T24960] x_tables: ip_tables: ah match: only valid for protocol 51 [ 563.700340][T24965] netlink: 'syz.0.4657': attribute type 30 has an invalid length. [ 563.723037][T24965] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4657'. [ 563.766011][T24965] bond6: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 563.793870][T24965] bond6 (unregistering): Released all slaves [ 563.870281][T24950] wg1 speed is unknown, defaulting to 1000 [ 563.963057][T24980] netlink: 'syz.0.4657': attribute type 14 has an invalid length. [ 564.073691][T24992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4663'. [ 564.085941][T24992] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 564.096286][T24992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4663'. [ 564.115870][T24995] tunl0: Caught tx_queue_len zero misconfig [ 564.137027][T24995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4662'. [ 564.167189][T24998] tunl0: Caught tx_queue_len zero misconfig [ 564.178635][T24995] openvswitch: netlink: EtherType 50a is less than min 600 [ 564.591611][T25014] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 566.249834][T24946] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 566.459350][T25026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4671'. [ 566.770255][T25040] openvswitch: netlink: IP tunnel dst address not specified [ 566.917403][T25045] __nla_validate_parse: 4 callbacks suppressed [ 566.917421][T25045] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4675'. [ 567.385471][T25054] syzkaller0: entered promiscuous mode [ 567.391017][T25054] syzkaller0: entered allmulticast mode [ 567.596725][T25079] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4680'. [ 567.982001][T25087] syzkaller1: entered promiscuous mode [ 568.019250][T25094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4686'. [ 568.027254][T25087] syzkaller1: entered allmulticast mode [ 568.072839][T25097] netlink: 'syz.2.4687': attribute type 31 has an invalid length. [ 568.300652][T25107] netlink: 'syz.4.4689': attribute type 2 has an invalid length. [ 568.309872][T25107] netlink: 'syz.4.4689': attribute type 9 has an invalid length. [ 568.330144][T25107] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4689'. [ 568.458683][T25112] tc_dump_action: action bad kind [ 568.508921][T25120] lo speed is unknown, defaulting to 1000 [ 568.923348][T25120] wg1 speed is unknown, defaulting to 1000 [ 568.930447][T25140] lo speed is unknown, defaulting to 1000 [ 569.024125][T25151] netlink: 'syz.0.4699': attribute type 1 has an invalid length. [ 569.042537][T25154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4700'. [ 569.053254][T25154] netlink: 'syz.2.4700': attribute type 30 has an invalid length. [ 569.088989][T25151] bond6: entered promiscuous mode [ 569.094062][T25151] bond6: entered allmulticast mode [ 569.101378][T25151] 8021q: adding VLAN 0 to HW filter on device bond6 [ 569.183423][T25154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4700'. [ 569.200745][T25152] erspan1: entered allmulticast mode [ 569.208134][ T49] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.225798][ T1091] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.251622][ T1091] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.262040][T25154] netlink: 'syz.2.4700': attribute type 30 has an invalid length. [ 569.270667][ T1091] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.304518][T25140] wg1 speed is unknown, defaulting to 1000 [ 569.470405][T25170] netlink: 'syz.0.4704': attribute type 6 has an invalid length. [ 569.726820][T25182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4707'. [ 569.762035][T25182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4707'. [ 569.829149][T25182] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 570.144308][T25201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4713'. [ 570.316613][T25215] FAULT_INJECTION: forcing a failure. [ 570.316613][T25215] name failslab, interval 1, probability 0, space 0, times 0 [ 570.331372][T25215] CPU: 1 UID: 0 PID: 25215 Comm: syz.4.4717 Not tainted syzkaller #0 PREEMPT(full) [ 570.331397][T25215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 570.331407][T25215] Call Trace: [ 570.331414][T25215] [ 570.331420][T25215] dump_stack_lvl+0xe8/0x150 [ 570.331448][T25215] should_fail_ex+0x412/0x560 [ 570.331477][T25215] should_failslab+0xa8/0x100 [ 570.331502][T25215] __kmalloc_cache_noprof+0x88/0x660 [ 570.331525][T25215] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 570.331555][T25215] tcp_sendmsg_fastopen+0x1de/0x5e0 [ 570.331586][T25215] tcp_sendmsg_locked+0x4b59/0x5430 [ 570.331620][T25215] ? tcp_sendmsg_locked+0x361/0x5430 [ 570.331643][T25215] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 570.331676][T25215] ? __lock_acquire+0x6b5/0x2cf0 [ 570.331711][T25215] ? aa_sk_perm+0x15a/0x960 [ 570.331741][T25215] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 570.331775][T25215] ? __local_bh_enable_ip+0xd0/0x130 [ 570.331799][T25215] tcp_sendmsg+0x2f/0x50 [ 570.331822][T25215] __sys_sendto+0x627/0x7a0 [ 570.331845][T25215] ? __pfx___sys_sendto+0x10/0x10 [ 570.331862][T25215] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 570.331897][T25215] ? __fget_files+0x3a0/0x420 [ 570.331926][T25215] ? ksys_write+0x242/0x270 [ 570.331948][T25215] ? __pfx_ksys_write+0x10/0x10 [ 570.331982][T25215] __x64_sys_sendto+0xde/0x100 [ 570.332005][T25215] do_syscall_64+0x14d/0xf80 [ 570.332027][T25215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.332043][T25215] ? trace_irq_disable+0x37/0x100 [ 570.332063][T25215] ? clear_bhb_loop+0x40/0x90 [ 570.332084][T25215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.332101][T25215] RIP: 0033:0x7f460279c629 [ 570.332118][T25215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.332134][T25215] RSP: 002b:00007f4603603028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 570.332153][T25215] RAX: ffffffffffffffda RBX: 00007f4602a15fa0 RCX: 00007f460279c629 [ 570.332166][T25215] RDX: 0000000000000058 RSI: 0000000000000000 RDI: 0000000000000003 [ 570.332177][T25215] RBP: 00007f4603603090 R08: 0000000000000000 R09: 0000000000000000 [ 570.332188][T25215] R10: 000000002404c8d7 R11: 0000000000000246 R12: 0000000000000001 [ 570.332199][T25215] R13: 00007f4602a16038 R14: 00007f4602a15fa0 R15: 00007ffd670a4748 [ 570.332228][T25215] [ 570.713544][T25231] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4721'. [ 570.726221][T25233] openvswitch: netlink: Message has 8 unknown bytes. [ 570.791522][T25241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.909137][T25240] lo speed is unknown, defaulting to 1000 [ 571.016312][T25247] netlink: 'syz.0.4726': attribute type 1 has an invalid length. [ 571.049030][T25247] 8021q: adding VLAN 0 to HW filter on device bond7 [ 571.084683][T25247] bond7: (slave gretap2): making interface the new active one [ 