last executing test programs: 6.789515473s ago: executing program 0 (id=3872): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000012f6ff04c4929f4f75029400700000000000000000a0000000c0002006e6c38303231310036f5e8e9158642f46e9c3b7e50e81ff86de6a5288570aa539a2dc7bc00aac8366672c8fafe6996bbc77a467465516013490db238fde14a256b92c61212cc98bb040039d226378b6bb3d378ee9d45ec18e6797da32ff1849a7a7c78c6bee6cdc00875dde8a1ad1bb2153898e859a7a35abf29b2aab036981867a917c166c1e704e5d60786102d8351e836d14a6fe9022177024a24af64c8b8f2e824714ef4ab65079d510aaa3b7cf7aa486fb86dabdc86b604cae8634a0884328a692f1d96aeaa331f0000000000"], 0x20}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00'}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x4c}}, 0x0) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000280)=""/191, 0xbf}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x10000, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000012c0)={'macsec0\x00', 0x400}) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000db34b00f40e276a88f6bbdfc6f00000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540feffffff580000000e0a01020000000000000000010000000900020073797a32000000001800038014000080100001800400028006000180000000000900010073797a3000000000140000001000010000000000000000000000000a"], 0xc8}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x18, &(0x7f0000000100)=0xff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071121e000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@setlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0xf, @broadcast}]}}}]}, 0x3c}, 0x1, 0xff7f}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r9, 0x6, 0x12, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000500)=0x2020000, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0x7}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x14, 0xb}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4018}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000000)={@broadcast, @empty, @void, {@llc_tr={0x11, {@snap={0x1, 0xacdef7f2578620b3, "d5", "eac114", 0x8884, "58d8592662a8624cf12529f974f9cb1397eaeb5476795eda7343a23b944fd181a670f8310bcf49b24d29949840145a514bb8c97e46435149c625eeb480cb48aaf1bf8c7119e68be6494fc70fd58990189f94cbf45f697bf0b1550db7e44640e403a053a50e5cf8a4370f4e18f7f8b961623f8166"}}}}}, 0x0) 5.258631114s ago: executing program 0 (id=3889): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x1d, r1}, 0x10, &(0x7f00000001c0)={&(0x7f0000000180)=@can={{0x1, 0x1, 0x1, 0x1}, 0x2, 0xa5b64e83f2abd240, 0x0, 0x0, "703c1930210c66ad"}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x48004) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)="e9bed67a87ee4623d39c10780000000000", 0x11}}, 0x20040814) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_delrule={0x1c, 0x21, 0x800, 0x70bd2d, 0x0, {0xa, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x8044) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x400000}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x0) recvfrom(r5, 0x0, 0x0, 0x2, 0x0, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000811}, 0x0) recvmmsg(r6, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r6}], 0x1, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd7000fbdbdf251000000008000300", @ANYRES32=r9, @ANYBLOB="08000600", @ANYRES32=r11, @ANYBLOB="08001b000700000008003a"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$nl_route(r6, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, 0x10082, 0x2000}, [@IFLA_CARRIER={0x5, 0x21, 0x5}, @IFLA_TARGET_NETNSID={0x8}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6b4c}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20004851) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000000540)={{r2, &(0x7f0000000240)='vxcan1\x00', 0x60080, &(0x7f0000000300)={@align=0x1, {0x101, 0x100, 0x9a5a, 0x8}}, 0x10000, &(0x7f0000000380), &(0x7f00000003c0)=0x7}, {[0xad3, 0xc8, 0x6, 0x4236]}, 0x10, 0x8e, &(0x7f0000000400)=""/142}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000640)={r12, &(0x7f00000004c0)="965bd653c454", &(0x7f00000005c0)=""/111}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000001600010000000000fcffffff0a000000", @ANYRES32=0x0, @ANYBLOB="140007"], 0x2c}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x609, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x103f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x7}]}}}]}, 0x3c}}, 0x0) 4.211148585s ago: executing program 0 (id=3901): r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000000000000141000200000084daabaddf57c70b9cac72871706000700000100000000ff6574683a762f3b9c3119c9c3ae4033905ffa6a73599c73558785b4bd47d3027681f08602d26ce3b2119e338790667194ec37d604a1836579849843afc113164fbdf3b0328535c0a4d0dd1bae5341e302bdd66950a73956648e835d65f612bf2ceedd1fcb51b0453e1672703d5f10096e30f0129026813d017df7d4c40000000087f26d90dbf49c393d18883b1cbd72087b50b7bc4a1988e969058114b31560fb661f19a1870480814a4068d7fca488cc80ba0e"], 0x34}}, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000540)=[{&(0x7f0000000580)='-', 0x1}], 0x1, 0x1) (async) close(r4) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c80)=ANY=[], 0x220}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) splice(r3, 0x0, r4, 0x0, 0xfffd, 0xa) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r3, r3, 0x4, r3}, 0x10) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 64) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (rerun: 64) 4.025390067s ago: executing program 0 (id=3906): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = accept4$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000640)=0x14, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f00000006c0)={0x1, &(0x7f0000000680)=[{0x9, 0xa, 0x10, 0x4}]}, 0x10) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000200"], 0x390) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$inet(r5, &(0x7f0000000540)={&(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000000200)=[{&(0x7f00000002c0)="44ead8d25a1f50d40d6e1c260d414b7681c7657c5357193e422faf0d6298fa06820e54c533c6dd0b4087968f81141621da821046fd3334b17b3dc3ecbdaa7f4ff67814c55272ea5e7f2411321579a7cb9146fe6db428b6e160447a0e2da849c561b6c638e4fe9d826a503527a8e01e5e474a81873ad1a58bba06f433e40f9050d3bca95f670f9954937e362c2af0611069de9e6e32e06e778d8c0d3b3d897a7e87a9c7cf082b4859285e47949126cf24e3e399246feca4abfbe5a724b66056cf4ae358fba668f0c211b176dd03e33e286c6feb84bc419f9000af651fbc36", 0xde}, {&(0x7f00000003c0)="5bc33c3a0ebe6ea73ca6a75937448190b0991c7f006f4a74ea40f326f28dcd47d24f37d302343ca88bfd6d964169237b9edc76448b86f8c1373571f855b37ce6e5b5a8dc78e80607a1d8af6ec88ffad48ad35c2b210f8af3d66ab4737c9ef241c3eb862d318a3bbd2885a03d93829db3648516cebfc3ed5b639205fc183faec4b52482d214671366dac049bee5ff46d5e03d4ed740252ffdbdfde01b6d81912584aa7b", 0xa3}], 0x2, &(0x7f0000000240)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x18}, 0x10) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r10}, [@MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x1, 0x0, 0x8, {@in6_addr=@empty, 0x8edd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x64, 0x10, 0x439, 0x70bd2a, 0x25dfdbf8, {0x0, 0x0, 0x0, r4, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_TTL={0x5, 0x8, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_OKEY={0x8, 0x5, 0x7}, @IFLA_GRE_OKEY={0x8, 0x5, 0x40}]}}}]}, 0x64}}, 0x0) sendto$packet(r0, &(0x7f0000000180)="05d936277c6f5422007f9f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c7168c7eb53bcc69", 0x2a, 0x408a1, &(0x7f0000000040)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @local}, 0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffffffc, 0x3}}]}]}]}, 0x48}}, 0x0) 3.578344116s ago: executing program 0 (id=3911): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@delchain={0x1c4, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0xd6, 0x750}}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x170, 0x2, [@TCA_BASIC_EMATCHES={0xb4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x88, 0x2, 0x0, 0x1, [@TCF_EM_META={0x84, 0x3ffc, 0x0, 0x0, {{0xf, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="66c51b842c20987e58"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_VAR="0b19a8b7731ef531", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="18", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="30f0af", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="0e"]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="83f3c8fe746a", @TCF_META_TYPE_VAR="79ba4a", @TCF_META_TYPE_VAR="116e55", @TCF_META_TYPE_VAR="b2", @TCF_META_TYPE_VAR="e5f5e663"]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0xf}, {{0x4, 0x0, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_BASIC_ACT={0xb8, 0x3, [@m_connmark={0xb4, 0x5, 0x0, 0x0, {{0xd}, {0x4}, {0x81, 0x6, "6f3e464680b8dcb925d3c8416db18e2e0eecd7ba0f6003aaa71a565f40fa822f6bd63a4ca0ba27c7d18cbbdfbdb568fa69b75a5bdb35bbe794d9fbd87c7c443d003af1f22d796733e174a55728b309ff94c380276aa4c273687acbac759cf82dcb64f9e61b78c605fb9edbb86dd5ae3f174ba8489176ed907a788dd2e8"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0xd1383000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0xfffff000) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.273660074s ago: executing program 0 (id=3915): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MAP={0x24, 0xe, {0x4, 0x1f, 0x4, 0x3, 0x4, 0xfd}}]}, 0x44}}, 0x40804) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a3200000000080041007278650014003300767863616e31000000000000000000004e6ddae7497907b849a920d9711f2ad7dfaaea31e653970e6b2da6b07bf5000546ab1795771a12060657c14a7438189d0ba8e03e5752a4653f30286dc97a7f9fe8ae0e3c536bf77b96286a618a3b0070cdd5ab110a76ed3c04a8d207e9be0e99cca0cf1a4a6f0a77a365b7844c2b9f2bcfda2c74f8a8965dd96643fb0a14"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) 3.011397685s ago: executing program 1 (id=3918): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r6 = syz_open_procfs$namespace(r3, &(0x7f0000001780)='ns/ipc\x00') (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x64}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) (async, rerun: 32) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) ioctl$PPPIOCGMRU(r9, 0x80047453, &(0x7f0000000100)) (async) r10 = getpid() sendmmsg$unix(r2, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, r5}}}, @cred={{0x1c, 0x1, 0x2, {r10, r4}}}, @rights={{0x18, 0x1, 0x1, [r6, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f0000000580)=0xc) sendmsg$netlink(r0, &(0x7f00000007c0)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)=[{&(0x7f0000000080)={0x10, 0x21, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x10}, {&(0x7f0000000800)={0x290, 0x15, 0x10, 0x70bd27, 0x25dfdbfc, "", [@generic="12b85c4303028b14b2bdf05015957ac0a1343a841324f947f19022ea6383c10c95f53ad9e5ee6d37f0c02ce81ffd0567f069414725a8b0a00dd914b203e98be038ba451a714c1faf6ef602fbd6b61a8901b9cfbd6aa4cc6c6780dbbaf8fc02d11643628fca64318e1bc49df14a60b02ec326144527e5f0ee9d5fc11a86e425b4711b36052a29a7c8541b1e15edbb1a5111b2879d8f01fa7f7ece9becde682a7a04a9c813b21999a2edd0694b7e8f97d94399dacfdbdbfcbfe3a2cfe4e9ce3249c945f82fd67f588f8185a961201b2946333d749fcd84cd96a19b", @generic="026b5b5feffc27db2a9315138a4946265ba526c82bf6d7fb0de76c0b5a67e46b53eeb991bfe831f279f090c30d0347567b539e03908ab04f6a4c2efbd55e49cd1a0ae4e473843219d00eb53009fbd458bd8439c38495c82a446234df0ba6c5797301ad09abca0c5fce36857e16a66c9ba79295edded0", @generic="5a9d2f08caa45c5e287590fdd7b300606a81ab23f0d5e6d284ffb5ab7e3c459d093aa26c2fe5b5d76fc4c2e64640b118add986edc4a7e19977f7bf5efed0d985d6a2cf80436a4e3dfb7cb1c088796ed99ff088726c40f8069ad0b5726daaa68eb33953f089e0d8c8ea0b9576e881c6e493bdc9a9a081fe782f5d354d661598c52f746f7c42ae7a6c35943c3b344ce490ccfbb5f60e63a9ae433cab3640fd9d627523c44b2128b1db7f84afe57148b36b79545b73d59536e3f6c9837838ba4f59b110f5c69e9f614df72182de1c21af9578530b844f4ee592359d0165", @typed={0x8, 0x2, 0x0, 0x0, @ipv4=@private=0xa010101}, @typed={0x7, 0x9b, 0x0, 0x0, @str='lo\x00'}, @typed={0x8, 0x81, 0x0, 0x0, @fd=r0}, @nested={0x3c, 0xd1, 0x0, 0x1, [@nested={0x4, 0x64}, @nested={0x4, 0x153}, @typed={0xc, 0xaa, 0x0, 0x0, @u64=0x6}, @typed={0x14, 0x9b, 0x0, 0x0, @ipv6=@private2}, @typed={0x8, 0xf6, 0x0, 0x0, @uid=r1}, @nested={0x4, 0x21}, @nested={0x4, 0x6d}]}]}, 0x290}, {&(0x7f0000002580)={0x133c, 0x3f, 0x800, 0x100000, 0x25dfdbfe, "", [@nested={0x8, 0x62, 0x0, 0x1, [@nested={0x4, 0x8e}]}, @typed={0x8, 0x80, 0x0, 0x0, @pid=r3}, @generic="682a78f0e3ce68d5c09d72b908e46f420f058bc3a02156d6ae6bdd30cb28ecd425fbcb8a60ffcf752c6ffe2c48cbf3b22b8b3a3ab0e250792ec77240043ebae7aae5802d0e5e73024fd1f57e12d767f633b1b2f329a462af179e312d7d41fc57eadf7b66ea418fd551a6083abe49f4f875e16852d7da8784c12ece17440120171ef0d1df6cab8d8b316b05", @generic="0e36191a5da144c41757c398b43575dabbe94d8204885fbe81dbaf94917c23c89bffa8f2d65c911d3580f6f270e65477031328dae15e90dc0d05294fee8cafaeab9b44109d95eef2cde4925ba11d2609b681f86099d3177d69f1d27d3acc300e86c18df19851782e3b9aec967419578c7dfc527f1d839e5d122d8034ca1f58698d828093765cc6fe4d190197adf20f13c8f0e3715819ac569b0a026b84b84a2009ce07b037e28d29275a474ceb6b542b2f763b2524565d4674f2c9c021bb998ad34c53cc85cda9eb43", @nested={0xc, 0x46, 0x0, 0x1, [@nested={0x4, 0x13}, @nested={0x4, 0x31}]}, @typed={0x8, 0x53, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x13e, 0x130, 0x0, 0x1, [@generic="6ce943039869aac8495be28817608db60ebb7b79fe9a614be36a9980d834696e27d9b7fbecb600bb39bf5d6b73a3fc1c13b5a457e4a63fd030502e0a257de0878d29bacf4873ae13dc36a5a6d387701be7a29291aee8232a0fd16792f8330c56af22d843615685589c4bdecb5c184f1969683f15e2b7de0d17b87c922b2092748e7f7d2268bbd4afca3dd70dafa681dbcc32a2", @nested={0x38, 0x67, 0x0, 0x1, [@nested={0x31, 0x19, 0x0, 0x1, [@nested={0x4, 0x6b}, @generic="9c313f61485d43851125b98e5d7799e3ffb8178bb3f57e61ab93dae7bd36148137636d16ae3f4b4e3f"]}]}, @nested={0x4, 0x10e}, @nested={0x4, 0x3e}, @nested={0x4, 0x3d}, @typed={0x8, 0xd8, 0x0, 0x0, @uid=r11}, @typed={0x7, 0xcb, 0x0, 0x0, @str='fq\x00'}, @generic="8640fb487ee3bc400bc366779655504558e312dbc8ba48ae09bb4c78b4b0a8c70174f6fe595929a2cb5d4653695f", @generic="c2d8bbc81381e0b21d2a909dcb8ec92566f16bb7afcf5969698d4d93bf3a7982b4", @nested={0x4, 0x3e}]}, @generic="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", @generic="1765c5cf466cfbc77c97f49862cba2254688d8acb0e045f6d4f234edf3e30a1ab1d49cf8c6dd9c9538513a8270e89d973046220205f8cc7848a43749ee25a3e5d40742cef449da793ba04029cfa5931b46ac89011f6c6f02eef320c5ebd2ea24472848", @generic="c2583618ded8988ca8d89858f2a25d2fb2"]}, 0x133c}, {&(0x7f00000005c0)={0x16c, 0x3f, 0x400, 0x70bd28, 0x25dfdbfd, "", [@generic="d49e7033626741295ec15f03a90802eba7d4c89d24bdfd74785d8035492fe916d9a6e5a665f67051bb5bd7702beddaf422622b65c1208c4c0fdd62fa01b4e78981495f6739c8884ced56035096d14fd18a0b60985223b17e35c264aac0f7fc08dd1be794a66df193b559af336abbb6cfec1acfc8942bdba05d3e3c213c2be43bdd3e0c00e01dfdd9fd1aabf8040990ea10a1f94b4050a7ef05e0a006f2a06a24588c8132bf48e5883f8b6c", @typed={0x8, 0x52, 0x0, 0x0, @uid=r12}, @typed={0x14, 0x15b, 0x0, 0x0, @ipv6=@loopback}, @nested={0x14, 0x23, 0x0, 0x1, [@typed={0x8, 0xfb, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0x106}, @nested={0x4, 0xd3}]}, @generic="6c7c423e23d7f9", @generic="95647849ce85f7bbed2df985aa5940fade9a25dadadc7117c3211bdacc8ca8d49b2f3daca9e98c2284453ffa7dd468a2cdc6a4ef7d624f977575527f622b5fc5fdf3df32841057a0cb383fbd7f4c75", @nested={0x4, 0x6}, @nested={0x24, 0x76, 0x0, 0x1, [@nested={0x4, 0x2f}, @nested={0x4, 0x21}, @typed={0x8, 0x15, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x11a}, @typed={0xc, 0x4d, 0x0, 0x0, @u64=0x1}]}]}, 0x16c}], 0x4, &(0x7f0000000780), 0x0, 0x40000}, 0x40004) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe, 0x3}]}}]}, 0x38}}, 0x0) 2.84305151s ago: executing program 3 (id=3919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={r3, 0x9}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0xe01, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) 2.71966798s ago: executing program 1 (id=3921): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x0, 0xb, 0xe0d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) socket$netlink(0x10, 0x3, 0x0) (async) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x0, 0xb, 0xe0d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) 2.681629825s ago: executing program 4 (id=3922): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001e000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00T'], 0x24}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x800000}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="180000001000000000000000e5f3000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014e6ff00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000680)=r3, 0x4) sendmsg$inet(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) syz_emit_ethernet(0x26, &(0x7f00000001c0)={@multicast, @local, @val={@val={0x88a8, 0x2, 0x0, 0x2}}, {@can={0xc, {{0x2, 0x1, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "1c2258c217c83b4a"}}}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6f95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r7], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 2.365525669s ago: executing program 1 (id=3924): r0 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r0, &(0x7f0000004980)={0x22, 0xe, 0x4, 0x5, 0x5}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000004b00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004ac0)={&(0x7f0000004a40)={0x58, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4051}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000046c0)=@raw={'raw\x00', 0x9, 0x3, 0x250, 0x128, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000004680), {[{{@ip={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1d}, 0xff, 0xffffff00, 'xfrm0\x00', 'lo\x00', {}, {}, 0x6c, 0x3, 0x50}, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x8, 0x2, 0x5, '\x00', 'syz1\x00', {0x6}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xff000000, 'veth0_to_bond\x00', 'xfrm0\x00', {}, {}, 0x33, 0x2}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) r6 = socket(0x10, 0x3, 0x4) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r7, &(0x7f0000004480)=[{{&(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000480)=""/32, 0x20}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/157, 0x9d}, {&(0x7f00000005c0)=""/129, 0x81}], 0x5, &(0x7f0000000e80)=""/100, 0x64}, 0x4}, {{&(0x7f00000007c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000840)=""/221, 0xdd}], 0x1, &(0x7f0000000980)=""/82, 0x52}, 0x9}, {{&(0x7f0000000c00)=@caif=@dbg, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000a00)=""/29, 0x1d}, {&(0x7f0000000b40)=""/16, 0x10}, {&(0x7f0000000c80)=""/152, 0x98}, {&(0x7f0000000d40)=""/141, 0x8d}, {&(0x7f0000000e00)=""/107, 0x6b}, {&(0x7f00000049c0)=""/127, 0x7f}], 0x6, &(0x7f0000000f80)=""/80, 0x50}, 0x6}, {{&(0x7f0000001000)=@ax25={{0x3, @netrom}, [@remote, @remote, @default, @remote, @default, @null, @default, @default]}, 0x80, &(0x7f0000001140)=[{&(0x7f0000001080)=""/112, 0x70}, {&(0x7f0000001100)=""/33, 0x21}], 0x2, &(0x7f0000001180)=""/73, 0x49}}, {{&(0x7f0000001200)=@nfc, 0x80, &(0x7f0000001740)=[{&(0x7f0000001280)=""/181, 0xb5}, {&(0x7f0000001340)=""/227, 0xe3}, {&(0x7f0000001440)=""/35, 0x23}, {&(0x7f0000001480)=""/201, 0xc9}, {&(0x7f0000001580)=""/83, 0x53}, {&(0x7f0000001600)=""/95, 0x5f}, {&(0x7f0000001680)=""/64, 0x40}, {&(0x7f00000016c0)=""/74, 0x4a}], 0x8, &(0x7f00000017c0)=""/249, 0xf9}, 0x3}, {{&(0x7f00000018c0)=@x25, 0x80, &(0x7f0000002c80)=[{&(0x7f0000001940)=""/140, 0x8c}, {&(0x7f0000001a00)=""/168, 0xa8}, {&(0x7f0000001ac0)=""/210, 0xd2}, {&(0x7f0000001bc0)=""/25, 0x19}, {&(0x7f0000001c00)=""/31, 0x1f}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/24, 0x18}], 0x7, &(0x7f0000002d00)=""/235, 0xeb}, 0x5}, {{&(0x7f0000002e00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000004300)=[{&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000003e80)=""/254, 0xfe}, {&(0x7f0000003f80)=""/184, 0xb8}, {&(0x7f0000004040)=""/62, 0x3e}, {&(0x7f0000004080)=""/138, 0x8a}, {&(0x7f0000004140)=""/203, 0xcb}, {&(0x7f0000004240)=""/184, 0xb8}], 0x7, &(0x7f0000004380)=""/206, 0xce}, 0x5}], 0x7, 0x0, &(0x7f0000004640)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r8) r10 = socket(0x2, 0x80805, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) getsockopt$bt_hci(r10, 0x84, 0x75, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r8, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040001}, 0x40000) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x2}, {0xb}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x101, 0x2a}}}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r4, 0x22, 0x0, 0xff, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0]}, 0x40) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r12, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) 2.364980951s ago: executing program 4 (id=3925): r0 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000140)) (async) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x1) (async) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, 0x0, 0x2d, 0x0, @val=@iter={&(0x7f0000000280)=@cgroup={0x2, 0xffffffffffffffff, 0xe}, 0x10}}, 0x20) (async) ioctl$XFS_IOC_BULKSTAT(r4, 0x8040587f, &(0x7f0000000780)={{0x3, 0x1, 0x7b28a380, 0x2, 0xfffffffe}, &(0x7f0000000900)}) (async, rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x8000}) (async, rerun: 64) r11 = socket$kcm(0x11, 0x3, 0x0) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) sendmsg$nl_route_sched(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r14, {0x0, 0x8}, {0xffff, 0xb}, {0xe, 0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2400c061}, 0x4890) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async, rerun: 32) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000380)=@ll={0x11, 0x6, r14, 0x1, 0x8, 0x6, @local}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) 1.925589204s ago: executing program 4 (id=3927): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x3, 0x8, 0x0, 0xfa9a, 0x5, 0x3, 0x1, 0xffffe7cf}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/71, 0x10000, 0x1000, 0x89}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f00000001c0)=0x4000, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r10, &(0x7f0000000180), 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r10}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r11, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x30, r12, 0x1, 0x70bd2a, 0x40000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x1}}}}, 0x30}}, 0x4) socket(0xa, 0x5, 0x0) 1.825496206s ago: executing program 3 (id=3928): r0 = socket$netlink(0x10, 0x3, 0x4) (async) r1 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x8e, &(0x7f0000000240)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x58, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "31c909", 0x0, 0x2b, 0x0, @empty, @remote, [@srh={0x6c, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote]}]}}}}}}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @remote}, 0x10) (async) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b705000000000000611083000000000007000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x1, 0x80, 0x2a, 0x7}, {0x0, 0x9, 0x4, 0x101}, {0x3, 0x7, 0x80, 0x3}, {0x9, 0x4, 0x4, 0x10024ff0}]}, 0x10) 1.550411382s ago: executing program 2 (id=3929): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a0001000000000000000000022000000000b8"], 0x2c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000340)={r0, &(0x7f0000000100)='\x00', 0x101000, &(0x7f00000001c0)={@_ha_fsid={[0x3, 0x800]}, {0x6, 0x8, 0x0, 0x80000000}}, 0x8, &(0x7f0000000200), &(0x7f00000002c0)}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x80) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r7, r6, 0x7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r8, &(0x7f0000000600), &(0x7f0000000700)=""/127}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, 0xffffffffffffffff}, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x7, 0x6, 0x9, 0x80, 0x1084, 0x1, 0x3251e1d3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x9, 0x1f, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x32400000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd189}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x4, 0x5, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000006c0)=[r7, r8, r9, 0xffffffffffffffff, r10], &(0x7f0000000700)=[{0x0, 0x2, 0xa, 0xa}, {0x0, 0x3, 0xf, 0xb}, {0x1, 0x5, 0x9, 0xb}, {0x4, 0x5, 0xc, 0x8}, {0x5, 0x9, 0x3, 0xb}, {0x0, 0x1, 0x3, 0x7}, {0x4, 0x2, 0xa, 0x4}, {0x2, 0x5, 0x6, 0x4}], 0x10, 0x6}, 0x94) sendto$inet6(r2, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x7, &(0x7f00000000c0)="fa", 0x1) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r11, 0xc0389423, &(0x7f00000008c0)={0xffffffffffff7878, 0x30, [0xb, 0x1, 0x7, 0x40], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_route_sched(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0xd, 0x4}, {0xfff1, 0xfff2}, {0xffe0}}}, 0x24}}, 0x40000) 1.482658788s ago: executing program 3 (id=3930): socket$netlink(0x10, 0x3, 0x27) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 1.381636428s ago: executing program 1 (id=3931): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004800}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xb, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000040000000000000000008018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09009f00000000006dba952146a42ed4950000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x101, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4d0}, 0x94) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4004000) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='gretap0\x00'}) 1.214199476s ago: executing program 3 (id=3932): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 1.1586863s ago: executing program 2 (id=3933): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8040) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000440), &(0x7f0000000080)=@tcp, 0x3}, 0x20) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0d00000004000000040000000300000000000000", @ANYRES32=r3, @ANYBLOB="000000000000000000000000190000005000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x38) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdc80, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) (async) r5 = socket$netlink(0x10, 0x3, 0x14) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f000000b340)='ns/net\x00') r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f000000b400)={0x0, 0x0, &(0x7f000000b3c0)={&(0x7f0000000000)={0x38, 0x1402, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r7}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.158321636s ago: executing program 1 (id=3934): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYBLOB="240000003f0007010300000000000000027c0000100003800c0008"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x0, 0x4, 0x39, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x1, 0x7, 0x8}}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @private=0xa010102}, 0x10) 1.059753311s ago: executing program 3 (id=3935): pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000340)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d0012"], 0x184}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f0000006480)={0x40, 0x0, 0x7, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFACCT_FILTER={0x4}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x24040004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x3f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r6}) sendmmsg$inet(r4, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)="955232d6c924037daed352087a08237337131faef13945bfaaa58d01e5f858e96271cde18577054eb145e62abd8150646072c75137606c9eca87c894182ee54fa975990ac5f7b8f2ced1bc37588f08efcfba84054e1bf5de3ae4fe95d64222f92b12be73478c249144accca8d10df2f204b2905167cb97972c40265e6b4af404adc8f6cf85253346cfeb6eb585e3f0692ab9d35d7850e3d62a948b5c9b", 0x9d}, {&(0x7f00000001c0)="96607e121729ff5ba084661b14fc7202e7b510092e7dbe48014c2be7983a4e4e11a8906105f36f652d7135bda20b8a9abb9b959973ca1f755aa9e545c8fb8876d07fa49e24824ff971", 0x49}, {&(0x7f0000000500)="648a6282c6e91b973836904a4a88affa0c371dd1b9c133c5e594714579d6bb3addfd43e78272aef64427ce5467d6994320cf139092452c7944ddab49e459f7e0c73f890e9e2463bd3390e20b1e472bd2aedb47094547a767a098a94a402e6aba65c0ef07eaa87f8663c763d9bb491243eb129eec434e5603956c8333a6ecdf4d3a601b9c8d3d63e3a4a57b38033e2b004f6c3e45f1645c3b7ca0d5ba5eea059b5aa4f0f80ac66904076cc60e47e1afc7d81ad937dee5efc0580e38d96cf0f53808f37d5a8811b07165e8b9aabceac06e4fa7f7668b8832877783a727a1fa8b972bfaeb232cf3e9b500965820f4adf64f1e5eddd65f5734fb43644347e98af7eb6abe95dcb6ed1acc22c8abdd5ea116242d5b7b2ecff3d9c635bce6a377112b4adbd75b71fcc8a6e3693c82ed7fd11ad63683cc89f0a35b", 0x137}, {&(0x7f00000007c0)="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", 0xde5}], 0x4}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000640)="fb", 0x1}], 0x1}}], 0x2, 0x4044805) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r7, 0x8921, &(0x7f0000000000)={'ipvlan1\x00'}) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000180)={'team0\x00', 0x44}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000280)={r8, r8, 0xc, 0x1, &(0x7f0000000340)='\x00', 0xb, 0x1, 0x15c2, 0xc6e, 0x9, 0x1, 0x1, 'syz1\x00'}) r10 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r10, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r11, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) splice(r0, 0x0, r4, 0x0, 0x8000000000025a5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x1, 0x71, 0x10, 0x23}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 912.939376ms ago: executing program 2 (id=3936): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @echo_request={0x2}}}}}}, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="050003"], 0x28}}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r5, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20024084) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x40}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r6}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 825.529547ms ago: executing program 1 (id=3937): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000791048000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = getpid() r3 = getpid() r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, 0x0, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='bbr', 0x53) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f0000000380)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r13 = syz_open_procfs$namespace(r10, &(0x7f0000001780)='ns/ipc\x00') r14 = getpid() sendmmsg$unix(r9, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r10, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r10, 0x0, r12}}}, @cred={{0x1c, 0x1, 0x2, {r14, r11}}}, @rights={{0x18, 0x1, 0x1, [r13, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x34, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8124}}, @jmp={0x5, 0x1, 0xa, 0x4, 0xb, 0x4, 0xfffffffffffffffc}, @ldst={0x3, 0x2, 0x0, 0x3, 0xb, 0xfffffffffffffff4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xc}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000600)=[0xffffffffffffffff], &(0x7f0000000640)=[{0x1, 0x2, 0xa}, {0x4, 0x3, 0x6, 0xc}, {0x1, 0x2, 0xb, 0x5}, {0x1, 0x5, 0xe, 0x3}, {0x0, 0x4, 0xa}, {0x3, 0x2, 0x8, 0x3}], 0x10, 0x7}, 0x94) r16 = socket$can_raw(0x1d, 0x3, 0x1) r17 = socket$inet6_udp(0xa, 0x2, 0x0) r18 = socket$alg(0x26, 0x5, 0x0) bind$alg(r18, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r18, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r19 = accept4$alg(r18, 0x0, 0x0, 0x0) sendmmsg$alg(r19, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r19, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x102, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000004000)=@deltfilter={0x29b0, 0x2d, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x3, 0x2}, {0x1, 0xc}, {0xb}}, [@f_tcindex={{0xc}, {0x1c2c, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x3}, @TCA_TCINDEX_ACT={0x1c00, 0x7, [@m_connmark={0xf0, 0x4, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffff399, 0x9, 0x4, 0x66c000, 0xa}, 0xfffc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x7, 0x1, 0x6, 0xe}, 0x401}}]}, {0x85, 0x6, "203f8b1bcf4d6b31ac77d16f678fe5c7bd786b7c4ebeb2f5f88da52d4574cd829dd77a1db86aab10f29af7347d1c167b6262a991d57d22c4f6a5838f9cc60392178164ff87766b4e146b7a7ea7cfde4c4144ba08a71a52531fce5ee92f11aa8ee9fe87ba77eb7ab8eea06264eb45767e1797f756a81608eb4e06ff0f62a0c6f82a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x11c, 0x13, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x10}, @TCA_MPLS_TTL={0x5, 0x7, 0x8}]}, {0xe0, 0x6, "95dd3e98d5c36ba62382c9f5525a9dae19a2f90b30368dd3351a4bdacbb8ec130906e89ee200b282dfbabb47563bd6396d7abf07643f986d9a0984269b3cb7d925fd7199d0c2a14fd9f516660ac66e0160e304812d5d2f0568c8578e93de6cf45f5598ef8bcb0db100657caf26449d322cbbec8482f914c564e88a54bc801beeca080ee71b03d85d6e7e5f8b7cd80ad0b4c2ef3c252f86d0645bfdce3c29294140f6ab8aca6fc4a1e222b554382e13d287cb3ccecc08c0d316eb44dbf5b9c702081f51333e5a8adcc980563028954d77ed634755495923a620e4fc61"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_pedit={0x151c, 0x15, 0x0, 0x0, {{0xa}, {0x1424, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xb0, 0x5, 0x0, 0x1, [{0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x154, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x80, 0x6, 0xffffffffffffffff, 0x8000}, 0xa, 0x9, [{0x2, 0x9, 0x7, 0xfa04, 0x10001, 0xffff97d0}, {0xff, 0xf999, 0x1, 0x80, 0x0, 0x4}]}, [{0x6, 0x0, 0x80a9, 0xb44, 0x800, 0x7}, {0xf3a8, 0x5, 0x2, 0x571, 0xfffffffb, 0x2}, {0x7, 0x6, 0x80, 0x3, 0xd6, 0x2030}, {0x7, 0xfffffff9, 0x40, 0x100, 0x5, 0x2}, {0x7ff, 0xa2, 0x2, 0x1, 0xebd, 0x2}, {0x2, 0x5, 0x2, 0xb, 0xb5, 0x8}, {0xfffffffc, 0x0, 0x8, 0x447c, 0x40}, {0xc186, 0x80, 0x80000000, 0xa, 0x8, 0x80000000}, {0xee, 0x4, 0x3, 0x0, 0x3, 0x4}, {0x81, 0x9, 0x3b7, 0xe3a8, 0x9, 0x7}, {0x331c, 0x6, 0x6, 0x9, 0x0, 0xc}, {0x5, 0x7ff, 0x3ff, 0x7054, 0x936, 0x6}, {0x4, 0x9507d51, 0x1, 0x4, 0x9, 0x1}, {0x8, 0x6, 0x6, 0x5, 0x1}, {0x6e77, 0x7f, 0x6, 0x2, 0x3, 0xe}, {0x9, 0x40, 0x0, 0x2, 0xfff, 0x1}, {0x9b9, 0x6, 0x40, 0x6, 0x200, 0x5}, {0xff, 0x56c9, 0x1ff, 0x3, 0x6, 0x9}, {0xfff, 0x400, 0x8, 0x6, 0x7ff, 0x2}, {0x5, 0x8f, 0x7, 0x800, 0x1, 0xd842}, {0x200, 0xf, 0xffffffff, 0x9, 0x8, 0x5}, {0x100, 0x80000001, 0x4, 0x0, 0x10000, 0x2}, {0xffffffff, 0x7, 0x29f, 0x9, 0xfa9, 0x6d}, {0x5, 0xfffffc8d, 0x6, 0x2, 0x7, 0xc}, {0x1, 0xbda0, 0x8, 0x5, 0x7, 0x6}, {0x3, 0xf3, 0xca35, 0x8, 0x0, 0x3}, {0x0, 0x9, 0x81, 0x2, 0xfffffff5, 0x7}, {0x2, 0x7ff, 0x4, 0x4, 0x5, 0x9}, {0x0, 0x4, 0x2673, 0x10, 0x101, 0x4db}, {0x8, 0xd, 0xa, 0x80000001, 0xd62, 0x5}, {0x5, 0x400000, 0x7f, 0x2, 0x5, 0x80}, {0xb, 0x9, 0xa, 0xf, 0x82, 0x429}, {0x80, 0x5, 0x3, 0x3584, 0x6, 0xd67d}, {0x55, 0x9, 0x2d499909, 0x1, 0xa8, 0x7ff}, {0x6, 0x2, 0x80000001, 0x8, 0x8, 0xfffffff3}, {0x9, 0x5, 0xfffffffb, 0xfffffffa, 0x100, 0x9}, {0x1, 0xe, 0xb, 0xfffffff9, 0x2, 0xe}, {0x8, 0xf8a, 0x3, 0x8, 0x3, 0xff}, {0x0, 0x3, 0x6, 0xa3, 0x3, 0xffff79d4}, {0x6, 0x5, 0xff, 0x8, 0xf6c, 0x10000000}, {0x3, 0x4, 0x2, 0x80000001, 0xdfe, 0x5}, {0x7, 0x68, 0x2, 0x3a9, 0xc5d0, 0x8}, {0xbc, 0x7, 0x2, 0x2, 0x2, 0x3a}, {0x8, 0x8, 0x9, 0x2, 0x3, 0xd}, {0x2, 0xb, 0xd, 0xe54, 0xe4d, 0x7}, {0x6, 0x3ff, 0x9, 0x9, 0x3, 0x8}, {0x7, 0x3, 0x4, 0x7, 0x0, 0x4}, {0x7fff, 0x6, 0x9f, 0x4, 0xc95, 0x8}, {0x0, 0xffffffff, 0x2, 0x5, 0x1ce, 0x9}, {0x4, 0x4, 0x7fffffff, 0x2, 0x3, 0xffffffff}, {0x0, 0x2, 0xb92, 0x55ca, 0x9, 0x2}, {0x9, 0x7, 0x4, 0x2329, 0x1, 0x1}, {0x2, 0x100, 0x4, 0x8, 0x8, 0x7}, {0x21e4, 0x1, 0x5, 0x8, 0x3, 0xc}, {0x3, 0x22a48000, 0x81af, 0x9, 0x8000}, {0x7, 0x80000001, 0x5ce0, 0x3, 0xc485, 0x81}, {0x7, 0x8, 0x1, 0x200, 0x1, 0x9}, {0x80000000, 0x8, 0xd, 0x4, 0xe26}, {0x0, 0xfffffffa, 0xfffffffa, 0xd5, 0x80, 0x5}, {0x8, 0xb7c, 0x7, 0x2c66, 0x6, 0x35}, {0x7, 0x400, 0x7fffffff, 0x1, 0x1, 0x1}, {0xffffffff, 0x2c4c, 0x6, 0x1000, 0xd, 0x8}, {0x2, 0x2, 0x6, 0x10, 0x4, 0x10000}, {0x7, 0x2, 0x0, 0x28000, 0x4, 0x2}, {0x5, 0x80, 0xffffffff, 0x80000000, 0x2, 0x2}, {0x72e, 0x10, 0x8, 0x6, 0xfffe0000, 0x4}, {0x5, 0x13a3, 0xd026, 0xfffffffa, 0x1, 0x3}, {0x4, 0x7f, 0xe6a, 0x7, 0x7, 0x3}, {0x80000001, 0x0, 0x1, 0x5, 0xfffffff4, 0xfffffff7}, {0x5, 0x3, 0xfffffffe, 0x9, 0x9, 0x10000}, {0x8, 0x592, 0x9, 0x3, 0xff, 0x68}, {0x3ef8, 0x6, 0x7f, 0xffffffff, 0x2}, {0x6, 0x40, 0x1e75, 0x200, 0x8, 0x4}, {0x1, 0x9, 0x8f, 0x10, 0x9, 0xb}, {0xc14, 0x9, 0x6, 0x6, 0x5, 0x280000}, {0x37f91b89, 0x5, 0x8, 0x3, 0x8, 0x4}, {0x8, 0x2, 0xfba, 0x8, 0x80, 0x9}, {0x8001, 0x80000000, 0x7, 0x2, 0x28, 0x1}, {0x8000, 0x8, 0x81, 0x56bd, 0x80000000, 0x8}, {0x8, 0x7ff, 0xffffffff, 0xfffffff9, 0x401, 0x2}, {0x8, 0x7, 0x8, 0x2, 0x6, 0xbbc}, {0x3, 0x9, 0xa, 0x7, 0x0, 0x3}, {0x4, 0x8, 0xfdd, 0x2, 0x4a, 0xe}, {0x5, 0x6a92162a, 0xda8c, 0x3, 0x1, 0xfff}, {0x4, 0x3, 0xb, 0x81, 0x80, 0x10000}, {0x0, 0x9, 0x9, 0xd, 0x81, 0x4}, {0xbe54, 0x1, 0x63, 0x6, 0x5e000000, 0x80000000}, {0x5, 0x7f, 0xffffffff, 0xe80f, 0x6, 0x5e23}, {0x8, 0x1df1, 0x3, 0x6, 0x8, 0x8b47}, {0x3, 0x2, 0x3, 0x9, 0x2, 0x9}, {0x9, 0x7, 0x3, 0x2, 0x7, 0x6}, {0x1ff, 0x3, 0x101, 0x57695607, 0x9, 0x6}, {0x7ff, 0x54, 0x10000, 0x1, 0xb, 0x400}, {0x0, 0x1, 0x4, 0x9, 0xf, 0xfffffff4}, {0x6, 0x7, 0x6, 0x5, 0x9, 0x2}, {0x80000000, 0xc074, 0x9, 0xba4, 0x3}, {0x3, 0x80, 0x7, 0x0, 0x9, 0x4e7}, {0x5, 0x29, 0x24da, 0x1000, 0xcb, 0x5}, {0x5, 0x7, 0x8, 0x3, 0xffffc000, 0x3}, {0x7, 0x6, 0xffff5344, 0x8, 0xfffff7bb, 0x52}, {0x1, 0x4, 0x3c1, 0x6, 0x5, 0x74}, {0xffffff43, 0x0, 0x5, 0x0, 0xd, 0x10}, {0x2, 0x40, 0xc5, 0x7, 0x5, 0xe241}, {0x101, 0x2, 0x7, 0x401, 0xe, 0xd}, {0x6, 0x7, 0xfffff04d, 0x40, 0x5, 0x6}, {0x400, 0x1, 0x4, 0xa, 0x5, 0x5}, {0x8, 0x1, 0x5, 0x7fffffff, 0x7, 0x6}, {0x2, 0x6, 0x8, 0xfffffd6a, 0x2, 0x1}, {0x3, 0x136, 0xfffffff9, 0x2, 0x8, 0x293d}, {0x43, 0x9, 0x80000000, 0x2, 0x2, 0xd2d}, {0x3, 0x2, 0x1ff, 0x5, 0x3, 0x3}, {0x3, 0x6, 0x9, 0x9, 0x8001, 0x3be4}, {0x20b, 0xfffffff7, 0x6, 0x2, 0x5, 0x7}, {0x3, 0x1, 0x1, 0x4, 0xffffff01}, {0x80000000, 0x6, 0x6, 0x611, 0x9, 0x8}, {0x7, 0xaa, 0xfff, 0x8000, 0x2, 0x4}, {0x8, 0xf59, 0x8, 0xf8, 0x1, 0x7}, {0xff, 0xd, 0x150e, 0x8, 0x3, 0x4}, {0x401, 0x4, 0x4, 0xfff, 0x88}, {0x5, 0x7, 0x3, 0xfff, 0x4, 0x5}, {0x2, 0x7ff, 0xcfd, 0x9, 0x7, 0x3}, {0x0, 0x0, 0x7, 0x7ff, 0x7, 0x4}, {0x413a, 0x8, 0xa68, 0x1000, 0x10001, 0x7fffffff}, {0x101, 0xfffffffc, 0x6, 0x401, 0xffffff64, 0x3ff}, {0x7fff, 0x5, 0xf, 0x7, 0x7}, {0x5, 0x4, 0xe6, 0x9, 0x81, 0x80}, {0x2, 0x4, 0x6, 0x9a39, 0x7, 0x2}, {0x8, 0x4, 0x6, 0xffff, 0x8c6, 0x3}], [{0x5}, {0x1}, {0x2}, {0x5}, {0x3}, {0x0, 0xf2fd1ddffb8a59a8}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x3}, {0x3}, {0x1, 0x1}, {0x4}, {0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x6, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x3}, {}, {0x2}, {0x5}, {0x3}, {0x5}, {0x1}, {0x2}, {0x4}, {0x4}, {0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1, 0xfd4b18d1aa4e868d}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x118, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}]}, {0x4}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x11c, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}, @TCA_PEDIT_KEYS_EX={0x34, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0x114, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x47970664d25c4c0f}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}, @TCA_PEDIT_KEYS_EX={0x50, 0x5, 0x0, 0x1, [{0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0xcd, 0x6, "eb52841292d41ecb24026655cde75c0f931143d35d6c1d52f0851c76434eb637bb61d5d74a74d59e743095e4cb23af3c13b58cb9b11364ca38b3ed147767ad8b97afd02d1db4de53a467db4697c0ac762ef8d1670d3cff480bdd44ce76b0e0ac7ade6d69c348487365c1795a74e0805f6887aa0bef461482a3c9c7824e33359b294809321a2dd49f0b79006f4885761efcd2b1f282eea934fc30f5de0001e28f538924a056a50b8b7c9a35faf5d594e08947af331a6f2a601326cdba20ea823fe5915b06da23713a09"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x1ac, 0x20, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '$\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8b, 0x4, 0x0, 0x4, 0x9}}, @TCA_DEF_DATA={0x9, 0x3, '-%\\.\x00'}, @TCA_DEF_DATA={0x6, 0x3, ',\x00'}, @TCA_DEF_DATA={0xe, 0x3, 'netdevsim\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x5, 0x8, 0x6, 0x6}}, @TCA_DEF_DATA={0xd, 0x3, 's^^}/^-$\x00'}, @TCA_DEF_DATA={0x6, 0x3, '!\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'ns/ipc\x00'}]}, {0xff, 0x6, "4ebef2361ca536784dd70defda1e9b0aa281eac2a8efa9528a104a4c896a6c741fd5be1b2ae63588695fe1fc24ce466b14b1624142de4e8668b45ba0265f5cbce43930d8ea15078e98c9cdb36ed3aa4081e9c35c2034d1ffa465d6610c12b2e57ec319037ae80b0103308203f72be31486699557d1bc6d5d44835ea36c937fda9b78b821526ef34bc167693210a4efb63748555feec75ae85072839fd2d14eefd911aacc1078170c1bbccb9a02ab01eb426e2244d14b560426cf282d289dbcbf62ed40767b4d38478bee04b622f713db8bd09325512d42ae62a41dd4014d643800dfeb276d668d9dd3fe33eb2cf55b9d59f15f49f68cba987c94a0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mirred={0xa4, 0xf, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0xee, 0x2, 0x7ff, 0x3}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf9a6, 0x6, 0x0, 0x6, 0x5}, 0x2}}]}, {0x37, 0x6, "bb3b315799111efda7161203384ee4515d47342cee2df201baec51e66608828ffa37783b06213e4f7ea64594c2f05acd8138a6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x284, 0xf, 0x0, 0x0, {{0x7}, {0x1e8, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x9c, 0x6, {0xf58f, 'nat\x00', 0x9, 0x9, "2fc82133193d3dd57cbfa4837563d1ec5c61a3f415e4f57dab847c8d76535fe2ea7a55349dd08151c8636f7a9b4471667ee72f0076de7c2ad2bb75726ab74dc9482b761adc634ee40d1a0b4b4b271dad323be602a3b5c04af2d0d1210b5728f93ff98ab59e8765d8d5e931d3aaefc89137d6"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x100}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x109, 0x6, {0x0, 'mangle\x00', 0x7, 0x1, "d8807d0555614f1384932bba7b33320453d6e83c9d667f5db712049649fd99e392f82d92e4f4ff863b4bb84f1feac2c3ff59f3831944b0c269a9285e3305e7a34190e5ac4bba882f945cf853de52045f6aefed1c424b9b86ac3607a05b6bf11fb487fd734665a41b208a582685f9f48371051adf9781f563e17ce15aaa7e0c09bb7543bc13cac83192e9e22869d87ad82ad045be2ce10710cc1a6521e1589d2a483d23f53bdabc682e587fd40c9f3cc34983bae90f22aff797ec71d2672becfc4e63069ee0ffc11a7a6cf0b141b938a8f743c0462bc0e6ea459bd145193a95"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7fff}]}, {0x78, 0x6, "91e5ceb57b371eaacfeac5f59407f15723ef25d0c77596d0e39c0a854ad0393214a54da9d5766d187a6bf01d08720c1b82cc7c32085e098435410a34d2fb886946b717850f5e3241767d10e83009c06b156bf7bb6828021fb1dd554c61f7e85d2de2cb13533d182accd43459ff9053dd113481de"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x3}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x6}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xb, 0x2}}]}}, @f_rsvp6={{0xa}, {0xc, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xe, 0x7}}]}}, @f_rsvp6={{0xa}, {0xd30, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xf09393f44da83c8a, 0xa}}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x73df, 0x7, 0x1ba77d57}, {0x7, 0x9, 0x1}, 0x15, 0x7, 0xb}}, @TCA_RSVP_DST={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_RSVP_POLICE={0xcb0, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xce4, 0x2, 0x2, 0x8, 0x8, 0x9, 0x7fffffff, 0xa258, 0x1, 0x5, 0x6, 0x9, 0x4, 0xd, 0x3a000000, 0x0, 0x9, 0xa, 0x101, 0x7, 0x9, 0x1, 0x80, 0x4, 0x3, 0x6, 0xfff, 0x5, 0xffff90c4, 0x1c, 0x9, 0x40, 0xa00000, 0x10001, 0x3, 0xb8, 0x3, 0x62d8, 0x7ff, 0xfffffffe, 0x2, 0x0, 0x4, 0x7, 0x1, 0x4, 0x4, 0x1, 0x1000, 0x8, 0x1c21, 0x4, 0xa, 0x7, 0x4, 0x401, 0x9, 0x8, 0x7, 0xe, 0x10001, 0x8001, 0xc, 0x285, 0xfff, 0x9, 0xb02, 0x5, 0x6, 0x7fff80, 0x72003a9f, 0xb835, 0x9, 0x4c, 0x6f, 0x7c32, 0xfffffff8, 0x3, 0x4, 0x2, 0x7, 0x5, 0x7, 0x25, 0x8, 0xb, 0xe, 0x2, 0xfffffc01, 0x590, 0x3, 0x4, 0x10001, 0x5, 0x4, 0x7, 0x5, 0x8, 0x7, 0x5, 0x8, 0x7, 0x7, 0x80, 0x8, 0x9, 0x5, 0xffffff7f, 0x9, 0x6, 0xc, 0x6, 0x10a, 0xd1, 0x8, 0xc8f4, 0x7, 0x2, 0xf82, 0x7, 0x26, 0x9, 0x9, 0xb1fa, 0x48, 0x7, 0x5, 0x8, 0x7, 0x7, 0x8, 0x200, 0x0, 0x3ff, 0x10000, 0x4, 0x7, 0xb835, 0x3ab, 0xf, 0xd, 0x5, 0xfffffff9, 0x80000000, 0x0, 0x3, 0x3, 0xfffeffff, 0x5, 0x4, 0x10000, 0x9db, 0x5, 0x9, 0x2, 0x7, 0xfffffffe, 0x7, 0x10000, 0xff, 0x80000000, 0x78, 0x2c7d924c, 0x3, 0x9, 0x9de, 0x2, 0x8, 0x6, 0x2, 0x7fff, 0x80000000, 0x1, 0x2, 0x7238, 0x0, 0x10000000, 0x5, 0x3b, 0x6, 0x0, 0x0, 0x3, 0x2, 0x4, 0x3ff, 0x2, 0x2, 0x7fffffff, 0x6, 0xfffffff9, 0x80000001, 0x5, 0x8, 0x4000, 0x7, 0x10001, 0x200, 0xf93, 0x7, 0xffffffff, 0x0, 0x4, 0x4, 0x8000, 0x101, 0x10, 0x2, 0x3, 0xb9f, 0x9, 0xc36, 0xf, 0x9, 0x0, 0x1, 0x5, 0x10000, 0xa9, 0x4, 0x10000, 0x10, 0x6, 0x4, 0x18, 0x8e1, 0x0, 0xfffffffa, 0x140000, 0x4, 0x0, 0xe, 0x400, 0xfffffbff, 0xd8, 0x5, 0x3, 0x56, 0x6895, 0x3, 0x80000000, 0x3, 0x0, 0x8, 0xb, 0x7ff, 0x5, 0x2, 