571.095156][T25247] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 571.312685][T25269] FAULT_INJECTION: forcing a failure. [ 571.312685][T25269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.326224][T25269] CPU: 1 UID: 0 PID: 25269 Comm: syz.3.4731 Not tainted syzkaller #0 PREEMPT(full) [ 571.326247][T25269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 571.326258][T25269] Call Trace: [ 571.326265][T25269] [ 571.326272][T25269] dump_stack_lvl+0xe8/0x150 [ 571.326301][T25269] should_fail_ex+0x412/0x560 [ 571.326331][T25269] _copy_to_user+0x31/0xb0 [ 571.326353][T25269] simple_read_from_buffer+0xe1/0x170 [ 571.326386][T25269] proc_fail_nth_read+0x1bb/0x230 [ 571.326413][T25269] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 571.326440][T25269] ? rw_verify_area+0x2a6/0x4d0 [ 571.326460][T25269] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 571.326485][T25269] vfs_read+0x20c/0xa70 [ 571.326505][T25269] ? fdget_pos+0x246/0x320 [ 571.326527][T25269] ? __pfx___mutex_lock+0x10/0x10 [ 571.326553][T25269] ? __pfx_vfs_read+0x10/0x10 [ 571.326575][T25269] ? __fget_files+0x2a/0x420 [ 571.326596][T25269] ? __fget_files+0x3a0/0x420 [ 571.326612][T25269] ? __fget_files+0x2a/0x420 [ 571.326638][T25269] ksys_read+0x150/0x270 [ 571.326662][T25269] ? __pfx_ksys_read+0x10/0x10 [ 571.326694][T25269] do_syscall_64+0x14d/0xf80 [ 571.326716][T25269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.326733][T25269] ? trace_irq_disable+0x37/0x100 [ 571.326753][T25269] ? clear_bhb_loop+0x40/0x90 [ 571.326774][T25269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.326791][T25269] RIP: 0033:0x7f8b16f5cece [ 571.326807][T25269] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 571.326821][T25269] RSP: 002b:00007f8b17f0bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 571.326840][T25269] RAX: ffffffffffffffda RBX: 00007f8b17f0c6c0 RCX: 00007f8b16f5cece [ 571.326853][T25269] RDX: 000000000000000f RSI: 00007f8b17f0c0a0 RDI: 0000000000000004 [ 571.326864][T25269] RBP: 00007f8b17f0c090 R08: 0000000000000000 R09: 0000000000000000 [ 571.326874][T25269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.326884][T25269] R13: 00007f8b17216038 R14: 00007f8b17215fa0 R15: 00007ffc276b89b8 [ 571.326914][T25269] [ 571.557960][T25271] netlink: 'syz.1.4732': attribute type 1 has an invalid length. [ 571.568166][T25271] netlink: 'syz.1.4732': attribute type 1 has an invalid length. [ 571.579757][T25271] netlink: 'syz.1.4732': attribute type 8 has an invalid length. [ 571.697479][T25240] wg1 speed is unknown, defaulting to 1000 [ 571.966418][T25292] pim6reg: entered allmulticast mode [ 572.620129][ T49] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.648271][ T49] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 572.687435][T25285] pim6reg: left allmulticast mode [ 572.762531][ T49] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.777815][ T49] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 572.796469][ T49] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.815042][ T49] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 572.823530][ T49] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.842531][ T49] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 572.852285][T25321] vlan0: left promiscuous mode [ 572.858088][T25321] geneve1: left promiscuous mode [ 572.863215][T25321] vlan0: left allmulticast mode [ 572.869732][T25321] geneve1: left allmulticast mode [ 573.026093][T25339] __nla_validate_parse: 3 callbacks suppressed [ 573.026114][T25339] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4750'. [ 573.066598][T25335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4749'. [ 573.541087][T25365] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 573.551522][T25365] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4758'. [ 573.561584][T25365] openvswitch: netlink: Flow key attr not present in new flow. [ 573.720722][T25380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4761'. [ 573.894759][T25387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4763'. [ 573.933028][T25391] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 574.053707][T25400] lo speed is unknown, defaulting to 1000 [ 574.087958][T25403] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4768'. [ 574.101492][T25406] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4767'. [ 574.110884][T25406] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4767'. [ 574.283940][T25413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4771'. [ 574.522159][T25422] netlink: 'syz.3.4775': attribute type 16 has an invalid length. [ 574.545268][T25400] wg1 speed is unknown, defaulting to 1000 [ 574.554485][T25422] netlink: 'syz.3.4775': attribute type 17 has an invalid length. [ 574.593782][T25428] netlink: 'syz.2.4776': attribute type 2 has an invalid length. [ 574.640502][T25422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.667409][T25422] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.731502][T25422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 574.788683][T25441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4777'. [ 574.904376][T25439] vlan2: entered allmulticast mode [ 574.919911][T25439] bridge4: entered allmulticast mode [ 575.232859][T25459] sctp: [Deprecated]: syz.2.4782 (pid 25459) Use of struct sctp_assoc_value in delayed_ack socket option. [ 575.232859][T25459] Use struct sctp_sack_info instead [ 575.452896][T25468] netlink: 'syz.0.4785': attribute type 9 has an invalid length. [ 575.530185][T25472] veth1_to_bridge: Caught tx_queue_len zero misconfig [ 575.545353][T25472] netlink: 'syz.3.4787': attribute type 14 has an invalid length. [ 575.557799][T25477] netlink: 'syz.3.4787': attribute type 14 has an invalid length. [ 575.634799][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 575.827216][T25495] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 575.838569][T25495] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 576.115883][T25515] netlink: 'syz.3.4800': attribute type 1 has an invalid length. [ 576.220551][T25516] bond7: (slave bridge5): making interface the new active one [ 576.248189][T25516] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 576.792784][T25558] tipc: Enabled bearer , priority 0 [ 576.842941][T25558] tipc: Resetting bearer [ 576.897472][T25557] tipc: Disabling bearer [ 577.213544][T25574] syzkaller0: entered promiscuous mode [ 577.225188][T25574] syzkaller0: entered allmulticast mode [ 577.337444][T25579] vlan0: entered promiscuous mode [ 577.343010][T25579] gretap0: entered promiscuous mode [ 577.367703][T25578] vlan0: left promiscuous mode [ 577.372630][T25578] gretap0: left promiscuous mode [ 577.698603][T25610] netlink: 'syz.1.4823': attribute type 1 has an invalid length. [ 577.735316][T25609] nbd: socks must be embedded in a SOCK_ITEM attr [ 577.746034][T25609] block nbd3: shutting down sockets [ 577.798386][T25617] ip6gretap2: entered promiscuous mode [ 577.850412][T25617] bond7: option ad_user_port_key: invalid value (65535) [ 577.857976][T25617] bond7: option ad_user_port_key: allowed values 0 - 1023 [ 577.871304][T25617] bond7 (unregistering): Released all slaves [ 578.194657][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 578.444153][T25653] __nla_validate_parse: 81 callbacks suppressed [ 578.444173][T25653] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4841'. [ 578.577926][T25661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4842'. [ 578.640838][T25663] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 578.803256][T25670] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 578.818258][T25673] netlink: 'syz.1.4847': attribute type 3 has an invalid length. [ 579.079627][T25689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4852'. [ 579.285382][T25695] netlink: 'syz.4.4853': attribute type 16 has an invalid length. [ 579.299423][T25694] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.472391][ T5945] wg1 speed is unknown, defaulting to 1000 [ 579.585619][T25695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 579.876834][T25717] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4859'. [ 579.899858][T25717] nbd: must specify a size in bytes for the device [ 579.912615][T25717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4859'. [ 580.216547][T25731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4863'. [ 580.330235][T25736] lo speed is unknown, defaulting to 1000 [ 580.579526][T25747] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4865'. [ 580.871220][T25736] wg1 speed is unknown, defaulting to 1000 [ 581.379721][T25770] bridge5: entered promiscuous mode [ 581.450726][T25770] bridge5: entered allmulticast mode [ 581.754750][T25784] veth5: entered promiscuous mode [ 581.791911][T25786] 8021q: VLANs not supported on nr0 [ 582.025382][T25794] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.038563][T25794] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.051103][T25794] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 582.153474][T25797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4880'. [ 582.187126][T25794] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.204811][T25794] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.235392][T25794] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 582.319562][T25794] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.346800][T25794] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.365620][T25794] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 582.419813][T25800] lo speed is unknown, defaulting to 1000 [ 582.599717][T25794] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.624644][T25794] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.635645][T25794] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 582.852719][T12902] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.861827][T12902] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 582.871147][T25800] wg1 speed is unknown, defaulting to 1000 [ 582.878584][T12902] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 582.889043][T12902] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.897606][T12902] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 582.906441][T12902] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 582.932103][T12902] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.940869][T12902] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 582.979307][T12902] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 583.071057][ T49] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.080466][ T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 583.105255][ T49] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 583.691645][T25850] nftables ruleset with unbound chain [ 583.698163][T25856] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4897'. [ 583.712027][T25856] xt_TCPMSS: Only works on TCP SYN packets [ 583.744260][T25858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4899'. [ 583.896502][T25862] validate_nla: 1 callbacks suppressed [ 583.896522][T25862] netlink: 'syz.4.4901': attribute type 13 has an invalid length. [ 583.960529][T25867] netlink: 'syz.3.4902': attribute type 2 has an invalid length. [ 584.102915][T25872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4903'. [ 584.569686][T25875] netlink: 404 bytes leftover after parsing attributes in process `syz.1.4904'. [ 584.579823][ T51] block nbd3: Receive control failed (result -1) [ 584.596946][T25875] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4904'. [ 584.615633][T25875] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4904'. [ 584.640285][T25875] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4904'. [ 584.707274][T25875] netlink: 'syz.1.4904': attribute type 1 has an invalid length. [ 584.816747][T25878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4904'. [ 586.957049][T25882] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.967677][T25882] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 586.978408][T25882] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 587.153449][T25882] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.210306][T25882] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 587.240296][T25892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4908'. [ 587.245557][T25882] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 587.317318][T25882] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.333366][T25896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4908'. [ 587.344974][T25882] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 587.375984][T25882] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 587.397901][T25900] netlink: 'syz.0.4910': attribute type 7 has an invalid length. [ 587.415349][T25900] netlink: 'syz.0.4910': attribute type 8 has an invalid length. [ 587.476472][T25900] ..0{X: entered promiscuous mode [ 587.511103][T25900] ..0{X: left promiscuous mode [ 587.553685][T25882] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.592645][T25882] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 587.604659][T25882] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 587.677129][T25907] lo speed is unknown, defaulting to 1000 [ 587.753408][T12902] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.775422][T12902] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 587.783737][T12902] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 587.861903][T14105] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.894843][T14105] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 587.913397][T14105] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 587.968775][T14105] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.004907][T14105] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 