0x10001, 0x0, 0x40, 0x0, 0x1, 0xffff2eee, 0x6, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x20000000, 0x2, 0x3, 0x8001, {0x3, 0x0, 0x6, 0x5, 0x2, 0x1}, {0x7f, 0x1, 0x3, 0x4, 0x1, 0xb}, 0xc, 0x7, 0x5}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x622, 0x0, 0x200, 0x2, 0x8000, 0x5, 0x739e, 0x6, 0x0, 0x3, 0x4, 0x0, 0x3, 0x4, 0x0, 0x544, 0x1, 0x80000000, 0x0, 0x8000000, 0x5, 0x2, 0x18000000, 0x2, 0x3ff, 0x3ff, 0x3, 0x101, 0x5, 0x2, 0x2, 0x7, 0xff, 0x7fff, 0x1, 0x5, 0x58, 0x0, 0x5, 0x2, 0xfffffffb, 0x7, 0x8, 0x6, 0x3, 0x9, 0x0, 0x9, 0x8, 0x3, 0x1, 0x10, 0x0, 0x5, 0x800, 0x1, 0x8, 0x5, 0x2857, 0x262, 0x7f, 0x7, 0xff, 0xffffffff, 0x8, 0xc, 0xfffe, 0x3dc4ad50, 0x573, 0x853, 0x6, 0x7ff, 0x4, 0x2, 0x7f, 0x3, 0x7, 0x3f, 0x3, 0x4, 0x5ea5f7e8, 0x0, 0x3, 0x3, 0x0, 0xfffffffa, 0x1, 0x7, 0x5, 0x9, 0x9, 0x1, 0xef, 0x5, 0x4, 0x7, 0x0, 0x6, 0x9, 0x9, 0x7, 0x7b60cfa8, 0x400, 0x8, 0xffffff01, 0x3ff, 0x3, 0x7fffffff, 0x7fffffff, 0xd, 0x4, 0x49b, 0x5, 0xa, 0x1000, 0x5, 0x5e227eb3, 0x9, 0x2, 0xf, 0x2b3a367, 0x35, 0xf1, 0xfffffff7, 0xb, 0x10001, 0x3c5b, 0xffdf, 0x5f, 0x9, 0x5, 0x3, 0x6, 0xb, 0x2, 0x2, 0x2, 0x7c8, 0x9, 0x1, 0x0, 0x0, 0x4, 0x3, 0x84, 0x4, 0x2, 0xe42, 0x2, 0x81, 0x2a54, 0x6, 0x101, 0x9d, 0x0, 0xff, 0x8, 0x8, 0x4418, 0xffffffff, 0x2, 0x8, 0xffffff91, 0x7, 0x39d2f020, 0x2, 0x3, 0x5, 0x3, 0x6, 0xffffff6c, 0x8, 0x6, 0x4, 0x585634ff, 0x3, 0x10, 0xe05, 0x5, 0x7fff, 0xfffffffb, 0x10001, 0x0, 0x96f, 0x10000, 0x5ead91d0, 0xfffffff5, 0xd, 0x236, 0xffff0000, 0x9, 0xfb, 0xcc, 0xb1, 0x8, 0x6, 0x100, 0x1, 0xffffffff, 0x5, 0x3, 0x4, 0x2, 0x81, 0xb9, 0x0, 0x2, 0x96, 0x7, 0x4, 0x9df3, 0x6, 0x0, 0x3, 0x9, 0x8, 0x1, 0x10, 0x5, 0x1f5, 0x2, 0x7, 0x15f57232, 0x4, 0x106, 0x208, 0x4c889c4d, 0x9, 0x4, 0x6, 0x8e90, 0x8, 0x1, 0x44d, 0x2, 0x8001, 0xd1, 0x1ff, 0x7, 0x2, 0x50ca, 0x6, 0x81, 0x8, 0x5, 0x800, 0x4, 0x3ff, 0x7, 0x6, 0x7, 0x0, 0x2, 0x8001, 0xfffffffd, 0xe15]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6b47a495, 0x3eb1, 0xffff, 0x0, 0x4, 0x1, 0x1ff, 0x6, 0x9, 0x2764, 0x662, 0xa, 0x4, 0x9, 0x6, 0x10001, 0x5bf, 0xe, 0x7fffffff, 0x0, 0x5, 0x100, 0x9, 0xe7, 0x8, 0x6, 0x5, 0xd, 0xfffffff8, 0x4, 0x7, 0x4, 0x8001, 0xf4cd, 0xffff, 0x2, 0xffff, 0x4, 0x6, 0x4, 0x80000001, 0x8, 0xf, 0x7, 0x0, 0x0, 0x6, 0x1, 0x8, 0x7, 0x5, 0x3, 0x8f, 0x7fffffff, 0x3, 0x40, 0x9, 0xffe00000, 0xf0c2, 0x7, 0x29, 0x10000, 0x948, 0x8, 0x1, 0x80000000, 0x5, 0x8, 0x1, 0x156, 0xc, 0x32cdadab, 0x5, 0x32e4, 0x6, 0x5, 0x7, 0x1, 0x8000, 0xffffff7d, 0x800000, 0x8, 0xffff1495, 0x5, 0xc, 0xfffffffa, 0xffffffff, 0x8, 0x8, 0x3ff, 0x5, 0x4, 0x4, 0x3, 0x7fff, 0x7, 0x1, 0xc, 0x1, 0x1, 0x13, 0xfff, 0xb, 0x3, 0x800, 0x8, 0xe89, 0xe8, 0x6, 0x4c1, 0x1a2d1a85, 0xc, 0x3, 0x101, 0x8, 0xd, 0xe0f0, 0x1, 0x4, 0x1, 0x3, 0x8, 0x1, 0x4, 0x8, 0x5, 0x4, 0x800, 0x4, 0xa3, 0xb44e, 0x95, 0x5, 0x80, 0x7, 0x3, 0x3, 0x5, 0x8, 0x38cd, 0x7, 0x5, 0x3, 0x3ff, 0x4, 0x400, 0xc0, 0x1, 0x10001, 0x3, 0x10001, 0xb, 0x4, 0x9, 0x10000, 0x2f, 0x6, 0x80000001, 0x631, 0xfffffffb, 0x9, 0xffff, 0x40000, 0xb3, 0x3, 0x8000, 0x3, 0x6d7, 0x2, 0x0, 0x8, 0x2, 0xb, 0x0, 0xa, 0x400, 0x539, 0x7fff, 0xe, 0xe, 0x100, 0xbac, 0x0, 0x4, 0x1, 0x4, 0xffffffff, 0x6, 0x7ff, 0x6, 0x3, 0x7fff, 0x8000, 0x9, 0x1ff, 0x7, 0x7, 0x0, 0x8, 0x40, 0x6, 0x8, 0xfff, 0x43, 0x9, 0x8, 0x94, 0x10000, 0x7, 0x7fff, 0x8, 0x1000, 0x5, 0x7226, 0x7, 0x81, 0x4, 0x5, 0x4, 0x8, 0x4, 0x7, 0x4, 0x8, 0x7f64, 0x1, 0x0, 0x0, 0x2, 0xcc, 0x7fffffff, 0x4, 0x30d, 0x9, 0x5, 0xb5a, 0xeb, 0xb4f, 0xfffffffb, 0x0, 0x800, 0x485e2c58, 0x6, 0x3, 0x4, 0x4, 0x5, 0xfffff5e1, 0x6, 0x2, 0x1, 0x101, 0x714d3779, 0x3, 0x4, 0x2]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa619}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x7, 0x7f, 0x2, 0x9, {0xfc, 0x0, 0x7, 0x7, 0x0, 0xbd9d}, {0x4a, 0x0, 0x4, 0xfffe, 0x100, 0xf}, 0xac5, 0x8, 0x3}}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x3, 0x9}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xe, 0x8}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x6, 0x9}}]}}]}, 0x29b0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$netlink(r1, &(0x7f00000008c0)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)=[{&(0x7f00000000c0)={0x15c, 0x2f, 0x400, 0x70bd27, 0x25dfdbff, "", [@generic="9665b7dd06775bfd031c96248fb3be0dc88cc743d8816201e564537145582691fc6fc7aaf55432403f3c797ed372ad92276955191df2f370cb918f5ba971d6ae28a0b379e2788388bd51d36e6f3d5cd95faff4b20b35f64629aff2c9cf7f7b31aa6ff977ddd706e1e229bfa4c4b25f5ade76342cb2f783209e63792cfc1bbd7bca713b1135fe3411b76843c83c169f473328fc3ca831cd063226d1a4086142e956e5c081f6f5b2b498", @nested={0xa0, 0x89, 0x0, 0x1, [@generic="ff6dde671f545db26356d2314646f5db7eec53e006fc603b858dacc24152d3914638efa1917809f45b8102cef0a169509f3be03a94ef1abdd51db2318641ab2f78de906847b2fc9422964601653e6a3d413259058a50e544fb384cfa12bcd51ffbf5a516f07975932753babd8555137fb2fe32dcda84e28b3c55", @typed={0xc, 0xa3, 0x0, 0x0, @u64=0x5}, @generic="f9718481711cf787496a6c7ef7f48b75a664dbe1e770"]}]}, 0x15c}], 0x1, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, r8, r12}}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r15, r0, r0, r0, r0]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r0, r16, r17, r19, r0, r0, r0, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff]}}], 0x120, 0x4000}, 0x0) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, &(0x7f0000000900)) 638.072765ms ago: executing program 2 (id=3938): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="b40800000000000073116c00000000008510000002000000b7000000000000009500c2006a2000009500bc4dca72c25060cf59a47ba0c5b5f70dd6f3e4"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r1 = socket(0x17, 0x80000, 0xa) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r2, r0}) 631.842126ms ago: executing program 4 (id=3939): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x67, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8}]}, 0x3c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @nested={0x4, 0xf}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003}, 0x6d) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000040)=0x5e25, 0x4) sendmmsg$inet6(r5, &(0x7f0000001300)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x0, @mcast2, 0x1}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000640)="ab3fdf1b2fb61c729f22a4bf20600d3bc586c6f480fba43a691ad7b658d929239715cace3829876c625e39edc297218bd41f78d708dedbf01d6337612a41c9bfd98af02fadd03ff9a8a166f1eed72b21e78a350b7518da91beeaad64f1fc91fdb2af2fac5a2c8869e82b5ec2c132c608e7cbed7f50af688bd99df263e5d34717d3d8a639e1c574ee84d38eec7a7f36abd6cdbbe813705ef70c9729d661673e9a593d940577524bf46aba5246240a234b350cee85ba5c2e6d33a1688576f24814a145f2daa61e06e17551ee6c8d5bc7d97ec65e7275", 0xd5}, {&(0x7f0000001980)="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", 0x430}], 0x2}}], 0x1, 0x40800) epoll_create1(0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000340)={r2, 0x1140, 0x8, 0x496}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="080829bd7000fbdbdf253700000008000300", @ANYRES32=0x0, @ANYBLOB="08009f000300000008002600202b00000800000008005700d900000005001801390000cf4e74d22ac3fdf991ea3e1e41fc62000800a00002000000080057000e00"/79], 0x5c}, 0x1, 0x0, 0x0, 0x20000015}, 0x24004840) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x24, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0xc4000) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 281.844138ms ago: executing program 2 (id=3940): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000000)={r3, 0xffff, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000002680)={r3, 0x51, "bb3b17b17ece7eff1d3c9b6ca7b986121535703ea9820cbf28c1631fd0c18a537f961b579ae8dd57a4a1c3380db7635f9040e3de478458816104277c792f0455bef0fec3498521b0003aa5d4ede15e36a0"}, &(0x7f0000002700)=0x59) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r5) sendmsg$NFC_CMD_DEV_DOWN(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010027bd7000ffd9df250300080008000100b7"], 0x1c}, 0x1, 0x0, 0x0, 0x48810}, 0x0) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$kcm(r8, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000000c0)=""/99, 0x63}, {&(0x7f0000000140)=""/118, 0x76}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/175, 0xaf}, {0xfffffffffffffffd}, {&(0x7f0000001280)=""/202, 0xca}, {&(0x7f0000001380)=""/70, 0x46}, {&(0x7f0000001400)=""/80, 0x50}, {&(0x7f0000001480)=""/83, 0x53}, {&(0x7f0000001500)=""/100, 0x64}], 0xa, &(0x7f0000001640)=""/4096, 0x1000}, 0x2020) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r4, 0x2000) 221.662285ms ago: executing program 4 (id=3941): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000ffff3201"], 0x138) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) 170.975489ms ago: executing program 2 (id=3942): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10002) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x2, 0x0, 0x6, 0x0, 0x2}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}}, 0x40) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1c12bb52ea6c767a}, @NFTA_LOG_PREFIX={0x9, 0x2, 0x1, 0x0, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 34.008661ms ago: executing program 3 (id=3943): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x30}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4042440}, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 0s ago: executing program 4 (id=3944): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb010076e9180000e700000000380000006300000002000000040000000000000e0400000000000000000000000000000d00000000010000000000000c010000000b000000000000010000000066006b0000005dcc06f30d1ce5b1f8a67098b44946969c19101a982db97cd839eadd48"], 0x0, 0x52}, 0x28) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c00048028000180080001006e6174001c00028008000540070000090800014000000000080002"], 0xdc}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRESHEX=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) close(0x4) sendmsg$nl_route(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001000030400000000fcffffff00000000", @ANYRES32=r3, @ANYBLOB="7f34498a189ca524ff000000008000"], 0x20}}, 0x0) (async) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) connect$caif(r1, &(0x7f0000000340)=@rfm={0x25, 0x5, "5b781e9d4641714ba8914403651e37c7"}, 0x18) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x20, 0x20, 0xff, 0x3, {{0x1b, 0x4, 0x1, 0x35, 0x6c, 0x67, 0x0, 0xc, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@end, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0xce, [@private=0xa010101]}, @lsrr={0x83, 0x7, 0x96, [@local]}, @generic={0x89, 0x6, "0e26623b"}, @lsrr={0x83, 0xb, 0x6e, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x34, 0xf9, 0x1, 0x2, [{@remote, 0x8}, {@private=0xa010102, 0x8000}, {@loopback, 0x9}, {@empty, 0x7}, {@broadcast, 0x4}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x5}]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newlink={0x74, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x112}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x40, 0x2, 0x0, 0x1, [@IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @random="aa9145f79974"}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x2}, @IFLA_HSR_VERSION={0x5, 0x6, 0x6}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x8b}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x3}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x84}]}}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x7}]}, 0x74}}, 0x0) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB="a00000002100010000000000fbdbdf25fc020000000000000000000000000001fe800000000000000000000000000020000100004e2200000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="030000000000000050001100ac1414aa000000000000000000000000ac1e0101000000000000000000000000ac141428000000000000000000000000200100000000000000000000000000003c0400000000000008000a006d9e26cafcc8f5b760ce25945c1221153298e0a471c446d8866e92312b18ce"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) syz_emit_ethernet(0x6a, &(0x7f0000000280)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x73, 0x0, @remote, @dev, {[@cipso={0x86, 0x29, 0x0, [{0x0, 0x5, "66d281"}, {0x0, 0xd, "6f03057a91f875ccf5bd5d"}, {0x0, 0xf, "6253659c41d7cea461f45f9d37"}, {0x0, 0x2}]}]}}}}}}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private2}}, &(0x7f0000000440)=0xe8) sendmsg$nl_route(r7, &(0x7f0000000240)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x24040a35}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)=@ipmr_newroute={0x6c, 0x18, 0x200, 0x70bd2b, 0x25dfdbfe, {0x80, 0x10, 0x0, 0xff, 0xff, 0x2, 0x0, 0x1, 0x2c00}, [@RTA_TABLE={0x8, 0xf, 0xf6}, @RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1b}}, @RTA_DPORT={0x6, 0x1d, 0x4e20}, @RTA_UID={0x8, 0x19, r11}, @RTA_ENCAP={0x20, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x1c, 0x1, [{0x7}, {0x1000, 0x0, 0x1}, {0x400, 0x0, 0x1}, {0xf, 0x0, 0x1}, {0xffff}, {0xffbff}]}}, @RTA_NH_ID={0x8, 0x1e, 0x1ff}, @RTA_TABLE={0x8, 0xf, 0x100}]}, 0x6c}, 0x1, 0x0, 0x0, 0x888}, 0x80) socket$netlink(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): range [ 297.191998][T15323] netlink: zone id is out of range [ 297.202095][T15323] netlink: zone id is out of range [ 297.218725][T15323] netlink: zone id is out of range [ 297.230522][T15323] netlink: zone id is out of range [ 297.238178][T15323] netlink: zone id is out of range [ 297.261874][T15330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2433'. [ 297.491755][T15349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2437'. [ 297.529064][T15349] bridge0: entered promiscuous mode [ 297.536019][T15349] macsec1: entered promiscuous mode [ 297.542147][T15349] macsec1: entered allmulticast mode [ 297.548373][T15349] bridge0: entered allmulticast mode [ 297.556194][T15349] bridge0: port 1(macsec1) entered blocking state [ 297.563229][T15349] bridge0: port 1(macsec1) entered disabled state [ 297.575835][T15349] bridge0: left allmulticast mode [ 297.585933][T15349] bridge0: left promiscuous mode [ 297.770420][T15362] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2441'. [ 297.925172][T15374] netlink: 'syz.1.2445': attribute type 1 has an invalid length. [ 298.044964][T15377] vlan3: entered promiscuous mode [ 298.052640][T15377] hsr_slave_1: entered promiscuous mode [ 298.079321][T15377] vlan3: entered allmulticast mode [ 298.095321][T15377] hsr_slave_1: entered allmulticast mode [ 298.624820][T15415] tc_dump_action: action bad kind [ 300.537323][T15456] __nla_validate_parse: 6 callbacks suppressed [ 300.537341][T15456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2468'. [ 301.444737][T15405] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 301.582855][T15460] geneve3: entered promiscuous mode [ 301.588748][T15460] geneve3: entered allmulticast mode [ 301.618214][ T7552] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.631422][ T7552] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.662941][ T7552] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.679803][ T7552] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.712783][T15471] netlink: 'syz.4.2473': attribute type 1 has an invalid length. [ 301.726233][T15476] net_ratelimit: 188 callbacks suppressed [ 301.726257][T15476] openvswitch: netlink: IP tunnel TTL not specified. [ 301.739563][T15471] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2473'. [ 301.752064][T15471] netlink: 'syz.4.2473': attribute type 1 has an invalid length. [ 301.760882][T15471] netlink: 'syz.4.2473': attribute type 8 has an invalid length. [ 301.769476][T15471] netlink: 582 bytes leftover after parsing attributes in process `syz.4.2473'. [ 301.778706][T15471] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2473'. [ 301.794138][T15471] netlink: 'syz.4.2473': attribute type 3 has an invalid length. [ 302.019416][T15487] netlink: 'syz.4.2479': attribute type 11 has an invalid length. [ 302.285172][T15500] bond13: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 302.333138][T15500] bond13: (slave lo): Enslaving as an active interface with an up link [ 302.342073][T15500] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 302.870803][T15536] veth0_to_hsr: entered allmulticast mode [ 303.390920][T15569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2507'. [ 303.494709][T15576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2508'. [ 303.540344][T15579] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2506'. [ 303.790743][T15595] netlink: 'syz.2.2514': attribute type 4 has an invalid length. [ 303.806130][T15595] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2514'. [ 303.817005][T15595] .`: renamed from bond0 [ 304.118238][T15614] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2521'. [ 304.295130][T15624] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2523'. [ 304.309116][T15624] netlink: 'syz.1.2523': attribute type 7 has an invalid length. [ 304.345620][T15624] gretap0: entered promiscuous mode [ 304.371449][T15624] gretap0: left promiscuous mode [ 304.442966][T15636] netlink: 'syz.4.2527': attribute type 14 has an invalid length. [ 304.544898][T15640] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 304.678352][T15653] netlink: 'syz.0.2532': attribute type 2 has an invalid length. [ 304.822883][T15664] netlink: 'syz.4.2536': attribute type 6 has an invalid length. [ 305.077160][T15673] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 305.385645][T15688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.453919][ T7550] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 305.634881][T15703] __nla_validate_parse: 6 callbacks suppressed [ 305.634898][T15703] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2544'. [ 305.850409][T15714] sch_fq: defrate 0 ignored. [ 305.890137][T15714] syzkaller0: entered promiscuous mode [ 305.896081][T15714] syzkaller0: entered allmulticast mode [ 307.357824][T15716] x_tables: duplicate underflow at hook 1 [ 307.407594][T15719] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2548'. [ 308.361336][T15687] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 308.565989][T15731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2550'. [ 308.584597][T15731] openvswitch: netlink: Flow actions attr not present in new flow. [ 308.837513][T15754] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2555'. [ 308.926395][T15760] IPVS: set_ctl: invalid protocol: 59 100.1.1.2:0 [ 308.945229][T15760] bond_slave_1: mtu less than device minimum [ 309.231238][T15778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2565'. [ 309.273484][T15778] validate_nla: 2 callbacks suppressed [ 309.273504][T15778] netlink: 'syz.3.2565': attribute type 1 has an invalid length. [ 309.323683][T15780] vlan4: entered promiscuous mode [ 309.409533][T15787] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2569'. [ 309.440213][T15788] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2570'. [ 309.617663][T15799] xt_ecn: cannot match TCP bits for non-tcp packets [ 309.627938][T15799] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2573'. [ 309.652925][T15801] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2574'. [ 309.969050][ T5831] Bluetooth: hci4: link tx timeout [ 309.977448][ T5831] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 310.185211][T15843] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2585'. [ 310.307217][T15849] bond0: entered promiscuous mode [ 310.314457][T15849] batadv0: entered promiscuous mode [ 310.320824][T15849] debugfs: 'hsr0' already exists in 'hsr' [ 310.327028][T15849] Cannot create hsr debugfs directory [ 310.333466][T15849] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 310.343662][T15849] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 310.354772][T15849] hsr0: entered promiscuous mode [ 310.360643][T15849] hsr0: entered allmulticast mode [ 310.366410][T15849] bond0: entered allmulticast mode [ 310.371761][T15849] batadv0: entered allmulticast mode [ 310.393421][T15849] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 310.404624][T15849] bond0: left promiscuous mode [ 310.417333][T15849] batadv0: left promiscuous mode [ 310.710505][T15872] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 310.729147][T15872] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2593'. [ 310.781580][T15874] netlink: 'syz.4.2594': attribute type 21 has an invalid length. [ 310.826916][T15874] bond19: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 310.840698][T15874] bond19 (unregistering): Released all slaves [ 311.007892][T15886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2598'. [ 311.204499][T15901] IPVS: length: 8 != 1152 [ 311.217960][T15903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2602'. [ 311.239431][T15901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2601'. [ 311.255773][T15901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2601'. [ 311.322724][T15901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2601'. [ 311.448234][T15919] xt_CONNSECMARK: invalid mode: 0 [ 311.520811][T15926] xt_CONNSECMARK: invalid mode: 0 [ 311.648361][T15933] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2608'. [ 311.768445][T15938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2609'. [ 312.063365][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 312.409576][T15951] openvswitch: netlink: IP tunnel dst address not specified [ 314.383467][T15918] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 314.570607][T15967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 314.696790][T15979] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2622'. [ 314.792123][T15983] netlink: 'syz.3.2624': attribute type 1 has an invalid length. [ 314.856935][T15983] bond17: entered promiscuous mode [ 314.865826][T15983] bond17: entered allmulticast mode [ 314.871616][T15983] 8021q: adding VLAN 0 to HW filter on device bond17 [ 314.891826][T15988] macvlan0: entered promiscuous mode [ 314.916388][T15988] macvlan0: entered allmulticast mode [ 314.924614][T15988] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 315.305075][T16019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2634'. [ 315.647501][T16038] sctp: [Deprecated]: syz.1.2638 (pid 16038) Use of struct sctp_assoc_value in delayed_ack socket option. [ 315.647501][T16038] Use struct sctp_sack_info instead [ 315.750175][T16048] rdma_op ffff88802a0709f0 conn xmit_rdma 0000000000000000 [ 316.376937][T16076] gtp1: entered promiscuous mode [ 316.391293][T16076] gtp1: entered allmulticast mode [ 316.398758][T16088] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 316.407006][T16088] syzkaller1: linktype set to 823 [ 316.511963][T16100] sctp: [Deprecated]: syz.1.2655 (pid 16100) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.511963][T16100] Use struct sctp_sack_info instead [ 316.547212][T16099] sctp: [Deprecated]: syz.1.2655 (pid 16099) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.547212][T16099] Use struct sctp_sack_info instead [ 317.240164][T16137] __nla_validate_parse: 2 callbacks suppressed [ 317.240184][T16137] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2662'. [ 317.323988][T16139] 8021q: VLANs not supported on lo [ 317.346915][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.354846][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.474205][T16151] lo speed is unknown, defaulting to 1000 [ 317.498595][T16151] wlan0 speed is unknown, defaulting to 1000 [ 317.860234][T16163] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2668'. [ 317.864107][T16151] hsr0 speed is unknown, defaulting to 1000 [ 318.174250][T16172] tipc: Invalid UDP bearer configuration [ 318.174310][T16172] tipc: Enabling of bearer rejected, failed to enable media [ 318.326722][T16180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2672'. [ 318.385889][T16180] 8021q: VLANs not supported on wg0 [ 318.888635][T16199] IPv6: sit2: Disabled Multicast RS [ 318.918107][T16203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2681'. [ 318.953004][T16206] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2681'. [ 318.977406][T16204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2680'. [ 319.009939][T16204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2680'. [ 319.022545][T16207] syzkaller1: entered promiscuous mode [ 319.035751][T16207] syzkaller1: entered allmulticast mode [ 319.075173][T16204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2680'. [ 319.435769][T16233] bond0: (slave veth0_vlan): Error: Device is in use and cannot be enslaved [ 319.437907][T16231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2688'. [ 319.489746][T16231] openvswitch: netlink: Flow actions attr not present in new flow. [ 319.621660][T16239] tipc: Enabling of bearer rejected, failed to enable media [ 319.790375][T16249] lo speed is unknown, defaulting to 1000 [ 319.798474][T16249] wlan0 speed is unknown, defaulting to 1000 [ 319.854513][T16255] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2695'. [ 320.133765][T16249] hsr0 speed is unknown, defaulting to 1000 [ 321.368398][T16331] hsr_slave_0: left promiscuous mode [ 321.378843][T16331] hsr_slave_1: left promiscuous mode [ 321.459521][T16339] netlink: 'syz.4.2720': attribute type 323 has an invalid length. [ 322.218662][T16381] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 322.548874][T16407] tipc: Started in network mode [ 322.554886][T16407] tipc: Node identity 46cba20f6cb4, cluster identity 4711 [ 322.563595][T16407] tipc: Enabled bearer , priority 0 [ 322.664750][T16407] syzkaller0: entered promiscuous mode [ 322.670371][T16407] syzkaller0: entered allmulticast mode [ 322.678018][T16407] tipc: Resetting bearer [ 322.700860][T16416] __nla_validate_parse: 12 callbacks suppressed [ 322.700881][T16416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2741'. [ 322.716953][T16404] tipc: Resetting bearer [ 322.730637][T16417] ip6t_srh: unknown srh invflags 4000 [ 322.899165][T16427] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2744'. [ 323.022763][ T5831] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 323.070322][T16435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2745'. [ 323.087841][T16435] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2745'. [ 324.161167][T16404] tipc: Disabling bearer [ 324.282111][T16436] bond16: (slave vlan0): Enslaving as a backup interface with an up link [ 324.380048][ T24] tipc: Node number set to 713007631 [ 324.431234][T16442] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2747'. [ 324.460533][T16455] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2750'. [ 324.477008][T16440] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2746'. [ 324.712866][T16463] netlink: 'syz.1.2752': attribute type 24 has an invalid length. [ 324.834111][T16463] bond17: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 324.885470][T16463] bond17: (slave lo): Enslaving as an active interface with an up link [ 324.894617][T16482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2759'. [ 324.911739][T16463] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 325.097793][T16493] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2765'. [ 325.122775][T16499] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2765'. [ 325.786413][T16547] syzkaller0: entered promiscuous mode [ 325.792765][T16547] syzkaller0: entered allmulticast mode [ 326.031400][T16551] vcan1: entered promiscuous mode [ 326.061489][T16551] vcan1: entered allmulticast mode [ 326.196325][T16567] bond1: (slave lo): Releasing backup interface [ 326.294095][T16567] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 326.425309][T16567] : (slave bond_slave_0): Releasing backup interface [ 326.462896][ T5831] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 326.579423][T16567] : (slave bond_slave_1): Releasing backup interface [ 326.675558][T16567] team0: Port device team_slave_0 removed [ 326.764315][T16567] team0: Port device team_slave_1 removed [ 326.819752][T16567] : (slave wlan1): Releasing backup interface [ 326.853056][T16567] bond3: (slave bridge3): Releasing backup interface [ 326.867342][T16567] bridge3: left promiscuous mode [ 326.888511][T16567] bond4: (slave veth5): Releasing active interface [ 326.897124][T16567] bond4: (slave veth5): the permanent HWaddr of slave - 02:d3:fb:b4:a7:12 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 326.933507][T16567] bond4: (slave vlan1): Releasing active interface [ 326.946990][T16567] bond6: (slave bridge4): Releasing active interface [ 326.954648][T16567] bridge4: left promiscuous mode [ 326.959873][T16567] bridge4: left allmulticast mode [ 326.986758][T16575] tipc: New replicast peer: 172.20.20.19 [ 327.189508][T16602] netlink: 'syz.3.2796': attribute type 12 has an invalid length. [ 327.198904][T16602] netlink: 'syz.3.2796': attribute type 11 has an invalid length. [ 327.492826][T16602] nbd1: detected capacity change from 0 to 63 [ 327.525985][ T5845] block nbd1: Receive control failed (result -32) [ 327.532429][ T5831] block nbd1: Receive control failed (result -32) [ 327.544714][T16618] block nbd1: Dead connection, failed to find a fallback [ 327.564755][T16618] block nbd1: shutting down sockets [ 327.572983][T16618] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 327.602812][T16618] Buffer I/O error on dev nbd1, logical block 0, async page read [ 327.641411][T16618] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 327.672696][T16618] Buffer I/O error on dev nbd1, logical block 1, async page read [ 327.680635][T16618] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 327.710444][T16618] Buffer I/O error on dev nbd1, logical block 2, async page read [ 327.732794][T16618] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 327.754057][T16618] Buffer I/O error on dev nbd1, logical block 3, async page read [ 327.762638][T16618] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 327.772170][T16618] Buffer I/O error on dev nbd1, logical block 0, async page read [ 327.803083][T16618] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 327.829638][T16618] Buffer I/O error on dev nbd1, logical block 1, async page read [ 327.851184][T16618] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 327.872539][T16618] Buffer I/O error on dev nbd1, logical block 2, async page read [ 327.891460][T16618] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 327.901415][T16618] Buffer I/O error on dev nbd1, logical block 3, async page read [ 327.910761][T16618] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 327.942160][T16630] openvswitch: netlink: Duplicate key (type 2). [ 327.962348][T16618] Buffer I/O error on dev nbd1, logical block 0, async page read [ 327.985582][T16618] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 328.003474][T16618] Buffer I/O error on dev nbd1, logical block 1, async page read [ 328.013043][T16618] ldm_validate_partition_table(): Disk read failed. [ 328.021024][T16618] Dev nbd1: unable to read RDB block 0 [ 328.028532][T16618] nbd1: unable to read partition table [ 328.045342][T16618] ldm_validate_partition_table(): Disk read failed. [ 328.094452][T16618] Dev nbd1: unable to read RDB block 0 [ 328.107720][T16618] nbd1: unable to read partition table [ 328.338725][T16656] netlink: 'syz.1.2808': attribute type 2 has an invalid length. [ 328.352316][T16656] __nla_validate_parse: 8 callbacks suppressed [ 328.352336][T16656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2808'. [ 329.005209][T16684] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 329.098347][T16685] lo speed is unknown, defaulting to 1000 [ 329.134315][T16685] wlan0 speed is unknown, defaulting to 1000 [ 329.171628][T16701] netlink: 'syz.3.2816': attribute type 1 has an invalid length. [ 329.210615][T16701] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2816'. [ 329.698034][T16713] netlink: 'syz.1.2818': attribute type 2 has an invalid length. [ 329.732394][T16713] netlink: 119 bytes leftover after parsing attributes in process `syz.1.2818'. [ 329.864074][T16722] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2819'. [ 329.918910][T16685] hsr0 speed is unknown, defaulting to 1000 [ 330.266232][T16728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2822'. [ 330.275391][T16728] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2822'. [ 330.284607][T16728] netlink: 'syz.1.2822': attribute type 5 has an invalid length. [ 330.580777][T16756] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2826'. [ 330.615108][T16753] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 330.677925][T16760] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2829'. [ 330.915801][T16771] syzkaller0: entered promiscuous mode [ 330.921347][T16771] syzkaller0: entered allmulticast mode [ 330.946959][T16772] netlink: 'syz.2.2833': attribute type 64 has an invalid length. [ 331.706985][T16814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2845'. [ 332.229218][T16845] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2852'. [ 332.368227][T16854] netlink: 'syz.2.2854': attribute type 51 has an invalid length. [ 332.758335][T16881] smc: removing ib device syz2 [ 333.446961][T16905] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2866'. [ 333.869460][T16910] bond19: Unable to set down delay as MII monitoring is disabled [ 333.890021][T16910] bond19 (unregistering): Released all slaves [ 334.047340][T16928] syzkaller0: entered allmulticast mode [ 334.645626][T16964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2878'. [ 334.821777][T16966] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2878'. [ 335.216170][T16987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2885'. [ 335.442025][T16998] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2889'. [ 335.495423][T17001] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2890'. [ 335.546537][T16998] netlink: zone id is out of range [ 335.551730][T16998] netlink: zone id is out of range [ 335.561482][T16998] netlink: zone id is out of range [ 335.582665][T16998] netlink: zone id is out of range [ 335.605110][T16998] netlink: zone id is out of range [ 335.627943][T16998] netlink: zone id is out of range [ 335.637162][T16998] netlink: zone id is out of range [ 335.643143][T16998] netlink: zone id is out of range [ 335.649453][T16998] netlink: zone id is out of range [ 335.655455][T17011] netlink: 212372 bytes leftover after parsing attributes in process `syz.2.2892'. [ 335.660292][T16998] netlink: zone id is out of range [ 335.821411][T17016] netlink: 'syz.0.2895': attribute type 9 has an invalid length. [ 335.924835][T17019] siw: device registration error -23 [ 335.954117][T17019] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2896'. [ 336.084571][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 336.095485][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 336.124469][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 336.154683][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 336.164418][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 336.325272][T17026] lo speed is unknown, defaulting to 1000 [ 336.713628][T17062] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2907'. [ 336.757674][T17026] hsr0 speed is unknown, defaulting to 1000 [ 336.860135][T17060] syzkaller0: entered promiscuous mode [ 336.865964][T17060] syzkaller0: entered allmulticast mode [ 337.021099][T17071] H: renamed from dummy0 (while UP) [ 337.551159][T17026] chnl_net:caif_netlink_parms(): no params data found [ 337.748641][T17087] tipc: Enabled bearer , priority 0 [ 337.760085][T17086] tipc: Disabling bearer [ 337.807715][T17026] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.815279][T17026] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.826506][T17026] bridge_slave_0: entered allmulticast mode [ 337.834553][T17026] bridge_slave_0: entered promiscuous mode [ 337.845310][T17026] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.853421][T17026] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.860750][T17026] bridge_slave_1: entered allmulticast mode [ 337.868880][T17026] bridge_slave_1: entered promiscuous mode [ 337.914304][T17026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.927941][T17026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.953041][T17096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2916'. [ 337.980267][T17026] team0: Port device team_slave_0 added [ 337.995926][T17026] team0: Port device team_slave_1 added [ 338.128033][T17026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.154137][T17026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.204815][T17026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.236345][ T5831] Bluetooth: hci5: command tx timeout [ 338.250435][T17026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.267810][T17026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.296511][T17026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.384545][T17026] hsr_slave_0: entered promiscuous mode [ 338.391236][T17026] hsr_slave_1: entered promiscuous mode [ 338.736522][T17026] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 338.763604][T17026] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.893757][T17128] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2924'. [ 339.053742][T17026] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 339.075069][T17026] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.157353][T17026] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 339.202857][T17026] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.283474][T17026] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 339.302565][T17026] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.575260][T17026] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 339.742992][T17026] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 339.759530][T17026] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 339.788012][T17026] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 339.820574][T17150] geneve2: entered promiscuous mode [ 339.832471][T17150] geneve2: entered allmulticast mode [ 339.852777][ T49] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.871485][ T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.916805][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.928581][T17160] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2932'. [ 339.940127][ T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.098714][T17154] netlink: 'syz.4.2931': attribute type 1 has an invalid length. [ 340.200474][T17026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.275650][T17026] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.301982][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.309264][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.318667][ T5831] Bluetooth: hci5: command tx timeout [ 340.407279][T17172] ipt_REJECT: TCP_RESET invalid for non-tcp [ 340.414964][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.422127][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.791195][T17187] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2940'. [ 340.895946][T17026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.028021][T17026] veth0_vlan: entered promiscuous mode [ 341.071280][T17026] veth1_vlan: entered promiscuous mode [ 341.159574][T17026] veth0_macvtap: entered promiscuous mode [ 341.191702][T17026] veth1_macvtap: entered promiscuous mode [ 341.260822][T17026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.305148][T17026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.432824][ T7550] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.443539][ T233] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.453472][ T233] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.484893][T17221] ieee802154 phy0 wpan0: encryption failed: -22 [ 341.486710][ T233] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.500091][T17224] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2950'. [ 341.765911][T17227] IPVS: Unknown mcast interface: pim6reg [ 341.788322][ T7550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.808084][ T7550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.855982][T17234] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2952'. [ 341.916035][ T7550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.948647][ T7550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.067580][T17245] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2957'. [ 342.203493][T17252] netlink: 'syz.2.2894': attribute type 9 has an invalid length. [ 342.382632][ T5831] Bluetooth: hci5: command tx timeout [ 342.474195][T17263] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2963'. [ 342.502587][T17263] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2963'. [ 342.609242][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.619131][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.627696][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.643043][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.658104][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.722462][T17269] lo speed is unknown, defaulting to 1000 [ 342.730033][T17269] hsr0 speed is unknown, defaulting to 1000 [ 342.992992][T17284] netlink: 'syz.2.2966': attribute type 58 has an invalid length. [ 343.043981][T17284] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2966'. [ 343.074025][T17287] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2970'. [ 343.478577][T17269] chnl_net:caif_netlink_parms(): no params data found [ 343.734130][T17269] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.741507][T17269] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.749346][T17269] bridge_slave_0: entered allmulticast mode [ 343.760931][T17269] bridge_slave_0: entered promiscuous mode [ 343.777072][T17269] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.785441][T17269] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.793065][T17269] bridge_slave_1: entered allmulticast mode [ 343.801752][T17269] bridge_slave_1: entered promiscuous mode [ 343.936572][T17269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.973934][T17269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.144987][T17269] team0: Port device team_slave_0 added [ 344.175129][T17269] team0: Port device team_slave_1 added [ 344.309579][T17269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.354167][T17269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.460286][T17269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.472913][ T5831] Bluetooth: hci5: command tx timeout [ 344.542049][T17371] net_ratelimit: 186 callbacks suppressed [ 344.542074][T17371] sock: sock_set_timeout: `syz.3.2986' (pid 17371) tries to set negative timeout [ 344.560895][T17269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.580913][T17269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.608919][T17269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.705019][ T5831] Bluetooth: hci4: command tx timeout [ 344.791704][T17269] hsr_slave_0: entered promiscuous mode [ 344.799510][T17269] hsr_slave_1: entered promiscuous mode [ 344.833891][T17269] debugfs: 'hsr0' already exists in 'hsr' [ 344.843694][T17269] Cannot create hsr debugfs directory [ 345.370099][T17404] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 345.426404][T17404] bond1 (unregistering): Released all slaves [ 345.528715][T17421] IPVS: length: 239 != 24 [ 345.660915][T17269] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.722901][T17269] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 345.748320][T17269] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.841961][T17429] batman_adv: batadv0: Adding interface: dummy0 [ 345.848580][T17429] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.893063][T17429] batman_adv: batadv0: Interface activated: dummy0 [ 345.963768][T17269] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.984170][T17269] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 346.005118][T17269] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.059160][T17438] batadv0: mtu less than device minimum [ 346.073520][T17438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 346.086124][T17438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 346.098269][T17438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 346.110267][T17438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 346.121594][T17438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 346.133541][T17438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 346.145417][T17438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 346.157300][T17438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 346.264226][T17432] syzkaller1: entered promiscuous mode [ 346.269807][T17432] syzkaller1: entered allmulticast mode [ 346.405153][T17269] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.436075][T17269] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 