588.020262][T14105] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 588.030193][T25926] netlink: 'syz.3.4915': attribute type 1 has an invalid length. [ 588.047215][T25924] veth1_to_team: Caught tx_queue_len zero misconfig [ 588.072017][T25930] vlan1: entered promiscuous mode [ 588.093893][T25930] bond0: entered promiscuous mode [ 588.099498][T25930] bond_slave_0: entered promiscuous mode [ 588.105962][T25930] bond_slave_1: entered promiscuous mode [ 588.131917][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.146842][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 588.155326][ T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 588.200702][T25907] wg1 speed is unknown, defaulting to 1000 [ 588.423120][T25939] ip6tnl3: entered promiscuous mode [ 588.740288][T25956] bond3: Removing last arp target with arp_interval on [ 589.274280][T25964] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 589.296199][T25971] __nla_validate_parse: 6 callbacks suppressed [ 589.296220][T25971] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4927'. [ 589.460459][T25984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4931'. [ 589.498628][T25981] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 589.509260][T25984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4931'. [ 589.521425][T25981] bond4 (unregistering): Released all slaves [ 589.571042][T25979] xt_CT: No such helper "syz1" [ 589.710876][T25995] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4933'. [ 589.834807][T25998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4933'. [ 589.887466][T26000] xt_CT: You must specify a L4 protocol and not use inversions on it [ 589.993314][T26010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4939'. [ 590.021678][T26010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4939'. [ 590.033069][T26010] netlink: 'syz.2.4939': attribute type 14 has an invalid length. [ 590.344316][T26026] netlink: 'syz.1.4944': attribute type 13 has an invalid length. [ 590.368670][T26026] netlink: 'syz.1.4944': attribute type 17 has an invalid length. [ 590.408913][T26026] ..0{X: left allmulticast mode [ 590.510528][T26026] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 590.528589][T26035] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4945'. [ 590.709727][T26046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4951'. [ 590.959764][T26062] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4956'. [ 590.970331][T26065] netlink: 'syz.3.4953': attribute type 1 has an invalid length. [ 591.111071][T26065] 8021q: adding VLAN 0 to HW filter on device bond8 [ 591.214727][T26073] bond8: (slave veth13): Enslaving as an active interface with a down link [ 591.265028][T26084] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 591.282196][T26051] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 591.330454][T26051] bond8: (slave batadv1): making interface the new active one [ 591.388972][T26051] batadv1: entered promiscuous mode [ 591.416249][T26051] bond8: (slave batadv1): Enslaving as an active interface with an up link [ 591.468433][T26079] lo speed is unknown, defaulting to 1000 [ 591.635374][T26096] : renamed from bond_slave_0 [ 592.002582][T26079] wg1 speed is unknown, defaulting to 1000 [ 592.160542][T26125] netlink: 'syz.2.4971': attribute type 1 has an invalid length. [ 592.241327][T26125] 8021q: adding VLAN 0 to HW filter on device bond4 [ 592.259779][T26130] vlan1: entered promiscuous mode [ 592.292833][T26130] bond4: entered promiscuous mode [ 592.309073][T26130] vlan1: entered allmulticast mode [ 592.314243][T26130] bond4: entered allmulticast mode [ 592.496005][T26136] netlink: 'syz.3.4972': attribute type 8 has an invalid length. [ 593.004990][T26168] tunl0: Caught tx_queue_len zero misconfig [ 593.010974][T26168] sch_tbf: burst 2 is lower than device tunl0 mtu (1480) ! [ 593.052927][T26171] tipc: Enabled bearer , priority 0 [ 593.077570][T26171] syzkaller0: entered promiscuous mode [ 593.083122][T26171] syzkaller0: entered allmulticast mode [ 593.127146][T26173] openvswitch: netlink: Multiple metadata blocks provided [ 593.137510][T26171] tipc: Resetting bearer [ 593.146993][T26170] tipc: Resetting bearer [ 593.185959][T26170] tipc: Disabling bearer [ 593.331145][T26186] netlink: 'syz.1.4990': attribute type 13 has an invalid length. [ 593.341113][T26186] netlink: 'syz.1.4990': attribute type 8 has an invalid length. [ 593.354932][T26186] netlink: 'syz.1.4990': attribute type 9 has an invalid length. [ 593.362901][T26186] netlink: 'syz.1.4990': attribute type 10 has an invalid length. [ 593.797896][T26218] ip6gre2: entered promiscuous mode [ 593.808762][T26218] ip6gre2: entered allmulticast mode [ 594.633030][T26254] lo speed is unknown, defaulting to 1000 [ 594.903719][T26263] __nla_validate_parse: 24 callbacks suppressed [ 594.903741][T26263] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5005'. [ 595.199073][T26317] netlink: 296 bytes leftover after parsing attributes in process `syz.4.5015'. [ 595.261332][T26254] wg1 speed is unknown, defaulting to 1000 [ 595.741873][T26338] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5019'. [ 595.879401][T26343] validate_nla: 3 callbacks suppressed [ 595.879422][T26343] netlink: 'syz.4.5022': attribute type 2 has an invalid length. [ 595.914846][T26343] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5022'. [ 596.002049][T26343] geneve2: left promiscuous mode [ 596.016739][T26343] geneve4: left promiscuous mode [ 596.023400][T26343] team1: left promiscuous mode [ 596.029855][T26343] team2: left promiscuous mode [ 596.038441][T26343] ip6gretap2: left promiscuous mode [ 596.044123][T26343] vlan1: left promiscuous mode [ 596.049463][T26343] bond0: left promiscuous mode [ 596.054271][T26343] bond_slave_0: left promiscuous mode [ 596.060272][T26343] bond_slave_1: left promiscuous mode [ 596.069150][T26343] ip6tnl3: left promiscuous mode [ 596.223104][T26358] syzkaller0: entered promiscuous mode [ 596.228817][T26358] syzkaller0: entered allmulticast mode [ 597.004962][T26383] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5035'. [ 597.226563][T26389] lo speed is unknown, defaulting to 1000 [ 597.328088][T26391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5038'. [ 597.487807][T26392] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5036'. [ 597.508184][T26399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5039'. [ 597.931869][T26415] vlan3: entered promiscuous mode [ 597.941776][T26415] bridge0: entered promiscuous mode [ 597.992025][T26416] vlan3: entered promiscuous mode [ 598.138335][T26389] wg1 speed is unknown, defaulting to 1000 [ 598.449771][T26436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5049'. [ 598.555416][T26440] xt_hashlimit: max too large, truncated to 1048576 [ 598.642880][T26436] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20001 [ 598.843822][T26451] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5053'. [ 599.154274][T26469] syzkaller0: entered promiscuous mode [ 599.160511][T26469] syzkaller0: entered allmulticast mode [ 599.356502][T26476] batman_adv: batadv0: Adding interface: geneve6 [ 599.362903][T26476] batman_adv: batadv0: The MTU of interface geneve6 is too small (1430) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.417687][T26476] batman_adv: batadv0: Interface activated: geneve6 [ 599.564656][T26487] netlink: 'syz.2.5064': attribute type 1 has an invalid length. [ 599.609480][T26488] lo speed is unknown, defaulting to 1000 [ 599.910399][T26488] wg1 speed is unknown, defaulting to 1000 [ 600.159069][T26503] __nla_validate_parse: 5 callbacks suppressed [ 600.159084][T26503] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5067'. [ 600.355072][T26507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5068'. [ 600.375598][T26507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5068'. [ 600.395810][T26507] netlink: 'syz.3.5068': attribute type 15 has an invalid length. [ 600.599757][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034a6b400: rx timeout, send abort [ 600.830247][T26523] netlink: 'syz.2.5073': attribute type 1 has an invalid length. [ 601.099898][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034a69000: rx timeout, send abort [ 601.108584][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034a6b400: abort rx timeout. Force session deactivation [ 601.440304][T26546] macsec0: entered promiscuous mode [ 601.446366][T26546] macsec0: entered allmulticast mode [ 601.460837][T26544] veth2: entered allmulticast mode [ 601.487330][T26548] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5081'. [ 601.598081][T26555] mac80211_hwsim hwsim49 wlan1: entered allmulticast mode [ 601.608220][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034a69000: abort rx timeout. Force session deactivation [ 601.620567][T26551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5081'. [ 601.691737][T26562] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5083'. [ 601.945928][T26567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5085'. [ 601.961777][T26567] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5085'. [ 602.304705][T26586] netlink: 'syz.0.5090': attribute type 3 has an invalid length. [ 602.343061][T26586] netlink: 'syz.0.5090': attribute type 1 has an invalid length. [ 602.373529][T26586] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5090'. [ 602.443214][T26589] lo speed is unknown, defaulting to 1000 [ 602.586380][T26595] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5091'. [ 602.645088][T26304] batadv1: left promiscuous mode [ 602.746815][T26589] wg1 speed is unknown, defaulting to 1000 [ 602.778288][T26604] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.827579][T26604] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.874610][T26604] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 42488 - 0 [ 602.909811][T26609] netlink: 'syz.3.5095': attribute type 15 has an invalid length. [ 603.110582][T26604] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.145636][T26617] netlink: 'syz.1.5094': attribute type 8 has an invalid length. [ 603.167488][T26604] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.205808][T26604] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 42488 - 0 [ 603.332767][T26604] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.364638][T26604] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.386473][T26604] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 42488 - 0 [ 603.841707][T26636] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 603.849116][T26636] IPv6: NLM_F_CREATE should be set when creating new route [ 603.856405][T26636] IPv6: NLM_F_CREATE should be set when creating new route [ 603.887637][T26636] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 605.783311][T26604] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.793247][T26604] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.804135][T26604] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 42488 - 0 [ 605.836062][T26634] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 605.837505][T26635] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 605.884908][T26636] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 605.985601][T26643] tipc: Enabled bearer , priority 14 [ 606.004111][T26647] __nla_validate_parse: 5 callbacks suppressed [ 606.004128][T26647] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5100'. [ 606.042160][T26647] 0X: renamed from caif0 [ 606.062421][T26647] tipc: Disabling bearer [ 606.072051][T26647] 0X: entered allmulticast mode [ 606.079397][T26647] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 606.081065][T26651] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5102'. [ 606.146464][T26645] lo speed is unknown, defaulting to 1000 [ 606.239294][T26309] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.273358][T26309] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 42488 - 0 [ 606.287155][T26655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5103'. [ 606.308124][T26309] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 606.408887][T26307] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.418146][T26307] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 42488 - 0 [ 606.439061][T26307] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 606.508340][T26307] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.527557][T26307] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 42488 - 0 [ 606.556109][T26307] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 606.585751][T26307] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.612345][T26307] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 42488 - 0 [ 606.641084][T26307] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 606.668730][T26666] netlink: 276 bytes leftover after parsing attributes in process `syz.0.5106'. [ 606.751591][T26669] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5107'. [ 606.774605][T26669] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5107'. [ 606.817490][T26645] wg1 speed is unknown, defaulting to 1000 [ 607.094998][T26691] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5111'. [ 607.304014][T26695] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 607.330880][T26694] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 607.737208][T26709] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5116'. [ 607.792189][T26712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5117'. [ 607.922431][T26718] syzkaller1: entered promiscuous mode [ 607.941234][T26718] syzkaller1: entered allmulticast mode [ 608.100254][T26727] lo speed is unknown, defaulting to 1000 [ 608.191714][T26735] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 