346.459014][T17269] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.525193][T17462] macvtap1: entered allmulticast mode [ 346.530761][T17462] veth0_macvtap: entered allmulticast mode [ 346.619477][T17269] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.652776][T17269] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 346.705804][T17269] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.717525][T17467] ipt_ECN: cannot use operation on non-tcp rule [ 346.777200][T17472] __nla_validate_parse: 1 callbacks suppressed [ 346.777223][T17472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3012'. [ 346.794546][ T5831] Bluetooth: hci4: command tx timeout [ 346.796215][T17473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3012'. [ 347.044802][T17484] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3015'. [ 347.104788][T17269] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 347.148577][T17269] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 347.200485][T17269] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 347.268676][T17269] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 347.561521][T17269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.596697][T17269] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.640933][ T233] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.648323][ T233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.720146][ T233] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.727461][ T233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.813816][T17530] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.937347][T17530] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.020815][T17540] bond19 (unregistering): Released all slaves [ 348.088656][T17530] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.124571][T17544] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3031'. [ 348.139167][T17540] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR [ 348.168877][T17530] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.349891][T17558] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3034'. [ 348.385243][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.534527][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.557447][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.594138][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.626746][T17561] syzkaller0: entered promiscuous mode [ 348.632911][T17561] syzkaller0: entered allmulticast mode [ 348.657832][T17269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.732930][T17570] netlink: 'syz.1.3039': attribute type 2 has an invalid length. [ 348.845152][T17269] veth0_vlan: entered promiscuous mode [ 348.866036][T17269] veth1_vlan: entered promiscuous mode [ 348.873862][ T5831] Bluetooth: hci4: command tx timeout [ 348.911872][T17269] veth0_macvtap: entered promiscuous mode [ 348.924760][T17269] veth1_macvtap: entered promiscuous mode [ 348.948541][T17269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.967874][T17269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.983303][ T7548] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.027191][ T7548] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.041826][T17583] netlink: 452 bytes leftover after parsing attributes in process `syz.1.3042'. [ 349.056879][ T7548] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.078955][T17584] sctp: [Deprecated]: syz.3.3038 (pid 17584) Use of int in maxseg socket option. [ 349.078955][T17584] Use struct sctp_assoc_value instead [ 349.094762][ T7548] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.150762][T17587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3042'. [ 349.169117][T17586] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3043'. [ 349.190244][T17587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3042'. [ 349.201194][T17587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3042'. [ 349.275565][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.283703][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.445424][ T7550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.460905][ T7550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.724098][T17600] can: request_module (can-proto-0) failed. [ 349.852019][T17600] net_ratelimit: 11 callbacks suppressed [ 349.852041][T17600] IPVS: sh: FWM 3 0x00000003 - no destination available [ 349.867506][T17600] ipt_REJECT: TCP_RESET invalid for non-tcp [ 349.907282][T17615] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 349.964617][T17615] bond1 (unregistering): Released all slaves [ 350.326018][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 350.335989][T17630] team0 (unregistering): Port device team_slave_1 removed [ 350.357487][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 350.368209][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 350.392468][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 350.401124][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 350.468089][T17632] lo speed is unknown, defaulting to 1000 [ 350.479527][T17632] hsr0 speed is unknown, defaulting to 1000 [ 350.938798][T17632] chnl_net:caif_netlink_parms(): no params data found [ 350.954837][ T5845] Bluetooth: hci4: command tx timeout [ 351.371531][T17632] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.408080][T17632] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.442580][T17632] bridge_slave_0: entered allmulticast mode [ 351.450774][T17632] bridge_slave_0: entered promiscuous mode [ 351.477649][T17632] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.485328][T17632] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.499074][T17632] bridge_slave_1: entered allmulticast mode [ 351.540112][T17632] bridge_slave_1: entered promiscuous mode [ 351.671894][T17632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.693755][T17699] IPVS: sh: FWM 3 0x00000003 - no destination available [ 351.718940][T17632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.842629][T17705] netlink: 'syz.0.3070': attribute type 1 has an invalid length. [ 351.876244][T17632] team0: Port device team_slave_0 added [ 351.919389][T17632] team0: Port device team_slave_1 added [ 352.022566][T17632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.049665][T17632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.162309][T17632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.223287][T17632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.250980][T17632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.313726][T17632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.468652][ T5845] Bluetooth: hci2: command tx timeout [ 352.488238][T17731] netlink: 'syz.1.3076': attribute type 16 has an invalid length. [ 352.496335][T17731] __nla_validate_parse: 3 callbacks suppressed [ 352.496353][T17731] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3076'. [ 352.541945][T17632] hsr_slave_0: entered promiscuous mode [ 352.593613][T17632] hsr_slave_1: entered promiscuous mode [ 352.625078][T17632] debugfs: 'hsr0' already exists in 'hsr' [ 352.643381][T17632] Cannot create hsr debugfs directory [ 352.649699][T17746] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3081'. [ 352.777869][T17747] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.806596][T17747] bond0: left promiscuous mode [ 352.811692][T17747] bond_slave_0: left promiscuous mode [ 352.817639][T17747] bond_slave_1: left promiscuous mode [ 352.824338][T17747] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 352.860713][T17761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3079'. [ 352.907069][T17747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.938010][T17747] veth0_vlan: left promiscuous mode [ 352.988965][T17747] bond1: left promiscuous mode [ 352.998493][T17747] bond2: left promiscuous mode [ 353.004926][T17747] bond3: left promiscuous mode [ 353.010494][T17747] bond4: left promiscuous mode [ 353.019221][T17747] geneve2: left promiscuous mode [ 353.025208][T17747] geneve2: left allmulticast mode [ 353.036153][T17747] bond5: left promiscuous mode [ 353.041011][T17747] bond5: left allmulticast mode [ 353.048357][T17747] bond6: left promiscuous mode [ 353.054417][T17747] bridge4: left promiscuous mode [ 353.068138][T17747] bond7: left promiscuous mode [ 353.076507][T17747] bridge0: left allmulticast mode [ 353.081979][T17747] macvtap1: left promiscuous mode [ 353.088169][T17747] macvtap1: left allmulticast mode [ 353.098142][T17747] bond8: left promiscuous mode [ 353.113755][T17747] bond10: left promiscuous mode [ 353.120250][T17747] bond11: left promiscuous mode [ 353.125806][T17747] bond11: left allmulticast mode [ 353.136106][T17747] veth3: left allmulticast mode [ 353.149699][T17747] gtp1: left promiscuous mode [ 353.156004][T17747] gtp1: left allmulticast mode [ 353.163704][T17747] geneve3: left promiscuous mode [ 353.168879][T17747] geneve3: left allmulticast mode [ 353.177443][T17747] bond14: left promiscuous mode [ 353.206246][T17747] vlan4: left promiscuous mode [ 353.257946][ T233] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.269851][ T233] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 353.280291][ T233] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 353.290638][ T233] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.299456][ T233] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 353.309817][ T233] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 353.415607][ T233] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.450020][ T233] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 353.482727][ T233] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 353.543916][ T233] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.572430][ T233] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 353.581977][ T233] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 353.735380][T17783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3084'. [ 353.939450][T17787] pim6reg: entered allmulticast mode [ 353.949495][T17791] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3088'. [ 353.972667][T17789] pim6reg: left allmulticast mode [ 354.177482][T17632] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.233695][T17804] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 354.274609][T17632] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.368100][T17632] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.512141][T17632] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.542756][ T5845] Bluetooth: hci2: command tx timeout [ 354.597629][T17820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3096'. [ 354.616451][T17820] netlink: 'syz.0.3096': attribute type 1 has an invalid length. [ 354.723700][T17826] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3097'. [ 354.985612][T17632] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 355.040520][T17835] netlink: 'syz.2.3098': attribute type 5 has an invalid length. [ 355.053252][T17834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.070135][T17835] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3098'. [ 355.082864][T17834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.124448][T17632] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 355.167396][T17632] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 355.198714][T17846] syz_tun: entered promiscuous mode [ 355.216217][T17846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3099'. [ 355.225898][T17632] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 355.371464][T17863] IPVS: Unknown mcast interface: dummy0 [ 355.523781][T17866] netlink: 'syz.4.3105': attribute type 1 has an invalid length. [ 355.640975][T17877] tipc: Enabling of bearer rejected, failed to enable media [ 355.656773][T17632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.735956][T17632] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.761994][ T7548] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.769275][ T7548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.846699][ T7548] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.854164][ T7548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.062125][T17901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3112'. [ 356.185545][T17907] netlink: 'syz.1.3113': attribute type 83 has an invalid length. [ 356.596049][T17632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.611103][T17929] netlink: 'syz.1.3118': attribute type 58 has an invalid length. [ 356.622743][ T5845] Bluetooth: hci2: command tx timeout [ 356.664757][T17931] bond14: option mode: unable to set because the bond device has slaves [ 356.852484][T17632] veth0_vlan: entered promiscuous mode [ 356.869518][T17632] veth1_vlan: entered promiscuous mode [ 356.926975][T17938] netlink: 'syz.0.3121': attribute type 1 has an invalid length. [ 356.935574][T17938] netlink: 'syz.0.3121': attribute type 1 has an invalid length. [ 356.948971][T17938] netlink: 'syz.0.3121': attribute type 8 has an invalid length. [ 357.073868][T17632] veth0_macvtap: entered promiscuous mode [ 357.227389][T17948] hsr_slave_0 (unregistering): left promiscuous mode [ 357.268663][T17960] tc_dump_action: action bad kind [ 357.280474][T17632] veth1_macvtap: entered promiscuous mode [ 357.314108][T17632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.330484][T17632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.357595][ T7550] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.375686][ T7550] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.398445][ T7550] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.427140][ T7550] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.548187][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.573437][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.615595][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.625046][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.654507][T17975] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 357.786705][T17980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.910002][T17982] netlink: 'syz.0.3129': attribute type 4 has an invalid length. [ 358.067995][T17996] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 358.092689][T18001] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 358.449035][T18017] __nla_validate_parse: 12 callbacks suppressed [ 358.449059][T18017] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3139'. [ 358.533284][T18017] netlink: 'syz.3.3139': attribute type 9 has an invalid length. [ 358.566832][T18020] netlink: 408 bytes leftover after parsing attributes in process `syz.4.3140'. [ 358.608586][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 358.618219][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 358.633126][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 358.641338][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 358.649545][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 358.702692][ T5845] Bluetooth: hci2: command tx timeout [ 358.818329][T18038] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3144'. [ 358.834844][T18039] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3144'. [ 359.002661][T18041] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3142'. [ 359.082612][T18026] lo speed is unknown, defaulting to 1000 [ 359.134929][T18026] hsr0 speed is unknown, defaulting to 1000 [ 359.144428][T18057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3147'. [ 359.216907][T18057] hsr_slave_0 (unregistering): left promiscuous mode [ 359.764467][T18091] validate_nla: 2 callbacks suppressed [ 359.764491][T18091] netlink: 'syz.2.3159': attribute type 1 has an invalid length. [ 359.830705][T18089] syzkaller0: entered promiscuous mode [ 359.840842][T18089] syzkaller0: entered allmulticast mode [ 359.875807][T18091] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 359.893917][T18091] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3159'. [ 359.900646][T18026] chnl_net:caif_netlink_parms(): no params data found [ 359.947448][T18091] bond1: (slave bridge3): Enslaving as a backup interface with a down link [ 360.071181][ T1098] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 54123 - 0 [ 360.136736][ T7552] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 54123 - 0 [ 360.244698][T18072] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 360.333140][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 54123 - 0 [ 360.353293][ T12] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 54123 - 0 [ 360.380631][ T7550] bridge_slave_1: left allmulticast mode [ 360.394617][ T7550] bridge_slave_1: left promiscuous mode [ 360.402226][ T7550] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.421761][T18112] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3163'. [ 360.610260][T18122] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3166'. [ 360.705814][ T5845] Bluetooth: hci0: command tx timeout [ 361.018641][ T7550] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 361.158941][ T7550] bond12 (unregistering): (slave bridge7): Removing an active aggregator [ 361.169030][ T7550] bond12 (unregistering): (slave bridge7): Releasing backup interface [ 361.329366][ T7550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.339667][ T7550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.350705][ T7550] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 361.360624][ T7550] bond0 (unregistering): Released all slaves [ 361.373169][ T7550] bond1 (unregistering): Released all slaves [ 361.389760][ T7550] bond2 (unregistering): Released all slaves [ 361.406068][ T7550] bond3 (unregistering): Released all slaves [ 361.423990][ T7550] bond4 (unregistering): Released all slaves [ 361.443306][ T7550] bond5 (unregistering): Released all slaves [ 361.471141][ T7550] bond6 (unregistering): Released all slaves [ 361.487811][ T7550] bond7 (unregistering): Released all slaves [ 361.504309][ T5845] Bluetooth: hci4: command 0x0401 tx timeout [ 361.515496][ T7550] bond8 (unregistering): Released all slaves [ 361.537443][ T7550] bond9 (unregistering): Released all slaves [ 361.553761][ T7550] bond10 (unregistering): Released all slaves [ 361.569726][ T7550] bond11 (unregistering): Released all slaves [ 361.586797][ T7550] bond12 (unregistering): Released all slaves [ 361.604976][ T7550] bond13 (unregistering): Released all slaves [ 361.619745][ T7550] bond14 (unregistering): Released all slaves [ 361.651552][ T7550] bond15 (unregistering): Released all slaves [ 361.668617][ T7550] bond16 (unregistering): (slave vlan0): Releasing backup interface [ 361.679735][ T7550] bond16 (unregistering): Released all slaves [ 361.697926][ T7550] bond17 (unregistering): (slave lo): Releasing backup interface [ 361.710231][ T7550] bond17 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 361.722486][ T7550] bond17 (unregistering): Released all slaves [ 361.738057][T18026] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.749355][T18026] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.757280][T18026] bridge_slave_0: entered allmulticast mode [ 361.768818][T18026] bridge_slave_0: entered promiscuous mode [ 361.781927][T18119] netlink: 'syz.3.3164': attribute type 2 has an invalid length. [ 361.789859][T18119] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3164'. [ 361.923652][T18026] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.932157][T18026] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.962937][T18026] bridge_slave_1: entered allmulticast mode [ 361.971449][T18026] bridge_slave_1: entered promiscuous mode [ 362.082737][ T7550] tipc: Disabling bearer [ 362.103564][ T7550] tipc: Left network mode [ 362.190791][T18133] netlink: 'syz.0.3169': attribute type 1 has an invalid length. [ 362.437106][T18026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.488397][T18026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.509976][T18144] syzkaller0: entered promiscuous mode [ 362.521732][T18144] syzkaller0: entered allmulticast mode [ 362.538839][T18149] GUP no longer grows the stack in syz.0.3172 (18149): 200000003000-20000000a000 (200000001000) [ 362.556305][T18149] CPU: 0 UID: 0 PID: 18149 Comm: syz.0.3172 Not tainted syzkaller #0 PREEMPT(full) [ 362.556349][T18149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 362.556372][T18149] Call Trace: [ 362.556381][T18149] [ 362.556391][T18149] dump_stack_lvl+0xe8/0x150 [ 362.556429][T18149] __get_user_pages+0x2453/0x29d0 [ 362.556465][T18149] ? __lock_acquire+0x6b5/0x2cf0 [ 362.556515][T18149] ? __gup_longterm_locked+0xc4e/0x1630 [ 362.556551][T18149] ? down_read_killable+0x1bb/0x340 [ 362.556588][T18149] __gup_longterm_locked+0xdcf/0x1630 [ 362.556649][T18149] gup_fast_fallback+0x1d82/0x22e0 [ 362.556721][T18149] ? __pfx_gup_fast_fallback+0x10/0x10 [ 362.556758][T18149] ? is_valid_gup_args+0x11f/0x200 [ 362.556793][T18149] ? get_user_pages_fast+0x4d/0xb0 [ 362.556827][T18149] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 362.556858][T18149] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 362.556886][T18149] iov_iter_get_pages2+0x5e/0xa0 [ 362.556913][T18149] __se_sys_vmsplice+0x7b3/0x1490 [ 362.556969][T18149] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 362.557006][T18149] ? __pfx_futex_wake+0x10/0x10 [ 362.557109][T18149] do_syscall_64+0x14d/0xf80 [ 362.557134][T18149] ? trace_irq_disable+0x3b/0x150 [ 362.557153][T18149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.557175][T18149] ? clear_bhb_loop+0x40/0x90 [ 362.557201][T18149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.557223][T18149] RIP: 0033:0x7f50f2d9c799 [ 362.557245][T18149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.557267][T18149] RSP: 002b:00007f50f3b9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 362.557303][T18149] RAX: ffffffffffffffda RBX: 00007f50f3016090 RCX: 00007f50f2d9c799 [ 362.557320][T18149] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b [ 362.557341][T18149] RBP: 00007f50f2e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 362.557356][T18149] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 362.557368][T18149] R13: 00007f50f3016128 R14: 00007f50f3016090 R15: 00007ffcc79f44f8 [ 362.557405][T18149] [ 362.779486][T18156] x_tables: duplicate underflow at hook 1 [ 362.798666][ T5845] Bluetooth: hci0: command tx timeout [ 363.208171][T18026] team0: Port device team_slave_0 added [ 363.215774][T18174] macvlan0: entered promiscuous mode [ 363.277104][T18026] team0: Port device team_slave_1 added [ 363.400399][T18182] netlink: 'syz.3.3179': attribute type 9 has an invalid length. [ 363.517431][T18026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.542339][T18026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.586422][T18026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.650360][T18026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.664959][T18026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.708676][T18026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.820873][T18195] __nla_validate_parse: 1 callbacks suppressed [ 363.820895][T18195] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3184'. [ 363.873646][T18195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3184'. [ 363.974524][T18026] hsr_slave_0: entered promiscuous mode [ 363.981924][T18026] hsr_slave_1: entered promiscuous mode [ 363.991652][T18026] debugfs: 'hsr0' already exists in 'hsr' [ 364.004144][T18026] Cannot create hsr debugfs directory [ 364.079765][T18200] netlink: 'syz.0.3187': attribute type 39 has an invalid length. [ 364.239473][T18207] veth5: entered allmulticast mode [ 364.627055][T18229] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3196'. [ 364.736996][T18224] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.859537][ T7550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.870706][ T5845] Bluetooth: hci0: command tx timeout [ 365.025145][ T7550] pim6reg527 (unregistering): left allmulticast mode [ 365.178101][ T7550] smc: removing net device macvlan0 with user defined pnetid SYZ1 [ 365.543284][T18224] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.569808][T18252] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 365.595401][T18253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.604476][T18253] batadv0: mtu less than device minimum [ 365.611604][T18253] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 365.624338][T18253] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 365.636139][T18253] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 365.647967][T18253] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 365.659787][T18253] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 365.671730][T18253] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 365.683651][T18253] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 365.695601][T18253] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 365.712918][T18262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3200'. [ 365.735898][T18253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.746923][T18253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.782158][T18253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.793082][T18253] batman_adv: batadv0: Interface deactivated: dummy0 [ 365.801008][T18253] batman_adv: batadv0: Removing interface: dummy0 [ 365.935572][T18224] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.063784][T18265] tipc: Enabled bearer , priority 10 [ 366.095834][T18026] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 54123 - 0 [ 366.215356][T18224] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.259630][T18026] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 54123 - 0 [ 366.300065][ T7550] IPVS: stop unused estimator thread 0... [ 366.337541][T18272] syzkaller0: entered promiscuous mode [ 366.343548][T18272] syzkaller0: entered allmulticast mode [ 366.617142][T18026] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 54123 - 0 [ 366.754080][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.839208][T18295] xt_connbytes: Forcing CT accounting to be enabled [ 366.842122][T18026] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 54123 - 0 [ 366.900034][ T7548] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.942526][ T5845] Bluetooth: hci0: command tx timeout [ 367.037083][T18303] bond20: (slave gre0): Device is not bonding slave [ 367.053257][T18307] "syz.2.3211" (18307) uses obsolete ecb(arc4) skcipher [ 367.060782][T18303] bond20: option active_slave: invalid value (gre0) [ 367.084336][T18303] bond20 (unregistering): Released all slaves [ 367.129682][ T7550] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.253590][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.461471][T18323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3215'. [ 367.510430][T18323] bridge_slave_1: left allmulticast mode [ 367.527185][T18323] bridge_slave_1: left promiscuous mode [ 367.538798][T18323] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.575432][T18323] bridge_slave_0: left allmulticast mode [ 367.585038][T18323] bridge_slave_0: left promiscuous mode [ 367.602669][T18323] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.811882][T18026] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 367.866382][T18026] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 367.899050][T18026] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 367.949410][T18026] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 368.183820][T18370] delete_channel: no stack [ 368.303061][T18374] syzkaller0: entered promiscuous mode [ 368.308700][T18374] syzkaller0: entered allmulticast mode [ 368.355114][T18376] netlink: 'syz.3.3225': attribute type 21 has an invalid length. [ 368.364547][T18379] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3226'. [ 368.420873][T18374] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3223'. [ 368.431851][T18376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3225'. [ 368.514312][T18388] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3226'. [ 368.671028][T18026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.858668][T18026] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.974166][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.981505][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.012244][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.019504][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.146916][T18026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.330411][T18026] veth0_vlan: entered promiscuous mode [ 370.425246][T18026] veth1_vlan: entered promiscuous mode [ 370.606811][T18460] net_ratelimit: 176 callbacks suppressed [ 370.606823][T18460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 370.678885][T18465] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 370.746386][T18026] veth0_macvtap: entered promiscuous mode [ 370.758353][T18026] veth1_macvtap: entered promiscuous mode [ 370.779156][T18026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.791388][T18026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.811840][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.821527][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.898069][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.927945][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.249991][ T7552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.280498][ T7552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.406479][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.421158][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.742319][T18497] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3249'. [ 372.117662][T18518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3251'. [ 372.141828][T18518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3251'. [ 372.490944][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 372.500804][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 372.510603][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 372.545282][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 372.556251][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 372.674530][T18531] lo speed is unknown, defaulting to 1000 [ 372.682156][T18531] hsr0 speed is unknown, defaulting to 1000 [ 372.796951][T18537] netlink: 'syz.3.3259': attribute type 1 has an invalid length. [ 372.822451][T18537] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3259'. [ 372.831532][T18537] netlink: 'syz.3.3259': attribute type 1 has an invalid length. [ 372.892505][T18537] netlink: 'syz.3.3259': attribute type 8 has an invalid length. [ 372.921478][T18537] netlink: 606 bytes leftover after parsing attributes in process `syz.3.3259'. [ 372.984134][T18537] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3259'. [ 373.053784][T18545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3261'. [ 373.088352][T18545] openvswitch: netlink: Flow actions attr not present in new flow. [ 373.146334][ T49] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.200129][ T49] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.237781][ T5947] IPVS: starting estimator thread 0... [ 373.243854][T18556] x_tables: duplicate underflow at hook 1 [ 373.352421][T18557] IPVS: using max 28 ests per chain, 67200 per kthread [ 373.383758][T18548] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.516285][ T49] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.547138][ T49] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.589279][T18563] netlink: 'syz.3.3264': attribute type 29 has an invalid length. [ 373.597995][T18563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3264'. [ 373.714298][T18548] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.801609][ T49] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.811858][ T49] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.911079][T18548] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.974949][ T49] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.998919][ T49] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.148287][T18548] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.282003][T18582] ieee802154 phy1 wpan1: encryption failed: -22 [ 374.315136][T18582] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3269'. [ 374.329657][T18531] chnl_net:caif_netlink_parms(): no params data found [ 374.340946][T18582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3269'. [ 374.499470][ T1098] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 54123 - 0 [ 374.529829][ T1098] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.622454][ T5845] Bluetooth: hci1: command tx timeout [ 374.638814][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.785869][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 54123 - 0 [ 374.895312][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 54123 - 0 [ 374.904105][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.042022][ T1098] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 54123 - 0 [ 375.069192][ T49] erspan0: left allmulticast mode [ 375.079889][ T49] erspan0: left promiscuous mode [ 375.085959][ T49] bridge3: port 1(erspan0) entered disabled state [ 375.126450][ T49] tipc: Resetting bearer [ 375.560393][ T49] tipc: Disabling bearer [ 375.579227][ T49] bond9 (unregistering): (slave bridge1): Releasing backup interface [ 375.600087][ T49] bridge1 (unregistering): left promiscuous mode [ 375.990282][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.003261][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.014125][ T49] bond0 (unregistering): Released all slaves [ 376.025744][ T49] bond1 (unregistering): Released all slaves [ 376.046305][ T49] bond2 (unregistering): Released all slaves [ 376.061327][ T49] bond3 (unregistering): Released all slaves [ 376.078615][ T49] bond4 (unregistering): Released all slaves [ 376.097064][ T49] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 376.116548][ T49] veth0_to_bond: left promiscuous mode [ 376.122670][ T49] veth0_to_bond: left allmulticast mode [ 376.130159][ T49] bond5 (unregistering): Released all slaves [ 376.147256][ T49] bond6 (unregistering): Released all slaves [ 376.162543][ T49] bond7 (unregistering): Released all slaves [ 376.179316][ T49] bond8 (unregistering): Released all slaves [ 376.203398][ T49] bond9 (unregistering): Released all slaves [ 376.218735][ T49] bond10 (unregistering): Released all slaves [ 376.246930][ T49] bond11 (unregistering): Released all slaves [ 376.261943][ T49] bond12 (unregistering): Released all slaves [ 376.278870][ T49] bond13 (unregistering): Released all slaves [ 376.298709][ T49] bond14 (unregistering): (slave lo): Releasing backup interface [ 376.319313][ T49] bond14 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 376.331986][ T49] bond14 (unregistering): Released all slaves [ 376.349952][ T49] bond15 (unregistering): Released all slaves [ 376.365617][ T49] bond16 (unregistering): Released all slaves [ 376.380720][ T49] bond17 (unregistering): Released all slaves [ 376.399663][ T49] bond18 (unregistering): (slave vcan0): Releasing backup interface [ 376.412278][ T49] vcan0: left promiscuous mode [ 376.425305][ T49] bond18 (unregistering): Released all slaves [ 376.440274][ T49] bond19 (unregistering): Released all slaves [ 376.456609][T18625] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 376.464714][T18531] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.502308][T18531] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.510282][T18531] bridge_slave_0: entered allmulticast mode [ 376.524362][T18531] bridge_slave_0: entered promiscuous mode [ 376.550206][ T233] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.609038][T18531] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.633264][T18531] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.683635][T18643] --map-set only usable from mangle table [ 376.685013][T18531] bridge_slave_1: entered allmulticast mode [ 376.706535][ T5845] Bluetooth: hci1: command tx timeout [ 376.715182][T18531] bridge_slave_1: entered promiscuous mode [ 376.763582][T18531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.776694][T18531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.831631][ T49] tipc: Left network mode [ 376.869619][T18650] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 376.919834][T18531] team0: Port device team_slave_0 added [ 376.944088][T18650] netlink: 'syz.0.3283': attribute type 4 has an invalid length. [ 376.953894][T18531] team0: Port device team_slave_1 added [ 377.121553][T18660] __nla_validate_parse: 3 callbacks suppressed [ 377.121588][T18660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3286'. [ 377.183803][T18531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.223251][T18531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.272293][T18531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.334057][T18531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.362847][T18531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.440199][T18531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.514862][T18667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3287'. [ 377.817572][T18684] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3289'. [ 378.014721][T18686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3290'. [ 378.020947][T18531] hsr_slave_0: entered promiscuous mode [ 378.034350][T18684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3289'. [ 378.054320][T18531] hsr_slave_1: entered promiscuous mode [ 378.075573][T18690] IPVS: set_ctl: invalid protocol: 43 172.20.20.31:20004 [ 378.100378][T18531] debugfs: 'hsr0' already exists in 'hsr' [ 378.117771][T18531] Cannot create hsr debugfs directory [ 378.134600][T18687] syzkaller0: entered promiscuous mode [ 378.140508][T18687] syzkaller0: entered allmulticast mode [ 378.260366][T18686] syzkaller0: entered promiscuous mode [ 378.266336][T18686] syzkaller0: entered allmulticast mode [ 378.713299][ T49] hsr_slave_0: left promiscuous mode [ 378.723696][T18699] netlink: 512 bytes leftover after parsing attributes in process `syz.1.3292'. [ 378.733087][ T49] hsr_slave_1: left promiscuous mode [ 378.754414][T18699] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 378.764359][ T49] veth1_macvtap: left promiscuous mode [ 378.784203][ T49] veth0_macvtap: left promiscuous mode [ 378.789831][ T5845] Bluetooth: hci1: command tx timeout [ 378.803088][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.814419][ T49] veth1_vlan: left promiscuous mode [ 378.820191][ T49] veth1_macvtap: left promiscuous mode [ 378.877563][T18699] netlink: 'syz.1.3292': attribute type 2 has an invalid length. [ 378.909403][T18707] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3292'. [ 379.044708][T18715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3294'. [ 379.109893][ T49] pimreg3 (unregistering): left allmulticast mode [ 379.605153][ T49] team0 (unregistering): Port device team_slave_1 removed [ 379.643420][ T49] team0 (unregistering): Port device team_slave_0 removed [ 379.944901][T18699] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3292'. [ 379.965256][T18699] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3292'. [ 379.995947][ T5973] hsr0 speed is unknown, defaulting to 1000 [ 380.004738][ T5973] infiniband syz1: ib_query_port failed (-19) [ 380.167594][T18531] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 54123 - 0 [ 380.370083][T18531] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 54123 - 0 [ 380.581702][T18747] netlink: 'syz.2.3300': attribute type 1 has an invalid length. [ 380.693188][T18531] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 54123 - 0 [ 380.774358][T18762] netlink: 'syz.0.3301': attribute type 2 has an invalid length. [ 380.862589][ T5831] Bluetooth: hci1: command tx timeout [ 380.876915][T18754] bond2: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 380.899582][T18754] bond2: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 380.917920][T18754] bond2: (slave ip6gre2): making interface the new active one [ 380.928608][T18754] bond2: (slave ip6gre2): Enslaving as an active interface with an up link [ 381.007297][T18531] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 54123 - 0 [ 381.526269][T18788] pim6reg1: entered promiscuous mode [ 381.531813][T18788] pim6reg1: entered allmulticast mode [ 381.710476][T18531] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 381.744181][T18531] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 381.779596][T18531] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 381.826759][T18531] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 382.126782][T18819] netlink: 'syz.2.3311': attribute type 9 has an invalid length. [ 382.155252][T18819] netlink: 'syz.2.3311': attribute type 11 has an invalid length. [ 382.185761][T18819] netlink: 'syz.2.3311': attribute type 12 has an invalid length. [ 382.221619][T18531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.241409][T18819] __nla_validate_parse: 11 callbacks suppressed [ 382.241432][T18819] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.3311'. [ 382.272500][T18819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3311'. [ 382.328708][T18827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.416316][T18821] bond3: entered promiscuous mode [ 382.480383][T18531] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.536195][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.543519][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.584303][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.591512][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.765084][T18841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3316'. [ 382.809949][T18841] wg2: entered allmulticast mode [ 383.305529][T18531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.751199][T18880] openvswitch: netlink: IP tunnel dst address not specified [ 384.019360][T18531] veth0_vlan: entered promiscuous mode [ 384.058667][T18531] veth1_vlan: entered promiscuous mode [ 384.245694][T18531] veth0_macvtap: entered promiscuous mode [ 384.286883][T18531] veth1_macvtap: entered promiscuous mode [ 384.335718][T18907] netlink: 'syz.2.3327': attribute type 1 has an invalid length. [ 384.435345][T18907] bond4: entered promiscuous mode [ 384.461800][T18907] 8021q: adding VLAN 0 to HW filter on device bond4 [ 384.573173][T18915] 8021q: adding VLAN 0 to HW filter on device bond4 [ 384.589747][T18915] bond4: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 384.622966][T18915] bond4: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 384.680672][T18915] bond4: (slave ip6gre3): making interface the new active one [ 384.708932][T18915] ip6gre3: entered promiscuous mode [ 384.716786][T18915] bond4: (slave ip6gre3): Enslaving as an active interface with an up link [ 384.807896][T18531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.851440][T18531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.977444][ T108] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.007969][ T108] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.055627][ T108] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.096138][ T108] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.111709][T18943] IPVS: set_ctl: invalid protocol: 135 10.1.1.0:20000 [ 385.349925][T18952] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 385.369577][T18952] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3334'. [ 385.394873][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.417986][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.499828][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.523320][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.589779][T18959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3337'. [ 385.623710][T18960] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3336'. [ 385.653291][T18960] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3336'. [ 385.653924][T18963] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3336'. [ 385.710290][T18963] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3336'. [ 385.988799][T18982] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 386.266918][T18998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3345'. [ 386.799657][T19030] netlink: 'syz.2.3352': attribute type 1 has an invalid length. [ 386.815736][T19026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.885462][T19026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.933982][T19030] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 386.946124][T19039] netlink: 'syz.3.3354': attribute type 1 has an invalid length. [ 387.081072][T19041] bond2: Unable to set up delay as MII monitoring