608.274676][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 608.371174][T26743] netlink: 'syz.2.5126': attribute type 1 has an invalid length. [ 608.429183][T26746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5127'. [ 608.522623][T26727] wg1 speed is unknown, defaulting to 1000 [ 608.546282][T26755] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 608.553606][T26755] IPv6: NLM_F_CREATE should be set when creating new route [ 608.726204][T26766] veth15: entered promiscuous mode [ 609.004218][T26785] ipt_REJECT: TCP_RESET invalid for non-tcp [ 609.231501][T26792] lo speed is unknown, defaulting to 1000 [ 609.643482][T26792] wg1 speed is unknown, defaulting to 1000 [ 609.917610][T26838] netlink: 'syz.2.5149': attribute type 29 has an invalid length. [ 610.788875][T26853] netlink: 'syz.0.5153': attribute type 4 has an invalid length. [ 611.727866][T26869] netlink: 'syz.4.5157': attribute type 3 has an invalid length. [ 612.474282][T26810] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 612.505256][T26857] netlink: 'syz.0.5154': attribute type 1 has an invalid length. [ 612.523928][T26857] __nla_validate_parse: 6 callbacks suppressed [ 612.523946][T26857] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5154'. [ 612.734982][T26890] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5165'. [ 612.829124][T26898] netlink: 252 bytes leftover after parsing attributes in process `syz.0.5166'. [ 612.935470][T26901] netlink: 'syz.4.5167': attribute type 30 has an invalid length. [ 613.005731][T26901] bond7: option arp_missed_max: invalid value (0) [ 613.015477][T26901] bond7: option arp_missed_max: allowed values 1 - 255 [ 613.082775][T26901] bond7 (unregistering): Released all slaves [ 613.170768][T26910] netlink: 'syz.4.5167': attribute type 6 has an invalid length. [ 613.270661][T26917] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5171'. [ 613.448989][T26930] netlink: 'syz.3.5175': attribute type 1 has an invalid length. [ 613.722081][T26941] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5176'. [ 613.738409][T26904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5168'. [ 613.770592][T26949] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.5180'. [ 613.780164][T26904] bridge_slave_1: left allmulticast mode [ 613.780192][T26904] bridge_slave_1: left promiscuous mode [ 613.780438][T26904] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.878572][T26904] bridge_slave_0: left allmulticast mode [ 613.902376][T26904] bridge_slave_0: left promiscuous mode [ 613.911641][T26904] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.289269][T26965] lo speed is unknown, defaulting to 1000 [ 614.684362][T26985] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 614.785329][T26993] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5194'. [ 614.848810][T26965] wg1 speed is unknown, defaulting to 1000 [ 615.530913][T27003] tipc: Enabled bearer , priority 6 [ 615.543608][T27007] netlink: 'syz.1.5198': attribute type 1 has an invalid length. [ 616.306198][T27043] xt_CT: No such helper "pptp" [ 616.450575][T27050] SET target dimension over the limit! [ 616.459627][T27054] syzkaller0: entered promiscuous mode [ 616.471480][T27054] syzkaller0: entered allmulticast mode [ 616.549854][T27056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5210'. [ 616.641726][T27064] netlink: 'syz.4.5215': attribute type 1 has an invalid length. [ 616.723663][T27064] bond7: entered promiscuous mode [ 616.729371][T27064] bond7: entered allmulticast mode [ 616.746243][T27067] ipt_REJECT: ECHOREPLY no longer supported. [ 616.764719][T27071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5217'. [ 616.774393][T27064] 8021q: adding VLAN 0 to HW filter on device bond7 [ 616.839573][T27069] bridge6: entered promiscuous mode [ 616.848358][T27069] bridge6: entered allmulticast mode [ 616.857556][T27069] bond7: (slave bridge6): Enslaving as a backup interface with an up link [ 616.934841][T26305] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 617.012002][T27078] xt_hashlimit: size too large, truncated to 1048576 [ 617.034899][T27078] xt_hashlimit: max too large, truncated to 1048576 [ 617.046646][T27083] xt_CT: You must specify a L4 protocol and not use inversions on it [ 617.065990][T26305] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 617.209672][T27091] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 617.295530][ T29] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 617.413407][T27100] lo speed is unknown, defaulting to 1000 [ 617.441672][T27106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.476706][T27108] nftables ruleset with unbound set [ 617.628630][ T29] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 617.691539][T27120] __nla_validate_parse: 119 callbacks suppressed [ 617.691561][T27120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5234'. [ 617.719074][T27122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5233'. [ 617.810487][T27122] team0: Port device bridge0 removed [ 617.869370][T27100] wg1 speed is unknown, defaulting to 1000 [ 618.014301][T27137] sctp: [Deprecated]: syz.1.5237 (pid 27137) Use of int in maxseg socket option. [ 618.014301][T27137] Use struct sctp_assoc_value instead [ 618.184745][T27143] netlink: 'syz.1.5237': attribute type 8 has an invalid length. [ 618.676193][T27151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 620.835783][T27126] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 620.948489][T27170] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5246'. [ 620.958136][T27170] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5246'. [ 621.036048][T27170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5246'. [ 621.069753][T27170] hsr_slave_1 (unregistering): left promiscuous mode [ 621.087933][T27180] sctp: [Deprecated]: syz.0.5246 (pid 27180) Use of int in max_burst socket option. [ 621.087933][T27180] Use struct sctp_assoc_value instead [ 621.222731][T27188] netlink: 'syz.2.5251': attribute type 1 has an invalid length. [ 621.244886][T27188] netlink: 240 bytes leftover after parsing attributes in process `syz.2.5251'. [ 621.347278][T27194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5252'. [ 621.449662][T27200] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5255'. [ 621.592037][T27207] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5258'. [ 621.615518][T27207] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5258'. [ 621.849527][T27224] tls_set_device_offload: netdev not found [ 622.189290][T27224] vlan3: entered allmulticast mode [ 622.264805][T27224] bond0: entered allmulticast mode [ 622.270012][T27224] bond_slave_0: entered allmulticast mode [ 622.301357][T27224] bond_slave_1: entered allmulticast mode [ 622.335577][T27224] dummy0: entered allmulticast mode [ 622.394102][T27262] netlink: 'syz.4.5271': attribute type 1 has an invalid length. [ 622.441293][T26720] udevd[26720]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 622.481289][T27230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.495562][T27230] bond_slave_0: left allmulticast mode [ 622.502868][T27230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.512642][T27230] bond_slave_1: left allmulticast mode [ 622.520336][T27230] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 622.531416][T27230] dummy0: left allmulticast mode [ 622.537505][T27230] bond0 (unregistering): Released all slaves [ 622.552914][T27261] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 622.628160][T27262] 8021q: adding VLAN 0 to HW filter on device bond8 [ 623.186180][T27281] __nla_validate_parse: 33 callbacks suppressed [ 623.186200][T27281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5274'. [ 623.204757][T27282] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5277'. [ 623.386989][T27281] netlink: 'syz.1.5274': attribute type 1 has an invalid length. [ 623.424863][T27281] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5274'. [ 623.714721][T27296] lo speed is unknown, defaulting to 1000 [ 623.822973][T27299] netlink: 'syz.2.5282': attribute type 21 has an invalid length. [ 623.840687][T27299] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5282'. [ 623.865032][T27303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 623.866759][T27299] netlink: 'syz.2.5282': attribute type 4 has an invalid length. [ 623.945847][T27299] netlink: 'syz.2.5282': attribute type 3 has an invalid length. [ 623.981941][T27299] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5282'. [ 624.279742][ T1295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.356117][T27319] lo speed is unknown, defaulting to 1000 [ 624.356143][T27296] wg1 speed is unknown, defaulting to 1000 [ 624.420425][T27331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5291'. [ 624.498674][T27331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5291'. [ 624.933891][T27329] lo speed is unknown, defaulting to 1000 [ 625.174010][T27329] wg1 speed is unknown, defaulting to 1000 [ 625.189089][T27319] wg1 speed is unknown, defaulting to 1000 [ 626.093660][T27395] tap0: tun_chr_ioctl cmd 1074025673 [ 626.106894][T27396] tap0: tun_chr_ioctl cmd 2148553947 [ 626.433861][T27408] lo speed is unknown, defaulting to 1000 [ 626.500805][T27417] netlink: 'syz.1.5313': attribute type 10 has an invalid length. [ 626.748623][T27428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5317'. [ 626.965795][T27408] wg1 speed is unknown, defaulting to 1000 [ 626.965839][T27424] lo speed is unknown, defaulting to 1000 [ 627.021916][T27440] Unsupported ieee802154 address type: 0 [ 627.053369][T27439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5318'. [ 627.309551][T27458] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5323'. [ 627.396970][T27443] lo speed is unknown, defaulting to 1000 [ 627.430307][T27460] netlink: 'syz.1.5324': attribute type 10 has an invalid length. [ 627.478385][T27460] team0: Port device geneve0 added [ 627.695925][T27424] wg1 speed is unknown, defaulting to 1000 [ 627.704462][T27443] wg1 speed is unknown, defaulting to 1000 [ 628.470101][T27483] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 628.556954][T27486] __nla_validate_parse: 2 callbacks suppressed [ 628.556969][T27486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5331'. [ 628.597658][T27486] netlink: 'syz.3.5331': attribute type 7 has an invalid length. [ 628.606967][T27486] netlink: 'syz.3.5331': attribute type 8 has an invalid length. [ 628.616250][T27486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5331'. [ 628.721844][T27491] syzkaller1: entered promiscuous mode [ 628.735959][T27491] syzkaller1: entered allmulticast mode [ 628.768262][T27491] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5333'. [ 628.784367][T27491] openvswitch: netlink: Unknown key attributes 2 [ 628.799174][T27495] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5335'. [ 628.947860][T27503] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5338'. [ 629.131165][T27498] xt_CT: No such helper "pptp" [ 629.157379][T27512] lo speed is unknown, defaulting to 1000 [ 629.321994][T27530] xt_hashlimit: overflow, rate too high: 0 [ 629.544112][T27512] wg1 speed is unknown, defaulting to 1000 [ 629.580509][T27533] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5344'. [ 629.692516][T27544] sch_tbf: burst 2976 is lower than device lo mtu (11337746) ! [ 629.776349][T27551] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5348'. [ 629.786836][T27551] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5348'. [ 629.916433][T27558] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5353'. [ 630.344984][T27570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5357'. [ 631.056496][T27596] lo speed is unknown, defaulting to 1000 [ 631.683384][T27596] wg1 speed is unknown, defaulting to 1000 [ 631.923524][T27634] syz_tun: entered promiscuous mode [ 631.929116][T27634] syz_tun: entered allmulticast mode [ 632.306332][T27656] bridge0: entered allmulticast mode [ 632.584837][T16578] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 632.720487][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804e6c8000: rx timeout, send abort [ 632.790871][T27674] vlan2: entered promiscuous mode [ 632.797432][T27674] bridge0: entered promiscuous mode [ 633.135061][T26308] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 633.220668][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804e6c9000: rx timeout, send abort [ 633.229198][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804e6c8000: abort rx timeout. Force session deactivation [ 633.265737][T16578] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 633.350245][T27708] tipc: Enabling of bearer rejected, failed to enable media [ 633.359734][T27705] mac80211_hwsim hwsim49 wlan1: Caught tx_queue_len zero misconfig [ 633.505741][T27705] netlink: 'syz.3.5395': attribute type 10 has an invalid length. [ 633.513640][T27705] mac80211_hwsim hwsim49 wlan1: left allmulticast mode [ 633.534930][T27705] wlan1: mtu greater than device maximum [ 633.544845][T27705] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 633.627692][T27717] __nla_validate_parse: 7 callbacks suppressed [ 633.627711][T27717] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5399'. [ 633.644759][T27717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5399'. [ 633.653700][T27717] tc_dump_action: action bad kind [ 633.682548][T27717] syzkaller0: entered promiscuous mode [ 633.691648][T27717] syzkaller0: entered allmulticast mode [ 633.728978][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804e6c9000: abort rx timeout. Force session deactivation [ 633.971754][T27723] tipc: Resetting bearer [ 633.991183][T27723] mac80211_hwsim hwsim42 wlan1: left promiscuous mode [ 634.052543][T27723] batman_adv: batadv0: Interface deactivated: geneve6 [ 634.064145][T27721] lo speed is unknown, defaulting to 1000 [ 634.082223][T26303] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.124918][T26303] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 634.164736][T26303] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 634.178202][T26303] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.216414][T26303] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 634.235742][T26303] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 634.247316][T26309] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 634.271739][T26309] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 634.291505][T26303] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.320618][T26303] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 634.349579][T26303] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 634.375983][T27741] lo: Caught tx_queue_len zero misconfig [ 634.421157][T26303] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.444275][T27748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5408'. [ 634.466123][T27749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5408'. [ 634.494696][T26303] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 634.503202][T26303] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 634.555285][ T5940] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 634.670881][T27759] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] SMP KASAN PTI [ 634.682863][T27759] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 634.691346][T27759] CPU: 1 UID: 0 PID: 27759 Comm: syz.4.5411 Not tainted syzkaller #0 PREEMPT(full) [ 634.700755][T27759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 634.710872][T27759] RIP: 0010:ip_route_output_key_hash_rcu+0x12ba/0x25d0 [ 634.717776][T27759] Code: c3 31 ff 89 c6 e8 b6 9b c7 f7 85 db 74 5b e8 6d 97 c7 f7 eb 05 e8 66 97 c7 f7 4d 85 ff 74 36 49 8d 5f 3a 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 ff 10 00 00 0f b7 1b bf ff ff 00 00 89 [ 634.737419][T27759] RSP: 0018:ffffc9000428f0c0 EFLAGS: 00010202 [ 634.743525][T27759] RAX: 0000000000000007 RBX: 0000000000000039 RCX: ffff888030ed8000 [ 634.751537][T27759] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 634.759545][T27759] RBP: 0000000080000000 R08: ffff888030ed8000 R09: 0000000000000003 [ 634.767553][T27759] R10: 0000000000000005 R11: 0000000000000000 R12: dffffc0000000000 [ 634.775559][T27759] R13: 0000000000000000 R14: ffff888035baa358 R15: ffffffffffffffff [ 634.783564][T27759] FS: 00007f46035c16c0(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000 [ 634.792533][T27759] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 634.799180][T27759] CR2: 00007f64549ad2c0 CR3: 0000000079940000 CR4: 00000000003526f0 [ 634.807251][T27759] Call Trace: [ 634.810564][T27759] [ 634.813546][T27759] ? ip_route_output_key_hash+0xd8/0x2a0 [ 634.816652][T27721] wg1 speed is unknown, defaulting to 1000 [ 634.819223][T27759] ip_route_output_key_hash+0x18d/0x2a0 [ 634.819258][T27759] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 634.836719][T27759] ip_route_output_flow+0x2a/0x150 [ 634.841886][T27759] ? security_sk_classify_flow+0x6d/0x150 [ 634.847645][T27759] udp_sendmsg+0x154a/0x22f0 [ 634.852313][T27759] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 634.857933][T27759] ? __pfx_udp_sendmsg+0x10/0x10 [ 634.862919][T27759] ? tomoyo_write_log2+0x250/0x910 [ 634.868087][T27759] ? tomoyo_supervisor+0x4cb/0x1570 [ 634.873348][T27759] ? snprintf+0xe8/0x140 [ 634.877634][T27759] udpv6_sendmsg+0xd1c/0x2560 [ 634.882367][T27759] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 634.887522][T27759] ? __lock_acquire+0x6b5/0x2cf0 [ 634.892592][T27759] ? inet_send_prepare+0x5c/0x270 [ 634.897662][T27759] ? inet6_sendmsg+0xe4/0x120 [ 634.902373][T27759] ____sys_sendmsg+0x62c/0xad0 [ 634.907177][T27759] ? __pfx_____sys_sendmsg+0x10/0x10 [ 634.912518][T27759] ? import_iovec+0x73/0xa0 [ 634.917064][T27759] ___sys_sendmsg+0x2a5/0x360 [ 634.921785][T27759] ? __lock_acquire+0x6b5/0x2cf0 [ 634.926769][T27759] ? __pfx____sys_sendmsg+0x10/0x10 [ 634.932022][T27759] ? __lock_acquire+0x6b5/0x2cf0 [ 634.937042][T27759] ? __pfx_futex_wake_mark+0x10/0x10 [ 634.942390][T27759] __sys_sendmmsg+0x27c/0x4e0 [ 634.947117][T27759] ? __pfx___sys_sendmmsg+0x10/0x10 [ 634.952366][T27759] ? do_futex+0x333/0x420 [ 634.956746][T27759] ? rcu_is_watching+0x15/0xb0 [ 634.961564][T27759] __x64_sys_sendmmsg+0xa0/0xc0 [ 634.966459][T27759] do_syscall_64+0x14d/0xf80 [ 634.971091][T27759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.977193][T27759] ? trace_irq_disable+0x37/0x100 [ 634.982265][T27759] ? clear_bhb_loop+0x40/0x90 [ 634.986993][T27759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.992948][T27759] RIP: 0033:0x7f460279c629 [ 634.997403][T27759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.017051][T27759] RSP: 002b:00007f46035c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 635.025516][T27759] RAX: ffffffffffffffda RBX: 00007f4602a16180 RCX: 00007f460279c629 [ 635.033523][T27759] RDX: 0000000000000002 RSI: 00002000000018c0 RDI: 0000000000000003 [ 635.041535][T27759] RBP: 00007f4602832b39 R08: 0000000000000000 R09: 0000000000000000 [ 635.044393][T27762] syzkaller0: entered promiscuous mode [ 635.049539][T27759] R10: 0000000000004880 R11: 0000000000000246 R12: 0000000000000000 [ 635.049560][T27759] R13: 00007f4602a16218 R14: 00007f4602a16180 R15: 00007ffd670a4748 [ 635.049607][T27759] [ 635.055922][T27762] syzkaller0: entered allmulticast mode [ 635.063040][T27759] Modules linked in: [ 635.065324][T27759] ---[ end trace 0000000000000000 ]--- [ 635.089465][T27759] RIP: 0010:ip_route_output_key_hash_rcu+0x12ba/0x25d0 [ 635.096424][T27759] Code: c3 31 ff 89 c6 e8 b6 9b c7 f7 85 db 74 5b e8 6d 97 c7 f7 eb 05 e8 66 97 c7 f7 4d 85 ff 74 36 49 8d 5f 3a 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 ff 10 00 00 0f b7 1b bf ff ff 00 00 89 [ 635.122768][T27759] RSP: 0018:ffffc9000428f0c0 EFLAGS: 00010202 [ 635.129864][T27759] RAX: 0000000000000007 RBX: 0000000000000039 RCX: ffff888030ed8000 [ 635.138477][T27759] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 635.147197][T27759] RBP: 0000000080000000 R08: ffff888030ed8000 R09: 0000000000000003 [ 635.156390][T27759] R10: 0000000000000005 R11: 0000000000000000 R12: dffffc0000000000 [ 635.165887][T27759] R13: 0000000000000000 R14: ffff888035baa358 R15: ffffffffffffffff [ 635.174017][T27759] FS: 00007f46035c16c0(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 635.185895][T27759] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 635.192613][T27759] CR2: 00007fe21e017dac CR3: 0000000079940000 CR4: 00000000003526f0 [ 635.201088][T27759] Kernel panic - not syncing: Fatal exception [ 635.207780][T27759] Kernel Offset: disabled [ 635.212115][T27759] Rebooting in 86400 seconds..