is disabled [ 387.127460][T19041] bond2 (unregistering): Released all slaves [ 387.395158][T19039] 8021q: adding VLAN 0 to HW filter on device bond2 [ 387.494305][T19044] bond2: (slave ip6gretap1): making interface the new active one [ 387.558740][T19044] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 387.647608][T19075] __nla_validate_parse: 4 callbacks suppressed [ 387.647631][T19075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3363'. [ 387.711094][T19072] ipt_REJECT: TCP_RESET invalid for non-tcp [ 387.791224][T19075] bond5: entered promiscuous mode [ 387.815977][T19075] 8021q: adding VLAN 0 to HW filter on device bond5 [ 387.854977][T19081] openvswitch: netlink: Key type 2832 is out of range max 32 [ 387.956335][T19080] bridge4: entered promiscuous mode [ 387.998020][T19080] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 388.077134][T19075] macvlan3: entered promiscuous mode [ 388.082736][T19075] macvlan3: entered allmulticast mode [ 388.103657][T19075] bond5: (slave macvlan3): Error -98 calling set_mac_address [ 388.189669][T19072] lo speed is unknown, defaulting to 1000 [ 388.583814][T19095] netlink: 'syz.3.3367': attribute type 2 has an invalid length. [ 388.608519][T19092] netlink: 'syz.2.3366': attribute type 13 has an invalid length. [ 388.731302][T19104] netlink: 'syz.0.3369': attribute type 21 has an invalid length. [ 388.762448][T19104] IPv6: NLM_F_CREATE should be specified when creating new route [ 388.795009][T19104] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 388.802371][T19104] IPv6: NLM_F_CREATE should be set when creating new route [ 388.809719][T19104] IPv6: NLM_F_CREATE should be set when creating new route [ 388.817053][T19104] IPv6: NLM_F_CREATE should be set when creating new route [ 389.189330][T19117] netlink: 'syz.4.3373': attribute type 2 has an invalid length. [ 389.323609][T19123] team0: No ports can be present during mode change [ 389.544365][T19128] xt_ecn: cannot match TCP bits for non-tcp packets [ 389.614533][T19127] vlan2: entered allmulticast mode [ 389.638203][T19127] bond0: entered allmulticast mode [ 389.654157][T19127] bond_slave_0: entered allmulticast mode [ 389.661723][T19127] bond_slave_1: entered allmulticast mode [ 389.717175][T19131] lo: Caught tx_queue_len zero misconfig [ 389.759977][T19127] tipc: Started in network mode [ 389.794568][T19127] tipc: Node identity 4, cluster identity 4711 [ 389.800807][T19127] tipc: Node number set to 4 [ 389.896330][T19150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3380'. [ 390.091912][T19160] tipc: Started in network mode [ 390.096936][T19160] tipc: Node identity be820bec0778, cluster identity 4711 [ 390.104765][T19160] tipc: Enabled bearer , priority 0 [ 390.224130][T19160] syzkaller0: entered promiscuous mode [ 390.229777][T19160] syzkaller0: entered allmulticast mode [ 390.236706][T19160] tipc: Resetting bearer [ 390.291507][T19157] tipc: Resetting bearer [ 390.365985][T19173] Cannot find add_set index 0 as target [ 390.687525][T19200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3391'. [ 392.669626][T19157] tipc: Disabling bearer [ 392.697078][T19200] vxcan2: entered allmulticast mode [ 392.842818][ T10] tipc: Node number set to 3120172012 [ 392.902931][T19216] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3395'. [ 393.236219][T19240] ip6tnl0: Caught tx_queue_len zero misconfig [ 393.377921][T19247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3401'. [ 393.635915][T19258] lo: Caught tx_queue_len zero misconfig [ 393.717134][T19259] netlink: 'syz.2.3405': attribute type 15 has an invalid length. [ 393.747312][T19259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3405'. [ 393.782726][T19261] netlink: 'syz.3.3406': attribute type 4 has an invalid length. [ 393.790523][T19261] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3406'. [ 393.949988][T19261] openvswitch: netlink: IP tunnel TTL not specified. [ 394.021809][T19270] netlink: 'syz.2.3409': attribute type 27 has an invalid length. [ 394.069269][T19270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3409'. [ 394.217316][T19270] 8021q: adding VLAN 0 to HW filter on device bond6 [ 394.233776][T19279] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3411'. [ 394.531787][T19290] vcan0: entered allmulticast mode [ 394.764676][T19305] netlink: 'syz.2.3420': attribute type 13 has an invalid length. [ 394.820353][T19307] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3421'. [ 394.852971][T19307] C: renamed from lo (while UP) [ 394.881020][T19307] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 395.011602][T19325] x_tables: duplicate entry at hook 2 [ 395.228279][T19339] netlink: 'syz.4.3427': attribute type 58 has an invalid length. [ 395.248123][T19339] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3427'. [ 395.290331][T19340] syzkaller1: entered promiscuous mode [ 395.296000][T19340] syzkaller1: entered allmulticast mode [ 395.590835][T19357] gretap0: entered promiscuous mode [ 395.598393][T19357] vlan2: entered promiscuous mode [ 397.963155][T19316] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 398.174282][T19418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3436'. [ 398.368372][T19435] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3441'. [ 398.468673][T19442] pim6reg: entered allmulticast mode [ 398.492606][T19442] pim6reg: left allmulticast mode [ 398.645124][T19453] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3446'. [ 398.743001][T19453] netlink: 'syz.1.3446': attribute type 20 has an invalid length. [ 398.766316][T19453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3446'. [ 398.807376][T19466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3450'. [ 398.817050][ T5920] IPVS: starting estimator thread 0... [ 398.842027][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.874810][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.891756][T19474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3449'. [ 398.908171][T19466] xfrm1: entered promiscuous mode [ 398.913513][T19468] IPVS: using max 25 ests per chain, 60000 per kthread [ 398.946831][T19466] xfrm1: entered allmulticast mode [ 399.004356][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.138625][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.303640][T19489] syzkaller0: entered promiscuous mode [ 399.319631][T19489] syzkaller0: entered allmulticast mode [ 399.531258][T19508] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3460'. [ 399.777382][T19527] Cannot find add_set index 0 as target [ 399.820521][T19527] netlink: 'syz.1.3464': attribute type 4 has an invalid length. [ 400.544459][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 400.830392][T19573] netlink: 'syz.1.3479': attribute type 1 has an invalid length. [ 401.143179][T19590] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3485'. [ 401.168385][T19590] netlink: 'syz.3.3485': attribute type 9 has an invalid length. [ 401.300838][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806e56f000: rx timeout, send abort [ 401.381179][T19601] netlink: 8756 bytes leftover after parsing attributes in process `syz.3.3489'. [ 401.405889][T19601] openvswitch: netlink: Flow key attr not present in new flow. [ 401.543824][T19608] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3491'. [ 401.800977][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806e56c400: rx timeout, send abort [ 401.809647][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806e56f000: abort rx timeout. Force session deactivation [ 401.879975][T19629] netlink: 'syz.1.3495': attribute type 39 has an invalid length. [ 401.974055][T19635] netlink: 'syz.4.3498': attribute type 6 has an invalid length. [ 401.989413][T19635] netlink: 'syz.4.3498': attribute type 5 has an invalid length. [ 402.017775][T19638] bond0: Caught tx_queue_len zero misconfig [ 402.290517][T19654] netlink: 'syz.0.3502': attribute type 23 has an invalid length. [ 402.309430][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806e56c400: abort rx timeout. Force session deactivation [ 402.406991][T19656] xfrm1: entered promiscuous mode [ 402.424129][T19656] xfrm1: entered allmulticast mode [ 402.978473][ T233] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.006855][ T233] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.026616][T19696] netlink: 'syz.3.3514': attribute type 1 has an invalid length. [ 403.041719][ T233] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.143937][T19696] bond3: entered promiscuous mode [ 403.149428][T19696] 8021q: adding VLAN 0 to HW filter on device bond3 [ 403.196803][ T233] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.239159][T19711] netlink: 'syz.4.3517': attribute type 1 has an invalid length. [ 403.263775][T19704] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 403.327582][T19706] __nla_validate_parse: 13 callbacks suppressed [ 403.327606][T19706] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3514'. [ 403.362045][T19704] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 403.376293][T19704] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 403.500262][T19711] 8021q: adding VLAN 0 to HW filter on device bond1 [ 403.542733][T19715] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 403.642015][T19726] lo speed is unknown, defaulting to 1000 [ 403.792916][T19736] lo speed is unknown, defaulting to 1000 [ 403.835427][T19746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3524'. [ 403.894889][T19751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3524'. [ 404.029590][T19755] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3526'. [ 404.122158][T19755] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3526'. [ 404.224751][T19761] macvtap1: entered promiscuous mode [ 404.230352][T19761] macvtap1: entered allmulticast mode [ 404.272334][T19761] veth1_vlan: entered allmulticast mode [ 404.698953][T19770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3531'. [ 404.736651][T19780] : renamed from bond0 (while UP) [ 404.985884][T19791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3536'. [ 405.020115][T19794] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3537'. [ 405.048376][T19794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3537'. [ 405.157160][T19801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3539'. [ 405.290005][T19809] tipc: Started in network mode [ 405.295216][T19809] tipc: Node identity 3e0750b3ccc4, cluster identity 4711 [ 405.304271][T19809] tipc: Enabled bearer , priority 0 [ 405.311799][T19809] syzkaller0: entered promiscuous mode [ 405.318900][T19809] syzkaller0: entered allmulticast mode [ 405.351669][T19809] tipc: Resetting bearer [ 405.360365][T19817] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 405.374358][T19808] tipc: Resetting bearer [ 405.434441][T19808] tipc: Disabling bearer [ 405.514567][T19826] validate_nla: 2 callbacks suppressed [ 405.514589][T19826] netlink: 'syz.0.3545': attribute type 30 has an invalid length. [ 405.682414][T19837] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 405.711532][T19840] lo speed is unknown, defaulting to 1000 [ 405.919633][T19849] ip6erspan0: entered allmulticast mode [ 405.933973][T19855] xt_CT: You must specify a L4 protocol and not use inversions on it [ 406.046021][T19852] syzkaller0: entered promiscuous mode [ 406.066720][T19852] syzkaller0: entered allmulticast mode [ 406.119065][T19864] netlink: 'syz.4.3554': attribute type 1 has an invalid length. [ 406.325076][T19874] netlink: 'syz.2.3555': attribute type 4 has an invalid length. [ 407.250785][T19911] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.283737][T19925] netlink: 'syz.4.3572': attribute type 10 has an invalid length. [ 407.324890][T19925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.361256][T19925] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 407.507171][T19937] lo speed is unknown, defaulting to 1000 [ 408.016276][T19971] netlink: 'syz.3.3584': attribute type 1 has an invalid length. [ 408.105318][T19977] netlink: 'syz.3.3584': attribute type 7 has an invalid length. [ 408.135424][T19978] xfrm1: entered promiscuous mode [ 408.155935][T19978] xfrm1: entered allmulticast mode [ 408.168111][T19978] x_tables: duplicate underflow at hook 1 [ 408.582095][T20001] __nla_validate_parse: 9 callbacks suppressed [ 408.582118][T20001] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3592'. [ 408.624458][T20000] bridge1: entered promiscuous mode [ 408.631170][T20000] bridge1: entered allmulticast mode [ 408.647965][T20000] team0: Port device bridge1 added [ 408.945637][T20029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3601'. [ 408.993086][T20031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3600'. [ 409.064897][T20035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3600'. [ 409.294657][T20047] lo speed is unknown, defaulting to 1000 [ 409.441744][T20052] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3606'. [ 409.666549][T20060] bond7: entered promiscuous mode [ 409.677268][T20060] bond7: entered allmulticast mode [ 409.683868][T20060] 8021q: adding VLAN 0 to HW filter on device bond7 [ 409.698902][T20066] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3610'. [ 409.725509][T20060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3610'. [ 409.765082][T20060] bond0: entered promiscuous mode [ 409.770192][T20060] bond_slave_0: entered promiscuous mode [ 409.776442][T20071] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3611'. [ 409.802987][T20060] bond_slave_1: entered promiscuous mode [ 409.816114][T20060] bond0: left promiscuous mode [ 409.820956][T20060] bond_slave_0: left promiscuous mode [ 409.847433][T20060] bond_slave_1: left promiscuous mode [ 410.419154][T20060] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3610'. [ 410.478994][T20099] IPVS: Error connecting to the multicast addr [ 410.513196][T20099] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3618'. [ 411.350346][T20148] lo speed is unknown, defaulting to 1000 [ 411.408736][T20117] netlink: 'syz.1.3623': attribute type 1 has an invalid length. [ 411.448389][T20154] netlink: 'syz.0.3631': attribute type 8 has an invalid length. [ 411.468520][T20153] netlink: 'syz.0.3631': attribute type 8 has an invalid length. [ 411.520516][T20117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.590160][T20120] bond0: up delay (10420360) is not a multiple of miimon (100), value rounded to 10420300 ms [ 411.686182][T20150] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 411.808061][T20115] lec:lec_atm_close: lec0: Shut down! [ 411.852348][ T7550] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 411.976616][ T7550] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 412.011390][ T7550] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 412.173106][ T233] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 412.217019][ T7552] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 412.257527][ T7552] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 412.324011][ T7552] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 412.331816][ T7552] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 412.484891][ T233] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 412.542772][ T108] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 413.010699][T20222] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 413.146430][T20233] netlink: 'syz.3.3647': attribute type 13 has an invalid length. [ 413.184588][T20233] veth0_macvtap: left promiscuous mode [ 413.194008][T20233] macvtap0: entered allmulticast mode [ 413.204240][T20241] xt_CONNSECMARK: invalid mode: 0 [ 413.238061][T20233] macvtap0: refused to change device tx_queue_len [ 413.767896][T20270] lo speed is unknown, defaulting to 1000 [ 413.835868][T20272] syzkaller0: entered promiscuous mode [ 413.846188][T20272] syzkaller0: entered allmulticast mode [ 414.318903][T20292] sctp: [Deprecated]: syz.1.3662 (pid 20292) Use of struct sctp_assoc_value in delayed_ack socket option. [ 414.318903][T20292] Use struct sctp_sack_info instead [ 414.793193][ T5906] lec:lec_start_xmit: lec0:No lecd attached [ 414.811855][T20321] syzkaller1: entered promiscuous mode [ 414.859897][T20321] syzkaller1: entered allmulticast mode [ 415.035040][T20332] __nla_validate_parse: 5 callbacks suppressed [ 415.035060][T20332] netlink: 388 bytes leftover after parsing attributes in process `syz.1.3668'. [ 415.163536][T20337] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3669'. [ 415.315342][ C0] vcan0: j1939_tp_rxtimer: 0xffff888020b18800: rx timeout, send abort [ 415.426660][T20352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3674'. [ 415.454687][T20352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3674'. [ 415.474577][T20357] Bluetooth: MGMT ver 1.23 [ 415.482291][T20352] netlink: 'syz.4.3674': attribute type 3 has an invalid length. [ 415.575511][T20361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3676'. [ 415.815408][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056849000: rx timeout, send abort [ 415.841501][T20372] lo speed is unknown, defaulting to 1000 [ 416.046133][T20384] netlink: 'syz.0.3682': attribute type 1 has an invalid length. [ 416.062038][T20387] netlink: 'syz.1.3684': attribute type 3 has an invalid length. [ 416.072084][T20387] netlink: 'syz.1.3684': attribute type 1 has an invalid length. [ 416.310656][T20392] bond2: (slave gretap1): making interface the new active one [ 416.323855][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056849000: abort rx timeout. Force session deactivation [ 416.359758][T20392] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 416.459778][T20407] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3688'. [ 416.579036][T20409] macvtap0: left allmulticast mode [ 416.588950][T20409] xfrm1: left allmulticast mode [ 416.595060][T20409] macvtap1: left allmulticast mode [ 416.600364][T20409] veth1_vlan: left allmulticast mode [ 416.610356][T20409] ip6erspan0: left allmulticast mode [ 416.634943][T20409] bridge1: left allmulticast mode [ 416.770801][T20421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3690'. [ 416.863682][ T7550] net_ratelimit: 118 callbacks suppressed [ 416.863706][ T7550] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 416.911486][ T7550] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 416.931566][T20426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3692'. [ 416.964192][T20427] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3694'. [ 416.988925][T20427] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3694'. [ 417.072822][ T233] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 417.080625][ T233] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 417.104684][T20431] sock: sock_set_timeout: `syz.1.3695' (pid 20431) tries to set negative timeout [ 417.253307][ T233] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 417.293431][ T233] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 417.322301][ T1098] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 417.370952][ T1098] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 417.450848][T20454] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 417.482630][ T7550] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 417.542316][T20454] team1: entered promiscuous mode [ 417.547510][T20454] team1: entered allmulticast mode [ 417.796740][T20471] lo speed is unknown, defaulting to 1000 [ 417.931257][T20481] netlink: 'syz.1.3710': attribute type 1 has an invalid length. [ 417.941739][T20482] netlink: 'syz.3.3709': attribute type 8 has an invalid length. [ 418.811942][T20530] netlink: 'syz.2.3722': attribute type 11 has an invalid length. [ 418.913983][T20535] IPVS: set_ctl: invalid protocol: 0 172.20.20.31:20001 [ 418.929641][T20532] vlan2: entered promiscuous mode [ 418.936501][T20532] vlan2: entered allmulticast mode [ 418.943018][T20532] hsr_slave_1: entered allmulticast mode [ 419.290919][T20553] netlink: 'syz.3.3734': attribute type 2 has an invalid length. [ 419.308152][T20553] netlink: 'syz.3.3734': attribute type 1 has an invalid length. [ 419.547076][T20571] netlink: 'syz.4.3739': attribute type 1 has an invalid length. [ 419.592563][T20571] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 419.774455][T20592] netlink: 'syz.1.3745': attribute type 1 has an invalid length. [ 419.947295][T20601] syzkaller1: entered promiscuous mode [ 419.953492][T20601] syzkaller1: entered allmulticast mode [ 420.244754][T20620] __nla_validate_parse: 13 callbacks suppressed [ 420.244778][T20620] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3755'. [ 420.382214][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms [ 420.391246][ C1] lec:lec_tx_timeout: lec0 [ 420.397800][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 420.424201][T20624] tipc: Trying to set illegal importance in message [ 420.439739][T20628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3757'. [ 420.648891][T20642] netlink: 'syz.0.3761': attribute type 1 has an invalid length. [ 420.734122][T20642] 8021q: adding VLAN 0 to HW filter on device bond3 [ 420.745963][T20644] veth0: entered promiscuous mode [ 421.366603][T20643] veth0: left promiscuous mode [ 421.522819][T20668] netlink: 776 bytes leftover after parsing attributes in process `syz.0.3761'. [ 421.532135][T20668] unsupported nla_type 37920 [ 421.922936][ T1098] net_ratelimit: 126 callbacks suppressed [ 421.922960][ T1098] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 421.957103][ T1098] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 421.999747][T20698] syzkaller0: entered promiscuous mode [ 422.019437][T20698] syzkaller0: entered allmulticast mode [ 422.105540][ T7550] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 422.165098][ T7548] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 422.192907][ T7548] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 422.244942][ T49] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 422.284426][ T49] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 422.392605][ T1144] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 422.405282][ T1144] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 422.462074][T20722] netlink: 'syz.3.3773': attribute type 1 has an invalid length. [ 422.532388][ T1144] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 422.569789][T20739] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3774'. [ 422.614038][T20722] bond4: entered promiscuous mode [ 422.619687][T20722] 8021q: adding VLAN 0 to HW filter on device bond4 [ 422.641872][T20727] lo speed is unknown, defaulting to 1000 [ 422.750211][T20743] 8021q: adding VLAN 0 to HW filter on device bond4 [ 422.758579][T20743] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 422.773603][T20743] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 422.786387][T20743] bond4: (slave vti0): making interface the new active one [ 422.794961][T20743] vti0: entered promiscuous mode [ 422.801563][T20743] bond4: (slave vti0): Enslaving as an active interface with an up link [ 423.063488][T20766] syzkaller1: entered promiscuous mode [ 423.069266][T20766] syzkaller1: entered allmulticast mode [ 423.220572][T20775] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3787'. [ 423.346095][T20785] netlink: 'syz.4.3786': attribute type 58 has an invalid length. [ 423.365388][T20785] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3786'. [ 423.525661][T20791] bond8: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 423.540081][T20791] bond8 (unregistering): Released all slaves [ 423.630313][T20797] netlink: 'syz.1.3790': attribute type 1 has an invalid length. [ 423.657441][T20777] syzkaller0: entered promiscuous mode [ 423.663541][T20777] syzkaller0: entered allmulticast mode [ 423.810078][T20805] x_tables: duplicate underflow at hook 1 [ 424.093394][T20816] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3796'. [ 424.102856][T20816] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3796'. [ 424.165668][T20818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3797'. [ 425.420105][T20816] gretap1: entered promiscuous mode [ 425.434356][T20816] gretap1: entered allmulticast mode [ 425.587210][T20818] hsr_slave_0 (unregistering): left promiscuous mode [ 426.018772][T20848] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 426.035805][T20857] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3811'. [ 426.054754][T20848] bond5: option packets_per_slave: allowed values 0 - 65535 [ 426.068095][T20848] bond5 (unregistering): Released all slaves [ 426.142450][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 426.150592][ C1] lec:lec_tx_timeout: lec0 [ 426.156688][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 426.386124][T20874] 8021q: adding VLAN 0 to HW filter on device bond4 [ 426.415885][T20876] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 426.496574][T20879] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 426.561613][T20879] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 426.802321][T20879] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 426.832364][T20879] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 426.864057][T20908] netlink: 'syz.1.3824': attribute type 3 has an invalid length. [ 426.884936][T20911] syzkaller0: entered promiscuous mode [ 426.911027][T20911] syzkaller0: entered allmulticast mode [ 426.973935][ T49] net_ratelimit: 157 callbacks suppressed [ 426.973959][ T49] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 427.023502][ T1098] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 427.056198][T20879] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 427.059191][ T1144] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 427.074478][T20879] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 427.094915][ T1144] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 427.124382][ T1144] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 427.152354][ T1144] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 427.188024][ T1144] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 427.212387][ T1098] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 427.242450][ T1098] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 427.264277][ T49] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 427.340827][T20933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3832'. [ 427.349200][T20879] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 427.383454][T20879] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 427.563473][T20931] syzkaller0: entered promiscuous mode [ 427.599052][T20931] syzkaller0: entered allmulticast mode [ 429.321603][T20879] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 429.322070][T20965] gre0: entered promiscuous mode [ 429.327880][T20879] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 429.346691][T20965] gre0: entered allmulticast mode [ 429.554005][T20983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3838'. [ 429.610540][T20987] team0: entered promiscuous mode [ 429.622379][T20987] team_slave_0: entered promiscuous mode [ 429.636710][T20987] team_slave_1: entered promiscuous mode [ 429.659936][T20991] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3841'. [ 429.739459][T20995] veth0: entered promiscuous mode [ 429.869836][T21005] delete_channel: no stack [ 429.956481][T21009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3845'. [ 430.076720][T21015] netlink: 'syz.2.3847': attribute type 1 has an invalid length. [ 430.143429][T21015] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3847'. [ 430.223951][T21028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3848'. [ 430.384529][T20989] veth0: left promiscuous mode [ 430.437029][T21036] Cannot find map_set index 65533 as target [ 430.541184][T21036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3852'. [ 430.710014][T21036] lo speed is unknown, defaulting to 1000 [ 431.172509][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 431.180631][ C1] lec:lec_tx_timeout: lec0 [ 431.185509][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 431.252093][T21087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3860'. [ 431.267142][T21087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3860'. [ 431.291121][T21082] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3860'. [ 431.314744][T21082] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3860'. [ 431.467938][T21098] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.3864'. [ 431.507660][T21098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3864'. [ 431.557889][T21098] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.3864'. [ 431.992954][ T1144] net_ratelimit: 191 callbacks suppressed [ 431.992980][ T1144] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 432.052322][ T233] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 432.077634][ T233] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 432.113169][ T7548] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 432.142760][ T49] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 432.162378][ T7548] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 432.213103][ T49] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 432.244221][ T233] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 432.262571][ T233] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 432.338079][ T233] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 432.382780][T21123] delete_channel: no stack [ 432.473310][T21124] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3871'. [ 432.526803][T21122] delete_channel: no stack [ 432.870796][T21140] netlink: 'syz.0.3872': attribute type 15 has an invalid length. [ 432.992678][T21143] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3874'. [ 433.028928][T21147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3875'. [ 433.392091][T21159] bond0: (slave bond_slave_0): Releasing backup interface [ 433.534461][T21159] ˜eth1_macvtap: renamed from bond_slave_0 [ 434.269578][T21207] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.539400][T21223] bond5: Unable to set down delay as MII monitoring is disabled [ 434.554137][T21223] bond5 (unregistering): Released all slaves [ 434.711930][T21238] netlink: 'syz.4.3895': attribute type 10 has an invalid length. [ 434.734703][T21238] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.742537][T21238] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.808251][T21238] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.815556][T21238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.823222][T21238] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.830423][T21238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.915331][T21238] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 434.975139][T21236] lo speed is unknown, defaulting to 1000 [ 435.651871][T21284] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode [ 436.192274][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 436.200385][ C1] lec:lec_tx_timeout: lec0 [ 436.205030][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 436.370530][T21329] vxcan1 speed is unknown, defaulting to 1000 [ 436.411387][T21329] vxcan1 speed is unknown, defaulting to 1000 [ 436.443597][T21329] vxcan1 speed is unknown, defaulting to 1000 [ 436.515563][T21334] __nla_validate_parse: 4 callbacks suppressed [ 436.515586][T21334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3917'. [ 436.533088][T21334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3917'. [ 436.543362][T21334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3917'. [ 436.811901][T21353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3921'. [ 436.842019][T21354] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 436.889331][T21353] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3921'. [ 437.002298][ T1144] net_ratelimit: 137 callbacks suppressed [ 437.002321][ T1144] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 437.035844][ T1144] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 437.157667][T21329] infiniband syz2: set active [ 437.162557][ T7548] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 437.162622][ T24] vxcan1 speed is unknown, defaulting to 1000 [ 437.180310][ T7548] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 437.190722][T21329] infiniband syz2: added vxcan1 [ 437.228937][T21366] x_tables: duplicate underflow at hook 3 [ 437.247675][T21329] RDS/IB: syz2: added [ 437.251788][T21329] smc: adding ib device syz2 with port count 1 [ 437.258501][T21329] smc: ib device syz2 port 1 has no pnetid [ 437.265082][ T24] vxcan1 speed is unknown, defaulting to 1000 [ 437.274683][T21329] vxcan1 speed is unknown, defaulting to 1000 [ 437.343615][ T7548] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 437.374829][ T7548] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 437.421359][T21376] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3926'. [ 437.441539][T21376] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3926'. [ 437.474679][T21376] syzkaller0: entered promiscuous mode [ 437.480369][T21376] syzkaller0: entered allmulticast mode [ 437.489359][T21376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3926'. [ 437.517696][ T49] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 437.564906][ T49] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 437.614364][ T1144] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 437.640473][ T1144] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 437.760252][T21386] veth0: entered promiscuous mode [ 437.860280][T21386] veth0: left promiscuous mode [ 437.958442][T21393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3929'. [ 438.027563][T21395] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3930'. [ 438.060270][T21329] vxcan1 speed is unknown, defaulting to 1000 [ 438.070337][T21395] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.079097][T21395] bridge0: port 1(1¾x9ÿ) entered disabled state [ 438.145581][T21383] syzkaller0: entered promiscuous mode [ 438.164086][T21383] syzkaller0: entered allmulticast mode [ 438.386794][T21411] netlink: 'syz.1.3934': attribute type 8 has an invalid length. [ 438.750816][T21420] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.804216][T21420] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.929843][T21420] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.947983][T21420] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.981073][T21329] vxcan1 speed is unknown, defaulting to 1000 [ 439.106490][T21420] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.134111][T21420] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.324075][T21420] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.374811][T21420] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.459849][T21448] ------------[ cut here ]------------ [ 439.466182][T21448] 1 [ 439.466213][T21448] WARNING: net/ipv4/route.c:1275 at ip_rt_bug+0x2d/0x140, CPU#1: syz.2.3942/21448 [ 439.478190][T21448] Modules linked in: [ 439.482910][T21448] CPU: 1 UID: 0 PID: 21448 Comm: syz.2.3942 Not tainted syzkaller #0 PREEMPT(full) [ 439.492358][T21448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 439.502513][T21448] RIP: 0010:ip_rt_bug+0x2d/0x140 [ 439.507505][T21448] Code: fa 55 41 57 41 56 41 55 41 54 53 48 89 d3 e8 0a 5c ba f7 66 90 e8 03 5c ba f7 31 ff 48 89 de ba 02 00 00 00 e8 d4 2c 6a ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0f a6 a6 01 cc 49 [ 439.527240][T21448] RSP: 0018:ffffc90002f371e0 EFLAGS: 00010282 [ 439.533424][T21448] RAX: fcf2fc6860e02a00 RBX: ffff88805a837140 RCX: 0000000080000401 [ 439.541459][T21448] RDX: 0000000000000002 RSI: ffffffff8def989e RDI: ffffffff8c27cb00 [ 439.549583][T21448] RBP: ffffc90002f374e0 R08: ffffffff9011beb7 R09: 1ffffffff20237d6 [ 439.557727][T21448] R10: dffffc0000000000 R11: fffffbfff20237d7 R12: dffffc0000000000 [ 439.565812][T21448] R13: 0000000000000000 R14: ffff88805a837140 R15: dffffc0000000000 [ 439.573868][T21448] FS: 00007f469c9036c0(0000) GS:ffff88812555a000(0000) knlGS:0000000000000000 [ 439.582905][T21448] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 439.589631][T21448] CR2: 0000001b3422421c CR3: 000000006bc5e000 CR4: 00000000003526f0 [ 439.598278][T21448] Call Trace: [ 439.601605][T21448] [ 439.604634][T21448] ip_push_pending_frames+0x8b/0x110 [ 439.610004][T21448] __icmp_send+0x118d/0x1590 [ 439.614728][T21448] ? __icmp_send+0x22b/0x1590 [ 439.619476][T21448] ? __pfx___icmp_send+0x10/0x10 [ 439.624525][T21448] ? ip_route_input_noref+0xad/0x270 [ 439.629881][T21448] ? __pfx_ip_route_input_noref+0x10/0x10 [ 439.635809][T21448] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 439.641122][T21448] ip_options_compile+0x80/0xb0 [ 439.646060][T21448] ip_rcv_finish_core+0xaa2/0x1c00 [ 439.651251][T21448] ip_rcv_finish+0x14c/0x2a0 [ 439.656054][T21448] NF_HOOK+0x336/0x3c0 [ 439.660189][T21448] ? __pfx_ip_rcv_finish+0x10/0x10 [ 439.665401][T21448] ? NF_HOOK+0x9e/0x3c0 [ 439.669611][T21448] ? __pfx_NF_HOOK+0x10/0x10 [ 439.674318][T21448] ? __pfx_ip_rcv_finish+0x10/0x10 [ 439.679495][T21448] ? netif_receive_skb+0x102/0xc50 [ 439.684717][T21448] ? __pfx_ip_rcv+0x10/0x10 [ 439.689288][T21448] netif_receive_skb+0x45b/0xc50 [ 439.694328][T21448] ? __pfx_netif_receive_skb+0x10/0x10 [ 439.699855][T21448] ? __lock_acquire+0x6b5/0x2cf0 [ 439.705038][T21448] ? tun_rx_batched+0x185/0x790 [ 439.709952][T21448] tun_rx_batched+0x1de/0x790 [ 439.714754][T21448] ? __build_skb+0x62/0x440 [ 439.719316][T21448] ? __pfx_tun_rx_batched+0x10/0x10 [ 439.724641][T21448] ? tun_get_user+0x2354/0x3dd0 [ 439.729542][T21448] ? __local_bh_enable_ip+0xd0/0x130 [ 439.734931][T21448] ? tun_get_user+0x2669/0x3dd0 [ 439.739837][T21448] tun_get_user+0x2a78/0x3dd0 [ 439.744698][T21448] ? aa_file_perm+0x50e/0x15e0 [ 439.749601][T21448] ? __pfx_tun_get_user+0x10/0x10 [ 439.754718][T21448] ? aa_file_perm+0x192/0x15e0 [ 439.759556][T21448] ? ref_tracker_alloc+0x35c/0x4c0 [ 439.764853][T21448] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 439.770390][T21448] ? tun_get+0x1c/0x2f0 [ 439.774698][T21448] ? tun_get+0x1c/0x2f0 [ 439.778901][T21448] ? tun_get+0x1c/0x2f0 [ 439.783156][T21448] tun_chr_write_iter+0x113/0x200 [ 439.788324][T21448] vfs_write+0x61d/0xb90 [ 439.792746][T21448] ? __pfx_vfs_write+0x10/0x10 [ 439.797582][T21448] ? __fget_files+0x2a/0x420 [ 439.802309][T21448] ksys_write+0x150/0x270 [ 439.806706][T21448] ? __pfx_ksys_write+0x10/0x10 [ 439.811625][T21448] do_syscall_64+0x14d/0xf80 [ 439.816314][T21448] ? trace_irq_disable+0x3b/0x150 [ 439.821378][T21448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.827529][T21448] ? clear_bhb_loop+0x40/0x90 [ 439.832310][T21448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.838436][T21448] RIP: 0033:0x7f469b95cfce [ 439.842956][T21448] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 439.862744][T21448] RSP: 002b:00007f469c902fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 439.871227][T21448] RAX: ffffffffffffffda RBX: 00007f469c9036c0 RCX: 00007f469b95cfce [ 439.879311][T21448] RDX: 0000000000000046 RSI: 0000200000000440 RDI: 00000000000000c8 [ 439.887379][T21448] RBP: 00007f469ba32c99 R08: 0000000000000000 R09: 0000000000000000 [ 439.895441][T21448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.903494][T21448] R13: 00007f469bc16128 R14: 00007f469bc16090 R15: 00007ffeb8780b98 [ 439.911590][T21448] [ 439.914730][T21448] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 439.922062][T21448] CPU: 1 UID: 0 PID: 21448 Comm: syz.2.3942 Not tainted syzkaller #0 PREEMPT(full) [ 439.931570][T21448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 439.941780][T21448] Call Trace: [ 439.945110][T21448] [ 439.948209][T21448] vpanic+0x56c/0xa60 [ 439.952245][T21448] ? __pfx__printk+0x10/0x10 [ 439.956883][T21448] ? __pfx_vpanic+0x10/0x10 [ 439.961442][T21448] ? is_bpf_text_address+0x292/0x2b0 [ 439.966795][T21448] ? is_bpf_text_address+0x26/0x2b0 [ 439.972059][T21448] panic+0xc5/0xd0 [ 439.975848][T21448] ? __pfx_panic+0x10/0x10 [ 439.980338][T21448] __warn+0x315/0x4f0 [ 439.984369][T21448] ? ip_rt_bug+0x2d/0x140 [ 439.988842][T21448] ? ip_rt_bug+0x2d/0x140 [ 439.993233][T21448] __report_bug+0x29a/0x540 [ 439.997786][T21448] ? NF_HOOK+0x336/0x3c0 [ 440.002103][T21448] ? netif_receive_skb+0x45b/0xc50 [ 440.007272][T21448] ? tun_rx_batched+0x1de/0x790 [ 440.012182][T21448] ? ip_rt_bug+0x2d/0x140 [ 440.016566][T21448] ? __pfx___report_bug+0x10/0x10 [ 440.021670][T21448] ? ip_rt_bug+0x2d/0x140 [ 440.026063][T21448] report_bug+0x16a/0x220 [ 440.030462][T21448] ? ip_rt_bug+0x2d/0x140 [ 440.034843][T21448] ? ip_rt_bug+0x2f/0x140 [ 440.039352][T21448] handle_bug+0x9c/0x200 [ 440.043658][T21448] exc_invalid_op+0x1a/0x50 [ 440.048224][T21448] asm_exc_invalid_op+0x1a/0x20 [ 440.053131][T21448] RIP: 0010:ip_rt_bug+0x2d/0x140 [ 440.058207][T21448] Code: fa 55 41 57 41 56 41 55 41 54 53 48 89 d3 e8 0a 5c ba f7 66 90 e8 03 5c ba f7 31 ff 48 89 de ba 02 00 00 00 e8 d4 2c 6a ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0f a6 a6 01 cc 49 [ 440.077896][T21448] RSP: 0018:ffffc90002f371e0 EFLAGS: 00010282 [ 440.084017][T21448] RAX: fcf2fc6860e02a00 RBX: ffff88805a837140 RCX: 0000000080000401 [ 440.092131][T21448] RDX: 0000000000000002 RSI: ffffffff8def989e RDI: ffffffff8c27cb00 [ 440.100151][T21448] RBP: ffffc90002f374e0 R08: ffffffff9011beb7 R09: 1ffffffff20237d6 [ 440.108178][T21448] R10: dffffc0000000000 R11: fffffbfff20237d7 R12: dffffc0000000000 [ 440.116206][T21448] R13: 0000000000000000 R14: ffff88805a837140 R15: dffffc0000000000 [ 440.124248][T21448] ip_push_pending_frames+0x8b/0x110 [ 440.129588][T21448] __icmp_send+0x118d/0x1590 [ 440.134235][T21448] ? __icmp_send+0x22b/0x1590 [ 440.138979][T21448] ? __pfx___icmp_send+0x10/0x10 [ 440.144000][T21448] ? ip_route_input_noref+0xad/0x270 [ 440.149354][T21448] ? __pfx_ip_route_input_noref+0x10/0x10 [ 440.155128][T21448] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 440.160387][T21448] ip_options_compile+0x80/0xb0 [ 440.165371][T21448] ip_rcv_finish_core+0xaa2/0x1c00 [ 440.170643][T21448] ip_rcv_finish+0x14c/0x2a0 [ 440.175468][T21448] NF_HOOK+0x336/0x3c0 [ 440.179596][T21448] ? __pfx_ip_rcv_finish+0x10/0x10 [ 440.184762][T21448] ? NF_HOOK+0x9e/0x3c0 [ 440.189065][T21448] ? __pfx_NF_HOOK+0x10/0x10 [ 440.193752][T21448] ? __pfx_ip_rcv_finish+0x10/0x10 [ 440.198924][T21448] ? netif_receive_skb+0x102/0xc50 [ 440.204080][T21448] ? __pfx_ip_rcv+0x10/0x10 [ 440.208644][T21448] netif_receive_skb+0x45b/0xc50 [ 440.213623][T21448] ? __pfx_netif_receive_skb+0x10/0x10 [ 440.219116][T21448] ? __lock_acquire+0x6b5/0x2cf0 [ 440.224093][T21448] ? tun_rx_batched+0x185/0x790 [ 440.229089][T21448] tun_rx_batched+0x1de/0x790 [ 440.233817][T21448] ? __build_skb+0x62/0x440 [ 440.238381][T21448] ? __pfx_tun_rx_batched+0x10/0x10 [ 440.243649][T21448] ? tun_get_user+0x2354/0x3dd0 [ 440.248556][T21448] ? __local_bh_enable_ip+0xd0/0x130 [ 440.253886][T21448] ? tun_get_user+0x2669/0x3dd0 [ 440.258774][T21448] tun_get_user+0x2a78/0x3dd0 [ 440.263522][T21448] ? aa_file_perm+0x50e/0x15e0 [ 440.268333][T21448] ? __pfx_tun_get_user+0x10/0x10 [ 440.273399][T21448] ? aa_file_perm+0x192/0x15e0 [ 440.278327][T21448] ? ref_tracker_alloc+0x35c/0x4c0 [ 440.283503][T21448] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 440.289017][T21448] ? tun_get+0x1c/0x2f0 [ 440.293322][T21448] ? tun_get+0x1c/0x2f0 [ 440.297700][T21448] ? tun_get+0x1c/0x2f0 [ 440.301988][T21448] tun_chr_write_iter+0x113/0x200 [ 440.307247][T21448] vfs_write+0x61d/0xb90 [ 440.311538][T21448] ? __pfx_vfs_write+0x10/0x10 [ 440.316340][T21448] ? __fget_files+0x2a/0x420 [ 440.320984][T21448] ksys_write+0x150/0x270 [ 440.325471][T21448] ? __pfx_ksys_write+0x10/0x10 [ 440.330465][T21448] do_syscall_64+0x14d/0xf80 [ 440.335261][T21448] ? trace_irq_disable+0x3b/0x150 [ 440.340397][T21448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.346599][T21448] ? clear_bhb_loop+0x40/0x90 [ 440.351317][T21448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.357260][T21448] RIP: 0033:0x7f469b95cfce [ 440.361904][T21448] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 440.381628][T21448] RSP: 002b:00007f469c902fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 440.390076][T21448] RAX: ffffffffffffffda RBX: 00007f469c9036c0 RCX: 00007f469b95cfce [ 440.398100][T21448] RDX: 0000000000000046 RSI: 0000200000000440 RDI: 00000000000000c8 [ 440.406122][T21448] RBP: 00007f469ba32c99 R08: 0000000000000000 R09: 0000000000000000 [ 440.414205][T21448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.422201][T21448] R13: 00007f469bc16128 R14: 00007f469bc16090 R15: 00007ffeb8780b98 [ 440.430228][T21448] [ 440.433874][T21448] Kernel Offset: disabled [ 440.438216][T21448] Rebooting in 86400 seconds..